[{"data":1,"prerenderedAt":349},["ShallowReactive",2],{"practiceExams":3,"practice-exam-questions-\u002Fpractice-exams\u002Faws-certified-cloudops-engineer-associate\u002Fquestions":153},[4,17,28,39,49,59,70,80,90,101,111,122,134,145],{"id":5,"slug":6,"description":7,"questionCount":8,"isActive":9,"datePublicModified":10,"difficulty":11,"examVersion":16},1,"aws-certified-solutions-architect-associate-saa-c03","Unlock your potential with the AWS Certified Solutions Architect - Associate Practice Exam Simulator. This comprehensive tool is designed to prepare you thoroughly and assess your readiness for the most sought-after AWS associate certification.",1203,true,"2026-10-30T00:00:00.000Z",{"title":12,"subtitle":13,"slug":14,"coverImageUrl":15},"AWS Certified Solutions Architect - Associate","SAA-C03","aws-certified-solutions-architect-associate","\u002Fimages\u002Fdifficulties\u002Faws-certified-solutions-architect-associatesaa-c03\u002Fcovers\u002Faws-SAA-C03.png",{"slug":6,"pageSlug":14},{"id":18,"slug":19,"description":20,"questionCount":21,"isActive":9,"datePublicModified":10,"difficulty":22,"examVersion":27},5,"aws-certified-cloud-practitioner-clf-c02","Master your AWS Certified Cloud Practitioner exam with our Practice Exam Simulator. Prepare effectively and assess your readiness with realistic practice exams designed to mirror the most popular official AWS exam.",937,{"title":23,"subtitle":24,"slug":25,"coverImageUrl":26},"AWS Certified Cloud Practitioner","CLF-C02","aws-certified-cloud-practitioner","\u002Fimages\u002Fdifficulties\u002Faws-certified-cloud-practitionerclf-c02\u002Fcovers\u002Faws-CLF-C02.png",{"slug":19,"pageSlug":25},{"id":29,"slug":30,"description":31,"questionCount":32,"isActive":9,"datePublicModified":10,"difficulty":33,"examVersion":38},8,"aws-certified-devops-engineer-professional-dop-c02","Boost your readiness for the AWS Certified DevOps Engineer - Professional (DOP-C02) exam with our practice exam simulator. Featuring realistic questions and detailed explanations, it helps you identify knowledge gaps and improve your skills.",1040,{"title":34,"subtitle":35,"slug":36,"coverImageUrl":37},"AWS Certified DevOps Engineer - Professional","DOP-C02","aws-certified-devops-engineer-professional","",{"slug":30,"pageSlug":36},{"id":40,"slug":41,"description":42,"questionCount":43,"isActive":9,"datePublicModified":10,"difficulty":44,"examVersion":48},9,"aws-certified-data-engineer-associate-dea-c01","Prepare for your AWS Certified Data Engineer - Associate exam with our practice exam simulator. Featuring real exam scenarios, detailed explanations, and instant feedback to boost your confidence and success rate.",891,{"title":45,"subtitle":46,"slug":47,"coverImageUrl":37},"AWS Certified Data Engineer - Associate","DEA-C01","aws-certified-data-engineer-associate",{"slug":41,"pageSlug":47},{"id":50,"slug":51,"description":52,"questionCount":53,"isActive":9,"datePublicModified":10,"difficulty":54,"examVersion":58},11,"aws-certified-ai-practitioner-aif-c01","Prepare for the AWS Certified AI Practitioner exam with our practice exam simulator. Realistic questions on AI, machine learning and generative AI fundamentals, with detailed explanations, help you find your knowledge gaps and assess your readiness.",928,{"title":55,"subtitle":56,"slug":57,"coverImageUrl":37},"AWS Certified AI Practitioner","AIF-C01","aws-certified-ai-practitioner",{"slug":51,"pageSlug":57},{"id":60,"slug":61,"description":62,"questionCount":63,"isActive":9,"datePublicModified":64,"difficulty":65,"examVersion":69},17,"aws-certified-generative-ai-developer-professional-aip-c01","Get ready for the AWS Certified Generative AI Developer - Professional exam with our practice exam simulator. Realistic scenario-based questions with detailed explanations help you assess your readiness to build generative AI solutions on AWS.",982,"2026-10-29T00:00:00.000Z",{"title":66,"subtitle":67,"slug":68,"coverImageUrl":37},"AWS Certified Generative AI Developer - Professional","AIP-C01","aws-certified-generative-ai-developer-professional",{"slug":61,"pageSlug":68},{"id":71,"slug":72,"description":73,"questionCount":74,"isActive":9,"datePublicModified":64,"difficulty":75,"examVersion":79},19,"aws-certified-machine-learning-engineer-associate-mla-c02","Prepare for the AWS Certified Machine Learning Engineer - Associate exam with our practice exam simulator. Realistic questions with detailed explanations help you find your knowledge gaps and assess your readiness to build and run ML workloads on AWS.",861,{"title":76,"subtitle":77,"slug":78,"coverImageUrl":37},"AWS Certified Machine Learning Engineer - Associate","MLA-C02","aws-certified-machine-learning-engineer-associate",{"slug":72,"pageSlug":78},{"id":81,"slug":82,"description":83,"questionCount":84,"isActive":9,"datePublicModified":64,"difficulty":85,"examVersion":89},21,"aws-certified-cloudops-engineer-associate-soa-c03","Prepare for the AWS Certified CloudOps Engineer - Associate exam with our practice exam simulator. Realistic questions with detailed explanations help you assess your readiness to deploy, operate and troubleshoot workloads on AWS.",862,{"title":86,"subtitle":87,"slug":88,"coverImageUrl":37},"AWS Certified CloudOps Engineer - Associate","SOA-C03","aws-certified-cloudops-engineer-associate",{"slug":82,"pageSlug":88},{"id":91,"slug":92,"description":93,"questionCount":94,"isActive":9,"datePublicModified":64,"difficulty":95,"examVersion":100},13,"aws-certified-security-specialty-scs-c03","Advance your career in cloud security with the AWS Certified Security - Specialty (SCS-C03) Exam Simulator. Realistic, scenario-based practice exams mirror the official exam, with detailed explanations to close your knowledge gaps.",864,{"title":96,"subtitle":97,"slug":98,"coverImageUrl":99},"AWS Certified Security - Specialty","SCS-C03","aws-certified-security-specialty","\u002Fimages\u002Fdifficulties\u002Faws-certified-security-specialtyscs-c02\u002Fcovers\u002Faws_SCS_c02.png",{"slug":92,"pageSlug":98},{"id":102,"slug":103,"description":104,"questionCount":105,"isActive":9,"datePublicModified":64,"difficulty":106,"examVersion":110},15,"aws-certified-ai-business-strategist-aib-c01","Prepare for the AWS Certified AI Business Strategist exam with our practice exam simulator. Realistic, scenario-based questions with detailed explanations help you assess your readiness to lead AI adoption on AWS and close your knowledge gaps.",848,{"title":107,"subtitle":108,"slug":109,"coverImageUrl":37},"AWS Certified AI Business Strategist","AIB-C01","aws-certified-ai-business-strategist",{"slug":103,"pageSlug":109},{"id":112,"slug":113,"description":114,"questionCount":115,"isActive":9,"datePublicModified":116,"difficulty":117,"examVersion":121},10,"aws-certified-advanced-networking-specialty-ans-c01","The AWS Certified Advanced Networking - Specialty practice exam simulates the real test, offering scenario-based questions that assess your ability to design, implement, and troubleshoot complex AWS networking solutions. ",681,"2024-11-13T00:00:00.000Z",{"title":118,"subtitle":119,"slug":120,"coverImageUrl":37},"AWS Certified Advanced Networking - Specialty","ANS-C01","aws-certified-advanced-networking-specialty",{"slug":113,"pageSlug":120},{"id":123,"slug":124,"description":125,"questionCount":126,"isActive":9,"datePublicModified":127,"difficulty":128,"examVersion":133},4,"aws-certified-developer-associate-dva-c02","Unlock your potential as a software developer with the AWS Certified Developer - Associate Exam Simulator! Prepare thoroughly with realistic practice exams designed to mirror the official exam.",399,"2024-06-06T00:00:00.000Z",{"title":129,"subtitle":130,"slug":131,"coverImageUrl":132},"AWS Certified Developer - Associate","DVA-C02","aws-certified-developer-associate","\u002Fimages\u002Fdifficulties\u002Faws-certified-developer-associatedva-c02\u002Fcovers\u002Faws-DVA-C02.png",{"slug":124,"pageSlug":131},{"id":135,"slug":136,"description":137,"questionCount":138,"isActive":9,"datePublicModified":127,"difficulty":139,"examVersion":144},6,"aws-certified-solutions-architect-professional-sap-c02","Elevate your career with the AWS Certified Solutions Architect - Professional Exam Simulator. Get ready to ace the most popular Professional AWS exam with our realistic practice exams. Assess your readiness, boost your confidence, and ensure your success.",789,{"title":140,"subtitle":141,"slug":142,"coverImageUrl":143},"AWS Certified Solutions Architect - Professional","SAP-C02","aws-certified-solutions-architect-professional","\u002Fimages\u002Fdifficulties\u002Faws-certified-solutions-architect-professionalsap-c02\u002Fcovers\u002Faws-SAP-C02.png",{"slug":136,"pageSlug":142},{"id":146,"slug":147,"description":148,"questionCount":149,"isActive":9,"datePublicModified":127,"difficulty":150,"examVersion":151},7,"aws-certified-security-specialty-scs-c02","Advance your career in cloud cybersecurity with the AWS Certified Security - Specialty Exam Simulator! Tailored for professionals, this tool offers realistic practice exams to mirror the official