AWS cuestionario 14

A company is using an Amazon S3 bucket to store archived data for audits. The company needs long-term storage for the data. The data is rarely accessed and must be available for retrieval the next business day. After a quarterly review, the company wants to reduce the storage cost for the S3 bucket. A solutions architect must recommend the most cost-effective solution to store the archived data. Which solution will meet these requirements?

• Store the data on an Amazon EC2 instance that uses Amazon Elastic Block Store (Amazon EBS).

• Store the data in another S3 bucket in a different AWS Region.

• Store the data in S3 Glacier.

• Use an S3 Lifecycle configuration rule to move the data to S3 Standard-Infrequent Access (S3 Standard-IA).

A company needs to implement a secure data encryption solution to meet regulatory requirements. The solution must provide security and durability in generating, storing, and controlling cryptographic data keys. Which action should be taken to provide the MOST secure solution?

• Use OpenSSL to generate the cryptographic keys and upload the keys to an Amazon S3 bucket with encryption enabled. Apply AWS Key Management Service (AWS KMS) key policies to control access to the keys.

• Use AWS Key Management Service (AWS KMS) to generate AWS KMS keys and data keys. Use AWS KMS key policies to control access to the KMS keys.

• Use AWS Key Management Service (AWS KMS) to generate cryptographic keys and import the keys to AWS Certificate Manager. Use IAM policies to control access to the keys.

• Use a third-party solution from AWS Marketplace to generate the cryptographic keys and store them on encrypted instance store volumes. Use IAM policies to control access to the encryption key APIs

A company is developing an application that runs on Amazon EC2 instances in a private subnet. The EC2 instances use a NAT gateway to access the internet. A solutions architect must provide a secure option so that developers can log in to the instances. Which solution meets these requirements MOST cost-effectively?

• Configure AWS Site-to-Site VPN to log in directly to the EC2 instances.

• Use the existing NAT gateway to log in to the EC2 instances in a private subnet.

• Configure a bastion host in a public subnet to log in to the EC2 instances in a private subnet.

• Configure AWS Systems Manager Session Manager for the EC2 instances to enable login.

A Solutions Architect notices an abnormal amount of network traffic coming from an Amazon EC2 instance. The traffic is determined to be malicious and the destination needs to be determined. What tool can the Solutions Architect use to identify the destination of the malicious network traffic?

• Consult the AWS Personal Health Dashboard.

• Enable VPC Flow Logs and filter the logs.

• Filter the logs from Amazon CloudWatch.

• Enable AWS CloudTrail and filter the logs.

A company is deploying a production portal application on AWS. The database tier runs on a MySQL database. The company requires a highly available database solution that maximizes ease of management. How can the company meet these requirements?

• Deploy the database on multiple Amazon EC2 instances that are backed by Amazon Elastic Block Store (Amazon EBS) across multiple Availability Zones. Schedule periodic EBS snapshots.

• Use Amazon RDS with a Single-AZ deployment. Schedule periodic database snapshots.

• Use Amazon DynamoDB with an Amazon DynamoDB Accelerator (DAX) cluster. Create periodic on-demand backups.

• Use Amazon RDS with a Multi-AZ deployment. Schedule periodic database snapshots.

A company is designing a human genome application using multiple Amazon EC2 Linux instances. The high performance computing (HPC) application requires low latency and high performance network communication between the instances. Which solution provides the LOWEST latency between the instances?

• Launch the EC2 instances in a cluster placement group.

• Launch the EC2 instances in a spread placement group.

• Launch the EC2 instances in an Auto Scaling group spanning multiple Availability Zones within a Region.

• Launch the EC2 instances in an Auto Scaling group spanning multiple Regions.

A company requires operating system permissions on a relational database server. What should a solutions architect suggest as a configuration for a highly available database architecture? 

• Multiple Amazon EC2 instances in a database replication configuration that uses two Availability Zones

• A database installed on a single Amazon EC2 instance in an Availability Zone

• Multiple Amazon EC2 instances in a replication configuration that uses a placement group

• Amazon RDS in a Multi-AZ configuration with Provisioned IOPS

A company's application allows users to upload image files to an Amazon S3 bucket. These files are accessed frequently for the first 30 days. After 30 days, these files are rarely accessed, but need to be durably stored and available immediately upon request. A solutions architect is tasked with configuring a lifecycle policy that minimizes the overall cost while meeting the application requirements. Which action will accomplish this? 

• Configure a lifecycle policy to move the files to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.

• Configure a lifecycle policy to move the files to S3 Glacier Deep Archive after 30 days.

• Configure a lifecycle policy to move the files to S3 Glacier after 30 days.

• Configure a lifecycle policy to move the files to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days

A solutions architect has been given a large number of video files to upload to an Amazon S3 bucket. The file sizes are 100–500 MB. The solutions architect also wants to easily resume failed upload attempts. How should the solutions architect perform the uploads in the LEAST amount of time? 

• Upload the files with SFTP and the AWS Transfer Family.

• Split each file into 5-MB parts. Upload the individual parts normally and use S3 multipart upload to merge the parts into a complete object.

• From the Amazon S3 console, select the S3 bucket. Upload the S3 bucket, and drag and drop items into the bucket.

• Using the AWS CLI, copy individual objects into the S3 bucket with the aws s3 cp command.

A gaming company is experiencing exponential growth. On multiple occasions, customers have been unable to access resources. To keep up with the increased demand, Management is considering deploying a cloud-based solution. The company is looking for a solution that can match the on-premises resilience of multiple data centers, and is robust enough to withstand the increased growth activity. Which configuration should a Solutions Architect implement to deliver the desired results? 

• A VPC configured with an ELB Application Load Balancer targeting an EC2 Auto Scaling group consisting of Amazon EC2 instances spanning two AWS Regions

• A VPC configured with an ELB Network Load Balancer targeting an EC2 Auto Scaling group consisting of Amazon EC2 instances spanning two Availability Zones

• Multiple Amazon EC2 instances configured within peered VPCs across two Availability Zones

• A VPC configured with an ELB Application Load Balancer targeting an EC2 Auto Scaling group consisting of Amazon EC2 instances in one Availability Zone