AWS Architect Class 10

An application running on EC2 instances processes sensitive information stored on Amazon S3. The information is accessed over the Internet. The security team is concerned that the Internet connectivity to Amazon S3 is a security risk. Which solution will resolve the security concern?

• Access the data through an Internet Gateway

• Access the data through a VPN connection.

• Access the data through a NAT Gateway.

• Access the data through a VPC endpoint for Amazon S3.

An application saves the logs to an S3 bucket. A user wants to keep the logs for one month for troubleshooting purposes, and then purge the logs. What feature will enable this?

• Adding a bucket policy on the S3 bucket

• Configuring lifecycle configuration rules on the S3 bucket.

• Creating an IAM policy for the S3 bucket.

• Enabling CORS on the S3 bucket.

A web application allows customers to upload orders to an S3 bucket. The resulting Amazon S3 events trigger a Lambda function that inserts a message to an SQS queue. A single EC2 instance reads messages from the queue, processes them, and stores them in an DynamoDB table partitioned by unique order ID. Next month traffic is expected to increase by a factor of 10 and a Solutions Architect is reviewing the architecture for possible scaling problems. Which component is MOST likely to need re-architecting to be able to scale to accommodate the new traffic?

• Lambda function

• SQS queue

• EC2 instance

• DynamoDB table

A Solutions Architect is designing a critical business application with a relational database that runs on an EC2 instance. It requires a single EBS volume that can support up to 16,000 IOPS. Which Amazon EBS volume type can meet the performance requirements of this application?

• EBS Provisioned IOPS SSD

• EBS Throughput Optimized HDD

• EBS General Purpose SSD

• EBS Cold HDD

Organization ABC has a

customer base in the US and Australia that would be downloading 10s of GBs

files from your application. For them to have a better download experience,

they decided to use the AWS S3 bucket with cross-region replication with the

US as the source and Australia as the destination. They are using existing

unused S3 buckets and had set up cross-region replication successfully.

However, when files uploaded to the US bucket, they are not being replicated

to Australia bucket. What could be the reason?

• Versioning

  is not enabled on the source and destination buckets.

• Encryption

  is not enabled on the source and destination buckets.

• Source bucket has a

  policy with DENY and role used for replication is not excluded from DENY.

• Destination bucket’s

  default CORS policy does not have source bucket added as the origin.

A static website is in

S3 and there are global clients. Which service store cache for frequently

accessed content so that the latency is reduced and the data transfer rate is

increased?

• Use AWS SDKs to horizontally scale parallel requests to the Amazon S3 service endpoints.

• Create multiple Amazon S3 buckets and put Amazon EC2 and S3 in the same AWS Region.

• Enable Cross-Region Replication to several AWS Regions to serve customers from different locations.

• Configure CloudFront to deliver the content in the S3 bucket.