SOA-C02 — questions

Page 14 of 24 · 477 total questions.

SOA-C02 Question 261

Topic 1 · Question 261

A company is migrating its production file server to AWS. All data that is stored on the file server must remain accessible if an Availability Zone becomes unavailable or when system maintenance is performed. Users must be able to interact with the file server through the SMB protocol. Users also must have the ability to manage file permissions by using Windows ACLs. Which solution will meet these requirements?

ACreate a single AWS Storage Gateway file gateway.
BCreate an Amazon FSx for Windows File Server Multi-AZ file system. (correct answer)
CDeploy two AWS Storage Gateway file gateways across two Availability Zones. Configure an Application Load Balancer in front of the file gateways.
DDeploy two Amazon FSx for Windows File Server Single-AZ 2 file systems. Configure Microsoft Distributed File System Replication (DFSR).

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Create an Amazon FSx for Windows File Server Multi-AZ file system.

Explanation

Amazon FSx for Windows File Server provides fully managed SMB/Windows shared file storage. Amazon FSx provides fully managed third-party file systems.

SOA-C02 Question 262

Single page →

Topic 1 · Question 262

A SysOps administrator needs to create alerts that are based on the read and write metrics of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to an Amazon EC2 instance. The SysOps administrator creates and enables Amazon CloudWatch alarms for the DiskReadBytes metric and the DiskWriteBytes metric. A custom monitoring tool that is installed on the EC2 instance with the same alarm configuration indicates that the volume metrics have exceeded the threshold. However, the CloudWatch alarms were not in ALARM state. Which action will ensure that the CloudWatch alarms function correctly?

AInstall and configure the CloudWatch agent on the EC2 instance to capture the desired metrics.
BInstall and configure AWS Systems Manager Agent on the EC2 instance to capture the desired metrics.
CReconfigure the CloudWatch alarms to use the VolumeReadBytes metric and the VolumeWriteBytes metric for the EBS volumes. (correct answer)
DReconfigure the CloudWatch alarms to use the VolumeReadBytes metric and the VolumeWriteBytes metric for the EC2 instance.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Reconfigure the CloudWatch alarms to use the VolumeReadBytes metric and the VolumeWriteBytes metric for the EBS volumes.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 263

Single page →

Topic 1 · Question 263

A company recently moved its server infrastructure to Amazon EC2 instances. The company wants to use Amazon CloudWatch metrics to track instance memory utilization and available disk space. What should a SysOps administrator do to meet these requirements?

AConfigure CloudWatch from the AWS Management Console for all the instances that require monitoring by CloudWatch. AWS automatically installs and configures the agents for the specified instances.
BInstall and configure the CloudWatch agent on all the instances. Attach an IAM role to allow the instances to write logs to CloudWatch. (correct answer)
CInstall and configure the CloudWatch agent on all the instances. Attach an IAM user to allow the instances to write logs to CloudWatch.
DInstall and configure the CloudWatch agent on all the instances. Attach the necessary security groups to allow the instances to write logs to CloudWatch.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Install and configure the CloudWatch agent on all the instances. Attach an IAM role to allow the instances to write logs to CloudWatch.

Explanation

An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 264

Single page →

Topic 1 · Question 264

A company recently deployed MySQL on an Amazon EC2 instance with a default boot volume. The company intends to restore a 1.75 TB database. A SysOps administrator needs to provision the correct Amazon Elastic Block Store (Amazon EBS) volume. The database will require read performance of up to 10,000 IOPS and is not expected to grow in size. Which solution will provide the required performance at the LOWEST cost?

ADeploy a 2 TB Cold HDD (sc1) volume.
BDeploy a 2 TB Throughput Optimized HDD (st1) volume.
CDeploy a 2 TB General Purpose SSD (gp3) volume. Set the IOPS to 10,000. (correct answer)
DDeploy a 2 TB Provisioned IOPS SSD (io2) volume. Set the IOPS to 10,000.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Deploy a 2 TB General Purpose SSD (gp3) volume. Set the IOPS to 10,000. This option delivers the requirement at the lowest cost.

