AWS CLOUD - ALC - TEST 07 : Question 1 of 64

You are planning to launch a fleet of EC2 instances running Linux. As part of the launch you would like to install some application development frameworks and custom software onto the instances. The installation will be initiated using some scripts you have written. What feature allows you to specify the scripts so you can install the software during the EC2 instance launch? You are planning to launch a fleet of EC2 instances running Linux. As part of the launch you would like to install some application development frameworks and custom software onto the instances. The installation will be initiated using some scripts you have written. What feature allows you to specify the scripts so you can install the software during the EC2 instance launch?

1 Mark(s)

AWS Config
Metadata
Run Command
User Data

The development team at your company have created a new mobile application that will be used by users to access confidential data. The developers have used Amazon Cognito for authentication, authorization, and user management. Due to the sensitivity of the data, there is a requirement to add another method of authentication in addition to a username and password. You have been asked to recommend the best solution. What is your recommendation? The development team at your company have created a new mobile application that will be used by users to access confidential data. The developers have used Amazon Cognito for authentication, authorization, and user management. Due to the sensitivity of the data, there is a requirement to add another method of authentication in addition to a username and password. You have been asked to recommend the best solution. What is your recommendation?

1 Mark(s)

Integrate a third-party identity provider (IdP)
Integrate IAM with a user pool in Cognito
Enable multi-factor authentication (MFA) in IAM
Use multi-factor authentication (MFA) with a Cognito user pool

You work as an Enterprise Architect for Digital Cloud Guru which employs 1500 people. The company is growing at around 5% per annum. The company strategy is to increasingly adopt AWS cloud services. There is an existing Microsoft Active Directory (AD) service that is used as the on-premise identity and access management system. You want to avoid synchronizing your directory into the AWS cloud or adding permissions to resources in another AD domain. How can you continue to utilize the on-premise AD for all authentication when consuming AWS cloud services? You work as an Enterprise Architect for Digital Cloud Guru which employs 1500 people. The company is growing at around 5% per annum. The company strategy is to increasingly adopt AWS cloud services. There is an existing Microsoft Active Directory (AD) service that is used as the on-premise identity and access management system. You want to avoid synchronizing your directory into the AWS cloud or adding permissions to resources in another AD domain. How can you continue to utilize the on-premise AD for all authentication when consuming AWS cloud services?

1 Mark(s)

Launch a large AWS Directory Service AD Connector to proxy all authentication back to your on-premise AD service for authentication
Launch an AWS Active Directory Service for Microsoft Active Directory and setup trust relationships with your on-premise domain
Use a large AWS Simple AD in AWS
Install a Microsoft Active Directory Domain Controller on AWS and add it into your existing on-premise domain

You are discussing EC2 with a colleague and need to describe the differences between EBS-backed instances and Instance store-backed instances. Which of the statements below would be valid descriptions? (choose 3) You are discussing EC2 with a colleague and need to describe the differences between EBS-backed instances and Instance store-backed instances. Which of the statements below would be valid descriptions? (choose 3)

1 Mark(s)

For both types of volume rebooting the instances will not result in data loss
EBS volumes can be detached and reattached to other EC2 instances
On an EBS-backed instance, the default action is for the root EBS volume to be deleted upon termination
Instance store volumes can be detached and reattached to other EC2 instances
By default, root volumes for both types will be retained on termination unless you configured otherwise

You need to setup a distribution method for some static files. The requests will be mainly GET requests and you are expecting a high volume of GETs often exceeding 2000 per second. The files are currently stored in an S3 bucket. According to AWS best practices, what can you do to optimize performance? You need to setup a distribution method for some static files. The requests will be mainly GET requests and you are expecting a high volume of GETs often exceeding 2000 per second. The files are currently stored in an S3 bucket. According to AWS best practices, what can you do to optimize performance?

1 Mark(s)

Integrate CloudFront with S3 to cache the content
Use ElastiCache to cache the content
Use cross-region replication to spread the load across region
Use S3 Transfer Acceleration Explanation

Your company are reviewing their information security processes. One of the items that came out of a recent audit is that there is insufficient data recorded about requests made to a few S3 buckets. The security team require an audit trail for operations on the S3 buckets that includes the requester, bucket name, request time, request action, and response status. Which action would you take to enable this logging? Your company are reviewing their information security processes. One of the items that came out of a recent audit is that there is insufficient data recorded about requests made to a few S3 buckets. The security team require an audit trail for operations on the S3 buckets that includes the requester, bucket name, request time, request action, and response status. Which action would you take to enable this logging?

