AWS CLOUD - ALC - TEST 09 : Question 1 of 65

You had recently set up a Cloudwatch Alarm that performs status checks on your EBS volume. However, you noticed that the volume check has a status of insufficient-data. What does this status means? You had recently set up a Cloudwatch Alarm that performs status checks on your EBS volume. However, you noticed that the volume check has a status of insufficient-data. What does this status means?

1 Mark(s)

All EBS Volume checks have failed.
The EBS Volume has been abruptly stopped.
All EBS Volume checks have been completed.
The check on the EBS volume is still in progress.

Which technique can you use to integrate AWS Identity and Access Management with an on-premise Lightweight Directory Access Protocol (LDAP) directory service? Which technique can you use to integrate AWS Identity and Access Management with an on-premise Lightweight Directory Access Protocol (LDAP) directory service?

1 Mark(s)

Use an IAM policy that references the LDAP identifiers and AWS credentials.
Use SAML (Security Assertion Markup Language) to enable single sign-on between AWS and LDAP.
Develop an on-premise custom identity broker application and use STS to issue short-lived AWS credentials.
Use IAM roles to rotate the IAM credentials whenever LDAP credentials are updated.
Use the LDAP credentials to restrict a group of users from launching specific EC2 instance types.

Which of the following statements are true regarding Amazon VPC subnets? (Choose 3) Which of the following statements are true regarding Amazon VPC subnets? (Choose 3)

1 Mark(s)

EC2 instances in a private subnet can communicate with the Internet only if they have an Elastic IP.
Each subnet maps to a single Availability Zone.
The allowed block size in VPC is between a /16 netmask (65,536 IP addresses) and /27 netmask (16 IP addresses)
Every subnet that you create is automatically associated with the main route table for the VPC.
Each subnet spans to 2 Availability Zones.
If a subnets traffic is routed to an Internet gateway, the subnet is known as a public subnet.

You installed sensors to track the number of visitors that goes to the park. The data is sent every other day to an Amazon Kinesis stream with default settings for processing. You noticed that your S3 bucket is not receiving all of the data that is being sent to the Kinesis stream. What could be the reason for this? You installed sensors to track the number of visitors that goes to the park. The data is sent every other day to an Amazon Kinesis stream with default settings for processing. You noticed that your S3 bucket is not receiving all of the data that is being sent to the Kinesis stream. What could be the reason for this?

1 Mark(s)

There is a problem in the sensors. They probably had some intermittent connection hence, the data is not sent to the stream.
By default, Amazon S3 stores the data for 1 day and moves it to Amazon Glacier.
Your AWS account was hacked and someone has deleted some data in your Kinesis stream.
Amazon Kinesis streams are not meant to process data.
By default, the data records are only accessible for 24 hours from the time they are added to a Kinesis stream.

The social media company that you are working for needs to capture the detailed information of all HTTP requests that went through their public-facing application load balancer every five minutes. They want to use this data for analyzing traffic patterns and for troubleshooting their web applications in AWS. Which of the following options meet the customer requirements? The social media company that you are working for needs to capture the detailed information of all HTTP requests that went through their public-facing application load balancer every five minutes. They want to use this data for analyzing traffic patterns and for troubleshooting their web applications in AWS. Which of the following options meet the customer requirements?

1 Mark(s)

Enable AWS CloudTrail for their application load balancer.
Enable access logs on the application load balancer.
Add an Amazon CloudWatch Logs agent on the application load balancer.
Enable Amazon CloudWatch metrics on the application load balancer.

You have 2 SUSE Linux Enterprise Server instances located in different subnets in the same VPC. These EC2 instances should be able to communicate with each other, but you always get a timeout when you try to ping from one instance to another. In addition, the route tables seem to be valid and has the entry for the Target ‘local’ for your VPC CIDR.

Which of the following could be a valid reason for this issue? You have 2 SUSE Linux Enterprise Server instances located in different subnets in the same VPC. These EC2 instances should be able to communicate with each other, but you always get a timeout when you try to ping from one instance to another. In addition, the route tables seem to be valid and has the entry for the Target ‘local’ for your VPC CIDR.

Which of the following could be a valid reason for this issue?

1 Mark(s)

The two EC2 Instances have different versions of the SUSE Linux AMI.
You have not configured the Security Group to allow the required traffic between the two subnets. (Correct) The EC2 instances do not have Public IPs attached to them. The EC2 Instances do not have Elastic IPs.
The EC2 instances do not have Public IPs attached to them
he EC2 Instances do not have Elastic IPs.

Does Amazon S3 provide read-after-write consistency for new objects? Does Amazon S3 provide read-after-write consistency for new objects?

1 Mark(s)

Yes, for all AWS regions.
No, not for any AWS region.
Yes, but only for certain AWS regions and for new objects.
Yes, but only for certain regions outside of the US region.

Which of the following is a durable key-based object store service? Which of the following is a durable key-based object store service?

