[Monitoring, Reporting, and Automation]
A SysOps administrator must create a solution that immediately notifies software developers if an AWS Lambda function experiences an error.
Which solution will meet this requirement?
To immediately notify software developers if an AWS Lambda function experiences an error, follow these steps:
Create an SNS Topic:
Navigate to the Amazon SNS console and create a new topic.
Add email subscriptions for each developer to the SNS topic.
Create a CloudWatch Alarm:
Go to the Amazon CloudWatch console and create an alarm based on the Errors metric for the specific Lambda function.
Use the Lambda function name as a dimension.
Configure the alarm to trigger when the metric exceeds a threshold indicating an error.
Configure Notification:
Set the CloudWatch alarm action to send a notification to the SNS topic created in step 1 when the alarm state reaches ALARM.
This configuration ensures that developers are notified immediately via email if the Lambda function experiences an error.
[High Availability, Backup, and Recovery]
A SysOps administrator configuring AWS Client VPN to connect use's on a corporate network to AWS resources mat are running in a VPC According to compliance requirements, only traffic that is destined for the VPC can travel across the VPN tunnel.
How should the SysOps administrator configure Client VPN to meet these requirements?
Split-tunnel routing allows you to specify that only the traffic destined for your VPC is routed through the VPN tunnel. All other internet traffic is routed through the user's local network.
Steps:
Open the Client VPN Console:
Sign in to the AWS Management Console.
Open the Amazon VPC console.
Modify the Client VPN Endpoint:
Select the Client VPN endpoint.
Choose 'Modify Client VPN endpoint'.
Enable the 'Split-tunnel' option.
Update Route Table:
Ensure that the route table associated with the Client VPN endpoint routes traffic destined for the VPC IP range to the appropriate target (e.g., VPC subnet).
This configuration ensures that only traffic destined for resources in the VPC is sent over the VPN tunnel, while other traffic uses the user's local internet connection.
Split-Tunnel VPN Routing
AWS Client VPN Documentation
A company runs hundreds of Amazon EC2 instances in a single AWS Region. Each EC2 instance has two attached 1 GiB General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volumes. A critical workload is using all the available IOPS capacity on the EBS volumes.
According to company policy, the company cannot change instance types or EBS volume types without completing lengthy acceptance tests to validate that the company's applications will function properly. A SysOps administrator needs to increase the I/O performance of the EBS volumes as quickly as possible.
Which action should the SysOps administrator take to meet these requirements?
Increasing the size of the 1 GiB EBS volumes will increase the IOPS capacity of the volumes, which will improve the I/O performance of the EBS volumes. This option does not require any changes to the instance types or EBS volume types, so it can be done quickly without the need for lengthy acceptance tests to validate that the company's applications will function properly.
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/requesting-ebs-volume-modifications.html
The company wants to improve the security and high availability of a two-tier web application that was rehosted to AWS, currently in a single Availability Zone.
Options (Select TWO):
To improve security and availability, the best approach is to configure Multi-AZ for both the web and database tiers.
Multi-AZ Auto Scaling for Web Tier: Deploying the web-tier instances in an Auto Scaling group across multiple AZs with an internet-facing ALB provides high availability and fault tolerance.
RDS Multi-AZ for SQL Server: Migrating the SQL Server to RDS with Multi-AZ deployment ensures database redundancy and failover without additional management overhead.
Placing the web tier in multiple Regions would add unnecessary complexity, and migrating the database to DynamoDB is not suitable for applications requiring SQL Server's relational capabilities.
A company requires that all activity in its AWS account be logged using AWS CloudTrail. Additionally, a SysOps administrator must know when CloudTrail log files are modified or deleted.
How should the SysOps administrator meet these requirements?
CloudTrail Log File Integrity Validation:
AWS CloudTrail provides a feature for log file integrity validation to ensure logs have not been modified or deleted.
Steps to Enable and Validate:
Enable Log File Integrity Validation:
Go to the CloudTrail Console.
Select or create a trail.
In the trail settings, enable Log file validation.
Use the AWS CLI for Validation:
Use the following CLI command:
aws cloudtrail validate-logs --trail-name <trail-name>
This command validates the digest files generated by CloudTrail against the log files.
Why Other Options Are Incorrect:
B: Using the AWS CloudTrail Processing Library is unnecessary for validation.
C: CloudTrail Insights is designed to identify unusual activity, not monitor log modifications.
D: Amazon CloudWatch Logs cannot directly monitor CloudTrail logs for integrity.
Lazaro
6 days agoIrma
24 days agoDanica
27 days agoPamella
1 months agoLawrence
2 months agoLennie
2 months agoNaomi
3 months agoKendra
3 months agoVi
4 months agoLyndia
4 months agoArthur
4 months agoCristy
5 months agoBernardine
5 months agoColton
5 months agoSol
6 months agoKiera
6 months agoKerry
6 months agoPete
6 months agoTheodora
7 months agoTaryn
7 months agoAnjelica
7 months agoAngella
7 months agoDion
7 months agoDwight
8 months agoFlo
8 months agoKris
8 months agoKindra
8 months agoHollis
8 months agoMelissa
9 months agoBrock
9 months agoLavonda
9 months agoCyndy
9 months agoMelinda
9 months agoOmer
10 months agoBrendan
10 months agoInes
10 months agoIra
11 months agoCornell
12 months agoJoanna
1 years agoMaricela
1 years agoElliott
1 years agoKenneth
1 years agoDorian
1 years ago