1 Mark(s)

Enable S3 event notifications for the specific actions and setup an SNS notification
Enable server access logging for the S3 buckets to save access logs to a specified destination bucket
Create a CloudTrail trail that audits S3 bucket operations
Create a CloudWatch metric that monitors the S3 bucket operations and triggers an alarm

With Amazon API Gateway what are features that assist with creating and managing APIs? (Choose 2) With Amazon API Gateway what are features that assist with creating and managing APIs? (Choose 2)

1 Mark(s)

You can operate multiple API versions and multiple stages for each version simultaneously
You can define plans that meter and restrict third-party developer access to APIs
Flexible message delivery over multiple transport protocols
You can define the maintenance window or AWS will schedule a 30 minute window

An application you manage in your VPC uses an Auto Scaling Group that spans 3 AZs and there are currently 4 EC2 instances running in the group. What actions will Auto Scaling take, by default, if it needs to terminate an EC2 instance? (choose 2) An application you manage in your VPC uses an Auto Scaling Group that spans 3 AZs and there are currently 4 EC2 instances running in the group. What actions will Auto Scaling take, by default, if it needs to terminate an EC2 instance? (choose 2)

1 Mark(s)

Terminate an instance in the AZ which currently has 2 running EC2 instances
Wait for the cooldown period and then terminate the instance that has been running the longest
Terminate the instance with the least active network connections. If multiple instances meet this criterion, one will be randomly selected
Randomly select one of the 3 AZs, and then terminate an instance in that AZ
Send an SNS notification, if configured to do so

You are a Solutions Architect for a pharmaceutical company. The company uses a strict process for release automation that involves building and testing services in 3 separate VPCs. A peering topology is configured with VPC-A peered with VPC-B and VPC-B peered with VPC-C. The development team want to modify the process so that they can release code directly from VPC-A to VPC-C. How can this be accomplished? You are a Solutions Architect for a pharmaceutical company. The company uses a strict process for release automation that involves building and testing services in 3 separate VPCs. A peering topology is configured with VPC-A peered with VPC-B and VPC-B peered with VPC-C. The development team want to modify the process so that they can release code directly from VPC-A to VPC-C. How can this be accomplished?

1 Mark(s)

Update VPC-As route table with an entry using the VPC peering as a target
Create a new VPC peering connection between VPC-A and VPC-C
Update the CIDR blocks to match to enable inter-VPC routing
Update VPC-Bs route table with peering targets for VPC-A and VPC-C and enable route propagation

You are a Solutions Architect at Digital Cloud Guru. A new client who has not used cloud computing has asked you to explain how AWS works. The client wants to know what service is provided that will provide a virtual network infrastructure that loosely resembles a traditional data center but has the capacity to scale more easily? You are a Solutions Architect at Digital Cloud Guru. A new client who has not used cloud computing has asked you to explain how AWS works. The client wants to know what service is provided that will provide a virtual network infrastructure that loosely resembles a traditional data center but has the capacity to scale more easily?

1 Mark(s)

Elastic Compute Cloud
Elastic Load Balancing
Direct Connect
Virtual Private Cloud

You are a Solutions Architect at Digital Cloud Guru and have been assigned the task of moving some sensitive documents into the AWS cloud. You need to ensure that the security of the documents is maintained. Which AWS features can help ensure that the sensitive documents are secured on the AWS cloud? (choose 3) You are a Solutions Architect at Digital Cloud Guru and have been assigned the task of moving some sensitive documents into the AWS cloud. You need to ensure that the security of the documents is maintained. Which AWS features can help ensure that the sensitive documents are secured on the AWS cloud? (choose 3)

1 Mark(s)

S3 Client-Side encryption
EBS snapshots
S3 cross region replication
EBS encryption with Customer Managed Keys
IAM Access Policy
S3 Server-Side Encryption

Which of the following configurations uses synchronous replication? Which of the following configurations uses synchronous replication?

1 Mark(s)

EBS volume synchronization
RDS Read Replica across AWS regions
RDS DB instance using a Multi-AZ configuration
DynamoDB Read Replica

When attaching an Elastic Network Interface (ENI) to an EC2 instance, what does “warm attach” mean? When attaching an Elastic Network Interface (ENI) to an EC2 instance, what does “warm attach” mean?

1 Mark(s)

Attaching an ENI to an instance when it is stopped
Attaching an ENI to an instance during the launch process
Attaching an ENI to an instance when it is idle
Attaching an ENI to an instance when it is running

How often does EC2 send metrics to Amazon CloudWatch by default? How often does EC2 send metrics to Amazon CloudWatch by default?

1 Mark(s)

Three minutes
One second
Five minutes
Five seconds
One minute

What are the memory allocation options for Lambda functions? What are the memory allocation options for Lambda functions?

1 Mark(s)

Minimum 128MB, maximum 3008MB in 128MB increments
Minimum 512MB, maximum 1024MB in 64MB increments
Minimum 512MB, maximum 1024MB in 128MB increment
Minimum 128MB, maximum 3008MB in 64MB increment

The financial institution you are working for stores large amounts of historical transaction records. There are over 25TB of records and your manager has decided to move them into the AWS Cloud. You are planning to use Snowball as copying the data would take too long. Which of the statements below are true regarding Snowball? (choose 3) The financial institution you are working for stores large amounts of historical transaction records. There are over 25TB of records and your manager has decided to move them into the AWS Cloud. You are planning to use Snowball as copying the data would take too long. Which of the statements below are true regarding Snowball? (choose 3)

1 Mark(s)

Snowball can import to S3 but cannot export from S3
Uses a secure storage device for physical transportation
Can be used with multipart upload
Snowball must be ordered from and returned to the same region
Petabyte scale data transport solution for transferring data into or out of AWS