exam.",5431,{"title":96,"subtitle":97,"slug":98,"coverImageUrl":99},{"slug":147,"pageSlug":152},null,{"id":81,"slug":82,"description":83,"content":37,"formalQuestionCount":154,"minQuestionCount":5,"maxQuestionCount":155,"formalTimeLimitCount":156,"minTimeLimitCount":112,"maxTimeLimitCount":157,"passingScore":158,"questionCount":84,"isActive":9,"dateCreated":159,"dateModified":160,"datePublicModified":64,"difficulty":161,"examVersion":346,"tags":348,"previousExamVersion":152,"newerExamVersion":152},65,75,130,200,72,"2026-10-29T23:46:18.478Z","2026-10-30T00:06:33.000Z",{"id":60,"title":86,"subtitle":87,"rating":152,"slug":88,"guideUrl":152,"categories":162,"services":345},[163,203,240,273,307],{"id":164,"title":165,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":166,"subcategories":167},155,"Monitoring, Logging, Analysis, Remediation, and Performance Optimization",22,[168,195,199],{"id":169,"title":170,"subtitle":152,"description":152,"questions":171},563,"Implement metrics, alarms, and filters by using AWS monitoring and logging services",[172],{"id":173,"subcategoryId":169,"content":174,"hint":175,"type":176,"isPublic":9,"answers":177},59772,"A company runs applications on an Amazon EKS cluster with Linux managed node groups. A CloudOps engineer must collect node-level and pod-level CPU and memory metrics in CloudWatch and send application container stdout and stderr logs to CloudWatch Logs. The company requires Kubernetes metadata for troubleshooting and does not want to modify application manifests or maintain custom collector deployments. The EKS Pod Identity Agent is already installed, and the cluster has network connectivity to the required AWS endpoints.\n\nWhich solution meets these requirements with the least operational overhead?","Distinguish Kubernetes workload telemetry from control plane logs, and consider which managed integration provides both metrics and container log collection.","single",[178,182,187,191],{"id":179,"questionId":173,"content":180,"hint":181,"isCorrect":9,"position":152,"matchAnswerId":152},268463,"Install the Amazon CloudWatch Observability EKS add-on with Container Insights enhanced observability and container log collection enabled. Configure EKS Pod Identity associations that grant the collectors the required CloudWatch permissions.","The add-on manages the CloudWatch agent for Container Insights metrics and Fluent Bit for container logs. It provides Kubernetes-aware node and pod telemetry without application changes or custom collector deployments. EKS Pod Identity supplies the required AWS permissions without stored credentials.",{"id":183,"questionId":173,"content":184,"hint":185,"isCorrect":186,"position":152,"matchAnswerId":152},268464,"Install the Kubernetes Metrics Server EKS add-on and deploy Fluent Bit to forward container logs. Grant Metrics Server permission to publish CloudWatch metrics and Fluent Bit permission to write CloudWatch logs.","Metrics Server exposes resource metrics through the Kubernetes Metrics API for features such as autoscaling and kubectl top. Granting it CloudWatch permissions does not make it publish metrics to CloudWatch, so the required metric collection is not implemented.",false,{"id":188,"questionId":173,"content":189,"hint":190,"isCorrect":186,"position":152,"matchAnswerId":152},268465,"Enable detailed monitoring on the worker nodes and enable all EKS control plane logging types. Use the resulting CloudWatch metrics and log groups for workload troubleshooting.","EC2 detailed monitoring does not provide pod-level metrics or guest memory utilization. EKS control plane logs contain components such as API server and audit logs, not application container stdout and stderr.",{"id":192,"questionId":173,"content":193,"hint":194,"isCorrect":186,"position":152,"matchAnswerId":152},268466,"Deploy Fluent Bit as a DaemonSet with the CloudWatch Logs output enabled and Kubernetes metadata enrichment configured. Grant its service account permission to write to CloudWatch Logs.","This configuration collects and enriches container logs, but it does not collect and publish the required node-level and pod-level CPU and memory metrics. It also requires maintaining a collector deployment.",{"id":196,"title":197,"subtitle":152,"description":152,"questions":198},564,"Identify and remediate issues by using monitoring and availability metrics",[],{"id":200,"title":201,"subtitle":152,"description":152,"questions":202},565,"Implement performance optimization strategies for compute, storage, and database resources",[],{"id":204,"title":205,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":166,"subcategories":206},156,"Reliability and Business Continuity",[207,211,236],{"id":208,"title":209,"subtitle":152,"description":152,"questions":210},566,"Implement scalability and elasticity",[],{"id":212,"title":213,"subtitle":152,"description":152,"questions":214},567,"Implement highly available and resilient environments",[215],{"id":216,"subcategoryId":212,"content":217,"hint":218,"type":176,"isPublic":9,"answers":219},60345,"A company uses Amazon Route 53 failover records for an application hosted in two data centers. The primary record has an HTTPS health check configured with the primary server's fixed public IP address, the domain name api.example.com, and the path \u002Fready. The secondary site is healthy.