Question 1

A companys Amazon EC2 instance with high CPU utilization is a t3.large instance running a test webapp. The company determines the app would run better on a compute-optimized large instance.What should the CloudOps engineer do?

Options :

A : Migrate the EC2 instance to a compute optimized instance by using AWS VM Import/Export.

B : Enable hibernation on the EC2 instance. Change the instance type to a compute optimized instance. Disable hibernation on the EC2 instance.

C : Stop the EC2 instance. Change the instance type to a compute optimized instance. Start the EC2 instance.

D : Change the instance type to a compute optimized instance while the EC2 instance is running.

Answer: C

Question 2

A company runs an application on Amazon EC2 that connects to an Amazon Aurora PostgreSQLdatabase. A developer accidentally drops a table from the database, causing application errors. Twohours later, a CloudOps engineer needs to recover the data and make the application functionalagain.Which solution will meet this requirement?

Options :

A : Use the Aurora Backtrack feature to rewind the database to a specified time, 2 hours in the past.

B : Perform a point-in-time recovery on the existing database to restore the database to a specified point in time, 2 hours in the past.

C : Perform a point-in-time recovery and create a new database to restore the database to a specified point in time, 2 hours in the past. Reconfigure the application to use a new database endpoint.

D : Create a new Aurora cluster. Choose the Restore data from S3 bucket option. Choose log files up to the failure time 2 hours in the past.

Answer: C

Question 3

Optimization]A companys architecture team must receive immediate email notifications whenever new AmazonEC2 instances are launched in the companys main AWS production account.What should a CloudOps engineer do to meet this requirement?

Options :

A : Create a user data script that sends an email message through a smart host connector. Include the architecture team's email address in the user data script as the recipient. Ensure that all new EC2 instances include the user data script as part of a standardized build process.

B : Create an Amazon Simple Notification Service (Amazon SNS) topic and a subscription that uses the email protocol. Enter the architecture team's email address as the subscriber. Create an Amazon EventBridge rule that reacts when EC2 instances are launched. Specify the SNS topic as the rule's target.

C : Create an Amazon Simple Queue Service (Amazon SQS) queue and a subscription that uses the email protocol. Enter the architecture team's email address as the subscriber. Create an Amazon EventBridge rule that reacts when EC2 instances are launched. Specify the SQS queue as the rule's target.

D : Create an Amazon Simple Notification Service (Amazon SNS) topic. Configure AWS Systems Manager to publish EC2 events to the SNS topic. Create an AWS Lambda function to poll the SNS topic. Configure the Lambda function to send any messages to the architecture team's email address.

Answer: B

Question 4

A medical research company uses an Amazon Bedrock powered AI assistant with agents andknowledge bases to provide physicians quick access to medical study protocols. The company needsto generate audit reports that contain user identities, usage data for Bedrock agents, access data forknowledge bases, and interaction parameters.Which solution will meet these requirements?

Options :

A : Use AWS CloudTrail to log API events from generative AI workloads. Store the events in CloudTrail Lake. Use SQL-like queries to generate reports.

B : Use Amazon CloudWatch to capture generative AI application logs. Stream the logs to Amazon OpenSearch Service. Use an OpenSearch dashboard visualization to generate reports.

C : Use Amazon CloudWatch to log API events from generative AI workloads. Send the events to an Amazon S3 bucket. Use Amazon Athena queries to generate reports.

D : Use AWS CloudTrail to capture generative AI application logs. Stream the logs to Amazon Managed Service for Apache Flink. Use SQL queries to generate reports.

Answer: A

Question 5

A CloudOps engineer has created a VPC that contains a public subnet and a private subnet. AmazonEC2 instances that were launched in the private subnet cannot access the internet. The defaultnetwork ACL is active on all subnets in the VPC, and all security groups allow outbound traffic.Which solution will provide the EC2 instances in the private subnet with access to the internet?

Options :

A : Create a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway.

B : Create a NAT gateway in the public subnet. Create a route from the public subnet to the NAT gateway.

C : Create a NAT gateway in the private subnet. Create a route from the public subnet to the NAT gateway.

D : Create a NAT gateway in the private subnet. Create a route from the private subnet to the NAT gateway.

Answer: A