You are designing an identity, authorization and access management solution for the AWS cloud. The features you need include the ability to manage user accounts and group memberships, create and apply group policies, securely connect to Amazon EC2 instances, and provide Kerberos-based single sign-on (SSO). You do not need to establish trust relationships with other domains, use DNS dynamic update, implement schema extensions or use other advanced directory features. What would be the most cost-effective solution? You are designing an identity, authorization and access management solution for the AWS cloud. The features you need include the ability to manage user accounts and group memberships, create and apply group policies, securely connect to Amazon EC2 instances, and provide Kerberos-based single sign-on (SSO). You do not need to establish trust relationships with other domains, use DNS dynamic update, implement schema extensions or use other advanced directory features. What would be the most cost-effective solution?

1 Mark(s)

Use AD Connector
Use Amazon Cloud Directory
Use AWS Directory Service for Microsoft AD
Use AWS Simple AD

You have just created a new Network ACL in your VPC. You have not yet created any rules. Which of the statements below are correct regarding the default state of the Network ACL? (choose 2) You have just created a new Network ACL in your VPC. You have not yet created any rules. Which of the statements below are correct regarding the default state of the Network ACL? (choose 2)

1 Mark(s)

There is a default outbound rule denying all traffic
There is a default inbound rule allowing traffic from the VPC CIDR block
There is a default outbound rule allowing all traffic
There is a default inbound rule denying all traffic

As a Solutions Architect for Digital Cloud Guru you are designing an online shopping application for a new client. The application will be composed of distributed, decoupled components to ensure that the failure of a single component does not affect the availability of the application. You will be using SQS as the message queueing service and the client has stipulated that the messages related to customer orders must be processed in the order that they were submitted in the online application. The client expects that the peak rate of transactions will not exceed 140 transactions a second. What will you explain to the client? As a Solutions Architect for Digital Cloud Guru you are designing an online shopping application for a new client. The application will be composed of distributed, decoupled components to ensure that the failure of a single component does not affect the availability of the application. You will be using SQS as the message queueing service and the client has stipulated that the messages related to customer orders must be processed in the order that they were submitted in the online application. The client expects that the peak rate of transactions will not exceed 140 transactions a second. What will you explain to the client?

1 Mark(s)

According to AWS best practices you setup multi-factor authentication (MFA) for your root account and configured it to work with Google Authenticator on your smart phone. Unfortunately, your smart phone has been lost. What are the options available to access your account? According to AWS best practices you setup multi-factor authentication (MFA) for your root account and configured it to work with Google Authenticator on your smart phone. Unfortunately, your smart phone has been lost. What are the options available to access your account?

1 Mark(s)

Get a user with administrative privileges in your AWS account to deactivate the MFA device assigned to the root account
On the AWS sign-in with authentication device web page, choose to sign in using alternative factors of authentication and use the verification email and code to sign in
Unfortunately, you will no longer be able to access this account as the root user
You will need to contact AWS support to request that the MFA device is deactivated and have your password reset

You’re trying to explain to a colleague typical use cases where you can use the Simple Workflow Service (SWF). Which of the scenarios below would be valid? (choose 2) You’re trying to explain to a colleague typical use cases where you can use the Simple Workflow Service (SWF). Which of the scenarios below would be valid? (choose 2)

1 Mark(s)

Managing a multi-step and multi-decision checkout process for a mobile application
For web applications that require content delivery networks
Coordinating business process workflows across distributed application components (Correct)
Sending notifications via SMS when an EC2 instance reaches a certain threshold
Providing a reliable, highly-scalable, hosted queue for storing messages in transit between EC2 instances

There is a new requirement to implement in-memory caching for a Financial Services application due to increasing read-heavy load. The data must be stored persistently. Automatic failover across AZs is also required. Which two items from the list below are required to deliver these requirements? (choose 2) There is a new requirement to implement in-memory caching for a Financial Services application due to increasing read-heavy load. The data must be stored persistently. Automatic failover across AZs is also required. Which two items from the list below are required to deliver these requirements? (choose 2)

1 Mark(s)

ElastiCache with the Redis engine
Multiple nodes placed in different AZs
ElastiCache with the Memcached engine
Multi-AZ with Cluster mode and Automatic Failover enabled

Your client is running an individual DynamoDB table in the Asia Pacific (Tokyo) region. As the client’s business is expanding the load on the table is increasing and you’ve have been asked what limitations you may come up against in terms of write throughput to the single table? What advice would you give to your client? Your client is running an individual DynamoDB table in the Asia Pacific (Tokyo) region. As the client’s business is expanding the load on the table is increasing and you’ve have been asked what limitations you may come up against in terms of write throughput to the single table? What advice would you give to your client?

