Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 65 discussion

C. Create new ALB and Auto Scaling group resources in the new Region and configure the new ALB to direct traffic to the new Auto Scaling group. This will allow users in the new Region to access the application with lower latency by reducing the network hops between the user and the application servers. D. Create Amazon Route 53 records, health checks, and latency-based routing policies to route to the ALB. This will enable Route 53 to route user traffic to the nearest healthy ALB, based on the latency between the user and the ALBs. F. Convert the DynamoDB table to a global table. This will enable reads and writes to the table in both Regions with low latency, improving the overall response time of the application

C,D,F } C. Create new ALB and Auto Scaling group resources in the new Region and configure the new ALB to direct traffic to the new Auto Scaling group. This will allow users in the new Region to access the application with lower latency by reducing the network hops between the user and the application servers. D. Create Amazon Route 53 records, health checks, and latency-based routing policies to route to the ALB. This will enable Route 53 to route user traffic to the nearest healthy ALB, based on the latency between the user and the ALBs. F. Convert the DynamoDB table to a global table. This will enable reads and writes to the table in both Regions with low latency, improving the overall response time of the application

Technically converting dynamodb table to global table requires creating replica in another region with cross-region replication and you don't "convert" you add a replica in "global tables" in specified region so this answers are a little bit misleading. Probably F is better than A since they name this operation as "converting" e.g. here https://aws.amazon.com/blogs/aws/new-convert-your-single-region-amazon-dynamodb-tables-to-global-tables/

D is, of course, correct: <apply a core set of security controls to an existing set of AWS accounts> and <The accounts are in an organization in AWS Organizations> means we need ACF template to deploy these set of security controls. <Individual account administrators must not be able to edit or delete any of the baseline resources> means we need scp to deny permission A and B: no mention of SCP C: this option deploy the rules by AWS Config management account, which is not correct because we need ACF. Additionally, no mention of denying modification to CloudTrail trails

CDF: <opened a new office on a different continent> and <The users in the new office are experiencing high latency> means they need to replicate their existing site to the new region. <Amazon EC2 instances behind an Application Load Balancer (ALB)> means they need to replicate both these. <address the latency issues> means they need route53 with latency-based and health check A: <cross-Region replication> is used for backup only, not a live site. It would introduce a lot of latency B: <Auto Scaling group global resources>: there is no such thing E: No mention of latency-based.

CDF very easy

CDF is collect

C,D,F are correct