- (Exam Topic 1)
A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled. A SysOps administrator needs to be able to roll back the DB cluster to a specific recovery point within the previous 72 hours. Restores must be completed in the same production DB cluster.
Which solution will meet these requirements?

1. A. Create an Aurora Replic
2. B. Promote the replica to replace the primary DB instance.
3. C. Create an AWS Lambda function to restore an automatic backup to the existing DB cluster.
4. D. Use backtracking to rewind the existing DB cluster to the desired recovery point.
5. E. Use point-in-time recovery to restore the existing DB cluster to the desired recovery point.

Correct Answer: C
"The limit for a backtrack window is 72 hours.....Backtracking is only available for DB clusters that were created with the Backtrack feature enabled....Backtracking "rewinds" the DB cluster to the time you specify. Backtracking is not a replacement for backing up your DB cluster so that you can restore it to a point in time....You can backtrack a DB cluster quickly. Restoring a DB cluster to a point in time launches a new DB cluster and restores it from backup data or a DB cluster snapshot, which can take hours."
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Managing.Backtrack.html

- (Exam Topic 1)
A company has a public website that recently experienced problems. Some links led to missing webpages, and other links rendered incorrect webpages. The application infrastructure was running properly, and all the provisioned resources were healthy. Application logs and dashboards did not show any errors, and no monitoring alarms were raised. Systems administrators were not aware of any problems until end users reported the issues.
The company needs to proactively monitor the website for such issues in the future and must implement a solution as soon as possible.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Rewrite the application to surface a custom error to the application log when issues occur.Automatically parse logs for error
2. B. Create an Amazon CloudWatch alarm to provide alerts when issues are detected.
3. C. Create an AWS Lambda function to test the websit
4. D. Configure the Lambda function to emit an Amazon CloudWatch custom metric when errors are detecte
5. E. Configure a CloudWatch alarm to provide alerts when issues are detected.
6. F. Create an Amazon CloudWatch Synthetics canar
7. G. Use the CloudWatch Synthetics Recorder plugin to generate the script for the canary ru
8. H. Configure the canary in line with requirement
9. I. Create an alarm to provide alerts when issues are detected.

Correct Answer: A

- (Exam Topic 1)
While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS The customer gateway device resides in a data center with a NAT gateway in front of it
What address should be used to create the customer gateway resource?

1. A. The private IP address of the customer gateway device
2. B. The MAC address of the NAT device in front of the customer gateway device
3. C. The public IP address of the customer gateway device
4. D. The public IP address of the NAT device in front of the customer gateway device

Correct Answer: D

- (Exam Topic 1)
A company has deployed a web application in a VPC that has subnets in three Availability Zones. The company launches three Amazon EC2 instances from an
EC2 Auto Scaling group behind an Application Load Balancer (ALB).
A SysOps administrator notices that two of the EC2 instances are in the same Availability Zone, rather than being distributed evenly across all three Availability
Zones. There are no errors in the Auto Scaling group's activity history.
What is the MOST likely reason for the unexpected placement of EC2 instances?

1. A. One Availability Zone did not have sufficient capacity for the requested EC2 instance type.
2. B. The ALB was configured for only two Availability Zones.
3. C. The Auto Scaling group was configured for only two Availability Zones.
4. D. Amazon EC2 Auto Scaling randomly placed the instances in Availability Zones.

Correct Answer: C
the autoscaling group is responsable to add the instances in the subnets

- (Exam Topic 1)
A company is managing multiple AWS accounts in AWS Organizations. The company is reviewing internal security of its AWS environment. The company's security administrator has their own AWS account and wants to review the VPC configuration of developer AWS accounts.
Which solution will meet these requirements in the MOST secure manner?

1. A. Create an IAM policy in each developer account that has read-only access related to VPC resources Assign the policy to an IAM use
2. B. Share the user credentials with the security administrator.
3. C. Create an IAM policy in each developer account that has administrator access to all Amazon EC2 actions, including VPC action
4. D. Assign the policy to an IAMuse
5. E. Share the user credentials with the security administrator.
6. F. Create an IAM policy in each developer account that has administrator access related to VPC resources.Assign the policy to a cross-account IAM rol
7. G. Ask the security administrator to assume the role from their account.
8. H. Create an IAM policy in each developer account that has read-only access related to VPC resources Assign the policy to a cross-account IAM role Ask the security administrator to assume the role from their account.

Correct Answer: D