单选题 A CloudOps engineer needs to track the costs of data transfer between AWS Regions. The CloudOps engineer must implement a solution to send alerts to an email distribution list when transfer costs reach 75% of a specific threshold. What should the CloudOps engineer do to meet these requirements?
A、Create an AWS Cost and Usage Report. Analyze the results in Amazon Athena. Configure an alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic when costs reach 75% of the threshold. Subscribe the email distribution list to the topic.
B、Use Amazon CloudWatch alarms. Create an alarm that triggers at 75% of the threshold. Configure the alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the email distribution list to the topic.
C、Use AWS Budgets to create a cost budget for data transfer costs. Set an alert at 75% of the budgeted amount. Configure the budget to send a notification to the email distribution list when costs reach 75% of the threshold.
D、Set up a VPC flow log. Set up a subscription filter to an AWS Lambda function to analyze data transfer. Configure the Lambda function to send a notification to the email distribution list when costs reach 75% of the threshold.
单选题 A company's security policy prohibits connecting to Amazon EC2 instances through SSH and RDP; staff must use AWS Systems Manager Session Manager. Users report they cannot connect to one Ubuntu instance, even though they can connect to others. What should a CloudOps engineer do to resolve this issue?
A、Add an inbound rule for port 22 in the security group associated with the Ubuntu instance.
B、Assign the AmazonSSMManagedEC2Instance managed policy to the EC2 instance profile for the Ubuntu instance.
C、Configure the SSM Agent to log in with a user name of "ubuntu".
D、Create a new key pair, configure Systems Manager to use this new key pair, and provide the private key to the users.
单选题 A user working in the Amazon EC2 console increased the size of an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 Windows instance. The change is not reflected in the file system. What should a CloudOps engineer do to resolve this issue?
A、Extend the file system with operating system-level tools to use the new storage capacity.
B、R
单选题 A company's Amazon EC2 instance with high CPU utilization is a t3.large instance running a test web app. The company determines the app would run better on a compute-optimized large instance. What should the CloudOps engineer do?
A、Migrate the EC2 instance to a compute-optimized instance by using AWS VM Import/Export.
B、Enable hibernation on the EC2 instance. Change the instance type to a compute-optimized instance. Disable hibernation on the EC2 instance.
C、Stop the EC2 instance. Change the instance type to a compute-optimized instance.
D、Change the instance type to a compute-optimized instance while the EC2 instance is running.
单选题 A SysOps administrator must load test a new Amazon CloudFront distribution to assess data transfer and latency performance. Which solution will meet this requirement?
A、Send client requests from a single geographic region. Configure the load test so that each client makes an identical DNS request. Focus the client requests on the IP address that the DNS returns.
B、Send client requests from a single geographic region. Configure the load test so that each client makes an independent DNS request. Spread the client requests across the set of IP addresses that the DNS returns.
C、Send client requests from multiple geographic regions. Configure the load test so that each client makes an identical DNS request. Focus the client requests on the IP address that the DNS returns.
D、Send client requests from multiple geographic regions. Configure the load test so that each client makes an independent DNS request. Spread the client requests across the set of IP addresses that the DNS returns.
单选题 A CloudOps engineer wants to share a copy of a production database with a migration account. The production database is hosted on an Amazon RDS DB instance and is encrypted at rest with an AWS Key Management Service (AWS KMS) key that has an alias of production-rds-key. What must the CloudOps engineer do to meet these requirements with the LEAST administrative overhead?
A、Take a snapshot of the RDS DB instance. Update the KMS key policy to allow access for the migration account root user. Share the snapshot with the migration account.
B、Create an RDS read replica in the migration account. Reencrypt the KMS key.
C、Take a snapshot and create a new KMS key in the migration account with the same alias.
D、Export the database to Amazon S3 and import it into the new account.
单选题 A media company hosts a public news and video portal on AWS. The portal uses an Amazon DynamoDB table with provisioned capacity to maintain an index of video files that are stored in an Amazon S3 bucket. During a recent event, millions of visitors came to the portal for news. This increase in traffic caused read requests to be throttled in the DynamoDB table. Videos could not be displayed in the portal. The company's operations team manually increased the provisioned capacity on a temporary basis to meet the demand. The company wants the operations team to receive an alert before the table is throttled in the future. The company has created an Amazon Simple Notification Service (Amazon SNS) topic and has subscribed the operations team's email addresses to the SNS topic. What should the company do next to meet these requirements?
A、Create an Amazon CloudWatch alarm that uses the ConsumedReadCapacityUnits metric. Set the alarm threshold to a value that is close to the DynamoDB table's provisioned capacity. Configure the alarm to publish notifications to the SNS topic.
B、Turn on auto scaling on the DynamoDB table. Configure an Amazon EventBridge rule to publish metric notifications to the SNS topic during scaling events.
C、Create a CloudWatch alarm for the metric. Select the SNS topic for notifications.
D、Configure the application to stop reads in Amazon CloudWatch Logs. Create an Amazon CloudWatch metric filter to pattern match the THROTTLING_EXCEPTION status code from DynamoDB. Create a CloudWatch alarm for the metric. Select the SNS topic for notifications.
单选题 A web application runs on Amazon EC2 instances in the us-east-1 Region and the us-west-2 Region. The instances run behind an Application Load Balancer (ALB) in each Region. An Amazon Route 53 hosted zone controls DNS records. The instances in us-east-1 are production instances. The instances in us-west-2 are for disaster recovery. EC2 Auto Scaling groups are configured on the ALB:RequestCountPerTarget metric in both Regions. A SysOps administrator must implement a solution that provides failover from us-east-1 to us-west-2. The instances in us-west-2 must be used only for failover. Which solution will meet these requirements?
A、Implement a Route 53 health check and a failover routing policy for the hosted zone. Configure the failover routing policy to automatically redirect traffic to the resources in us-west-2.
B、Implement a Route 53 health check and a latency routing policy for the hosted zone. Configure the latency routing policy to automatically redirect traffic to the resources in us-west-2.
C、In us-east-1, create an Amazon CloudWatch alarm that enters ALARM state when an EC2 instance is terminated. In us-west-2, create an AWS Lambda function that modifies the Route 53 hosted zone records to send traffic to us-west-2. Configure the CloudWatch alarm to invoke the Lambda function.
D、In us-west-2, create an AWS Lambda function that modifies the Route 53 hosted zone records to send traffic to us-west-2. Configure the CloudWatch alarm to invoke the Lambda function.