1 Mark(s)

80,000 write capacity units is the maximum supported write throughput
10,000 write capacity units is the maximum supported for an individual table
10,000 write capacity units is the default per table, but you can request a service limit increase
40,000 write capacity units is the limitation per AWS account

An event in CloudTrail is the record of an activity in an AWS account. What are the two types of events that can be logged in CloudTrail? (choose 2) An event in CloudTrail is the record of an activity in an AWS account. What are the two types of events that can be logged in CloudTrail? (choose 2)

1 Mark(s)

Management Events which are also known as control plane operations
Data Events which are also known as data plane operations
System Events which are also known as instance level operations
Platform Events which are also known as hardware level operations

Your client is looking for a way to use standard templates for describing and provisioning their infrastructure resources on AWS. Which AWS service can be used in this scenario? Your client is looking for a way to use standard templates for describing and provisioning their infrastructure resources on AWS. Which AWS service can be used in this scenario?

1 Mark(s)

ElasticBeanstalk
Auto Scaling
Simple Workflow Service (SWF)
CloudFormation

Which of the statements below are correct in relation to CloudFront Regional Edge Caches? (choose 2) Which of the statements below are correct in relation to CloudFront Regional Edge Caches? (choose 2)

1 Mark(s)

Regional Edge Caches have larger cache-width than any individual edge location, so your objects remain in cache longer at these locations
Regional Edge Caches are enabled by default for CloudFront Distributions
There are additional charges for using Regional Edge Caches
Regional Edge Caches are read-only

You are a Solutions Architect at Digital Cloud Guru and have been tasked with designing a 3-tier web application that is highly available and stateless. Which of the services below would you consider for storing the session state data? (choose 2) You are a Solutions Architect at Digital Cloud Guru and have been tasked with designing a 3-tier web application that is highly available and stateless. Which of the services below would you consider for storing the session state data? (choose 2)

1 Mark(s)

RDS
RedShift
ElastiCache
DynamoDB

One of your clients has multiple VPCs that are peered with each other. The client would like to use a single Elastic Load Balancer (ELB) to route traffic to multiple EC2 instances in peered VPCs within the same region. Is this possible? One of your clients has multiple VPCs that are peered with each other. The client would like to use a single Elastic Load Balancer (ELB) to route traffic to multiple EC2 instances in peered VPCs within the same region. Is this possible?

1 Mark(s)

This is not possible with ELB, you would need to use Route 53
his is possible using the Network Load Balancer (NLB) and Application Load Balancer (ALB) if using IP addresses as targets
No, the instances that an ELB routes traffic to must be in the same VPC •
This is possible using the Classic Load Balancer (CLB) if using Instance IDs

Which AWS service makes it easy to collect, process, and analyze real-time, streaming data? Which AWS service makes it easy to collect, process, and analyze real-time, streaming data?

1 Mark(s)

Kinesis Data Streams (Correct)
S3
EMR
RedShift

With Amazon EC2, instances can be assigned private and public IP addresses. Which of the statements below are correct regarding public IP addresses? (choose 3) With Amazon EC2, instances can be assigned private and public IP addresses. Which of the statements below are correct regarding public IP addresses? (choose 3)

1 Mark(s)

You can manually associate or disassociate a public IP address from your instance
The public IP address for your instance is released when its stopped or terminated
When you launch an instance in EC2-Classic, a public IP address is automatically assigned to the instance from the EC2-Classic public IPv4 address pool
When you launch an instance into a VPC, your subnet has an attribute that determines whether instances launched into that subnet receive a public IP address from the EC2-VPC public IPv4 address pool
You can modify whether an instance receives a public IP or not in EC2-Classic

An EC2 instance that you manage has an IAM role attached to it that provides it with access to Amazon S3 for saving log data to a bucket. A change in the application architecture means that you now need to provide the additional ability for the application to securely make API requests to Amazon API Gateway. Which two methods could you use to resolve this challenge? (choose 2) An EC2 instance that you manage has an IAM role attached to it that provides it with access to Amazon S3 for saving log data to a bucket. A change in the application architecture means that you now need to provide the additional ability for the application to securely make API requests to Amazon API Gateway. Which two methods could you use to resolve this challenge? (choose 2)

1 Mark(s)

You cannot modify the IAM role assigned to an EC2 instance after it has been launched. You’ll need to recreate the EC2 instance and assign a new IAM role
Create a new IAM role with multiple IAM policies attached that grants access to Amazon S3 and Amazon API Gateway, and replace the existing IAM role that is attached to the EC2 instance
Add an IAM policy to the existing IAM role that the EC2 instance is using granting permissions to access Amazon API Gateway
Create an IAM role with a policy granting permissions to Amazon API Gateway and add it to the EC2 instance as an additional IAM role

You have been tasked with building an ECS cluster using the EC2 launch type and need to ensure container instances can connect to the cluster. A colleague informed you that you must ensure the ECS container agent is installed on your EC2 instances. You have selected to use the Amazon ECS-optimized AMI. Which of the statements below are correct? (Choose 2) You have been tasked with building an ECS cluster using the EC2 launch type and need to ensure container instances can connect to the cluster. A colleague informed you that you must ensure the ECS container agent is installed on your EC2 instances. You have selected to use the Amazon ECS-optimized AMI. Which of the statements below are correct? (Choose 2)