SOA-C02 Question 265

Single page →

Topic 1 · Question 265

A SysOps administrator is setting up a fleet of Amazon EC2 instances in an Auto Scaling group for an application. The fleet should have 50% CPU available at all times to accommodate bursts of traffic. The load will increase significantly between the hours of 09:00 and 17:00, 7 days a week. How should the SysOps administrator configure the scaling of the EC2 instances to meet these requirements?

ACreate a target tracking scaling policy that runs when the CPU utilization is higher than 90%.
BCreate a target tracking scaling policy that runs when the CPU utilization is higher than 50%. Create a scheduled scaling policy that ensures that the fleet is available at 09:00. Create a second scheduled scaling policy that scales in the fleet at 17:00. (correct answer)
CSet the Auto Scaling group to start with 2 instances by setting the desired instances, maximum instances, and minimum instances to 2. Create a scheduled scaling policy that ensures that the fleet is available at 09:00.
DCreate a scheduled scaling policy that ensures that the fleet is available at 09:00. Create a second scheduled scaling policy that scales in the fleet at 17:00.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Create a target tracking scaling policy that runs when the CPU utilization is higher than 50%. Create a scheduled scaling policy that ensures that the fleet is available at 09:00. Create a second scheduled scaling pol...

SOA-C02 Question 266

Single page →

Topic 1 · Question 266

A company has turned on server access logging for all of its existing Amazon S3 buckets. The company wants to implement a solution to monitor the logging settings for new and existing S3 buckets. The solution must remediate any S3 buckets that do not have logging turned on. What should a SysOps administrator do to meet these requirements in the MOST operationally efficient way?

ATrack the logging information by using AWS CloudTrail. Launch an AWS Lambda function for remediation.
BConfigure automatic remediation in AWS Config by using the s3-bucket-logging-enabled rule. (correct answer)
CConfigure AWS Trusted Advisor to monitor the logging configuration and to turn on access logging if necessary.
DTrack the logging information by using Amazon CloudWatch metrics. Launch an AWS Lambda function for remediation.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Configure automatic remediation in AWS Config by using the s3-bucket-logging-enabled rule.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 267

Single page →

Topic 1 · Question 267

A company is running Amazon EC2 On-Demand Instances in an Auto Scaling group. The instances process messages from an Amazon Simple Queue Service (Amazon SQS) queue. The Auto Scaling group is set to scale based on the number of messages in the queue. Messages can take up to 12 hours to process completely. A SysOps administrator must ensure that instances are not interrupted during message processing. What should the SysOps administrator do to meet these requirements?

AEnable instance scale-in protection for the specific instance in the Auto Scaling group at the start of message processing by calling the Amazon EC2 Auto Scaling API from the processing script. Disable instance scale-in protection after message processing is complete by calling the Amazon EC2 Auto Scaling API from the processing script. (correct answer)
BSet the Auto Scaling group's termination policy to OldestInstance.
CSet the Auto Scaling group's termination policy to OldestLaunchConfiguration.
DSuspend the Launch and Terminate scaling processes for the specific instance in the Auto Scaling group at the start of message processing by calling the Amazon EC2 Auto Scaling API from the processing script. Resume the scaling processes after message processing is complete by calling the Amazon EC2 Auto Scaling API from the processing script.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Enable instance scale-in protection for the specific instance in the Auto Scaling group at the start of message processing by calling the Amazon EC2 Auto Scaling API from the processing script. Disable instance scale-...

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SOA-C02 Question 268

Single page →

Topic 1 · Question 268

A company manages a set of accounts on AWS by using AWS Organizations. The company's security team wants to use a native AWS service to regularly scan all AWS accounts against the Center for Internet Security (CIS) AWS Foundations Benchmark. What is the MOST operationally efficient way to meet these requirements?

