- (Exam Topic 1)
An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, an Amazon RDS PostgreSQL database, an Amazon EFS file system, and static objects stored in an Amazon S3 bucket. The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime.
To satisfy the requirements, which one of these services can the SysOps administrator enable at-rest encryption on?

1. A. EBS General Purpose SSD volumes
2. B. RDS PostgreSQL database
3. C. Amazon EFS file systems
4. D. S3 objects within a bucket

Correct Answer: D
https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingEncryption.html

- (Exam Topic 1)
A company has launched a social media website that gives users the ability to upload images directly to a centralized Amazon S3 bucket. The website is popular in areas that are geographically distant from the AWS Region where the S3 bucket is located. Users are reporting that uploads are slow. A SysOps administrator must improve the upload speed.
What should the SysOps administrator do to meet these requirements?

1. A. Create S3 access points in Regions that are closer to the users.
2. B. Create an accelerator in AWS Global Accelerator for the S3 bucket.
3. C. Enable S3 Transfer Acceleration on the S3 bucket.
4. D. Enable cross-origin resource sharing (CORS) on the S3 bucket.

Correct Answer: C
You might want to use Transfer Acceleration on a bucket for various reasons: ->Your customers upload to a centralized bucket from all over the world. ->You transfer gigabytes to terabytes of data on a regular basis across continents. ->You can't use all of your available bandwidth over the internet when uploading to Amazon S3." https://docs.aws.amazon.com/AmazonS3/latest/userguide/transfer-acceleration.html

- (Exam Topic 1)
A global gaming company is preparing to launch a new game on AWS. The game runs in multiple AWS Regions on a fleet of Amazon EC2 instances. The instances are in an Auto Scaling group behind an
Application Load Balancer (ALB) in each Region. The company plans to use Amazon Route 53 tor DNS services. The DNS configuration must direct users to the Region that is closest to mem and must provide automated failover.
Which combination of steps should a SysOps administrator take to configure Route 53 to meet these requirements9 {Select TWO.)

1. A. Create Amazon CloudWatch alarms that monitor the health of the ALB m each Region Configure Route 53 DNS failover by using a health check that monitors the alarms.
2. B. Create Amazon CloudWatch alarms that monitor the hearth of the EC2 instances in each Region.Configure Route 53 DNS failover by using a health check that monitors the alarms.
3. C. Configure Route 53 DNS failover by using a health check that monitors the private address of an EC2 instance in each Region.
4. D. Configure Route 53 geoproximity routing Specify the Regions that are used for the infrastructure
5. E. Configure Route 53 simple routing Specify the continent, country, and state or province that are used for the infrastructure.

Correct Answer: A

- (Exam Topic 1)
A company migrated an I/O intensive application to an Amazon EC2 general purpose instance. The EC2 instance has a single General Purpose SSD Amazon Elastic Block Store (Amazon EBS) volume attached.
Application users report that certain actions that require intensive reading and writing to the disk are taking much longer than normal or are failing completely. After reviewing the performance metrics of the EBS volume, a SysOps administrator notices that the VolumeQueueLength metric is consistently high during the same times in which the users are reporting issues. The SysOps administrator needs to resolve this problem to restore full performance to the application.
Which action will meet these requirements?

1. A. Modify the instance type to be storage optimized.
2. B. Modify the volume properties by deselecting Auto-Enable Volume 10.
3. C. Modify the volume properties to increase the IOPS.
4. D. Modify the instance to enable enhanced networking.

Correct Answer: C

- (Exam Topic 1)
A SysOps administrator needs to track the costs of data transfer between AWS Regions. The SysOps administrator must implement a solution to send alerts to an email distribution list when transfer costs reach 75% of a specific threshold.
What should the SysOps administrator do to meet these requirements?

1. A. Create an AWS Cost and Usage Repor
2. B. Analyze the results in Amazon Athen
3. C. Configure an alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic when costs reach 75% of the threshol
4. D. Subscribe the email distribution list to the topic.
5. E. Create an Amazon CloudWatch billing alarm to detect when costs reach 75% of the threshold.Configure the alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topi
6. F. Subscribe the email distribution list to the topic.
7. G. Use AWS Budgets to create a cost budget for data transfer cost
8. H. Set an alert at 75% of the budgeted amoun
9. I. Configure the budget to send a notification to the email distribution list when costs reach 75% of the threshold.
10. J. Set up a VPC flow lo
11. K. Set up a subscription filter to an AWS Lambda function to analyze data transfer.Configure the Lambda function to send a notification to the email distribution list when costs reach 75% of the threshold.

Correct Answer: B
The reason is that it uses the Amazon CloudWatch billing alarm which is a built-in service specifically designed to monitor and alert on cost usage of your AWS account, which makes it a more suitable solution for this use case. The alarm can be configured to detect when costs reach 75% of the threshold and when it is triggered, it can publish a message to an Amazon Simple Notification Service (Amazon SNS) topic. The email distribution list can be subscribed to the topic, so that they will receive the alerts when costs reach 75% of the threshold.
AWS Budgets allows you to track and manage your costs, but it doesn't specifically focus on data transfer costs between regions, and it might not provide as much granularity as CloudWatch Alarms.