- (Exam Topic 1)
A SysOps administrator must create a solution that automatically shuts down any Amazon EC2 instances that have less than 10% average CPU utilization for 60 minutes or more.
Which solution will meet this requirement In the MOST operationally efficient manner?

1. A. Implement a cron job on each EC2 instance to run once every 60 minutes and calculate the current CPU utilizatio
2. B. Initiate an instance shutdown If CPU utilization is less than 10%.
3. C. Implement an Amazon CloudWatch alarm for each EC2 instance to monitor average CPU utilization.Set the period at 1 hour, and set the threshold at 10%. Configure an EC2 action on the alarm to stop the instance.
4. D. Install the unified Amazon CloudWatch agent on each EC2 instance, and enable the Basic level predefined metric se
5. E. Log CPU utilization every 60 minutes, and initiate an instance shutdown if CPU utilization is less than 10%.
6. F. Use AWS Systems Manager Run Command to get CPU utilization from each EC2 instance every 60 minute
7. G. Initiate an instance shutdown if CPU utilization is less than 10%.

Correct Answer: B
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/UsingAlarmActions.html

- (Exam Topic 1)
A global company handles a large amount of personally identifiable information (Pll) through an internal web portal. The company's application runs in a corporate data center that is connected to AWS through an AWS Direct Connect connection. The application stores the Pll in Amazon S3. According to a compliance requirement, traffic from the web portal to Amazon S3 must not travel across the internet.
What should a SysOps administrator do to meet the compliance requirement?

1. A. Provision an interface VPC endpoint for Amazon S3. Modify the application to use the interface endpoint.
2. B. Configure AWS Network Firewall to redirect traffic to the internal S3 address.
3. C. Modify the application to use the S3 path-style endpoint.
4. D. Set up a range of VPC network ACLs to redirect traffic to the Internal S3 address.

Correct Answer: B

- (Exam Topic 1)
A company recently its server infrastructure to Amazon EC2 instances. The company wants to use Amazon CloudWatch metrics to track instance memory utilization and available disk space.
What should a SysOps administrator do to meet these requirements?

1. A. Configure CloudWatch from the AWS Management Console tor all the instances that require monitoring by CloudWatc
2. B. AWS automatically installs and configures the agents far the specified instances.
3. C. Install and configure the CloudWatch agent on all the instance
4. D. Attach an IAM role to allow theinstances to write logs to CloudWatch.
5. E. Install and configure the CloudWatch agent on all the instance
6. F. Attach an IAM user to allow the instances to write logs to CloudWatch.
7. G. Install and configure the CloudWatch agent on all the instance
8. H. Attach the necessary security groups to allow the instances to write logs to CloudWatch

Correct Answer: C

- (Exam Topic 1)
A company runs a website from Sydney, Australia. Users in the United States (US) and Europe are reporting that images and videos are taking a long time to load. However, local testing in Australia indicates no performance issues. The website has a large amount of static content in the form of images and videos that are stored m Amazon S3.
Which solution will result In the MOST Improvement In the user experience for users In the US and Europe?

1. A. Configure AWS PrivateLink for Amazon S3.
2. B. Configure S3 Transfer Acceleration.
3. C. Create an Amazon CloudFront distributio
4. D. Distribute the static content to the CloudFront edge locations
5. E. Create an Amazon API Gateway API in each AWS Regio
6. F. Cache the content locally.

Correct Answer: D

- (Exam Topic 1)
A SysOps administrator is reviewing AWS Trusted Advisor warnings and encounters a warning for an S3 bucket policy that has open access permissions. While discussing the issue with the bucket owner, the administrator realizes the S3 bucket is an origin for an Amazon CloudFront web distribution.
Which action should the administrator take to ensure that users access objects in Amazon S3 by using only CloudFront URLs?

1. A. Encrypt the S3 bucket content with Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3).
2. B. Create an origin access identity and grant it permissions to read objects in the S3 bucket.
3. C. Assign an 1AM user to the CloudFront distribution and grant the user permissions in the S3 bucket policy.
4. D. Assign an 1AM role to the CloudFront distribution and grant the role permissions in the S3 bucket policy.

Correct Answer: B
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3