Free AWS-SysOps Exam Braindumps (page: 43)

Page 42 of 121

A SysOps administrator needs to automate the invocation of an AWS Lambda function. The Lambda function must run at the end of each day to generate a report on data that is stored in an Amazon S3 bucket.
What is the MOST operationally efficient solution that meets these requirements?

  1. Create an Amazon EventBridge (Amazon CloudWatch Events) rule that has an event pattern for Amazon S3 and the Lambda function as a target.
  2. Create an Amazon EventBridge (Amazon CloudWatch Events) rule that has a schedule and the Lambda function as a target.
  3. Create an S3 event notification to invoke the Lambda function whenever objects change in the S3 bucket.
  4. Deploy an Amazon EC2 instance with a cron job to invoke the Lambda function.

Answer(s): B



A company is releasing a new static website hosted on Amazon S3. The static website hosting feature was enabled on the bucket and content was uploaded; however, upon navigating to the site, the following error message is received:
403 Forbidden - Access Denied
What change should be made to fix this error?

  1. Add a bucket policy that grants everyone read access to the bucket.
  2. Add a bucket policy that grants everyone read access to the bucket objects.
  3. Remove the default bucket policy that denies read access to the bucket.
  4. Configure cross-origin resource sharing (CORS) on the bucket.

Answer(s): B



A company uses AWS Organizations. A SysOps administrator wants to use AWS Compute Optimizer and AWS tag policies in the management account to govern all member accounts in the billing family. The SysOps administrator navigates to the AWS Organizations console but cannot activate tag policies through the management account.
What could be the reason for this issue?

  1. All features have not been enabled in the organization.
  2. Consolidated billing has not been enabled.
  3. The member accounts do not have tags enabled for cost allocation.
  4. The member accounts have not manually enabled trusted access for Compute Optimizer.

Answer(s): A



A company is storing media content in an Amazon S3 bucket and uses Amazon CloudFront to distribute the content to its users. Due to licensing terms, the company is not authorized to distribute the content in some countries. A SysOps administrator must restrict access to certain countries.
What is the MOST operationally efficient solution that meets these requirements?

  1. Configure the S3 bucket policy to deny the GetObject operation based on the S3:LocationConstraint condition.
  2. Create a secondary origin access identity (OAI). Configure the S3 bucket policy to prevent access from unauthorized countries.
  3. Enable the geo restriction feature in the CloudFront distribution to prevent access from unauthorized countries.
  4. Update the application to generate signed CloudFront URLs only for IP addresses in authorized counties.

Answer(s): C






Post your Comments and Discuss Amazon AWS-SysOps exam with other Community members:

AWS-SysOps Discussions & Posts