1 Mark(s)

The Amazon ECS container agent is included in the Amazon ECS-optimized AMI
You can install the ECS container agent on any Amazon EC2 instance that supports the Amazon ECS specification
You can only install the ECS container agent on Linux instances
The Amazon ECS container agent is installed on the AWS managed infrastructure used for tasks using the EC2 launch type so you don’t need to do anything

One of your clients has requested advice on the correct choice of Elastic Load Balancer (ELB) for an application they are planning to deploy on AWS. The application requires extremely high throughput and extremely low latencies. The connections will be made using the TCP protocol and the ELB must support load balancing to multiple ports on an instance. Which ELB would you suggest the client uses? One of your clients has requested advice on the correct choice of Elastic Load Balancer (ELB) for an application they are planning to deploy on AWS. The application requires extremely high throughput and extremely low latencies. The connections will be made using the TCP protocol and the ELB must support load balancing to multiple ports on an instance. Which ELB would you suggest the client uses?

1 Mark(s)

Network Load Balancer
Classic Load Balancer
Application Load Balancer
Route 53

Which of the following statements is correct about restoring an RDS database to a specific point-in-time? (choose 2) Which of the following statements is correct about restoring an RDS database to a specific point-in-time? (choose 2)

1 Mark(s)

The default DB security group is applied to the new DB instance
The database restore overwrites the existing database
Custom DB security groups are applied to the new DB instance •
You can restore up to the last 5 minutes

Which of the statements below is correct in relation to Amazon VPC routing? (choose 3) Which of the statements below is correct in relation to Amazon VPC routing? (choose 3)

1 Mark(s)

A subnet can be associated with multiple route tables
The VPC router performs routing between AZs within a region
If no route table is specified a subnet will be assigned to the main route table at creation time
Can assign one route table to multiple subnets
You cannot modify which route table is the default route table

Which of the following statements are correct about Amazon Simple Queue Service (SQS)? (choose 3) Which of the following statements are correct about Amazon Simple Queue Service (SQS)? (choose 3)

1 Mark(s)

Messages can be kept in the queue from 1 minute to 4 days
CloudWatch metrics are automatically collected every 5 minutes
The maximum messages size is 512KB
Scaling is performed by adding more instances
You can use IAM policies to control who can read/write messages
SQS is pull based (polling) not push based

You are a Solutions Architect at Digital Cloud Guru. One of your clients has requested that you design a solution for distributing load across a number of EC2 instances across multiple AZs within a region. Customers will connect to several different applications running the client’s servers through their browser using multiple domain names and SSL certificates. The certificates are stored in AWS Certificate Manager (ACM). What is the optimal architecture to ensure high availability, cost effectiveness, and performance? You are a Solutions Architect at Digital Cloud Guru. One of your clients has requested that you design a solution for distributing load across a number of EC2 instances across multiple AZs within a region. Customers will connect to several different applications running the client’s servers through their browser using multiple domain names and SSL certificates. The certificates are stored in AWS Certificate Manager (ACM). What is the optimal architecture to ensure high availability, cost effectiveness, and performance?

1 Mark(s)

Launch a single ALB, configure host-based routing for the domain names and bind an SSL certificate to each routing rule
Launch multiple ALBs and bind separate SSL certificates to each ELB
Launch a single ALB and bind multiple SSL certificates to the same secure listener. Clients will use the Server Name Indication (SNI) extension
Launch a single ALB and bind multiple SSL certificates to multiple secure listeners

You are a developer at Digital Cloud Guru. An application stack you are building needs a message bus to decouple the application components from each other. The application will generate up to 300 messages per second without using batching. You need to ensure that a message is only delivered once and duplicates are not introduced into the queue. It is not necessary to maintain the order of the messages. Which SQS queue type will you use? You are a developer at Digital Cloud Guru. An application stack you are building needs a message bus to decouple the application components from each other. The application will generate up to 300 messages per second without using batching. You need to ensure that a message is only delivered once and duplicates are not introduced into the queue. It is not necessary to maintain the order of the messages. Which SQS queue type will you use?

1 Mark(s)

FIFO queue
Standard queue
Long polling queue
Auto Scaling queue

You have been asked to describe the benefits of using AWS Lambda compared to EC2 instances. Which of the below statements are incorrect? You have been asked to describe the benefits of using AWS Lambda compared to EC2 instances. Which of the below statements are incorrect?

1 Mark(s)

AWS Lambda runs on highly available infrastructure
With AWS lambda, the client is responsible for launching and administering the underlying AWS compute infrastructure
With AWS Lambda the customer does not have any responsibility for deploying and managing the compute infrastructure
With AWS Lambda you only pay for what you use
AWS Lambda scales automatically

Several websites you run on AWS use multiple Internet-facing Elastic Load Balancers (ELB) to distribute incoming connections to EC2 instances running web applications. The ELBs are configured to forward using either TCP (layer 4) or HTTP (layer 7) protocols. You would like to start recording the IP addresses of the clients that connect to your web applications. Which ELB features will you implement with which protocols? (choose 2) Several websites you run on AWS use multiple Internet-facing Elastic Load Balancers (ELB) to distribute incoming connections to EC2 instances running web applications. The ELBs are configured to forward using either TCP (layer 4) or HTTP (layer 7) protocols. You would like to start recording the IP addresses of the clients that connect to your web applications. Which ELB features will you implement with which protocols? (choose 2)