\n\nAfter a TLS configuration change, Route 53 marks the primary unhealthy, although browser requests to https:\u002F\u002Fapi.example.com\u002Fready return HTTP 200 when directed to the primary server. The primary server hosts multiple HTTPS virtual hosts and now rejects TLS connections that do not include the requested hostname in the TLS handshake. Server logs show that Route 53 health check connections are rejected for this reason. Network access is correctly configured.\n\nA CloudOps engineer must restore health checks that verify the primary application's HTTP readiness response without weakening the server's TLS requirements.\n\nWhich change meets these requirements?","Distinguish the hostname sent during the TLS handshake from the HTTP Host header sent after the handshake succeeds.",[220,224,228,232],{"id":221,"questionId":216,"content":222,"hint":223,"isCorrect":9,"position":152,"matchAnswerId":152},270991,"Enable Server Name Indication (SNI) on the HTTPS health check, retaining the configured IP address, domain name, and path.","Enabling SNI makes Route 53 include the configured domain name in the TLS handshake. The server can select the correct virtual host and complete the handshake, allowing Route 53 to request \u002Fready on the specific primary server.",{"id":225,"questionId":216,"content":226,"hint":227,"isCorrect":186,"position":152,"matchAnswerId":152},270992,"Remove the domain name from the HTTPS health check and retain the primary server's fixed public IP address and \u002Fready path.","Removing the domain name does not supply the hostname required during the TLS handshake. It also removes the configured hostname used for the HTTP Host header, rather than addressing the missing SNI information.",{"id":229,"questionId":216,"content":230,"hint":231,"isCorrect":186,"position":152,"matchAnswerId":152},270993,"Replace the primary server's certificate with a publicly trusted certificate that includes the server's fixed public IP address as a subject alternative name.","The failure is caused by the client's missing TLS server name, not certificate validation. Route 53 HTTPS health checks do not validate certificate trust or hostname matching, and changing the certificate would not make the health check send SNI.",{"id":233,"questionId":216,"content":234,"hint":235,"isCorrect":186,"position":152,"matchAnswerId":152},270994,"Change the health check protocol to TCP on port 443, retaining the primary server's fixed public IP address.","A TCP health check verifies that a connection can be established. It does not complete an HTTPS readiness request or inspect the HTTP response, so it would not meet the application-readiness requirement.",{"id":237,"title":238,"subtitle":152,"description":152,"questions":239},568,"Implement backup and restore strategies",[],{"id":241,"title":242,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":166,"subcategories":243},157,"Deployment, Provisioning, and Automation",[244,269],{"id":245,"title":246,"subtitle":152,"description":152,"questions":247},569,"Provision and maintain cloud resources",[248],{"id":249,"subcategoryId":245,"content":250,"hint":251,"type":176,"isPublic":9,"answers":252},59834,"A CloudOps engineer uses AWS CloudFormation to deploy eight m6i.xlarge On-Demand EC2 instances in us-east-1. Each instance requires 4 vCPUs. Existing workloads in the account consume 48 vCPUs from the same EC2 On-Demand Standard instance quota and must remain running. The deployment fails with a VcpuLimitExceeded error and rolls back completely.\n\nThe applied quota is 64 vCPUs in us-east-1 and 128 vCPUs in us-west-2. The new fleet must use the specified instance type in us-east-1. Which solution will allow the deployment to proceed?","Consider both the scope of the quota and the total usage after the deployment. Submitting an increase request does not immediately change the applied quota.",[253,257,261,265],{"id":254,"questionId":249,"content":255,"hint":256,"isCorrect":186,"position":152,"matchAnswerId":152},268730,"Configure the deployment pipeline to use the Service Quotas endpoint in us-west-2 to validate the 128-vCPU quota, and then retry the CloudFormation deployment in us-east-1.","Reading a larger quota from another Region does not change the quota enforced where the instances are launched. The