1 Mark(s)

Amazon Simple Storage Service
Amazon Simple Queue Service
Amazon Simple Workflow Service
Amazon Simple Notification Service

You created a new CloudFormation template that creates 4 EC2 instances and are connected to one Elastic Load Balancer (ELB). Which section of the template should you configure to get the Domain Name Server hostname of the ELB upon the creation of the AWS stack? You created a new CloudFormation template that creates 4 EC2 instances and are connected to one Elastic Load Balancer (ELB). Which section of the template should you configure to get the Domain Name Server hostname of the ELB upon the creation of the AWS stack?

1 Mark(s)

Resources
Parameters
Outputs
Mappings

What is the correct indication that an object was indeed successfully stored when you put objects in Amazon S3? What is the correct indication that an object was indeed successfully stored when you put objects in Amazon S3?

1 Mark(s)

HTTP 200 result code and MD5 checksum.
Amazon S3 has 99.999999999% durability hence, there is no need to confirm that data was inserted.
You will receive an SMS from Amazon SNS informing you that the object is successfully stored.
You will receive an email from Amazon SNS informing you that the object is successfully stored.

A news company has been using a Hardware Security Module (CloudHSM) for secure key storage. It is only used for generating keys for their On-demand EC2 instances. After a new support staff attempted to log in as the administrator three times using an invalid password, the Hardware Security Module has been zeroized which means that the encryption keys on it have been wiped. Sadly, You did not have a copy of the keys stored anywhere else. How can you obtain a new copy of the keys that you have stored on Hardware Security Module? A news company has been using a Hardware Security Module (CloudHSM) for secure key storage. It is only used for generating keys for their On-demand EC2 instances. After a new support staff attempted to log in as the administrator three times using an invalid password, the Hardware Security Module has been zeroized which means that the encryption keys on it have been wiped. Sadly, You did not have a copy of the keys stored anywhere else. How can you obtain a new copy of the keys that you have stored on Hardware Security Module?

1 Mark(s)

Restore a snapshot of the Hardware Security Module.
Contact AWS Support and they will provide you a copy of the keys.
The keys are lost permanently if you did not have a copy.
Use the Amazon CLI to get a copy of the keys.

What is one of the major advantages of having a Virtual Private Network in AWS? What is one of the major advantages of having a Virtual Private Network in AWS?

1 Mark(s)

Security is automatically managed by AWS.
You can connect your AWS cloud resources to on-premise data centers using VPN connections.
You can provision unlimited number of Amazon S3 and Glacier resources.
None of the above

Your manager asked you to look for a hybrid cloud storage solution for your company. You want to recommend AWS Storage Gateway as a cloud storage but first, you need to prepare a list of the use cases for this service to ensure that it is indeed the right service for your organization. What is the main use case of AWS Storage Gateway? Your manager asked you to look for a hybrid cloud storage solution for your company. You want to recommend AWS Storage Gateway as a cloud storage but first, you need to prepare a list of the use cases for this service to ensure that it is indeed the right service for your organization. What is the main use case of AWS Storage Gateway?

1 Mark(s)

It helps customers to seamlessly integrate existing on-premises applications, infrastructure, and data with the AWS Cloud.
A fast and secure connection to Amazon Glacier.
It is a durable storage solution that provides an on-premises storage.
It provides a secured data warehouse service in the Cloud.

As a Solutions Architect, you have been requested to set up a highly decoupled application in AWS. Which of the following can help you accomplish this goal? As a Solutions Architect, you have been requested to set up a highly decoupled application in AWS. Which of the following can help you accomplish this goal?

1 Mark(s)

An SQS queue to allow a second EC2 instance to process a failed instance’s job
An Elastic Load Balancer to send web traffic to healthy EC2 instances
IAM user credentials on EC2 instances to grant permissions to modify an SQS queue
An Auto Scaling group to recover from EC2 instance failures

Which of the following items are Invalid VPC peering configurations? (Choose 3) Which of the following items are Invalid VPC peering configurations? (Choose 3)

1 Mark(s)

Overlapping CIDR blocks
Transitive Peering
Edge to Edge routing via a gateway
One to one relationship between two Virtual Private Cloud networks

You are a new Solutions Architect working for a financial company. Your manager wants to have the ability to automatically transfer obsolete data from their S3 bucket to a low cost storage system in AWS. What is the best solution you can provide to them? You are a new Solutions Architect working for a financial company. Your manager wants to have the ability to automatically transfer obsolete data from their S3 bucket to a low cost storage system in AWS. What is the best solution you can provide to them?

1 Mark(s)

Use an EC2 instance and a scheduled job to transfer the obsolete data from their S3 location to Amazon Glacier.
Use Lifecycle Policies in S3 to move obsolete data to Glacier.
Use AWS SQS.
Use AWS SWF.

You deployed a web application to an EC2 instance that adds a variety of photo effects to a picture uploaded by the users. The application will put the generated photos to a S3 bucket by sending PUT requests to the S3 API. You deployed a web application to an EC2 instance that adds a variety of photo effects to a picture uploaded by the users. The application will put the generated photos to a S3 bucket by sending PUT requests to the S3 API.

1 Mark(s)

Encrypt the API credentials and store in any directory of the EC2 instance.
Create a role in IAM. Afterwards, assign this role to a new EC2 instance.
Store your API credentials in Amazon Glacier.
Store the API credentials in the root web application directory of the EC2 instance.

Which AWS service can help protect web applications in your VPC from common security threats from the Internet? Which AWS service can help protect web applications in your VPC from common security threats from the Internet?

1 Mark(s)

You are working as a solutions architect for a large financial company They have a web application hosted in their on-premise infrastructure which they want to migrate to AWS cloud. Your manager had instructed you to ensure that there is no down time while the migration process is on-going. In order to achieve this, your team had decided to divert 50% of the traffic to the new application in AWS and the other 50% to the application hosted in their on-premise infrastructure. Once the migration is over and that the application works with no issues, a full diversion to the AWS will be implemented. Which of the following steps will you do to satisfy this requirement? You are working as a solutions architect for a large financial company They have a web application hosted in their on-premise infrastructure which they want to migrate to AWS cloud. Your manager had instructed you to ensure that there is no down time while the migration process is on-going. In order to achieve this, your team had decided to divert 50% of the traffic to the new application in AWS and the other 50% to the application hosted in their on-premise infrastructure. Once the migration is over and that the application works with no issues, a full diversion to the AWS will be implemented. Which of the following steps will you do to satisfy this requirement?

1 Mark(s)

Use the Classic Elastic Load balancer to divert the traffic between the on-premise and AWS hosted application.
Use an Application Elastic Load balancer to divert and proportion the traffic between the on-premise and AWS-hosted application.
Use Route53 with Failover routing policy to divert and proportion the traffic between the on-premise and AWS-hosted application.
Use Route53 with Weighted routing policy to divert the traffic between the on-premise and AWS-hosted application.

You have an On-Demand EC2 instance located in a subnet in AWS which hosts a web application. The security group attached to this EC2 instance has the following Inbound Rules: Larger image The Route table attached to the VPC is shown below. You can do a SSH connection into the EC2 instance from the internet. However, you are not able to connect to the web server using your Chrome browser. Larger image Which of the below steps would resolve the issue? You have an On-Demand EC2 instance located in a subnet in AWS which hosts a web application. The security group attached to this EC2 instance has the following Inbound Rules: Larger image The Route table attached to the VPC is shown below. You can do a SSH connection into the EC2 instance from the internet. However, you are not able to connect to the web server using your Chrome browser. Larger image Which of the below steps would resolve the issue?

1 Mark(s)

In the Security Group, add an Inbound HTTP rule.
In the Security Group, remove the SSH rule.
In the Route table, add this new route entry: 0.0.0.0 -> igw-b51618cc
In the Route table, add this new route entry: 10.0.0.0/27 -> local

Which Amazon service can you use to define a virtual network which closely resembles a traditional data center? Which Amazon service can you use to define a virtual network which closely resembles a traditional data center?

1 Mark(s)

Amazon VPC
Amazon ServiceBus
Amazon EMR
Amazon RDS

A tech company wants to create standard templates for deployment of their Infrastructure. You told them about an AWS service called CloudFormation which can meet their needs but they are hesitant about the cost. As a Solutions Architect, what advise can you give to them with regards to the cost? A tech company wants to create standard templates for deployment of their Infrastructure. You told them about an AWS service called CloudFormation which can meet their needs but they are hesitant about the cost. As a Solutions Architect, what advise can you give to them with regards to the cost?

1 Mark(s)

Tell them that the cost is only less than $10 per month.
Tell them that the cost is only $100 per month.
Tell them that there is no cost in using Cloudformation templates and they only pay for the AWS resources created by their template.
Tell them that there is no cost in using Cloudformation templates including the AWS resources created by their template.

What AWS services should you use to implement a fault-tolerant, highly available architecture? (Choose 2) What AWS services should you use to implement a fault-tolerant, highly available architecture? (Choose 2)

1 Mark(s)

Amazon DynamoDB
Amazon Elastic Compute Cloud (EC2)
Amazon Elastic Load Balancing
Amazon Simple Notification Service (SNS)
Amazon Simple Storage Service (S3)

Your company has a web-based ticketing service that utilizes Amazon SQS and a fleet of EC2 instances. The EC2 instances that consume messages from the SQS queue are configured to poll the queue as often as possible to keep end-to-end throughput as high as possible. You noticed that polling the queue in tight loops is using unnecessary CPU cycles, resulting to increased operational costs due to empty responses. In this scenario, what will you do to make the system more cost-effective? Your company has a web-based ticketing service that utilizes Amazon SQS and a fleet of EC2 instances. The EC2 instances that consume messages from the SQS queue are configured to poll the queue as often as possible to keep end-to-end throughput as high as possible. You noticed that polling the queue in tight loops is using unnecessary CPU cycles, resulting to increased operational costs due to empty responses. In this scenario, what will you do to make the system more cost-effective?

1 Mark(s)

Configure Amazon SQS to use long polling by setting the ReceiveMessageWaitTimeSeconds to zero.
Configure Amazon SQS to use long polling by setting the ReceiveMessageWaitTimeSeconds to a number greater than zero.
Configure Amazon SQS to use short polling by setting the ReceiveMessageWaitTimeSeconds to a number greater than zero.
Configure Amazon SQS to use short polling by setting the ReceiveMessageWaitTimeSeconds to zero.

You have just launched a new API Gateway service in AWS. In what type of protocol will your API endpoint be exposed? You have just launched a new API Gateway service in AWS. In what type of protocol will your API endpoint be exposed?

1 Mark(s)

FTP
HTTPS
HTTP
XHTML
SOAP

Which of the following is a valid bucket name on Amazon S3? Which of the following is a valid bucket name on Amazon S3?

1 Mark(s)

tutorialsdojo
TutorialsDojo
.tutorialsdojo
tutorialsdojo!

You are instructed by your manager to create a publicly accessible EC2 instance by using an Elastic IP (EIP) address and also to give him a report on how much it will cost to use that EIP. Which of the following statements is correct regarding the pricing of EIP? You are instructed by your manager to create a publicly accessible EC2 instance by using an Elastic IP (EIP) address and also to give him a report on how much it will cost to use that EIP. Which of the following statements is correct regarding the pricing of EIP?

1 Mark(s)

There is no cost if the instance is running and it has only one associated EIP.
There is no cost if the instance is terminated and it has only one associated EIP.
There is no cost if the instance is stopped and it has only one associated EIP.
There is no cost if the instance is running and it has at least two associated EIP.

Which AWS service will you use to monitor all API calls to your EC2 instance? Which AWS service will you use to monitor all API calls to your EC2 instance?

1 Mark(s)

Amazon SES
Amazon Cloudtrail
Amazon CloudFront
Amazon S3

Which of the following is needed in order to access an EC2 instance from the Internet? (Choose 3) Which of the following is needed in order to access an EC2 instance from the Internet? (Choose 3)

1 Mark(s)

An Internet Gateway (IGW) attached to the VPC.
A Private IP address attached to the EC2 instance.
A Private Elastic IP address attached to the EC2 instance.
A VPN Peering connection.
A route entry to the Internet gateway in the Route table of the VPC.
A Public IP address attached to the EC2 instance.

You are designing a social media website for a startup company and the founders want to know the ways to mitigate distributed denial-of-service (DDoS) attacks to their website. Which of the following are viable mitigation techniques? (Choose 3) You are designing a social media website for a startup company and the founders want to know the ways to mitigate distributed denial-of-service (DDoS) attacks to their website. Which of the following are viable mitigation techniques? (Choose 3)

1 Mark(s)

Write a shell script to quickly add and remove rules to the instance firewall.
Use Dedicated EC2 instances to ensure that each instance has the maximum performance possible.
Use an Amazon CloudFront service for distributing both static and dynamic content.
Use an Application Load Balancer with Auto Scaling groups for your EC2 instances then restrict direct Internet traffic to your Amazon RDS database by deploying to a private subnet.
Setup alerts in Amazon CloudWatch to look for high Network In and CPU utilization.
Add multiple elastic network interfaces (ENIs) to each EC2 instance to increase the network bandwidth.

You are working for a large financial firm and you are instructed to set up a Linux bastion host. It will allow access to the Amazon EC2 instances running in their VPC. For security purposes, only the clients connecting from the corporate external public IP address 175.45.116.100 should have SSH access to the host. Which is the best option that can meet the customer's requirement? You are working for a large financial firm and you are instructed to set up a Linux bastion host. It will allow access to the Amazon EC2 instances running in their VPC. For security purposes, only the clients connecting from the corporate external public IP address 175.45.116.100 should have SSH access to the host. Which is the best option that can meet the customer's requirement?

1 Mark(s)

Security Group Inbound Rule: Protocol – TCP. Port Range – 22, Source 175.45.116.100/32
Security Group Inbound Rule: Protocol – UDP, Port Range – 22, Source 175.45.116.100/32
Network ACL Inbound Rule: Protocol – UDP, Port Range – 22, Source 175.45.116.100/32
Network ACL Inbound Rule: Protocol – TCP, Port Range-22, Source 175.45.116.100/0

A mobile application stores pictures in Amazon Simple Storage Service (S3) and allows application sign-in using an OpenID Connect-compatible identity provider. Which AWS Security Token Service approach to temporary access should you use for this scenario? A mobile application stores pictures in Amazon Simple Storage Service (S3) and allows application sign-in using an OpenID Connect-compatible identity provider. Which AWS Security Token Service approach to temporary access should you use for this scenario?

1 Mark(s)

SAML-based Identity Federation
Cross-Account Access
AWS Identity and Access Management roles
Web Identity Federation

You are working for a large bank that is developing a web application that receives large amounts of data. They are using the data to generate a report for their stockbrokers to use on a daily basis. Unfortunately, a recent financial crisis has left the bank short on cash and cannot afford to purchase expensive storage hardware. They had resorted to use AWS instead. Which is the best service to use in order to store a virtually unlimited amount of data without any effort to scale when demand unexpectedly increases? You are working for a large bank that is developing a web application that receives large amounts of data. They are using the data to generate a report for their stockbrokers to use on a daily basis. Unfortunately, a recent financial crisis has left the bank short on cash and cannot afford to purchase expensive storage hardware. They had resorted to use AWS instead. Which is the best service to use in order to store a virtually unlimited amount of data without any effort to scale when demand unexpectedly increases?

1 Mark(s)

Amazon S3
Amazon Glacier
Amazon Import/Export
Amazon EC2
DynamoDB

In your VPC, you have a Classic Load Balancer distributing traffic to six EC2 instances that are evenly spread across two Availability Zones. However, you realize that only half of your EC2 instances are actually receiving traffic. In your VPC, you have a Classic Load Balancer distributing traffic to six EC2 instances that are evenly spread across two Availability Zones. However, you realize that only half of your EC2 instances are actually receiving traffic.

1 Mark(s)

The Classic Load Balancer listener is not set to port 80.
The security group of the EC2 instances does not allow HTTP traffic.
Cross-Zone Load Balancing is disabled.
The Classic Load Balancer listener is not set to port 22.

Which type of networking connection in AWS allows you to connect two Virtual Private Cloud networks? Which type of networking connection in AWS allows you to connect two Virtual Private Cloud networks?

1 Mark(s)

VPC Connection
VPN Connection
Direct Connect
VPC Peering

What are the valid use case scenarios to use Enhanced Networking? (Choose 2) What are the valid use case scenarios to use Enhanced Networking? (Choose 2)

1 Mark(s)

When you need a higher packet per second (PPS) performance
When you need a low packet-per-second performance
When you need high latency networking
When you need a consistently lower inter-instance latencies

You are a Solutions Architect for a major TV network. They have a web application running on eight Amazon EC2 instances, consuming about 55% of resources on each instance. You are using Auto Scaling to make sure that eight instances are running at all times. The number of requests that this application processes are consistent and do not experience spikes. Your manager instructed you to ensure high availability of this web application at all times to avoid any loss of revenue. You want the load to be distributed evenly between all instances. You also want to use the same Amazon Machine Image (AMI) for all EC2 instances. How will you be able to achieve this? You are a Solutions Architect for a major TV network. They have a web application running on eight Amazon EC2 instances, consuming about 55% of resources on each instance. You are using Auto Scaling to make sure that eight instances are running at all times. The number of requests that this application processes are consistent and do not experience spikes. Your manager instructed you to ensure high availability of this web application at all times to avoid any loss of revenue. You want the load to be distributed evenly between all instances. You also want to use the same Amazon Machine Image (AMI) for all EC2 instances. How will you be able to achieve this?

1 Mark(s)

Deploy eight EC2 instances in one Availability Zone behind an Amazon Elastic Load Balancer.
Deploy four EC2 instances in one region and four in another region behind an Amazon Elastic Load Balancer.
Deploy four EC2 instances in one Availability Zone and four in another availability zone in the same region behind an Amazon Elastic Load Balancer.
Deploy two EC2 instances in four regions behind an Amazon Elastic Load Balancer.

Which of the following can be used as an origin server in Amazon CloudFront? (Choose 3) Which of the following can be used as an origin server in Amazon CloudFront? (Choose 3)

1 Mark(s)

NGINX web server hosted on EC2
Java web server running in your on-premise data center
Amazon Glacier
Amazon S3 bucket

A tech company is running two production web servers hosted on Reserved EC2 instances with EBS-backed root volumes. These instances have a consistent CPU load of 90%. Traffic is being distributed to these instances by an Elastic Load Balancer. In addition, they also have Multi-AZ RDS MySQL databases for their production, test, and development environments. What recommendation would you make to reduce cost in this AWS environment without affecting availability and performance of mission critical systems? Choose the best answer. A tech company is running two production web servers hosted on Reserved EC2 instances with EBS-backed root volumes. These instances have a consistent CPU load of 90%. Traffic is being distributed to these instances by an Elastic Load Balancer. In addition, they also have Multi-AZ RDS MySQL databases for their production, test, and development environments. What recommendation would you make to reduce cost in this AWS environment without affecting availability and performance of mission critical systems? Choose the best answer.

1 Mark(s)

Consider using On-demand instances instead of Reserved EC2 instances
Consider not using a Multi-AZ RDS deployment for the development and test database
Consider using Spot instances instead of reserved EC2 instances
Consider removing the Elastic Load Balancer

You are consulted by a multimedia company that needs to deploy web services to an AWS region which they have not used before. The company currently has an IAM role for their Amazon EC2 instance which permits the instance to access Amazon DynamoDB. They want their EC2 instances in the new region to have the exact same privileges. What should you do to accomplish this? You are consulted by a multimedia company that needs to deploy web services to an AWS region which they have not used before. The company currently has an IAM role for their Amazon EC2 instance which permits the instance to access Amazon DynamoDB. They want their EC2 instances in the new region to have the exact same privileges. What should you do to accomplish this?

1 Mark(s)

In the new Region, create a new IAM role and associated policies then assign it to the new instance.
Assign the existing IAM role to instances in the new region.
Duplicate the IAM role and associated policies to the new region and attach it to the instances.
Create an Amazon Machine Image (AMI) of the instance and copy it to the new region.

You are working for a computer animation film studio that has a web application running on an Amazon EC2 instance. It uploads 5 GB video objects to an Amazon S3 bucket. Video uploads are taking longer than expected, which impacts the performance of your application. Which method will help improve performance of your application You are working for a computer animation film studio that has a web application running on an Amazon EC2 instance. It uploads 5 GB video objects to an Amazon S3 bucket. Video uploads are taking longer than expected, which impacts the performance of your application. Which method will help improve performance of your application

1 Mark(s)

Enable Enhanced Networking to your EC2 Instances.
Use Amazon S3 Multipart Upload API.
Leverage on Amazon CloudFront and use HTTP POST method to reduce latency.
Use Amazon Elastic Block Store Provisioned IOPs and an Amazon EBS-optimizedinstance.

You are working for a top IT consultancy and one of your clients asked you how to properly secure their AWS infrastructure. They have a VPC with two On-Demand EC2 instances with Elastic IP addresses which recently were under SSH brute force attacks over the Internet. Their IT Security team has identified the IP Addresses where these attacks originated. What should you do to fix this security vulnerability? You are working for a top IT consultancy and one of your clients asked you how to properly secure their AWS infrastructure. They have a VPC with two On-Demand EC2 instances with Elastic IP addresses which recently were under SSH brute force attacks over the Internet. Their IT Security team has identified the IP Addresses where these attacks originated. What should you do to fix this security vulnerability?

1 Mark(s)

Place the EC2 instances into private subnets
Remove the Internet Gateway from the VPC
Block the IP addresses in the Network Access Control List
Deploy the EC2 instances into private subnets then set up bastion host

You have EC2 instances running on your VPC. You have both UAT and production EC2 instances running. You want to ensure that employees who are responsible for the UAT instances don’t have the access to work on the production instances to minimize security risks. Which of the following would be the best way to achieve this? You have EC2 instances running on your VPC. You have both UAT and production EC2 instances running. You want to ensure that employees who are responsible for the UAT instances don’t have the access to work on the production instances to minimize security risks. Which of the following would be the best way to achieve this?

1 Mark(s)

Launch the UAT and production EC2 instances in separate VPCs connected by VPC peering.
Create an IAM policy with a condition which allows access to only EC2 instances that are used for production or development.
Launch the UAT and production instances in different Availability Zones and use Multi Factor Authentication.
Define the tags on the UAT and production servers and add a condition to the IAM policy which allows access to specific tags.

You have a web application hosted in AWS cloud where the application logs are sent to Amazon CloudWatch. Lately, the web application has recently been encountering some errors which can be resolved simply by restarting the instance. What will you do to automatically restart the EC2 instances whenever the same application error occurs? You have a web application hosted in AWS cloud where the application logs are sent to Amazon CloudWatch. Lately, the web application has recently been encountering some errors which can be resolved simply by restarting the instance. What will you do to automatically restart the EC2 instances whenever the same application error occurs?

1 Mark(s)

First, look at the existing CloudWatch logs for keywords related to the application error to create a custom metric. Then, create a CloudWatch alarm for that custom metric which invokes an action to restart the EC2 instance.
First, look at the existing CloudWatch logs for keywords related to the application error to create a custom metric. Then, create an alarm in Amazon SNS for that custom metric which invokes an action to restart the EC2 instance.
First, look at the existing Flow logs for keywords related to the application error to create a custom metric. Then, create a CloudWatch alarm for that custom metric which invokes an action to restart the EC2 instance.
First, look at the existing Flow logs for keywords related to the application error to create a custom metric. Then, create a CloudWatch alarm for that custom metric which calls a Lambda function that invokes an action to restart the EC2 instance.

By default, what happens to your data when an EC2 instance created terminates? (Choose 3) By default, what happens to your data when an EC2 instance created terminates? (Choose 3)

1 Mark(s)

For EBS-backed instances, the volume is persisted by default.
The root device volume is deleted by default.
For EBS-backed instances, the volume is deleted by default.
For Instance Store-Backed AMI, all the data is deleted.

Which of the following is not a benefit of Auto Scaling? Which of the following is not a benefit of Auto Scaling?

1 Mark(s)

Better fault tolerance
Better availability
Better cost management
Better encryption

What can be used for EC2 instances in a private subnet to connect to the internet? What can be used for EC2 instances in a private subnet to connect to the internet?