1 Mark(s)

X-Forwarded-For request header and HTTP
X-Forwarded-For request header and TCP
Proxy Protocol and HTTP
Proxy Protocol and TCP

What connectivity options are available with AWS Direct Connect when using public and private VIFs? (Choose 3) What connectivity options are available with AWS Direct Connect when using public and private VIFs? (Choose 3)

1 Mark(s)

Once connected to your VPC through Direct connect you can connect to all AZs within the region
Using an IPSec VPN you can connect over the public VIF to remote AWS regions
You can connect to AWS services over the private VIF
You can connect to your private VPC subnets over the public VIF
You can connect to your private VPC subnets over the private VIF, and to Public AWS services over the public VIF
• You can substitute your internet connection at your DC with AWS’s public Internet through the use of a NAT gateway in your VPC

When using throttling controls with API Gateway what happens when request submissions exceed the steady-state request rate and burst limits? When using throttling controls with API Gateway what happens when request submissions exceed the steady-state request rate and burst limits?

1 Mark(s)

API Gateway fails the limit-exceeding requests and returns “500 Internal Server Error” error responses to the client
The requests will be buffered in a cache until the load reduces
API Gateway fails the limit-exceeding requests and returns “429 Too Many Requests” error responses to the client
API Gateway drops the requests and does not return a response to the client

You have an existing Auto Scaling Group running with 8 EC2 instances. You have decided to attach an ELB to the ASG by connecting a Target Group. The ELB is in the same region and already has 10 EC2 instances running in the Target Group. When attempting to attach the ELB the request fails, what is the most likely cause? You have an existing Auto Scaling Group running with 8 EC2 instances. You have decided to attach an ELB to the ASG by connecting a Target Group. The ELB is in the same region and already has 10 EC2 instances running in the Target Group. When attempting to attach the ELB the request fails, what is the most likely cause?

1 Mark(s)

You cannot attach running EC2 instances to an ASG
Adding the 10 EC2 instances to the ASG would exceed the maximum capacity configured
The EC2 instances in the Target Group are in the wrong Availability Zone
ASGs cannot be edited once defined, you would need to recreate it

Your company currently uses Puppet Enterprise for infrastructure and application management. You are looking to move some of your infrastructure onto AWS and would like to continue to use the same tools in the cloud. What AWS service provides a fully managed configuration management service that is compatible with Puppet Enterprise? Your company currently uses Puppet Enterprise for infrastructure and application management. You are looking to move some of your infrastructure onto AWS and would like to continue to use the same tools in the cloud. What AWS service provides a fully managed configuration management service that is compatible with Puppet Enterprise?

1 Mark(s)

CloudTrail
CloudFormation
Elastic Beanstalk
OpsWorks

You are developing some code that uses a Lambda function and you would like to enable the function to connect to an ElastiCache cluster within a VPC that you own. What VPC-specific information must you include in your function to enable this configuration? (choose 2) You are developing some code that uses a Lambda function and you would like to enable the function to connect to an ElastiCache cluster within a VPC that you own. What VPC-specific information must you include in your function to enable this configuration? (choose 2)

1 Mark(s)

VPC Route Table IDs
VPC Logical IDs
VPC Security Group IDs
VPC Subnet IDs

Your manager has asked you to explain how Amazon ElastiCache may assist with the company’s plans to improve the performance of database queries. Which of the below statements is a valid description of the benefits of Amazon ElastiCache? (Choose 2) Your manager has asked you to explain how Amazon ElastiCache may assist with the company’s plans to improve the performance of database queries. Which of the below statements is a valid description of the benefits of Amazon ElastiCache? (Choose 2)

1 Mark(s)

ElastiCache is best suited for scenarios where the data base load type is OLTP
ElastiCache nodes can be accessed directly from the Internet and EC2 instances in other regions, which allows you to improve response times for queries over long distances
ElastiCache is a web service that makes it easy to deploy and run Memcached or Redis protocol-compliant server nodes in the cloud
ElastiCache can form clusters using a mixture of Memcached and Redis caching engines, allowing you to take advantage of the best features of each caching engine
The in-memory caching provided by ElastiCache can be used to significantly improve latency and throughput for many read-heavy application workloads or compute-intensive workloads (Correct)

You created a new IAM user account for a temporary employee who recently joined the company. The user does not have permissions to perform any actions, which statement is true about newly created users in IAM? You created a new IAM user account for a temporary employee who recently joined the company. The user does not have permissions to perform any actions, which statement is true about newly created users in IAM?

