- (Exam Topic 1)
A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled. A SysOps administrator needs to be able to roll back the DB cluster to a specific recovery point within the previous 72 hours. Restores must be completed in the same production DB cluster.
Which solution will meet these requirements?

1. A. Create an Aurora Replic
2. B. Promote the replica to replace the primary DB instance.
3. C. Create an AWS Lambda function to restore an automatic backup to the existing DB cluster.
4. D. Use backtracking to rewind the existing DB cluster to the desired recovery point.
5. E. Use point-in-time recovery to restore the existing DB cluster to the desired recovery point.

Correct Answer: C
"The limit for a backtrack window is 72 hours.....Backtracking is only available for DB clusters that were created with the Backtrack feature enabled....Backtracking "rewinds" the DB cluster to the time you specify. Backtracking is not a replacement for backing up your DB cluster so that you can restore it to a point in time....You can backtrack a DB cluster quickly. Restoring a DB cluster to a point in time launches a new DB cluster and restores it from backup data or a DB cluster snapshot, which can take hours."
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Managing.Backtrack.html

- (Exam Topic 2)
If your AWS Management Console browser does not show that you are logged in to an AWS account, close the browser and relaunch the
console by using the AWS Management Console shortcut from the VM desktop.
If the copy-paste functionality is not working in your environment, refer to the instructions file on the VM desktop and use Ctrl+C, Ctrl+V or Command-C , Command-V.
Configure Amazon EventBridge to meet the following requirements.
* 1. use the us-east-2 Region for all resources,
* 2. Unless specified below, use the default configuration settings.
* 3. Use your own resource naming unless a resource name is specified below.
* 4. Ensure all Amazon EC2 events in the default event bus are replayable for the past 90 days.
* 5. Create a rule named RunFunction to send the exact message every 1 5 minutes to an existing AWS Lambda function named LogEventFunction.
* 6. Create a rule named SpotWarning to send a notification to a new standard Amazon SNS topic named TopicEvents whenever an Amazon EC2
Spot Instance is interrupted. Do NOT create any topic subscriptions. The notification must match the following structure:

Input Path:
{“instance” : “$.detail.instance-id”}
Input template:
“ The EC2 Spot Instance has been on account.
Solution:
Here are the steps to configure Amazon EventBridge to meet the above requirements:
Log in to the AWS Management Console by using the AWS Management Console shortcut from the VM desktop. Make sure that you are logged in to the desired AWS account.
Go to the EventBridge service in the us-east-2 Region.
In the EventBridge service, navigate to the "Event buses" page.
Click on the "Create event bus" button.
Give a name to your event bus, and select "default" as the event source type.
Navigate to "Rules" page and create a new rule named "RunFunction"
In the "Event pattern" section, select "Schedule" as the event source and set the schedule to run every 15 minutes.
In the "Actions" section, select "Send to Lambda" and choose the existing AWS Lambda function named "LogEventFunction"
Create another rule named "SpotWarning"
In the "Event pattern" section, select "EC2" as the event source, and filter the events on "EC2 Spot Instance interruption"
In the "Actions" section, select "Send to SNS topic" and create a new standard Amazon SNS topic named "TopicEvents"
In the "Input Transformer" section, set the Input Path to {“instance” : “$.detail.instance-id”} and Input template to “The EC2 Spot Instance has been interrupted on account.
Now all Amazon EC2 events in the default event bus will be replayable for past 90 days. Note:
You can use the AWS Management Console, AWS CLI, or SDKs to create and manage EventBridge resources.
You can use CloudTrail event history to replay events from the past 90 days.
You can refer to the AWS EventBridge documentation for more information on how to configure and use the service: https://aws.amazon.com/eventbridge/

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 1)
A SysOps administrator is reviewing VPC Flow Logs to troubleshoot connectivity issues in a VPC. While reviewing the togs the SysOps administrator notices that rejected traffic is not listed.
What should the SysOps administrator do to ensure that all traffic is logged?

1. A. Create a new flow tog that has a titter setting to capture all traffic
2. B. Create a new flow log set the tog record format to a custom format Select the proper fields to include in the tog
3. C. Edit the existing flow log Change the fitter setting to capture all traffic
4. D. Edit the existing flow lo
5. E. Set the log record format to a custom format Select the proper fields to include in the tog

Correct Answer: A

- (Exam Topic 1)
A new application runs on Amazon EC2 instances and accesses data in an Amazon RDS database instance. When fully deployed in production, the application fails. The database can be queried from a console on a bastion host. When looking at the web server logs, the following error is repeated multiple times:
"** Error Establishing a Database Connection
Which of the following may be causes of the connectivity problems? {Select TWO.)

1. A. The security group for the database does not have the appropriate egress rule from the database to the web server.
2. B. The certificate used by the web server is not trusted by the RDS instance.
3. C. The security group for the database does not have the appropriate ingress rule from the web server to the database.
4. D. The port used by the application developer does not match the port specified in the RDS configuration.
5. E. The database is still being created and is not available for connectivity.

Correct Answer: CD

- (Exam Topic 1)
A SysOps administrator Is troubleshooting an AWS Cloud Formation template whereby multiple Amazon EC2 instances are being created The template is working In us-east-1. but it is failing In us-west-2 with the error code:

How should the administrator ensure that the AWS Cloud Formation template is working in every region?

1. A. Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.
2. B. Edit the AWS CloudFormatton template to specify the region code as part of the fully qualified AMI ID.
3. C. Edit the AWS CloudFormatton template to offer a drop-down list of all AMIs to the user by using the aws :: EC2:: ami :: imageiD control.
4. D. Modify the AWS CloudFormation template by including the AMI IDs in the "Mappings" sectio
5. E. Refer to the proper mapping within the template for the proper AMI ID.

Correct Answer: A