Question 1

A medical research company uses an Amazon Bedrock powered AI assistant with agents andknowledge bases to provide physicians quick access to medical study protocols. The company needsto generate audit reports that contain user identities, usage data for Bedrock agents, access data forknowledge bases, and interaction parameters.Which solution will meet these requirements?

Options :

A : Use AWS CloudTrail to log API events from generative AI workloads. Store the events in CloudTrail Lake. Use SQL-like queries to generate reports.

B : Use Amazon CloudWatch to capture generative AI application logs. Stream the logs to Amazon OpenSearch Service. Use an OpenSearch dashboard visualization to generate reports.

C : Use Amazon CloudWatch to log API events from generative AI workloads. Send the events to an Amazon S3 bucket. Use Amazon Athena queries to generate reports.

D : Use AWS CloudTrail to capture generative AI application logs. Stream the logs to Amazon Managed Service for Apache Flink. Use SQL queries to generate reports.

Answer: A

Question 2

A CloudOps engineer has created a VPC that contains a public subnet and a private subnet. AmazonEC2 instances that were launched in the private subnet cannot access the internet. The defaultnetwork ACL is active on all subnets in the VPC, and all security groups allow outbound traffic.Which solution will provide the EC2 instances in the private subnet with access to the internet?

Options :

A : Create a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway.

B : Create a NAT gateway in the public subnet. Create a route from the public subnet to the NAT gateway.

C : Create a NAT gateway in the private subnet. Create a route from the public subnet to the NAT gateway.

D : Create a NAT gateway in the private subnet. Create a route from the private subnet to the NAT gateway.

Answer: A

Question 3

A company runs an application on Amazon EC2 that connects to an Amazon Aurora PostgreSQLdatabase. A developer accidentally drops a table from the database, causing application errors. Twohours later, a CloudOps engineer needs to recover the data and make the application functionalagain.Which solution will meet this requirement?

Options :

A : Use the Aurora Backtrack feature to rewind the database to a specified time, 2 hours in the past.

B : Perform a point-in-time recovery on the existing database to restore the database to a specified point in time, 2 hours in the past.

C : Perform a point-in-time recovery and create a new database to restore the database to a specified point in time, 2 hours in the past. Reconfigure the application to use a new database endpoint.

D : Create a new Aurora cluster. Choose the Restore data from S3 bucket option. Choose log files up to the failure time 2 hours in the past.

Answer: C

Question 4

A companys security policy prohibits connecting to Amazon EC2 instances through SSH and RDP.Instead, staff must use AWS Systems Manager Session Manager. Users report they cannot connect toone Ubuntu instance, even though they can connect to others.What should a CloudOps engineer do to resolve this issue?

Options :

A : Add an inbound rule for port 22 in the security group associated with the Ubuntu instance.

B : Assign the AmazonSSMManagedInstanceCore managed policy to the EC2 instance profile for the Ubuntu instance.

C : Configure the SSM Agent to log in with a user name of "ubuntu".

D : Generate a new key pair, configure Session Manager to use this new key pair, and provide the private key to the users.

Answer: B

Question 5

Optimization]A companys architecture team must receive immediate email notifications whenever new AmazonEC2 instances are launched in the companys main AWS production account.What should a CloudOps engineer do to meet this requirement?

Options :

A : Create a user data script that sends an email message through a smart host connector. Include the architecture team's email address in the user data script as the recipient. Ensure that all new EC2 instances include the user data script as part of a standardized build process.

B : Create an Amazon Simple Notification Service (Amazon SNS) topic and a subscription that uses the email protocol. Enter the architecture team's email address as the subscriber. Create an Amazon EventBridge rule that reacts when EC2 instances are launched. Specify the SNS topic as the rule's target.

C : Create an Amazon Simple Queue Service (Amazon SQS) queue and a subscription that uses the email protocol. Enter the architecture team's email address as the subscriber. Create an Amazon EventBridge rule that reacts when EC2 instances are launched. Specify the SQS queue as the rule's target.

D : Create an Amazon Simple Notification Service (Amazon SNS) topic. Configure AWS Systems Manager to publish EC2 events to the SNS topic. Create an AWS Lambda function to poll the SNS topic. Configure the Lambda function to send any messages to the architecture team's email address.

Answer: B

Confidently Practice Online with Free SOA-C03 Exam Cram

Buying Options: