AWS Architect Test 3 - parte 2

Your company has been hosting a static website in an S3 bucket for several months and gets a fair amount of traffic. Now you want your registered .com domain to serve content from the bucket. Your domain is reached via https://www.myfavoritedomain.com/

However, any traffic requested through https://www.myfavoritedomain.com is not getting through. What could be the most likely cause of this disruption?

• The new domain name is not registered in CloudWatch monitoring

• The S3 bucket has not been configured to allow Cross-Origin Resource Sharing (CORS)

• The S3 bucket was not created in the correct region

• https://www.myfavoritedomain.com wasn’t registered with AWS Route 53 and therefore won’t work

You have a business-critical two-tier web application, currently deployed in 2 Availability Zones in a single region, using Elastic Load Balancing and Auto Scaling. The app depends on synchronous replication at the database layer. The application needs to remain fully available even if one application AZ goes offline or Auto Scaling cannot launch new instances in the remaining AZ. How could the current Elastic Load Balancing be enhanced to ensure this?

• Deploy in 2 regions using Weighted Round Robin with Auto Scaling set at a minimum 50% peak load per region.

• Deploy in 3 AZ with Auto Scaling, set to handle a minimum of 33 percent peak load per zone.

• Deploy in 3 AZ with Auto Scaling, set to handle a minimum 50 percent peak load per zone.

• Deploy in 2 regions using Weighted Round Robin with Auto Scaling, set at minimum 100% peak load per region.

A company website is set to launch in the upcoming weeks. There is a probability that the traffic will be quite high during the initial weeks. In the event of a load failure, how is it possible to set up DNS failover to a static website?

• Duplicate the exact application architecture in another region and configure DNS Weight-based routing.

• Enable failover to an on-premises data center to the application hosted there.

• Use Route 53 with the failover option, to failover to a static S3 website bucket or CloudFront distribution.

• Add more servers in case the application fails.

In order to manage a large number of AWS accounts in a better way, you create a new AWS Organization and invite these accounts. You only enable the “Consolidated billing” feature set in the organization. Which of the below features does the AWS Organization have?

• Apply SCPs to restrict the services that IAM users can access.

• Configure tag policies to maintain consistent tags for resources in the organization's accounts.

• Configure a policy to prevent IAM users in the organization from disabling AWS CloudTrail.

• Combine the usage across all accounts to share the volume pricing discounts.

You are working as an AWS Architect for an IT Company. Your Company is using EC2 instances in multiple VPCs spanning Availability Zones in (US-EAST-1) Region. The Development Team has deployed a new Intranet application that needs to be accessed via VPC. You have been asked to establish connectivity between all the VPCs and to make sure the solution is highly scalable and secure. Which of the following solution would you recommend?

• Attach an Internet Gateway to all the VPCs at the "US-EAST-1" region and allow all users to access this application over the internet.

• Deploy Network Load Balancers along with VPC endpoint service (AWS PrivateLink) to establish connectivity between the VPC's in the "US-EAST-1" region.

• Use VPC Peering between all the VPCs at the "US-EAST-1" region to provide connectivity between users servers.

• Create a VPN between instances at the various VPCs in "US-EAST-1" region to establish connectivity

You work in a large organization. Your team creates AWS resources such as Amazon EC2 dedicated hosts and reserved capacities that need to be shared by other AWS accounts. You need an AWS service to centrally manage these resources so that you can easily specify which accounts or Organizations can access the resources. Which AWS service would you choose to meet this requirement?

• IAM

• Resource Access Manager

• Service Catalog

• AWS Single Sign-On

You are responsible for deploying a critical application to AWS. It is required to ensure that the controls set for this application meet PCI compliance. Also, there is a need to monitor web application logs to identify any malicious activity. Which of the following services could be used to fulfill this requirement?

(Select Three)

• Amazon Cloud Watch Logs

• Amazon VPC Flow Logs

• Amazon Trusted Advisor

• Amazon Cloud Trail