ADesignate a central security account as the AWS Security Hub administrator account. Create a script that sends an invitation from the Security Hub administrator account and accepts the invitation from the member account. Run the script every time a new account is created. Configure Security Hub to run the CIS AWS Foundations Benchmark scans.
BRun the CIS AWS Foundations Benchmark across all accounts by using Amazon Inspector.
CDesignate a central security account as the Amazon GuardDuty administrator account. Create a script that sends an invitation from the GuardDuty administrator account and accepts the invitation from the member account. Run the script every time a new account is created. Configure GuardDuty to run the CIS AWS Foundations Benchmark scans.
DDesignate an AWS Security Hub administrator account. Configure new accounts in the organization to automatically become member accounts. Enable CIS AWS Foundations Benchmark scans. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Designate an AWS Security Hub administrator account. Configure new accounts in the organization to automatically become member accounts. Enable CIS AWS Foundations Benchmark scans.

Explanation

AWS Security Hub centralizes security findings and compliance checks. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 269

Single page →

Topic 1 · Question 269

A company currently runs its infrastructure within a VPC in a single Availability Zone. The VPC is connected to the company’s on-premises data center through an AWS Site-to-Site VPN connection attached to a virtual private gateway. The on-premises route tables route all VPC networks to the VPN connection. Communication between the two environments is working correctly. A SysOps administrator created new VPC subnets within a new Availability Zone, and deployed new resources within the subnets. However, communication cannot be established between the new resources and the on-premises environment. Which steps should the SysOps administrator take to resolve the issue?

AAdd a route to the route tables of the new subnets that send on-premises traffic to the virtual private gateway. (correct answer)
BCreate a ticket with AWS Support to request adding Availability Zones to the Site-to-Site VPN route configuration.
CEstablish a new Site-to-Site VPN connection between a virtual private gateway attached to the new Availability Zone and the on-premises data center.
DReplace the Site-to-Site VPN connection with an AWS Direct Connect connection.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Add a route to the route tables of the new subnets that send on-premises traffic to the virtual private gateway.

SOA-C02 Question 270

Single page →

Topic 1 · Question 270

A SysOps administrator needs to collect the content of log files from a custom application that is deployed across hundreds of Amazon EC2 instances running Ubuntu. The log files need to be stored in Amazon CloudWatch Logs. How should the SysOps administrator collect the application log files with the LOWEST operational overhead?

AConfigure the syslogd service on each EC2 instance to collect and send the application log files to CloudWatch Logs.
BInstall the CloudWatch agent by using the Amazon Linux package manager on each EC2 instance. Configure each agent to collect the application log files.
CInstall the CloudWatch agent on each EC2 instance by using AWS Systems Manager. Create an agent configuration on each instance by using the CloudWatch configuration wizard. Configure each agent to collect the application log files.
DStore a CloudWatch agent configuration in the AWS Systems Manager Parameter Store. Install the CloudWatch agent on each EC2 instance by using Systems Manager. Configure each agent to collect the application log files. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Store a CloudWatch agent configuration in the AWS Systems Manager Parameter Store. Install the CloudWatch agent on each EC2 instance by using Systems Manager. Configure each agent to collect the application log files.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Systems Manager Parameter Store securely stores configuration data and secrets. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 271

Single page →

Topic 1 · Question 271 · Select all that apply

A SysOps administrator needs to design a disaster recovery (DR) plan for an application on AWS. The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. The application uses an Amazon Aurora PostgreSQL database. The recovery time objective (RTO) and recovery point objective (RPO) are 15 minutes each. Which combination of steps should the SysOps administrator take to meet these requirements MOST cost-effectively? (Choose two.)

AConfigure Aurora backups to be exported to the DR Region.
BConfigure the Aurora cluster to replicate data to the DR Region by using the Aurora global database option. (correct answer)
CConfigure the DR Region with an ALB and an Auto Scaling group. Use the same configuration as in the primary Region.
DConfigure the DR Region with an ALB and an Auto Scaling group. Set the Auto Scaling group's minimum capacity, maximum capacity, and desired capacity to 1. (correct answer)
EManually launch a new ALB and a new Auto Scaling group by using AWS CloudFormation during a failover activity.

