A company is storing backups in an Amazon S3 bucket. The backups must not be deleted for at least 3 months after the backups are created.
What should a CloudOps engineer do to meet this requirement?

1. A. Configure an IAM policy that denies the s3:DeleteObject action for all user
2. B. Remove the policy after three months.
3. C. Enable S3 Object Lock on a new S3 bucket in compliance mod
4. D. Place all backups in the new S3 bucket with a retention period of 3 months.
5. E. Enable S3 Versioning on the existing S3 bucke
6. F. Configure S3 Lifecycle rules to protect the backups.
7. G. Enable S3 Object Lock on a new S3 bucket in governance mod
8. H. Place all backups in the new S3 bucket with a retention period of 3 months.

Correct Answer: B

A company??s ecommerce application is running on Amazon EC2 instances that are behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. Customers report that the website is occasionally down. When the website is down, it returns an HTTP 500 (server error) status code to customer browsers.
The Auto Scaling group??s health check is configured for EC2 status checks, and the instances appear healthy.
Which solution will resolve the problem?

1. A. Replace the ALB with a Network Load Balancer.
2. B. Add Elastic Load Balancing (ELB) health checks to the Auto Scaling group.
3. C. Update the target group configuration on the AL
4. D. Enable session affinity (sticky sessions).
5. E. Install the Amazon CloudWatch agent on all instance
6. F. Configure the agent to reboot the instances.

Correct Answer: B

A company hosts a web application on an Amazon EC2 instance. The web server logs are published to Amazon CloudWatch Logs. The log events have the same structure and include the HTTP response codes associated with user requests. The company needs to monitor the number of times the web server returns an HTTP 404 response.
What is the MOST operationally efficient solution that meets these requirements?

1. A. Create a CloudWatch Logs metric filter that counts the number of times the web server returns an HTTP 404 response.
2. B. Create a CloudWatch Logs subscription filter that counts the number of HTTP 404 responses.
3. C. Create an AWS Lambda function that runs a CloudWatch Logs Insights query every hour.
4. D. Create a script that runs a CloudWatch Logs Insights query every hour.

Correct Answer: A

A company needs to enforce tagging requirements for Amazon DynamoDB tables in its AWS accounts. A CloudOps engineer must implement a solution to identify and remediate all DynamoDB tables that do not have the appropriate tags.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Create a custom AWS Lambda function to evaluate and remediate all DynamoDB table
2. B. Create an Amazon EventBridge scheduled rule to invoke the Lambda function.
3. C. Create a custom AWS Lambda function to evaluate and remediate all DynamoDB table
4. D. Create an AWS Config custom rule to invoke the Lambda function.
5. E. Use the required-tags AWS Config managed rule to evaluate all DynamoDB tables for the appropriate tag
6. F. Configure an automatic remediation action that uses an AWS Systems Manager Automation custom runbook.
7. G. Create an Amazon EventBridge managed rule to evaluate all DynamoDB tables for the appropriate tag
8. H. Configure the EventBridge rule to run an AWS Systems Manager Automation custom runbook for remediation.

Correct Answer: C

A company asks a SysOps administrator to provision an additional environment for an application in four additional AWS Regions. The application is running on more than 100 Amazon EC2 instances in the us-east-1 Region, using fully configured Amazon Machine Images (AMIs). The company has an AWS CloudFormation template to deploy resources in us-east-1.
What should the SysOps administrator do to provision the application in the MOST operationally efficient manner?

1. A. Copy the AMI to each Region by using the aws ec2 copy-image comman
2. B. Update the CloudFormation template to include mappings for the copied AMIs.
3. C. Create a snapshot of the running instanc
4. D. Copy the snapshot to the other Region
5. E. Create an AMI from the snapshot
6. F. Update the CloudFormation template for each Region to use the new AMI.
7. G. Run the existing CloudFormation template in each additional Region based on the success of the template that is used currently in us-east-1.
8. H. Update the CloudFormation template to include the additional Regions in the Auto Scaling grou
9. I. Update the existing stack in us-east-1.

Correct Answer: A