Question 1

A company has hundreds of AWS accounts. The company recently implemented a centralized internal process for purchasing new Reserved Instances and modifying existing Reserved Instances. This process requires all business units that want to purchase or modify Reserved Instances to submit requests to a dedicated team for procurement. Previously, business units directly purchased or modified Reserved Instances in their own respective AWS accounts autonomously.

A solutions architect needs to enforce the new process in the most secure way possible.

Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)

Options :

A : Ensure that all AWS accounts are part of an organization in AWS Organizations with all features enabled.

B : Use AWS Config to report on the attachment of an IAM policy that denies access to the ec2:PurchaseReservedInstancesOffering action and the ec2:ModifyReservedInstances action.

C : In each AWS account, create an IAM policy that denies the ec2:PurchaseReservedInstancesOffering action and the ec2:ModifyReservedInstances action.

D : Create an SCP that denies the ec2:PurchaseReservedInstancesOffering action and the ec2:ModifyReservedInstances action. Attach the SCP to each OU of the organization.

E : Ensure that all AWS accounts are part of an organization in AWS Organizations that uses the consolidated billing feature.

Answer: A,D

Question 2

A health insurance company has recently adopted a hybrid cloud architecture which connects their on-premises network and their cloud infrastructure in AWS. They have an ELB which has a set of EC2 instances behind them. As the cloud engineer of the company, your manager instructed you to ensure that the SSL key used to encrypt data is always kept secure at all times. In addition, the application logs should only be decrypted by a handful of key users. In this scenario, which of the following meets all of the requirements?

Options :

A :

1. Use the ELB to distribute traffic to a set of EC2 instances.

2. Use TCP load balancing on the ELB and configure your EC2 instances to retrieve the private key from a non-public S3 bucket on boot.

3. Persist your application server logs to a private S3 bucket using SSE.

B :

1. Use the ELB to distribute traffic to a set of EC2 instances.

2. Configure the ELB to perform TCP load balancing.

3. Use an AWS CloudHSM instance to perform the SSL transactions.

4. Persist your application server logs to an ephemeral volume that has been encrypted using a randomly generated AES key

C :

1. Use the ELB to distribute traffic to a set of EC2 instances.

2. Upload the private key to the EC2 instances and configure it to offload the SSL traffic.

3. Persist your application server logs to an ephemeral volume that has been encrypted using a randomly generated AES key

D :

1. Use the ELB to distribute traffic to a set of EC2 instances.

2. Configure the ELB to perform TCP load balancing.

3. Use an AWS CloudHSM instance to perform the SSL transactions.

4. Persist your application server logs to a private S3 bucket using SSE.

Answer: D

Question 3

A media company has a 30-TB repository of digital news videos These videos are stored on tape in an

on-premises tape library and referenced by a Media Asset Management (MAM) system The company wants to

enrich the metadata for these videos in an automated fashion and put them into a searchable catalog by using a

MAM feature The company must be able to search based on information in the video such as objects scenery

items or people's faces A catalog is available that contains faces of people who have appeared in the videos

that include an image of each person The company would like to migrate these videos to AWS

The company has a high-speed AWS Direct Connect connection with AWS and would like to move the MAM

solution video content directly from its current file system

How can these requirements be met by using the LEAST amount of ongoing management overhead and

causing MINIMAL disruption to the existing system"'

Options :

A :

Set up an AWS Storage Gateway file gateway appliance on-premises. Use the MAM solution to extract

the videos from the current archive and push them into the file gateway Use the catalog of faces to build

a collection in Amazon Rekognition Build an AWS Lambda function that invokes the Rekognition

Javascript SDK to have Rekognition pull the video from the Amazon S3 files backing the file gateway,

retrieve the required metadata and push the metadata into the MAM solution

B :

Set up an AWS Storage Gateway tape gateway appliance on-premises Use the MAM solution to extract

the videos from the current archive and push them into the tape gateway Use the catalog of faces to

build a collection in Amazon Rekognition Build an AWS Lambda function that invokes the Rekognition

Javascript SDK to have Amazon Rekognition process the video in the tape gateway retrieve the required

metadata, and push the metadata into the MAM solution

C :

Configure a video ingestion stream by using Amazon Kinesis Video Streams Use the catalog of faces to

build a collection in Amazon Rekognition Stream the videos from the MAM solution into Kinesis Video

Streams Configure Amazon Rekognition to process the streamed videos Then, use a stream consumer to

retrieve the required metadata and push the metadata into the MAM solution Configure the stream to

store the videos in Amazon S3

D :

Set up an Amazon EC2 instance that runs the OpenCV libranes Copy the videos, images, and face

catalog from the on-premises library into an Amazon EBS volume

mounted on this EC2 instance Process the videos to retrieve the required metadata, and push the

metadata into the MAM solution, while also copying the video files to an Amazon S3 bucket

Answer: C

Question 4

An e-commerce company is revamping its IT infrastructure and is planning to use AWS services. The

company's CIO has asked a solutions architect to design a simple, highly available, and loosely coupled order

processing application. The application is responsible (or receiving and processing orders before storing them

in an Amazon DynamoDB table. The application has a sporadic traffic pattern and should be able to scale

during markeling campaigns to process the orders with minimal delays.

Which of the following is the MOST reliable approach to meet the requirements?

Options :

A : Receive the orders in an Amazon EC2-hosted database and use EC2 instances to process them.

B : Receive the orders in an Amazon SOS queue and trigger an AWS Lambda function lo process them.

C : Receive the orders using the AWS Step Functions program and trigger an Amazon ECS container lo process them.

D : Receive the orders in Amazon Kinesis Data Streams and use Amazon EC2 instances to process them

Answer: B

Question 5

A startup is running its customer support application in the AWS cloud. The application is hosted on a set of Auto Scaling Amazon EC2 on-demand instances placed behind an Elastic Load Balancer. The web application runs on large EC2 instance sizes to properly process the high volume of data that are stored in DynamoDB. New application version deployment is done once a week and requires an automated way of creating and testing a new Amazon Machine Image for the application servers. To meet the growing number of support tickets being sent, it was decided that a new video chat feature should be implemented as part of the customer support app, but should be hosted on a different set of servers to allow users to chat with a representative. The startup decided to streamline the deployment process and use AWS OpsWorks as an application lifecycle tool to simplify the management of the app and reduce time-consuming deployment cycles.

What is the most cost-efficient and flexible way to integrate the new video chat module in AWS?

Options :

A : Create an AWS OpsWorks stack, with one layer, and one custom recipe.

B : Create two AWS OpsWorks stacks, each with two layers, and one custom recipe.

C : Create two AWS OpsWorks stacks, each with two layers, and two custom recipes

D : Create an AWS OpsWorks stack, with two layers, and one custom recipe.

Answer: D