- (Exam Topic 1)
A company is implementing a monitoring solution that is based on machine learning. The monitoring solution consumes Amazon EventBridge (Amazon CloudWatch Events) events that are generated by Amazon EC2 Auto Scaling. The monitoring solution provides detection of anomalous behavior such as unanticipated scaling events and is configured as an EventBridge (CloudWatch Events) API destination.
During initial testing, the company discovers that the monitoring solution is not receiving events. However, Amazon CloudWatch is showing that the EventBridge (CloudWatch Events) rule is being invoked. A SysOps administrator must implement a solution to retrieve client error details to help resolve this issue.
Which solution will meet these requirements with the LEAST operational effort?

1. A. Create an EventBridge (CloudWatch Events) archive for the event pattern to replay the event
2. B. Increase the logging on the monitoring solutio
3. C. Use replay to invoke the monitoring solutio
4. D. Examine the error details.
5. E. Add an Amazon Simple Queue Service (Amazon SQS) standard queue as a dead-letter queue for the targe
6. F. Process the messages in the dead-letter queue to retrieve error details.
7. G. Create a second EventBridge (CloudWatch Events) rule for the same event pattern to target an AWS Lambda functio
8. H. Configure the Lambda function to invoke the monitoring solution and to record the results to Amazon CloudWatch Log
9. I. Examine the errors in the logs.
10. J. Configure the EventBridge (CloudWatch Events) rule to send error messages to an Amazon Simple Notification Service (Amazon SNS) topic.

Correct Answer: A
"In EventBridge, you can create an archive of events so that you can easily replay them at a later time. For example, you might want to replay events to recover from errors or to validate new functionality in your
application." https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-archive.html

- (Exam Topic 1)
A company recently acquired another corporation and all of that corporation's AWS accounts. A financial analyst needs the cost data from these accounts. A SysOps administrator uses Cost Explorer to generate cost and usage reports. The SysOps administrator notices that "No Tagkey" represents 20% of the monthly cost.
What should the SysOps administrator do to tag the "No Tagkey" resources?

1. A. Add the accounts to AWS Organization
2. B. Use a service control policy (SCP) to tag all the untagged resources.
3. C. Use an AWS Config rule to find the untagged resource
4. D. Set the remediation action to terminate the resources.
5. E. Use Cost Explorer to find and tag all the untagged resources.
6. F. Use Tag Editor to find and taq all the untaqqed resources.

Correct Answer: D
"You can add tags to resources when you create the resource. You can use the resource's service console or API to add, change, or remove those tags one resource at a time. To add tags to—or edit or delete tags
of—multiple resources at once, use Tag Editor. With Tag Editor, you search for the resources that you want to tag, and then manage tags for the resources in your search results." https://docs.aws.amazon.com/ARG/latest/userguide/tag-editor.html

- (Exam Topic 1)
A SysOps administrator is investigating why a user has been unable to use RDP to connect over the internet from their home computer to a bastion server running on an Amazon EC2 Windows instance.
Which of the following are possible causes of this issue? (Choose two.)

1. A. A network ACL associated with the bastion's subnet is blocking the network traffic.
2. B. The instance does not have a private IP address.
3. C. The route table associated with the bastion's subnet does not have a route to the internet gateway.
4. D. The security group for the instance does not have an inbound rule on port 22.
5. E. The security group for the instance does not have an outbound rule on port 3389.

Correct Answer: AC

- (Exam Topic 1)
A company is running a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The company configured an Amazon CloudFront distribution and set the ALB as the origin. The company created an Amazon Route 53 CNAME record to send all traffic through the CloudFront distribution. As an unintended side effect, mobile users are now being served the desktop version of the website.
Which action should a SysOps administrator take to resolve this issue?

1. A. Configure the CloudFront distribution behavior to forward the User-Agent header.
2. B. Configure the CloudFront distribution origin setting
3. C. Add a User-Agent header to the list of origin custom headers.
4. D. Enable IPv6 on the AL
5. E. Update the CloudFront distribution origin settings to use the dualstack endpoint.
6. F. Enable IPv6 on the CloudFront distributio
7. G. Update the Route 53 record to use the dualstack endpoint.

Correct Answer: A
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/header-caching.html#header-caching-

- (Exam Topic 1)
A recent audit found that most resources belonging to the development team were in violation of patch compliance standards The resources were properly tagged Which service should be used to quickly remediate the issue and bring the resources back into compliance?

1. A. AWS Config
2. B. Amazon Inspector
3. C. AWS Trusted Advisor
4. D. AWS Systems Manager

Correct Answer: D