1 Mark(s)

WAF
DirectConnect
NAT Gateway
VPN

You are working as a solutions architect for a tech company where you are instructed to build a web architecture using On-Demand EC2 instances and a database in AWS. However, due to budget constraints, the company instructed you to choose a database service in which they no longer need to worry about database management tasks such as hardware or software provisioning, setup, configuration, scaling and backups. Which database service in AWS is best to use in this scenario? You are working as a solutions architect for a tech company where you are instructed to build a web architecture using On-Demand EC2 instances and a database in AWS. However, due to budget constraints, the company instructed you to choose a database service in which they no longer need to worry about database management tasks such as hardware or software provisioning, setup, configuration, scaling and backups. Which database service in AWS is best to use in this scenario?

1 Mark(s)

AWS RDS
DynamoDB
Amazon ElastiCache
Redshift
MySQL database running on EBS backed EC2 intsnace

In Amazon RDS, database snapshots and automated backups are stored in: In Amazon RDS, database snapshots and automated backups are stored in:

1 Mark(s)

Amazon S3
Amazon ECS Volume
Amazon RDS
Amazon EMR

You are unable to connect to your Spot EC2 instance via SSH. Which of the following should you check and possibly correct to restore connectivity? You are unable to connect to your Spot EC2 instance via SSH. Which of the following should you check and possibly correct to restore connectivity?

1 Mark(s)

Apply the most recent OS security patches.
Configure the IAM role to permit SSH connections to your EC2 instance.
Configure the Security Group of the EC2 instance to permit ingress traffic over port 3389 from your IP.
Configure the Security Group of the EC2 instance to permit ingress traffic over port 22 from your IP.
Configure the Security Group of the EC2 instance to permit ingress traffic over port 443 from your IP.

The game development company that you are working for has an Amazon VPC with a public subnet. It has 4 EC2 instances that are deployed in the public subnet. These 4 instances can successfully communicate with other hosts on the Internet. You launched a fifth instance in the same public subnet, using the same AMI and security group configuration that you used for the others. However, this new instance cannot be accessed from the internet unlike the other instance. What should you do to enable access to the fifth instance over the Internet? The game development company that you are working for has an Amazon VPC with a public subnet. It has 4 EC2 instances that are deployed in the public subnet. These 4 instances can successfully communicate with other hosts on the Internet. You launched a fifth instance in the same public subnet, using the same AMI and security group configuration that you used for the others. However, this new instance cannot be accessed from the internet unlike the other instance. What should you do to enable access to the fifth instance over the Internet?

1 Mark(s)

Deploy a NAT instance into the public subnet.
Assign an Elastic IP address to the new instance.
Configure a publicly routable IP Address in the host OS of the new instance.
Modify the routing table for the public subnet.

You are a Solutions Architect of a tech company. You are having an issue whenever you try to connect to your newly created EC2 instance using a Remote Desktop connection from your computer. Upon checking, you have verified that the instance has a public IP and the Internet gateway and route tables are in place. What else should you do for you to resolve this issue? You are a Solutions Architect of a tech company. You are having an issue whenever you try to connect to your newly created EC2 instance using a Remote Desktop connection from your computer. Upon checking, you have verified that the instance has a public IP and the Internet gateway and route tables are in place. What else should you do for you to resolve this issue?

1 Mark(s)

You should adjust the security group to allow traffic from port 22
You should adjust the security group to allow traffic from port 3389
You should restart the EC2 instance since there might be some issue with the instance
You should create a new instance since there might be some issue with the instance

A tech company is currently using Amazon Simple Workflow (SWF) service with a default configuration for their order processing system. The system works fine but you noticed that some of the orders seem to be stuck for almost 4 weeks. What could be the possible reason for this? A tech company is currently using Amazon Simple Workflow (SWF) service with a default configuration for their order processing system. The system works fine but you noticed that some of the orders seem to be stuck for almost 4 weeks. What could be the possible reason for this?

1 Mark(s)

It is because SWF is waiting human input from an activity task.
The workflow has exceeded SWF’s 15-day maximum workflow execution time.
The workflow has exceeded SWF’s 14-day maximum workflow execution time.
SWF should be restarted.

Your company would like to store their old yet confidential corporate files that are infrequently accessed. What cost-efficient solution in AWS should you recommend? Your company would like to store their old yet confidential corporate files that are infrequently accessed. What cost-efficient solution in AWS should you recommend?

1 Mark(s)

Amazon Storage Gateway
Amazon Glacier
Amazon EBS
Amazon S3

You have a web-based order processing system which is currently using a queue in Amazon SQS. The support team noticed that there are a lot of cases where an order was processed twice. This issue has caused a lot of trouble in your processing and made your customers very unhappy. Your IT Manager has asked you to ensure that this issue does not happen again. What can you do to prevent this from happening again in the future? You have a web-based order processing system which is currently using a queue in Amazon SQS. The support team noticed that there are a lot of cases where an order was processed twice. This issue has caused a lot of trouble in your processing and made your customers very unhappy. Your IT Manager has asked you to ensure that this issue does not happen again. What can you do to prevent this from happening again in the future?