1 Mark(s)

They are created with user privileges
They are created with no permissions
They are created with full permissions
They are created with limited permissions

What application parameters can be defined in an ECS task definition? (choose 3) What application parameters can be defined in an ECS task definition? (choose 3)

1 Mark(s)

The ELB node to be used to scale the task containers
The container images to use and the repositories in which they are located
The data volumes that should be used with the containers in the task
The ports that should be opened on the container instance for your application

The company you work for is currently transitioning their infrastructure and applications into the AWS cloud. You are planning to deploy an Elastic Load Balancer (ELB) that distributes traffic for a web application running on EC2 instances. You still have some application servers running on-premise and you would like to distribute application traffic across both your AWS and on-premises resources. How can this be achieved? The company you work for is currently transitioning their infrastructure and applications into the AWS cloud. You are planning to deploy an Elastic Load Balancer (ELB) that distributes traffic for a web application running on EC2 instances. You still have some application servers running on-premise and you would like to distribute application traffic across both your AWS and on-premises resources. How can this be achieved?

1 Mark(s)

Provision an IPSec VPN connection between your on-premises location and AWS and create a CLB that uses cross-zone load balancing to distributed traffic across EC2 instances and on-premises servers
This cannot be done, ELBs are an AWS service and can only distributed traffic within the AWS cloud
Provision a Direct Connect connection between your on-premises location and AWS and create a target group on an ALB to use Instance ID based targets for both your EC2 instances and on-premises servers
Provision a Direct Connect connection between your on-premises location and AWS and create a target group on an ALB to use IP based targets for both your EC2 instances and on-premises servers

Your company runs a two-tier application that uses web front-ends running on EC2 instances across multiple AZs. The back-end is an RDS multi-AZ database instance. The front-end servers host a Content Management System (CMS) application that stores files that users upload in attached EBS storage. You don’t like having the uploaded files distributed across multiple EBS volumes and are concerned that this solution is not scalable. You would like to design a solution for storing the files that are uploaded to your EC2 instances that can achieve high levels of aggregate throughput and IOPS. The solution must scale automatically, and provide consistent low latencies. You also need to be able to mount the storage to the EC2 instances across multiple AZs within the region. Which AWS service would meet your needs? Your company runs a two-tier application that uses web front-ends running on EC2 instances across multiple AZs. The back-end is an RDS multi-AZ database instance. The front-end servers host a Content Management System (CMS) application that stores files that users upload in attached EBS storage. You don’t like having the uploaded files distributed across multiple EBS volumes and are concerned that this solution is not scalable. You would like to design a solution for storing the files that are uploaded to your EC2 instances that can achieve high levels of aggregate throughput and IOPS. The solution must scale automatically, and provide consistent low latencies. You also need to be able to mount the storage to the EC2 instances across multiple AZs within the region. Which AWS service would meet your needs?

1 Mark(s)

Use the Amazon Elastic File System
Store the files in the RDS database
Create an S3 bucket and use this as the storage location for the application
Use ElastiCache

Your company has multiple AWS accounts for each environment (Prod, Dev, Test etc.). You would like to copy an EBS snapshot from DEV to PROD. The snapshot is from an EBS volume that was encrypted with a custom key. What steps do you need to take to share the encrypted EBS snapshot with the Prod account? (choose 2) Your company has multiple AWS accounts for each environment (Prod, Dev, Test etc.). You would like to copy an EBS snapshot from DEV to PROD. The snapshot is from an EBS volume that was encrypted with a custom key. What steps do you need to take to share the encrypted EBS snapshot with the Prod account? (choose 2)

1 Mark(s)

Share the custom key used to encrypt the volume
Create a snapshot of the unencrypted volume and share it with the Prod account
Make a copy of the EBS volume and unencrypt the data in the process
Modify the permissions on the encrypted snapshot to share it with the Prod account

Which block device can be specified in a block device mapping to be used with an EC2 instance? (choose 2) Which block device can be specified in a block device mapping to be used with an EC2 instance? (choose 2)

1 Mark(s)

EFS volume
Snapshot
Instance store volume
EBS volume

You need to provide access to the AWS Management Console to a team of new application developers. The team members who perform the same role are assigned to a Microsoft Active Directory group and you have been asked to use Identity Federation and RBAC. Which AWS services would you use to configure this access? (choose 2) You need to provide access to the AWS Management Console to a team of new application developers. The team members who perform the same role are assigned to a Microsoft Active Directory group and you have been asked to use Identity Federation and RBAC. Which AWS services would you use to configure this access? (choose 2)

1 Mark(s)

IAM Policies
AWS IAM Roles
AWS Directory Service AD Connector
AWS IAM Users
AWS Directory Service Simple AD
AWS IAM Groups

You are designing a web application that requires high performance and consistent user experience. Which AWS service would be best suited to storing transient session state data? You are designing a web application that requires high performance and consistent user experience. Which AWS service would be best suited to storing transient session state data?