us-east-1 deployment remains subject to its 64-vCPU applied quota.",{"id":258,"questionId":249,"content":259,"hint":260,"isCorrect":9,"position":152,"matchAnswerId":152},268731,"Request an On-Demand Standard instance quota of at least 80 vCPUs in us-east-1 through Service Quotas. Verify that the applied quota has increased before retrying the deployment.","The required total is 48 existing vCPUs plus 32 new vCPUs, or 80 vCPUs. This EC2 quota is Regional, so the increase must apply to us-east-1. The engineer must wait for approval and verify the applied value before retrying; merely submitting a request does not increase the quota.",{"id":262,"questionId":249,"content":263,"hint":264,"isCorrect":186,"position":152,"matchAnswerId":152},268732,"Request an On-Demand Standard instance quota of 32 vCPUs in us-east-1 through Service Quotas. Retry the deployment after the request is approved.","A quota increase request specifies the desired total quota, not the additional capacity needed. The new fleet needs 32 vCPUs, but existing workloads already consume 48 vCPUs. A total quota of 32 vCPUs would not support the deployment.",{"id":266,"questionId":249,"content":267,"hint":268,"isCorrect":186,"position":152,"matchAnswerId":152},268733,"Add CloudFormation DependsOn attributes to launch the new instances sequentially, and then retry the deployment without changing the quota.","Serializing resource creation does not reduce the fleet's final vCPU consumption. The existing and new instances would require 80 vCPUs, exceeding the applied quota of 64 vCPUs regardless of launch order.",{"id":270,"title":271,"subtitle":152,"description":152,"questions":272},570,"Automate the management of existing resources",[],{"id":274,"title":275,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":276,"subcategories":277},158,"Security and Compliance",16,[278,303],{"id":279,"title":280,"subtitle":152,"description":152,"questions":281},571,"Implement and manage security and compliance tools and policies",[282],{"id":283,"subcategoryId":279,"content":284,"hint":285,"type":176,"isPublic":9,"answers":286},60174,"A company continuously evaluates its AWS accounts against the AWS Foundational Security Best Practices standard in three AWS Regions. The required resource recording and security checks are already operating in every account and Region. A dedicated security account already has administrator access to the member accounts' security findings in each Region.\n\nThe operations team must view the findings and control compliance statuses from all three Regions in a single Regional console. Updates to finding workflow statuses must synchronize between this central view and the originating Regions. The company must continue running security checks in all three Regions.\n\nWhich solution meets these requirements with the LEAST operational overhead?","Distinguish between running security checks, configuring their settings, and consolidating their results across Regions.",[287,291,295,299],{"id":288,"questionId":283,"content":289,"hint":290,"isCorrect":9,"position":152,"matchAnswerId":152},270250,"Configure cross-Region aggregation in AWS Security Hub CSPM in the security account. Select an aggregation Region and link the other two Regions, while leaving the service and standards enabled in each Region.","Security Hub CSPM cross-Region aggregation provides a consolidated view of findings and control compliance statuses in the aggregation Region. Finding updates, including workflow status changes, synchronize between the aggregation Region and linked Regions. Checks continue to run in their source Regions.",{"id":292,"questionId":283,"content":293,"hint":294,"isCorrect":186,"position":152,"matchAnswerId":152},270251,"Enable AWS Security Hub CSPM and the standard only in the security account's central Region. Disable the service in the other two Regions and use the central Region to evaluate resources across all three Regions.","Security Hub CSPM checks operate Regionally. Enabling the service in one Region does not evaluate supported Regional resources in other Regions. Disabling it in the other Regions would stop the required checks there.",{"id":296,"questionId":283,"content":297,"hint":298,"isCorrect":186,"position":152,"matchAnswerId":152},270252,"Create an organization-wide AWS Config aggregator in the security account. Include all three Regions and use its aggregated compliance results to manage the security findings' workflow statuses.","An AWS Config aggregator consolidates resource configurations and Config rule compliance results. It does not aggregate Security Hub CSPM findings or synchronize their workflow statuses between