Reveal answer & explanation

Correct answer: B, D

The correct answer is B, D. Option B: Configure the Aurora cluster to replicate data to the DR Region by using the Aurora global database option. Option D: Configure the DR Region with an ALB and an Auto Scaling group. Set the Auto Scaling group's minimum capacity, maximum capacity, and desired capacity to 1.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon Aurora is a high-performance managed relational database with built-in replication and failover. AWS Config tracks resource configuration changes and evaluates compliance. This option delivers the requirement at the lowest cost.

SOA-C02 Question 272

Single page →

Topic 1 · Question 272

A SysOps administrator is creating a simple, public-facing website running on Amazon EC2. The SysOps administrator created the EC2 instance in an existing public subnet and assigned an Elastic IP address to the instance. Next, the SysOps administrator created and applied a new security group to the instance to allow incoming HTTP traffic from 0.0.0.0/0. Finally, the SysOps administrator created a new network ACL and applied it to the subnet to allow incoming HTTP traffic from 0.0.0.0/0. However, the website cannot be reached from the internet. What is the cause of this issue?

AThe SysOps administrator did not create an outbound rule that allows ephemeral port return traffic in the new network ACL. (correct answer)
BThe SysOps administrator did not create an outbound rule in the security group that allows HTTP traffic from port 80.
CThe Elastic IP address assigned to the EC2 instance has changed.
DThere is an additional network ACL associated with the subnet that includes a rule that denies inbound HTTP traffic from port 80.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: The SysOps administrator did not create an outbound rule that allows ephemeral port return traffic in the new network ACL.

SOA-C02 Question 273

Single page →

Topic 1 · Question 273

A company has an application that uses an Amazon Elastic File System (Amazon EFS) file system. A recent incident that involved an application logic error corrupted several files. The company wants to improve its ability to back up and recover the EFS file system. The company must be able to recover individual files rapidly. Which solution meets these requirements MOST cost-effectively?

AConfigure Amazon Data Lifecycle Manager (Amazon DLM) to archive a copy of the data to an Amazon S3 Glacier vault. Use S3 Glacier retrieval requests to retrieve individual files.
BCreate a second EFS file system in another AWS Region. Configure AWS DataSync to copy the data to the backup file system. Recover files by copying them from the backup EFS file system.
CEnable AWS Backup in Amazon EFS to back up the file system to an Amazon S3 Glacier vault. Use S3 Glacier retrieval requests to retrieve individual files.
DEnable AWS Backup in Amazon EFS to back up the file system to a backup vault. Use a partial restore job to retrieve individual files. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Enable AWS Backup in Amazon EFS to back up the file system to a backup vault. Use a partial restore job to retrieve individual files.

Explanation

Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. AWS Backup centrally automates and manages backups across AWS services. This option delivers the requirement at the lowest cost.

SOA-C02 Question 274

Single page →

Topic 1 · Question 274 · Select all that apply

A company migrates a write-once, ready-many (WORM) drive to an Amazon S3 bucket that has S3 Object Lock configured in governance mode. During the migration, the company copies unneeded data to the S3 bucket. A SysOps administrator attempts to delete the unneeded data from the S3 bucket by using the AWS CLI. However, the SysOps administrator receives an error. Which combination of steps should the SysOps administrator take to successfully delete the unneeded data? (Choose two.)

AIncrease the Retain Until Date.
BAssume a role that has the s3:BypassLegalRetention permission.
CAssume a role that has the s3:BypassGovernanceRetention permission. (correct answer)
DInclude the x-amz-bypass-governance-retention:true header in the request when issuing the delete command. (correct answer)
EInclude the x-amz-bypass-legal-retention:true header in the request when issuing the delete command.

