A law firm is running a web application on AWS. The system manages legal documents uploaded by users, and stores the documents in Amazon S3. Users have complained that file uploads are taking too long and there are timeouts during peak usage. A DevOps engineer found that web servers are managing concurrent uploads and are overloaded.
Which actions should be taken to troubleshoot the issue in the MOST cost-effective manner?

1. A. Create an AWS CloudFront distribution in front of the web servers, and modify the application to upload to Amazon S3 using S3 Transfer Acceleration.
2. B. Modify the application so the browser uses a signed URL to directly upload to Amazon S3 using multipart uploads.
3. C. Create an AWS CloudFront distribution in front of the web servers, and modify the application to store files in Amazon EFS in the Max I/O performance mode.
4. D. Place the web servers in an Amazon EC2 Auto Scaling group to include Spot Instances and modify the application to upload to Amazon S3 using multipart uploads.

Correct Answer: A

A company is creating a software solution that executes a specific parallel-processing mechanism. The software can scale to tens of servers in some special scenarios. This solution uses a proprietary library that is license-based, requiring that each individual server have a single, dedicated license installed. The company has 200 licenses and is planning to run 200 server nodes concurrently at most.
The company has requested the following features:
"¢ A mechanism to automate the use of the licenses at scale. "¢ Creation of a dashboard to use in the future to verify which licenses are available at any moment.
What is the MOST effective way to accomplish these requirements?

1. A. Upload the licenses to a private Amazon S3 bucke
2. B. Create an AWS CloudFormation template with a Mappings section for the license
3. C. In the template, create an Auto Scaling group to launch the server
4. D. In the user data script, acquire an available license from the Mappings sectio
5. E. Create an Auto Scaling lifecycle hook, then use it to update the mapping after the instance is terminated.
6. F. Upload the licenses to an Amazon DynamoDB tabl
7. G. Create an AWS CloudFormation template that uses an Auto Scaling group to launch the server
8. H. In the user data script, acquire an available license from the DynamoDB tabl
9. I. Create an Auto Scaling lifecycle hook, then use it to update the mapping after the instance is terminated.
10. J. Upload the licenses to a private Amazon S3 bucke
11. K. Populate an Amazon SQS queue with the list of licenses stored in S3. Create an AWS CloudFormation template that uses an Auto Scaling group to launch the server
12. L. In the user data script acquire an available license from SQ
13. M. Create an Auto Scaling lifecycle hook, then use it to put the license back in SQS after the instance is terminated.
14. N. Upload the licenses to an Amazon DynamoDB tabl
15. O. Create an AWS CLI script to launch the servers by using the parameter --count, with min:max instances to launc
16. P. In the user data script, acquire an available license from the DynamoDB tabl
17. Q. Monitor each instance and, in case of failure, replace the instance, then manually update the DynamoDB table.

Correct Answer: D

A devops team uses AWS CloudFormation to build their infrastructure. The security team is concerned about sensitive parameters, such as passwords, being exposed.
Which combination of steps will enhance the security of AWS CloudFormation? (Select THREE.)

1. A. Create a secure string with AWS KMS and choose a KMS encryption ke
2. B. Reference the ARN of the secure string, and give AWS CloudFormation permission to the KMS key for decryption.
3. C. Create secrets using the AWS Secrets Manager AWS::SecretsManager::Secret resource typ
4. D. Reference the secret resource return attributes in resources that need a password, such as an Amazon RDS database.
5. E. Store sensitive static data as secure strings in the AWS Systems Manager Parameter Stor
6. F. Use dynamic references in the resources that need access to the data.
7. G. Store sensitive static data in the AWS Systems Manager Parameter Store as string
8. H. Reference the stored value using types of Systems Manager parameters.
9. I. Use AWS KMS to encrypt the CloudFormation template.
10. J. Use the CloudFormation NoEcho parameter property to mask the parameter value.

Correct Answer: ABD

A retail company is currently hosting a Java-based application in its on-premises data center. Management wants the DevOps Engineer to move this application to
AWS. Requirements state that while keeping high availability, infrastructure management should be as simple as possible. Also, during deployments of new application versions, while cost is an important metric, the Engineer needs to ensure that at least half of the fleet is available to handle user traffic.
What option requires the LEAST amount of management overhead to meet these requirements?

