QUESTION: 253

A SysOps administrator configures an Amazon S3 gateway endpoint in a VPC. The private subnets inside the VPC do not have outbound internet access. User logs in to an Amazon EC2 instance in one of the private subnets and cannot upload a file to an Amazon S3 bucket in the same AWS Region.
Which solution will solve this problem?

Update the EC2 instance role policy to include s3:PutObject access to the target S3 bucket.
Update the EC2 security group to allow outbound traffic to 0.0.0.0/0 for port 80.
Update the EC2 subnet route table to include the S3 prefix list destination routes to the S3 gateway endpoint.
Update the S3 bucket policy to allow s3:PutObject access from the private subnet CIDR block.

Answer(s): C

Reveal Solution Next Question

QUESTION: 254

A company uses Amazon S3 to aggregate raw video footage from various media teams across the US. The company recently expanded into new geographies in Europe and Australia. The technical teams located in Europe and Australia reported delays when uploading large video files into the destination S3 bucket in the United States.
What are the MOST cost effective ways to increase upload speeds into the S3 bucket? (Choose two.)

Create multiple AWS Direct Connect connections between AWS and branch offices in Europe and Australia for file uploads into the destination S3 bucket.
Create multiple AWS Site-to-Site VPN connections between AWS and branch offices in Europe and Australia for file uploads into the destination S3 bucket.
Use Amazon S3 Transfer Acceleration for file uploads into the destination S3 bucket.
Use AWS Global Accelerator for file uploads into the destination S3 bucket from the branch offices in Europe and Australia.
Use multipart uploads for file uploads into the destination S3 bucket from the branch offices in Europe and Australia.

Answer(s): C,E

Reveal Solution Next Question

QUESTION: 255

A SysOps administrator is helping a development team deploy an application to AWS. The AWS CloudFormation template includes an Amazon Linux EC2 instance, an Amazon Aurora DB cluster, and a hardcoded database password that must be rotated every 90 days.
What is the MOST secure way to manage the database password?

Use the AWS::SecretsManager::Secret resource with the GenerateSecretString property to automatically generate a password. Use the AWS::SecretsManager::RotationSchedule resource to define a rotation schedule for the password. Configure the application to retrieve the secret from AWS Secrets Manager to access the database.
Use the AWS::SecretsManager::Secret resource with the SecretString property Accept a password as a CloudFormation parameter Use the AllowedPattern property of the CloudFormation parameter to require a minimum length, uppercase and lowercase letters, and special characters. Configure the application to retrieve the secret from AWS Secrets Manager to access the database.
Use the AWS::SSM::Parameter resource. Accept input as a CloudFormation parameter to store the parameter as a secure string. Configure the application to retrieve the parameter from AWS Systems Manager Parameter Store to access the database.
Use the AWS::SSM::Parameter resource. Accept input as a CloudFormation parameter to store the parameter as a string. Configure the application to retrieve the parameter from AWS Systems Manager Parameter Store to access the database.

Answer(s): A

Reveal Solution Next Question

QUESTION: 256

Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with the NLB. Other applications from an on-premises environment cannot communicate with Application A on port 8080.
To troubleshoot the issue, a SysOps administrator analyzes the flow logs. The flow logs include the following records:
What is the reason for the rejected traffic?

The security group of the EC2 instances has no Allow rule for the traffic from the NLB.
The security group of the NLB has no Allow rule for the traffic from the on-premises environment.
The ACL of the on-premises environment does not allow traffic to the AWS environment.
The network ACL that is associated with the subnet does not allow outbound traffic for the ephemeral port range.

Answer(s): D

Reveal Solution Next Question

Free AWS-SysOps Exam Braindumps (page: 65)

QUESTION: 253

QUESTION: 254

QUESTION: 255

QUESTION: 256

AWS-SysOps Exam Discussions & Posts