Free AWS-SysOps Exam Braindumps (page: 53)

Page 53 of 106

A company needs to deploy a new workload on AWS. The company must encrypt all data at rest and must rotate the encryption keys once each year. The workload uses an Amazon RDS for MySQL Multi-AZ database for data storage.

Which configuration approach will meet these requirements?

  1. Enable Transparent Data Encryption (TDE) in the MySQL configuration file. Manually rotate the key every 12 months.
  2. Enable RDS encryption on the database at creation time by using the AWS managed key for Amazon RDS.
  3. Create a new AWS Key Management Service (AWS KMS) customer managed key. Enable automatic key rotation. Enable RDS encryption on the database at creation time by using the KMS key.
  4. Create a new AWS Key Management Service (AWS KMS) customer managed key. Enable automatic key rotation. Enable encryption on the Amazon Elastic Block Store (Amazon EBS) volumes that are attached to the RDS DB instance.

Answer(s): C



A company has an application that is deployed to two AWS Regions in an active-passive configuration. The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) in each Region. The instances are in an Amazon EC2 Auto Scaling group in each Region. The application uses an Amazon Route 53 hosted zone for DNS. A SysOps administrator needs to configure automatic failover to the secondary Region.

What should the SysOps administrator do to meet these requirements?

  1. Configure Route 53 alias records that point to each ALB. Choose a failover routing policy. Set Evaluate Target Health to Yes.
  2. Configure CNAME records that point to each ALChoose a failover routing policy. Set Evaluate Target Health to Yes.
  3. Configure Elastic Load Balancing (ELB) health checks for the Auto Scaling group. Add a target group to the ALB in the primary Region. Include the EC2 instances in the secondary Region as targets.
  4. Configure EC2 health checks for the Auto Scaling group. Add a target group to the ALB in the primary Region. Include the EC2 instances in the secondary Region as targets.

Answer(s): A



A company is implementing a monitoring solution that is based on machine learning. The monitoring solution consumes Amazon EventBridge (Amazon CloudWatch Events) events that are generated by Amazon EC2 Auto Scaling. The monitoring solution provides detection of anomalous behavior such as unanticipated scaling events and is configured as an EventBridge (CloudWatch Events) API destination.

During initial testing, the company discovers that the monitoring solution is not receiving events. However, Amazon CloudWatch is showing that the EventBridge (CloudWatch Events) rule is being invoked. A SysOps administrator must implement a solution to retrieve client error details to help resolve this issue.

Which solution will meet these requirements with the LEAST operational effort?

  1. Create an EventBridge (CloudWatch Events) archive for the event pattern to replay the events. Increase the logging on the monitoring solution. Use replay to invoke the monitoring solution. Examine the error details.
  2. Add an Amazon Simple Queue Service (Amazon SQS) standard queue as a dead-letter queue for the target. Process the messages in the dead-letter queue to retrieve error details.
  3. Create a second EventBridge (CloudWatch Events) rule for the same event pattern to target an AWS Lambda function. Configure the Lambda function to invoke the monitoring solution and to record the results to Amazon CloudWatch Logs. Examine the errors in the logs.
  4. Configure the EventBridge (CloudWatch Events) rule to send error messages to an Amazon Simple Notification Service (Amazon SNS) topic.

Answer(s): B



A company is storing backups in an Amazon S3 bucket. The backups must not be deleted for at least 3 months after the backups are created.

What should a SysOps administrator do to meet this requirement?

  1. Configure an IAM policy that denies the s3:DeleteObject action for all users. Three months after an object is written, remove the policy.
  2. Enable S3 Object Lock on a new S3 bucket in compliance mode. Place all backups in the new S3 bucket with a retention period of 3 months.
  3. Enable S3 Versioning on the existing S3 bucket. Configure S3 Lifecycle rules to protect the backups.
  4. Enable S3 Object Lock on a new S3 bucket in governance mode. Place all backups in the new S3 bucket with a retention period of 3 months.

Answer(s): B



Page 53 of 106



Post your Comments and Discuss Amazon AWS-SysOps exam with other Community members:

Lori commented on August 03, 2019
I managed to pass the exam with good score sing this dump. I failed this exam before. It is too hard to know all the topics. This braindump questions and answers is a life-saver!
UNITED STATES
upvote

Norman commented on May 21, 2019
I love this site and their braindumps material. They have helped me pass 3 of my exams so far. This is the 4th one I am going for. Wish me luck. I hope I can clear it as easy as I did the other 3.
UNITED STATES
upvote

Arian commented on May 17, 2019
I normally don't go for braindumps and cheat sheets but for this exam I had to since I did not have time and there was a deadline set by company. So I used these dumps and it worked. I passed in first try.
UNITED STATES
upvote

streetbites commented on April 26, 2019
Great price will study and post results...
UNITED STATES
upvote

zxczx commented on September 10, 2018
where are my downloads?
UNITED STATES
upvote

db commented on September 10, 2018
website had to navigate and download exams.
UNITED STATES
upvote

sam commented on July 19, 2018
later
INDIA
upvote

Karthik commented on March 20, 2018
Hi Team, Shared dumps answers are wrong, I have cross check most of the answer are wrong. Please refund / share the valid one?. Regards, Karthik M
GERMANY
upvote

Yogi commented on January 23, 2018
Excellant product. Cleared exam with 95%.
UNITED STATES
upvote

Ronnie commented on September 05, 2017
I have heard great things from a colleague ! He has passed every exam by 80+% Thanks to BrainDumps... I'll let you know in 2 weeks how i go!
UNITED STATES
upvote

Rai commented on June 09, 2017
Very helpful content, definitely will help me to pass the certification
UNITED STATES
upvote

musma21 commented on March 05, 2017
I've been using AWS and Azure for a time however I've never tried to take this exam. I'm really thrilled to get the AWS cert with help of this dump!
UNITED STATES
upvote