DOP-C02 Question 65

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose CDF1

  C,D,F } C. Create new ALB and Auto Scaling group resources in the new Region and configure the new ALB to direct traffic to the new Auto Scaling group. This will allow users in the new Region to access the application with lower latency by reducing the network hops between the user and the application servers. D. Create Amazon Route 53 records, health checks, and latency-based routing policies to route to the ALB. This will enable Route 53 to route user traffic to the nearest healthy ALB, based on the latency between the user and the ALBs. F. Convert the DynamoDB table to a global table. This will enable reads and writes to the table in both Regions with low latency, improving the overall response time of the application

• 2

  Technically converting dynamodb table to global table requires creating replica in another region with cross-region replication and you don't "convert" you add a replica in "global tables" in specified region so this answers are a little bit misleading. Probably F is better than A since they name this operation as "converting" e.g. here https://aws.amazon.com/blogs/aws/new-convert-your-single-region-amazon-dynamodb-tables-to-global-tables/

• 1

  D is, of course, correct: <apply a core set of security controls to an existing set of AWS accounts> and <The accounts are in an organization in AWS Organizations> means we need ACF template to deploy these set of security controls. <Individual account administrators must not be able to edit or delete any of the baseline resources> means we need scp to deny permission A and B: no mention of SCP C: this option deploy the rules by AWS Config management account, which is not correct because we need ACF. Additionally, no mention of denying modification to CloudTrail trails