- (Exam Topic 1)
A company is trying to connect two applications. One application runs in an on-premises data center that has a hostname of hostl .onprem.private. The other application runs on an Amazon EC2 instance that has a hostname of hostl.awscloud.private. An AWS Site-to-Site VPN connection is in place between the on-premises network and AWS.
The application that runs in the data center tries to connect to the application that runs on the EC2 instance, but DNS resolution fails. A SysOps administrator must implement DNS resolution between on-premises and AWS resources.
Which solution allows the on-premises application to resolve the EC2 instance hostname?

1. A. Set up an Amazon Route 53 inbound resolver endpoint with a forwarding rule for the onprem.private hosted zon
2. B. Associate the resolver with the VPC of the EC2 instanc
3. C. Configure the on-premises DNS resolver to forward onprem.private DNS queries to the inbound resolver endpoint.
4. D. Set up an Amazon Route 53 inbound resolver endpoin
5. E. Associate the resolver with the VPC of the EC2 instanc
6. F. Configure the on-premises DNS resolver to forward awscloud.private DNS queries to the inbound resolver endpoint.
7. G. Set up an Amazon Route 53 outbound resolver endpoint with a forwarding rule for the onprem.private hosted zon
8. H. Associate the resolver with the AWS Region of the EC2 instanc
9. I. Configure theon-premises DNS resolver to forward onprem.private DNS queries to the outbound resolver endpoint.
10. J. Set up an Amazon Route 53 outbound resolver endpoin
11. K. Associate the resolver with the AWS Region of the EC2 instanc
12. L. Configure the on-premises DNS resolver to forward awscloud.private DNS queries to the outbound resolver endpoint.

Correct Answer: C

- (Exam Topic 1)
A SysOps administrator is provisioning an Amazon Elastic File System (Amazon EFS) file system to provide shared storage across multiple Amazon EC2 instances The instances all exist in the same VPC across multiple Availability Zones. There are two instances In each Availability Zone. The SysOps administrator must make the file system accessible to each instance with the lowest possible latency.
Which solution will meet these requirements?

1. A. Create a mount target for the EFS file system in the VP
2. B. Use the mount target to mount the file system on each of the instances
3. C. Create a mount target for the EFS file system in one Availability Zone of the VP
4. D. Use the mount target to mount the file system on the instances in that Availability Zon
5. E. Share the directory with the other instances.
6. F. Create a mount target for each instanc
7. G. Use each mount target to mount the EFS file system on each respective instance.
8. H. Create a mount target in each Availability Zone of the VPC Use the mount target to mount the EFS file system on the Instances in the respective Availability Zone.

Correct Answer: D
A mount target provides an IP address for an NFSv4 endpoint at which you can mount an Amazon EFS file system. You mount your file system using its Domain Name Service (DNS) name, which resolves to the IP address of the EFS mount target in the same Availability Zone as your EC2 instance. You can create one mount target in each Availability Zone in an AWS Region. If there are multiple subnets in an Availability Zone in your VPC, you create a mount target in one of the subnets. Then all EC2 instances in that Availability Zone share that mount target. https://docs.aws.amazon.com/efs/latest/ug/how-it-works.html

- (Exam Topic 1)
A company is planning to host its stateful web-based applications on AWS A SysOps administrator is using an Auto Scaling group of Amazon EC2 instances The web applications will run 24 hours a day 7 days a week throughout the year The company must be able to change the instance type within the same instance family later in the year based on the traffic and usage patterns
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

1. A. Convertible Reserved Instances
2. B. On-Demand instances
3. C. Spot instances
4. D. Standard Reserved instances

Correct Answer: A
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ri-convertible-exchange.html

- (Exam Topic 1)
A SysOps administrator is setting up an automated process to recover an Amazon EC2 instance In the event of an underlying hardware failure. The recovered instance must have the same private IP address and the same Elastic IP address that the original instance had. The SysOps team must receive an email notification when the recovery process is initiated.
Which solution will meet these requirements?

1. A. Create an Amazon CloudWatch alarm for the EC2 instance, and specify the SiatusCheckFailedjnstance metri
2. B. Add an EC2 action to the alarm to recover the instanc
3. C. Add an alarm notification to publish a message to an Amazon Simple Notification Service (Amazon SNS> topi
4. D. Subscribe the SysOps team email address to the SNS topic.
5. E. Create an Amazon CloudWatch alarm for the EC2 Instance, and specify the StatusCheckFailed_System metri
6. F. Add an EC2 action to the alarm to recover the instanc
7. G. Add an alarm notification to publish a message to an Amazon Simple Notification Service (Amazon SNS) topi
8. H. Subscribe the SysOps team email address to the SNS topic.
9. I. Create an Auto Scaling group across three different subnets in the same Availability Zone with a minimum, maximum, and desired size of 1. Configure the Auto Seating group to use a launch template that specifies the private IP address and the Elastic IP addres
10. J. Add an activity notification for the Auto Scaling group to send an email message to the SysOps team through Amazon Simple Email Service (Amazon SES).
11. K. Create an Auto Scaling group across three Availability Zones with a minimum, maximum, and desired size of 1. Configure the Auto Scaling group to use a launch template that specifies the private IP addressand the Elastic IP addres
12. L. Add an activity notification for the Auto Scaling group to publish a message to an Amazon Simple Notification Service (Amazon SNS) topi
13. M. Subscribe the SysOps team email address to the SNS topic.

Correct Answer: B
You can create an Amazon CloudWatch alarm that monitors an Amazon EC2 instance and automatically recovers the instance if it becomes impaired due to an underlying hardware failure or a problem that requires AWS involvement to repair. Terminated instances cannot be recovered. A recovered instance is identical to the original instance, including the instance ID, private IP addresses, Elastic IP addresses, and all instance metadata. If the impaired instance has a public IPv4 address, the instance retains the public IPv4 address after recovery. If the impaired instance is in a placement group, the recovered instance runs in the placement group. When the StatusCheckFailed_System alarm is triggered, and the recover action is initiated, you will be notified by the Amazon SNS topic that you selected when you created the alarm and associated the recover action. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-recover.html

- (Exam Topic 1)
A company is creating a new multi-account architecture. A Sysops administrator must implement a login solution to centrally manage user access and permissions across all AWS accounts. The solution must be integrated with AWS Organizations and must be connected to a third-party Security Assertion Markup Language (SAML) 2.0 identity provider (IdP).
What should the SysOps administrator do to meet these requirements?

1. A. Configure an Amazon Cognito user poo
2. B. Integrate the user pool with the third-party IdP.
3. C. Enable and configure AWS Single Sign-On with the third-party IdP.
4. D. Federate the third-party IdP with AWS Identity and Access Management (IAM) for each AWS account in the organization.
5. E. Integrate the third-party IdP directly with AWS Organizations.

Correct Answer: A