1 Mark(s)

Alter the retention period in Amazon SQS.
Alter the visibility timeout of SQS.
Replace Amazon SQS and instead, use Amazon Simple Workflow service
Change the message size in SQS.

What will happen if you disabled the automated backups for AWS RDS? What will happen if you disabled the automated backups for AWS RDS?

1 Mark(s)

There is absolutely no impact.
You are disabling the point-in-time recovery.
You would not be able to make manual backups anymore.
It is not possible to disable automated backups in RDS.

You have an Auto Scaling group which is configured to launch new t2.micro EC2 instances when there is a significant load increase in the application. To cope with the demand, you now need to replace those instances with a larger t2.2xlarge instance type. How would you implement this change? You have an Auto Scaling group which is configured to launch new t2.micro EC2 instances when there is a significant load increase in the application. To cope with the demand, you now need to replace those instances with a larger t2.2xlarge instance type. How would you implement this change?

1 Mark(s)

Just change the instance type to t2.2xlarge in the current launch configuration
Create another Auto Scaling Group and attach the new instance type.
Create a new launch configuration with the new instance type and update the Auto Scaling Group.
Change the instance type of each EC2 instance manually.

In AWS Lambda, what can you use to manage your functions? (Choose 3) In AWS Lambda, what can you use to manage your functions? (Choose 3)

1 Mark(s)

Console
CLI
SDK
IAM

You are working for a large insurance firm that has a requirement to store miscellaneous data in AWS that are not frequently accessed. If data recovery time is not an issue, which of the following is the best and most cost-efficient solution that will fulfill this requirement? You are working for a large insurance firm that has a requirement to store miscellaneous data in AWS that are not frequently accessed. If data recovery time is not an issue, which of the following is the best and most cost-efficient solution that will fulfill this requirement?

1 Mark(s)

Amazon S3 - Standard
Amazon S3 Standard - Infrequent Access
Amazon Glacier
Amazon S3 - Reduced Redundancy Storage

In EBS encryption, what service does AWS use to secure the volume's data? (Choose 2) In EBS encryption, what service does AWS use to secure the volume's data? (Choose 2)

1 Mark(s)

By using your own keys in AWS Key Management Service (KMS).
By using S3 Server-Side Encryption.
By using Amazon-managed keys in AWS Key Management Service (KMS).
By using S3 Client-Side Encryption.
By using a password stored in CloudHSM.

You need an automated way to install the latest version of Node.js and Node Package Manager (NPM) on a Linux instance when the EC2 instance is launched. Which feature in AWS allows you to accomplish this requirement? You need an automated way to install the latest version of Node.js and Node Package Manager (NPM) on a Linux instance when the EC2 instance is launched. Which feature in AWS allows you to accomplish this requirement?

1 Mark(s)

User Data
Metadata
IAM Roles
AWS Config

You are working for a tech company that is using a lot of EBS volumes in their EC2 instances. An incident occurred that requires you to delete the EBS volumes and then re-create them again. What step should you do before you delete the EBS volumes? You are working for a tech company that is using a lot of EBS volumes in their EC2 instances. An incident occurred that requires you to delete the EBS volumes and then re-create them again. What step should you do before you delete the EBS volumes?

1 Mark(s)

Create a copy of the EBS volume using the CopyEBSVolume command.
Store a snapshot of the volume.
Download the content to an EC2 instance.
Back up the data into a physical disk.

You are working for a large global media company with multiple office locations all around the world. You are instructed to build a system to distribute training videos to all employees. Using CloudFront, what method would be used to serve content that is stored in S3, but not publicly accessible from S3 directly? You are working for a large global media company with multiple office locations all around the world. You are instructed to build a system to distribute training videos to all employees. Using CloudFront, what method would be used to serve content that is stored in S3, but not publicly accessible from S3 directly?

1 Mark(s)

Create an Origin Access Identity (OAI) for CloudFront and grant access to the objects in your S3 bucket to that OAI.
Create an Identity and Access Management (IAM) user for CloudFront and grant access to the objects in your S3 bucket to that IAM user.
Create a S3 bucket policy that lists the CloudFront distribution ID as the principal and the target bucket as the Amazon Resource Name (ARN).
Add the CloudFront account security group.

All Amazon EC2 instances are assigned 2 IP addresses at launch. Which of these two addresses can only be reached from within the Amazon EC2 network? All Amazon EC2 instances are assigned 2 IP addresses at launch. Which of these two addresses can only be reached from within the Amazon EC2 network?

1 Mark(s)

Multiple IP address
Public IP address
Private IP address
Elastic IP Address

What is the best definition of an SQS message? What is the best definition of an SQS message?

1 Mark(s)

A sequential message mainly used for push-mobile notification
A set of instructions stored in an SQS queue that can be up to 512KB in size
A notification sent via SNS
A set of instructions stored in an SQS queue that can be up to 256KB in size