Reveal answer & explanation

Correct answer: C, D

The correct answer is C, D. Option C: Assume a role that has the s3:BypassGovernanceRetention permission. Option D: Include the x-amz-bypass-governance-retention:true header in the request when issuing the delete command.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SOA-C02 Question 275

Single page →

Topic 1 · Question 275

A company needs to view a list of security groups that are open to the internet on port 3389. What should a SysOps administrator do to meet this requirement?

AConfigure Amazon GuardDuty to scan security groups and report unrestricted access on port 3389.
BConfigure a service control policy (SCP) to identify security groups that allow unrestricted access on port 3389.
CUse AWS Identity and Access Management Access Analyzer to find any instances that have unrestricted access on port 3389.
DUse AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Use AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389.

Explanation

AWS Trusted Advisor recommends cost, performance and security optimizations.

SOA-C02 Question 276

Single page →

Topic 1 · Question 276 · Select all that apply

A company website contains a web tier and a database tier on AWS. The web tier consists of Amazon EC2 instances that run in an Auto Scaling group across two Availability Zones. The database tier runs on an Amazon RDS for MySQL Multi-AZ DB instance. The database subnet network ACLs are restricted to only the web subnets that need access to the database. The web subnets use the default network ACL with the default rules. The company's operations team has added a third subnet to the Auto Scaling group configuration. After an Auto Scaling event occurs, some users report that they intermittently receive an error message. The error message states that the server cannot connect to the database. The operations team has confirmed that the route tables are correct and that the required ports are open on all security groups. Which combination of actions should a SysOps administrator take so that the web servers can communicate with the DB instance? (Choose two.)

AOn the default ACL, create inbound Allow rules of type TCP with the ephemeral port range and the source as the database subnets.
BOn the default ACL, create outbound Allow rules of type MySQL/Aurora (3306). Specify the destinations as the database subnets.
COn the network ACLs for the database subnets, create an inbound Allow rule of type MySQL/Aurora (3306). Specify the source as the third web subnet. (correct answer)
DOn the network ACLs for the database subnets, create an outbound Allow rule of type TCP with the ephemeral port range and the destination as the third web subnet. (correct answer)
EOn the network ACLs for the database subnets, create an outbound Allow rule of type MySQL/Aurora (3306). Specify the destination as the third web subnet.

Reveal answer & explanation

Correct answer: C, D

The correct answer is C, D. Option C: On the network ACLs for the database subnets, create an inbound Allow rule of type MySQL/Aurora (3306). Specify the source as the third web subnet. Option D: On the network ACLs for the database subnets, create an outbound Allow rule of type TCP with the ephemeral port range and the destination as the third web subnet.

Explanation

Amazon Aurora is a high-performance managed relational database with built-in replication and failover. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SOA-C02 Question 277

Single page →

Topic 1 · Question 277

A SysOps administrator has been able to consolidate multiple, secure websites onto a single server, and each site is running on a different port. The administrator now wants to start a duplicate server in a second Availability Zone and put both behind a load balancer for high availability. What would be the command line necessary to deploy one of the sites’ certificates to the load balancer?

Aaws kms modify-listener –-load-balancer-name my-load-balancer -–certificates CertificateArn=arn:aws:iam::123456789012:server-certifiate/my-new-server-cert
Baws elb set-load-balancer-listener-ssl-certificate --load-balancer-name my-load-balancer –-load-balancer-port 443 –-ssl-certificate-id arn:aws:iam::123456789012:server-certificate/new-server-cert (correct answer)
Caws ec2 put-ssl-certificate –-load-balancer-name my-load-balancer –-load-balancer-port 443 –-ssl-certificate-id arn:aws:iam::123456789012:server-certificate/new-server-cert
Daws acm put-ssl-certificate –-load-balancer-name my-load-balancer –-load-balancer-port 443 –-ssl-certificate-id arn:aws:iam::123456789012:server-certificate/new-server-cert

