A company is implementing a well-architected design for its globally accessible API stack. The design needs to ensure both high reliability and fast response times for users located in North America and Europe.
The API stack contains the following three tiers:
• Amazon API Gateway
• AWS Lambda
• Amazon DynamoDB
Which solution will meet the requirements?

1. A. Configure Amazon Route 53 to point to API Gateway APIs in North America and Europe using health check
2. B. Configure the APIs to forward requests to a Lambda function in that Regio
3. C. Configure the Lambda functions to retrieve and update the data in a DynamoDB table in the same Region as the Lambda function.
4. D. Configure Amazon Route 53 to point to API Gateway APIs in North America and Europe using latency-based routing and health check
5. E. Configure the APIs to forward requests to a Lambda function in that Regio
6. F. Configure the Lambda functions to retrieve and update the data in a DynamoDB global table.
7. G. Configure Amazon Route 53 to point to API Gateway in North America, create a disaster recovery API in Europe, and configure both APIs to forward requests to the Lambda functions in that Regio
8. H. Retrieve the data from a DynamoDB global tabl
9. I. Deploy a Lambda function to check the North America API health every 5 minute
10. J. In the event of a failure, update Route 53 to point to the disaster recovery API.
11. K. Configure Amazon Route 53 to point to API Gateway API in North America using latency-based routin
12. L. Configure the API to forward requests to the Lambda function in the Region nearest to the use
13. M. Configure the Lambda function to retrieve and update the data in a DynamoDB table.

Correct Answer: B

A company has microservices running in AWS Lambda that read data from Amazon DynamoDB. The Lambda code is manually deployed by Developers after successful testing. The company now needs the tests and deployments be automated and run in the cloud. Additionally, traffic to the new versions of each microservice should be incrementally shifted over time after deployment.
What solution meets all the requirements, ensuring the MOST developer velocity?

1. A. Create an AWS CodePipeline configuration and set up a post-commit hook to trigger the pipeline after tests have passe
2. B. Use AWS CodeDeploy and create a Canary deployment configuration that specifies the percentage of traffic and interval.
3. C. Create an AWS CodeBuild configuration that triggers when the test code is pushe
4. D. Use AWS CloudFormation to trigger an AWS CodePipeline configuration that deploys the new Lambda versions and specifies the traffic shift percentage and interval.
5. E. Create an AWS CodePipeline configuration and set up the source code step to trigger when code ispushe
6. F. Set up the build step to use AWS CodeBuild to run the test
7. G. Set up an AWS CodeDeploy configuration to deploy, then select the CodeDeployDefault.LambdaLinear10PercentEvery3Minutes option.
8. H. Use the AWS CLI to set up a post-commit hook that uploads the code to an Amazon S3 bucket after tests have passe
9. I. Set up an S3 event trigger that runs a Lambda function that deploys the new versio
10. J. Use an interval in the Lambda function to deploy the code over time at the required percentage.

Correct Answer: C
https://docs.aws.amazon.com/codedeploy/latest/userguide/deployment-configurations.html

A company that uses electronic health records is running a fleet of Amazon EC2 instances with an Amazon Linux operating system. As part of patient privacy requirements, the company must ensure continuous compliance for patches for operating system and applications running on the EC2 instances.
How can the deployments of the operating system and application patches be automated using a default and custom repository?

1. A. Use AWS Systems Manager to create a new patch baseline including the custom repositor
2. B. Execute the AWS-RunPatchBaseline document using the run command to verify and install patches.
3. C. Use AWS Direct Connect to integrate the corporate repository and deploy the patches using Amazon CloudWatch scheduled events, then use the CloudWatch dashboard to create reports.
4. D. Use yum-config-manager to add the custom repository under /etc/yum.repos.d and run yum-config-manager-enable to activate the repository.
5. E. Use AWS Systems Manager to create a new patch baseline including the corporate repositor
6. F. Execute the AWS-AmazonLinuxDefaultPatchBaseline document using the run command to verify and install patches.

Correct Answer: A
https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-about-aws-runpatchbaseline.htm

A company has established tagging and configuration standards for its infrastructure resources running on AWS. A DevOps Engineer is developing a design that will provide a near-real-time dashboard of the compliance posture with the ability to highlight violations.
Which approach meets the stated requirements?

1. A. Define the resource configurations in AWS Service Catalog, and monitor the AWS Service Catalog compliance and violations in Amazon CloudWatc
2. B. Then, set up and share a live CloudWatch dashboar
3. C. Set up Amazon SNS notifications for violations and corrections.
4. D. Use AWS Config to record configuration changes and output the data to an Amazon S3 bucke
5. E. Createan Amazon QuickSight analysis of the dataset, and use the information on dashboards and mobile devices.
6. F. Create a resource group that displays resources with the specified tags and those without tag
7. G. Use the AWS Management Console to view compliant and non-compliant resources.
8. H. Define the compliance and tagging requirements in Amazon inspecto
9. I. Output the results to Amazon CloudWatch Log
10. J. Build a metric filter to isolate the monitored elements of interest and present the data in a CloudWatch dashboard.

Correct Answer: B
https://aws.amazon.com/about-aws/whats-new/2019/03/aws-config-now-supports-tagging-of-aws-config-resour

A DevOps Engineer encountered the following error when attempting to use an AWS CloudFormation template to create an Amazon ECS cluster:
An error occurred (InsufficientCapabilitiesException) when calling the CreateStack operation.
What caused this error and what steps need to be taken to allow the Engineer to successfully execute the AWS CloudFormation template?

1. A. The AWS user or role attempting to execute the CloudFormation template does not have the permissions required to create the resources within the templat
2. B. The Engineer must review the user policies and add any permissions needed to create the resources and then rerun the template execution.
3. C. The AWS CloudFormation service cannot be reached and is not capable of creating the cluste
4. D. The Engineer needs to confirm that routing and firewall rules are not preventing the AWS CloudFormation script from communicating with the AWS service endpoints, and then rerun the template execution.
5. E. The CloudFormation execution was not granted the capability to create IAM resource
6. F. The Engineer needs to provide CAPABILITY_IAM and as capabilities in the CloudFormation execution parameters or provide the capabilities in the AWS Management Consol
7. G. CAPABILITY_NAMED_IAM
8. H. CloudFormation is not capable of fulfilling the request of the specified resources in the current AWS Regio
9. I. The Engineer needs to specify a new region and rerun the template

Correct Answer: C