Regions.",{"id":300,"questionId":283,"content":301,"hint":302,"isCorrect":186,"position":152,"matchAnswerId":152},270253,"Create an AWS Security Hub CSPM custom insight in one Region that groups findings by Region. Grant the security account permission to read findings in the other two Regions without configuring cross-Region aggregation.","Custom insights filter and group findings available in the current Region. Permissions to read findings elsewhere do not bring those findings into the current Regional view or provide cross-Region synchronization.",{"id":304,"title":305,"subtitle":152,"description":152,"questions":306},572,"Implement strategies to protect data and infrastructure",[],{"id":308,"title":309,"subtitle":152,"description":152,"content":152,"coverImageUrl":152,"weight":310,"subcategories":311},159,"Networking and Content Delivery",18,[312,316,341],{"id":313,"title":314,"subtitle":152,"description":152,"questions":315},573,"Implement and optimize networking features and connectivity",[],{"id":317,"title":318,"subtitle":152,"description":152,"questions":319},574,"Configure domains, DNS services, and content delivery",[320],{"id":321,"subcategoryId":317,"content":322,"hint":323,"type":176,"isPublic":9,"answers":324},59735,"A company uses a Route 53 public hosted zone for example.com. Its HTTP-only website runs on an on-premises server with a fixed public IPv4 address. During an outage, the company wants new DNS queries, after cached answers expire, to direct visitors to a maintenance page instead. When the server recovers, DNS responses must automatically direct visitors back to it. An S3 bucket named example.com already has static website hosting enabled, and its maintenance page is publicly accessible through the bucket's regional website endpoint. Which Route 53 configuration meets these requirements?","Consider which endpoint needs a health check and whether an S3 website alias supports inherited target health.",[325,329,333,337],{"id":326,"questionId":321,"content":327,"hint":328,"isCorrect":186,"position":152,"matchAnswerId":152},268303,"Create primary and secondary failover A records. Point the primary record to the server's IPv4 address and associate an HTTP health check for the server. Configure the secondary as an alias to the S3 website endpoint with Evaluate Target Health enabled.","The primary health check and failover policy are appropriate, but Evaluate Target Health cannot be enabled for an alias targeting an S3 website endpoint. This configuration is not supported.",{"id":330,"questionId":321,"content":331,"hint":332,"isCorrect":186,"position":152,"matchAnswerId":152},268304,"Create weighted A records with a weight of 100 for the server's IPv4 address and a weight of 0 for an alias to the S3 website endpoint. Disable Evaluate Target Health on the alias and do not associate health checks with either record.","Weights control DNS response selection; they do not detect endpoint failures. Without a health check, Route 53 continues to consider the server record healthy and does not switch to the zero-weight S3 record when the server becomes unavailable.",{"id":334,"questionId":321,"content":335,"hint":336,"isCorrect":9,"position":152,"matchAnswerId":152},268305,"Create primary and secondary failover A records. Point the primary record to the server's IPv4 address and associate an HTTP health check for the server. Configure the secondary as an alias to the S3 website endpoint with Evaluate Target Health disabled.","Failover routing returns the primary record while its associated health check is healthy and the secondary record when the primary is unhealthy. An A alias can route the zone apex to an S3 website endpoint. S3 website aliases do not support Evaluate Target Health, so it must be disabled. Route 53 resumes returning the primary record when its health check recovers.",{"id":338,"questionId":321,"content":339,"hint":340,"isCorrect":186,"position":152,"matchAnswerId":152},268306,"Create primary and secondary failover A records. Point the primary record to the server's IPv4 address without a health check. Configure the secondary as an alias to the S3 website endpoint with Evaluate Target Health disabled, and associate an HTTP health check with the secondary record.","The primary non-alias record has no health check, so Route 53 treats it as healthy. Checking the maintenance website does not detect an outage of the primary server and therefore does not trigger the required failover.",{"id":342,"title":343,"subtitle":152,"description":152,"questions":344},575,"Troubleshoot network connectivity issues",[],[],{"id":347,"code":87,"slug":82,"dateLastDay":152,"whatChanged":152,"pageSlug":88},25,[],1793320686393]