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: aws elb set-load-balancer-listener-ssl-certificate --load-balancer-name my-load-balancer –-load-balancer-port 443 –-ssl-certificate-id arn:aws:iam::123456789012:server-certificate/new-server-cert

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SOA-C02 Question 278

Single page →

Topic 1 · Question 278

A SysOps administrator is preparing to deploy an application to Amazon EC2 instances that are in an Auto Scaling group. The application requires dependencies to be installed. Application updates are issued weekly. The SysOps administrator needs to implement a solution to incorporate the application updates on a regular basis. The solution also must conduct a vulnerability scan during Amazon Machine Image (AMI) creation. What is the MOST operationally efficient solution that meets these requirements?

ACreate a script that uses Packer. Schedule a cron job to run the script.
BInstall the application and its dependencies on an EC2 instance. Create an AMI of the EC2 instance.
CUse EC2 Image Builder with a custom recipe to install the application and its dependencies. (correct answer)
DInvoke the EC2 CreateImage API operation by using an Amazon EventBridge scheduled rule.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Use EC2 Image Builder with a custom recipe to install the application and its dependencies.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SOA-C02 Question 279

Single page →

Topic 1 · Question 279

An AWS CloudFormation template creates an Amazon RDS instance. This template is used to build up development environments as needed and then delete the stack when the environment is no longer required. The RDS-persisted data must be retained for further use, even after the CloudFormation stack is deleted. How can this be achieved in a reliable and efficient way?

AWrite a script to continue backing up the RDS instance every five minutes.
BCreate an AWS Lambda function to take a snapshot of the RDS instance, and manually invoke the function before deleting the stack.
CUse the Snapshot Deletion Policy in the CloudFormation template definition of the RDS instance. (correct answer)
DCreate a new CloudFormation template to perform backups of the RDS instance, and run this template before deleting the stack.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Use the Snapshot Deletion Policy in the CloudFormation template definition of the RDS instance.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. AWS CloudFormation provisions infrastructure as code repeatably.

SOA-C02 Question 280

Single page →

Topic 1 · Question 280

AnyCompany has acquired Example Corp and is attempting to consolidate the business systems of both companies. AnyCompany’s IT department needs to integrate with Example Corp’s IT ticketing system. A SysOps administrator must implement a solution that uses Amazon CloudWatch alarms for Amazon EC2 instances in AnyCompany’s account to create new tickets in Example Corp’s ticketing system. The ticketing system provides an HTTPS endpoint for the creation of new tickets. The ticketing system accepts messages in the following JSON format: Which approach to creating tickets from the CloudWatch alarms will meet these requirements with the LEAST development time?

ACreate an Amazon EventBridge rule that filters appropriate events and specifies EventBridge API destinations as a target. Configure EventBridge API destinations to send events to the HTTPS endpoint. In the EventBridge rule, create an input transformer to convert the source to a compatible output for the ticketing system. (correct answer)
BCreate an Amazon EventBridge rule that filters appropriate events and specifies an Amazon Kinesis data stream as the target. Create an AWS Lambda function to receive events from the Kinesis data stream. Configure the Lambda function to start an AWS Glue job to transform the data and forward the output to the HTTPS endpoint.
CCreate an Amazon EventBridge rule that filters appropriate events and specifies Amazon Simple Notification Service (Amazon SNS) as a target. Configure Amazon SNS to transform the events and send the events to the HTTPS endpoint.
DCreate an Amazon EventBridge rule that filters appropriate events and specifies an AWS Step Functions state machine as a target. Create an AWS Lambda function and an AWS Glue job in Step Functions to transform the events and send the events to the HTTPS endpoint.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Create an Amazon EventBridge rule that filters appropriate events and specifies EventBridge API destinations as a target. Configure EventBridge API destinations to send events to the HTTPS endpoint. In the EventBridge...

Explanation

Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS Config tracks resource configuration changes and evaluates compliance.

Showing questions 261–280 of 477 · Page 14 of 24