1 Mark(s)

Auto Scaling
RDS
ElasticCache
RedShift

You just created a new public subnet in your VPC and have launched an EC2 instance into it. You are trying to access the EC2 instance from the Internet and cannot connect. What steps should you take to troubleshoot the issue? (choose 2) You just created a new public subnet in your VPC and have launched an EC2 instance into it. You are trying to access the EC2 instance from the Internet and cannot connect. What steps should you take to troubleshoot the issue? (choose 2)

1 Mark(s)

Check that you can ping the instance from another subnet
Check that the instance has a public IP address
Check that there is a NAT Gateway configured for the subnet
Check that the route table associated with the subnet has an entry for an Internet Gateway

An EC2 instance in an Auto Scaling Group is having some issues that are causing the ASG to launch new instances based on the dynamic scaling policy. You need to troubleshoot the EC2 instance and prevent the ASG from launching new instances temporarily. What is the best method to accomplish this? (choose 2) An EC2 instance in an Auto Scaling Group is having some issues that are causing the ASG to launch new instances based on the dynamic scaling policy. You need to troubleshoot the EC2 instance and prevent the ASG from launching new instances temporarily. What is the best method to accomplish this? (choose 2)

1 Mark(s)

Place the EC2 instance that is experiencing issues into the Standby state
Remove the EC2 instance from the Target Group
Suspend the scaling processes responsible for launching new instances
Disable the dynamic scaling policy

You have recently enabled Access Logs on your Application Load Balancer (ALB). One of your colleagues would like to process the log files using a hosted Hadoop service. What configuration changes and services can be leveraged to deliver this requirement? You have recently enabled Access Logs on your Application Load Balancer (ALB). One of your colleagues would like to process the log files using a hosted Hadoop service. What configuration changes and services can be leveraged to deliver this requirement?

1 Mark(s)

Configure Access Logs to be delivered to DynamoDB and use EMR for processing the log files
Configure Access Logs to be delivered to EC2 and install Hadoop for processing the log files
Configure Access Logs to be delivered to S3 and use EMR for processing the log files
Configure Access Logs to be delivered to S3 and use Kinesis for processing the log files

When using a Classic Load Balancer, which of the following combinations of listeners support the proxy protocol? (choose 2) When using a Classic Load Balancer, which of the following combinations of listeners support the proxy protocol? (choose 2)

1 Mark(s)

Front-End – SSL & Back-End – SSL
Front-End – SSL & Back-End - TCP
Front-End – TCP & Back-End – TCP
Front-End – TCP & Back-End SSL

CloudWatch automatically provides data including metrics and volume status checks for EBS volumes. There are two types of monitoring available, which type provides data in 5-minute intervals at no charge? What type of monitoring for Amazon EBS volumes is free and available automatically in 5-minute periods? CloudWatch automatically provides data including metrics and volume status checks for EBS volumes. There are two types of monitoring available, which type provides data in 5-minute intervals at no charge? What type of monitoring for Amazon EBS volumes is free and available automatically in 5-minute periods?

1 Mark(s)

Basic
Enterprise
Business
Detailed

You would like to deploy EC2 instance with enhanced networking. What are the pre-requisites for using enhanced networking? (Choose 2) You would like to deploy EC2 instance with enhanced networking. What are the pre-requisites for using enhanced networking? (Choose 2)

1 Mark(s)

Instances must be launched in a VPC
Instances must be launched from a PV AMI
Instances must be launched from a HVM AMI
Instances must be EBS backed, not Instance-store backed
Instances must be of T2 Micro type

There is expected to be a large increase in write intensive traffic to a website you manage that registers users onto an online learning program. You are concerned about writes to the database being dropped and need to come up with a solution to ensure this does not happen. Which of the solution options below would be the best approach to take? There is expected to be a large increase in write intensive traffic to a website you manage that registers users onto an online learning program. You are concerned about writes to the database being dropped and need to come up with a solution to ensure this does not happen. Which of the solution options below would be the best approach to take?

1 Mark(s)

Use CloudFront to cache the writes and configure the database as a custom origin
Update the application to write data to an S3 bucket and provision additional EC2 instances to process the data and write it to the database
Use RDS in a multi-AZ configuration to distribute writes across AZs
Update the application to write data to an SQS queue and provision additional EC2 instances to process the data and write it to the database

One of your EC2 instances that is behind an Elastic Load Balancer (ELB) is in the process of being de-registered. Which ELB feature can be used to allow existing connections to close cleanly? One of your EC2 instances that is behind an Elastic Load Balancer (ELB) is in the process of being de-registered. Which ELB feature can be used to allow existing connections to close cleanly?

1 Mark(s)

Sticky Sessions
Deletion Protection
Connection Draining
Proxy Protocol

Which of the following are AWS best practices for DynamoDB? (choose 3) Which of the following are AWS best practices for DynamoDB? (choose 3)

1 Mark(s)

Use separate local secondary indexes for each item
Store more frequently and less frequently accessed data in separate tables
Use for BLOB data use cases
Keep item sizes small
Store objects larger than 400KB in S3 and use pointers in DynamoDB

You have been asked to implement a solution for capturing, transforming and loading streaming data into an Amazon RedShift cluster. The solution will capture data from Amazon Kinesis Data Streams. Which AWS services would you utilize in this scenario? (choose 2) You have been asked to implement a solution for capturing, transforming and loading streaming data into an Amazon RedShift cluster. The solution will capture data from Amazon Kinesis Data Streams. Which AWS services would you utilize in this scenario? (choose 2)

1 Mark(s)

EMR for transforming the data
Kinesis Video Streams for capturing the data and loading it into RedShift
Kinesis Data Firehose for capturing the data and loading it into RedShift
Lambda for transforming the data