- (Exam Topic 1)
A company wants to collect data from an application to use for analytics. For the first 90 days, the data will be infrequently accessed but must remain highly available. During this time, the company's analytics team requires access to the data in milliseconds. However, after 90 days, the company must retain the data for the long term at a lower cost. The retrieval time after 90 days must be less than 5 hours.
Which solution will meet these requirements MOST cost-effectively?

1. A. Store the data in S3 Standard-Infrequent Access (S3 Standard-IA) for the first 90 day
2. B. Set up an S3 Lifecycle rule to move the data to S3 Glacier Flexible Retrieval after 90 days.
3. C. Store the data in S3 One Zone-Infrequent Access (S3 One Zone-IA) for the first 90 day
4. D. Set up an S3 Lifecycle rule to move the data to S3 Glacier Deep Archive after 90 days.
5. E. Store the data in S3 Standard for the first 90 day
6. F. Set up an S3 Lifecycle rule to move the data to S3 Glacier Flexible Retrieval after 90 days.
7. G. Store the data in S3 Standard for the first 90 day
8. H. Set up an S3 Lifecycle rule to move the data to S3 Glacier Deep Archive after 90 days.

Correct Answer: A
Glacier Deep Archive retrieval time more than 5 hours (it's 12 hours), so B&D out. S3 Standard IA is cheaper than S3 Standard. https://aws.amazon.com/tw/s3/pricing/

- (Exam Topic 1)
A company has an AWS Cloud Formation template that creates an Amazon S3 bucket. A user authenticates to the corporate AWS account with their Active Directory credentials and attempts to deploy the Cloud Formation template. However, the stack creation fails.
Which factors could cause this failure? (Select TWO.)

1. A. The user's IAM policy does not allow the cloudformation:CreateStack action.
2. B. The user's IAM policy does not allow the cloudformation:CreateStackSet action.
3. C. The user's IAM policy does not allow the s3:CreateBucket action.
4. D. The user's IAM policy explicitly denies the s3:ListBucket action.
5. E. The user's IAM policy explicitly denies the s3:PutObject action

Correct Answer: AC

- (Exam Topic 1)
A company uses AWS CloudFormation to deploy its application infrastructure Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application A SysOps administrator must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources.
Which solution will meet these requirements?

1. A. Set up an AWS Config rule to alert based on changes to any CloudFormation stack An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation
2. B. Set up an Amazon CloudWatch Events event with a rule to trigger based on any CloudFormation API call An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation
3. C. Launch the CloudFormation templates using a stack policy with an explicit allow for all resources and an explicit deny of the protected resources with an action of Update
4. D. Attach an IAM policy to the DevOps team role that prevents a CloudFormation stack from updating, with a condition based on the specific Amazon Resource Names (ARNs) of the protected resources

Correct Answer: B

- (Exam Topic 1)
A company has a stateless application that is hosted on a fleet of 10 Amazon EC2 On-Demand Instances in an Auto Scaling group. A minimum of 6 instances are needed to meet service requirements.
Which action will maintain uptime for the application MOST cost-effectively?

1. A. Use a Spot Fleet with an On-Demand capacity of 6 instances.
2. B. Update the Auto Scaling group with a minimum of 6 On-Demand Instances and a maximum of 10 On-Demand Instances.
3. C. Update the Auto Scaling group with a minimum of 1 On-Demand Instance and a maximum of 6 On-Demand Instances.
4. D. Use a Spot Fleet with a target capacity of 6 instances.

Correct Answer: A

- (Exam Topic 1)
A SysOps administrator has an AWS CloudFormation template of the company's existing infrastructure in us-west-2. The administrator attempts to use the template to launch a new stack in eu-west-1, but the stack only partially deploys, receives an error message, and then rolls back.
Why would this template fail to deploy? (Select TWO.)

1. A. The template referenced an IAM user that is not available in eu-west-1.
2. B. The template referenced an Amazon Machine Image (AMI) that is not available in eu-west-1.
3. C. The template did not have the proper level of permissions to deploy the resources.
4. D. The template requested services that do not exist in eu-west-1.
5. E. CloudFormation templates can be used only to update existing services.

Correct Answer: BD