1. A. Create an AWS CodeDeploy deployment group and associate it with an Auto Scaling group configured to launch instances across subnets in different Availability Zone
2. B. Configure an in-place deployment with a CodeDeploy.HalfAtAtime configuration for application deployments.
3. C. Create an AWS Elastic Beanstalk Java-based environment using Auto Scaling and load balancing.Configure the network setting for the environment to launch instances across subnets in different Availability Zone
4. D. Use "Rolling with additional batch" as a deployment strategy with a batch size of 50%.
5. E. Create an AWS CodeDeploy deployment group and associate it with an Auto Scaling group configured to launch instances across subnets in different Availability Zone
6. F. Configure an in-place deployment with a custom deployment configuration with the MinimumHealthyHosts option set to type FLEET_PERCENT and a value of 50.
7. G. Create an AWS Elastic Beanstalk Java-based environment using Auto Scaling and load balancing.Configure the network options for the environment to launch instances across subnets in different Availability Zone
8. H. Use "Rolling" as a deployment strategy with a batch size of 50%.

Correct Answer: D
Rolling with batches keep 100% up yoiu need 50%. With rolling deployments, Elastic Beanstalk splits the environment's EC2 instances into batches and deploys the new version of the application to one batch at a time, leaving the rest of the instances in the environment running the old version of the application. https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.rolling-version-deploy.html

Your company has multiple applications running on AWS. Your company wants to develop a tool that notifies on-call teams immediately via email when an alarm is triggered in your environment. You have multiple on-call teams that work different shifts, and the tool should handle notifying the correct teams at the correct times. How should you implement this solution?

1. A. Create an Amazon SNS topic and an Amazon SQS queu
2. B. Configure the Amazon SQS queue as a subscriber to the Amazon SNS topic.Configure CloudWatch alarms to notify this topic when an alarm is triggere
3. C. Create an Amazon EC2 Auto Scaling group with both minimum and desired Instances configured to 0. Worker nodes in thisgroup spawn when messages are added to the queu
4. D. Workers then use Amazon Simple Email Service to send messages to your on call teams.
5. E. Create an Amazon SNS topic and configure your on-call team email addresses as subscriber
6. F. Use the AWS SDK tools to integrate your application with Amazon SNS and send messages to this new topi
7. G. Notifications will be sent to on-call users when a CloudWatch alarm is triggered.
8. H. Create an Amazon SNS topic and configure your on-call team email addresses as subscriber
9. I. Create a secondary Amazon SNS topic for alarms and configure your CloudWatch alarms to notify this topic when triggere
10. J. Create an HTTP subscriber to this topic that notifies your application via HTTP POST when an alarm is triggere
11. K. Use the AWS SDK tools to integrate your application with Amazon SNS and send messages to the first topic so that on-call engineers receive alerts.
12. L. Create an Amazon SNS topic for each on-call group, and configure each of these with the team member emails as subscriber
13. M. Create another Amazon SNS topic and configure your CloudWatch alarms to notify this topic when triggere
14. N. Create an HTTP subscriber to this topic that notifies your application via HTTP POST when an alarm is triggere
15. O. Use the AWS SDK tools to integrate your application with Amazon SNS and send messages to the correct team topic when on shift.

Correct Answer: D
Option D fulfils all the requirements
1) First is to create a SNS topic for each group so that the required members get the email addresses.
2) Ensure the application uses the HTTPS endpoint and the SDK to publish messages Option A is invalid because the SQS service is not required.
Option B and C are incorrect. As per the requirement we need to provide notification to only those on-call teams who are working in that particular shift when an alarm is triggered. It need not have to be send to all the on-call teams of the company. With Option B & C, since we are not configuring the SNS topic for each on call team the notifications will be send to all the on-call teams. Hence these 2 options are invalid. For more information on setting up notifications, please refer to the below document link: from AWS
http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/US_SetupSNS.html