- (Exam Topic 1)
A company's web application is available through an Amazon CloudFront distribution and directly through an internet-facing Application Load Balancer (ALB) A SysOps administrator must make the application accessible only through the CloudFront distribution and not directly through the ALB. The SysOps administrator must make this change without changing the application code
Which solution will meet these requirements?

1. A. Modify the ALB type to internal Set the distribution's origin to the internal ALB domain name
2. B. Create a Lambda@Edge function Configure the function to compare a custom header value in the request with a stored password and to forward the request to the origin in case of a match Associate the function with the distribution.
3. C. Replace the ALB with a new internal ALB Set the distribution's origin to the internal ALB domain name Add a custom HTTP header to the origin settings for the distribution In the ALB listener add a rule to forward requests that contain the matching custom header and the header's value Add a default rule to return a fixed response code of 403.
4. D. Add a custom HTTP header to the origin settings for the distribution in the ALB listener add a rule to forward requests that contain the matching custom header and the header's value Add a default rule to return a fixed response code of 403.

Correct Answer: D
To make the application accessible only through the CloudFront distribution and not directly through the Application Load Balancer (ALB), you can add a custom HTTP header to the origin settings for the CloudFront distribution. You can then create a rule in the ALB listener to forward requests that contain the matching custom header and its value to the origin. You can also add a default rule to the ALB listener to return a fixed response code of 403 for requests that do not contain the matching custom header. This will allow you to redirect all requests to the CloudFront distribution and block direct access to the application through the ALB.
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/restrict-access-to-load-balancer.html

- (Exam Topic 1)
A SysOps administrator developed a Python script that uses the AWS SDK to conduct several maintenance tasks. The script needs to run automatically every night.
What is the MOST operationally efficient solution that meets this requirement?

1. A. Convert the Python script to an AWS Lambda (unctio
2. B. Use an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the function every night.
3. C. Convert the Python script to an AWS Lambda functio
4. D. Use AWS CloudTrail to invoke the function every night.
5. E. Deploy the Python script to an Amazon EC2 Instanc
6. F. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the instance to start and stop every night.
7. G. Deploy the Python script to an Amazon EC2 instanc
8. H. Use AWS Systems Manager to schedule the instance to start and stop every night.

Correct Answer: A

- (Exam Topic 1)
A SysOps administrator is using AWS Systems Manager Patch Manager to patch a fleet of Amazon EC2 instances. The SysOps administrator has configured a patch baseline and a maintenance window. The SysOps administrator also has used an instance tag to identify which instances to patch.
The SysOps administrator must give Systems Manager the ability to access the EC2 instances. Which additional action must the SysOps administrator perform to meet this requirement?

1. A. Add an inbound rule to the instances' security group.
2. B. Attach an 1AM instance profile with access to Systems Manager to the instances.
3. C. Create a Systems Manager activation Then activate the fleet of instances.
4. D. Manually specify the instances to patch Instead of using tag-based selection.

Correct Answer: A

- (Exam Topic 1)
A company runs a web application on three Amazon EC2 instances behind an Application Load Balancer (ALB). The company notices that random periods of increased traffic cause a degradation in the application's performance. A SysOps administrator must scale the application to meet the increased traffic.
Which solution meets these requirements?

1. A. Create an Amazon CloudWatch alarm to monitor application latency and increase the size of each EC2 instance If the desired threshold is reached.
2. B. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to monitor application latency and add an EC2 instance to the ALB if the desired threshold is reached.
3. C. Deploy the application to an Auto Scaling group of EC2 instances with a target tracking scaling policy.Attach the ALB to the Auto Scaling group.
4. D. Deploy the application to an Auto Scaling group of EC2 instances with a scheduled scaling policy.Attach the ALB to the Auto Scaling group.

Correct Answer: C
docs.aws.amazon.com/autoscaling/ec2/userguide/as-scaling-target-tracking.html

- (Exam Topic 1)
A company's IT department noticed an increase in the spend of their developer AWS account. There are over 50 developers using the account, and the finance team wants to determine the service costs incurred by each developer.
What should a SysOps administrator do to collect this information? (Select TWO.)

1. A. Activate the createdBy tag in the account.
2. B. Analyze the usage with Amazon CloudWatch dashboards.
3. C. Analyze the usage with Cost Explorer.
4. D. Configure AWS Trusted Advisor to track resource usage.
5. E. Create a billing alarm in AWS Budgets.

Correct Answer: AC