Question 1

A company is planning a migration from an on-premises data center to the AWS cloud. The company plans to use multiple AWS accounts that are managed in an organization in AWS organizations. The company will cost a small number of accounts initially and will add accounts as needed. A solution architect must design a solution that turns on AWS accounts. What is the MOST operationally efficient solution that meets these requirements

Options :

A :

Create an AWS Lambda function that creates a new cloudTrail trail in all AWS account in the organization. Invoke the Lambda function dally by using a scheduled action in Amazon EventBridge.

B :

Create a new CloudTrail trail in the organizations management account. Configure the trail to log all events for all AYYS accounts in the organization.

C :

Create a new CloudTrail trail in all AWS accounts in the organization. Create new trails whenever a new account is created.

D :

Create an AWS systems Manager Automaton runbook that creates a cloud trail in all AWS accounts in the organization. Invoke the automation by using Systems Manager State Manager.

Answer: B

Question 2

A software as a service (SaaS) based company provides a case management solution to customers A3 part of

the solution. The company uses a standalone Simple Mail Transfer Protocol (SMTP) server to send email

messages from an application. The application also stores an email template for acknowledgement email

messages that populate customer data before the application sends the email message to the customer.

The company plans to migrate this messaging functionality to the AWS Cloud and needs to minimize

operational overhead.

Which solution will meet these requirements MOST cost-effectively?

Options :

A :

Set up an SMTP server on Amazon EC2 instances by using an AMI from the AWS Marketplace. Store

the email template in an Amazon S3 bucket. Create an AWS Lambda function to retrieve the template

from the S3 bucket and to merge the customer data from the application with the template. Use an SDK

in the Lambda function to send the email message.

B :

Set up Amazon Simple Email Service (Amazon SES) to send email messages. Store the email template

in an Amazon S3 bucket. Create an AWS Lambda function to retrieve the template from the S3 bucket

and to merge the customer data from the application with the template. Use an SDK in the Lambda

function to send the email message.

C :

Set up an SMTP server on Amazon EC2 instances by using an AMI from the AWS Marketplace. Store

the email template in Amazon Simple Email Service (Amazon SES) with parameters for the customer

data. Create an AWS Lambda function to call the SES template and to pass customer data to replace the

parameters. Use the AWS Marketplace SMTP server to send the email message

D :

Set up Amazon Simple Email Service (Amazon SES) to send email messages. Store the email template

on Amazon SES with parameters for the customer data. Create an AWS Lambda function to call the

SendTemplatedEmail API operation and to pass customer data to replace the parameters and the email

destination.

Answer: D

Question 3

A company has an application that runs on Amazon EC2 instances. A solutions architect is designing VPC infrastructure in an AWS Region where the application needs to access an Amazon Aurora DB cluster. The EC2 instances are all associated with the same security group. The DB cluster is associated with its own security group. The solutions architect needs to add rules to the security groups to provide the application with least privilege access to the DB cluster. Which combination of steps will meet these requirements? (Select TWO.)

Options :

A :

Add an inbound rule to the EC2 instances' security group. Specify the DB cluster-s security group as the source over the default Aurora port.

B : Add an outbound rule to the EC2 instances' security group. Specify the DB cluster-s security group as the destination over the default Aurora port.

C :

Add an inbound rule to the DB cluster-s security group. Specify the EC2 instances' security group as the source over the default Aurora port.

D :

Add an outbound rule to the DB cluster-s security group. Specify the EC2 instances' security group as the destination over the default Aurora port.

E :

Add an outbound rule to the DB cluster-s security group. Specify the EC2 instances' security group as the destination over the ephemeral ports.

Answer: D

Question 4

A research company is running daily simul-ations in the AWS Cloud to meet high demand. The simu-lations run on several hundred Amazon EC2 instances that are based on Amazon Linux 2. Occasionally, a simu-lation gets stuck and requires a cloud operations engineer to solve the problem by connecting to an EC2 instance through SSH. Company policy states that no EC2 instance can use the same SSH key and that all connections must be logged in AWS CloudTrail. How can a solutions architect meet these requirements?

Options :

A :

Launch new EC2 instances, and generate an individual SSH key for each instance. Store the SSH key in AWS Secrets Manager. Create a new IAM policy, and attach it to the engineers' IAM role with an Allow statement for the GetSecretValue action. Instruct the engineers to fetch the SSH key from Secrets Manager when they connect through any SSH client.

B :

Create an AWS Systems Manager document to run commands on EC2 instances to set a new unique SSH key. Create a new IAM policy, and attach it to the engineers' IAM role with an Allow statement to run Systems Manager documents. Instruct the engineers to run the document to set an SSH key and to connect through any SSH client.

C :

Launch new EC2 instances without setting up any SSH key for the instances. Set up EC2 Instance Connect on each instance. Create a new IAM policy, and attach it to the engineers' IAM role with an Allow statement for the SendSSHPublicKey action. Instruct the engineers to connect to the instance by using a browser-based SSH client from the EC2 console.

D :

Set up AWS Secrets Manager to store the EC2 SSH key. Create a new AWS Lambda function to create a new SSH key and to call AWS Systems Manager Session Manager to set the SSH key on the EC2 instance. Configure Secrets Manager to use the Lambda function for automatic rotation once daily. Instruct the engineers to fetch the SSH key from Secrets Manager when they connect through any SSH client.

Answer: C

Question 5

A leading financial company owns multiple AWS accounts that are consolidated under one AWS Organization. To properly manage all of the resources in your organization, the solutions architect has been tasked to ensure that the tags are always added when users create any resources across all the accounts.

Which of the following options are the recommended actions to achieve the company requirements? (Select TWO.)

Options :

A : Set up the CloudFormation Resource Tags property to apply tags to certain resource types upon creation.

B : Set up AWS Service Catalog to tag the provisioned resources with corresponding unique identifiers for portfolio, product, and users.

C : Set up AWS generated tags by activating it in the Billing and Cost Management console of the member account.

D : Set up AWS Systems Manager Automation to automatically add tags to your provisioned resources.

E : Set up AWS Config to add the corresponding tags to your resources right from the very moment that they are created.

Answer: A,B