A Solutions Architect must secure the network traffic for two applications running on separate Amazon EC2 instances in the same subnet. The applications are called Application A and Application B. Application A requires that inbound HTTP requests be allowed and all other inbound traffic be blocked. Application B requires that inbound HTTPS traffic be allowed and all other inbound traffic be blocked, including HTTP traffic. What should the Solutions Architect use to meet these requirements?

Configure the access with security groups.

Configure the network connectivity with VPC peering.

Configure the access with network access control lists (network ACLs).

Configure the network connectivity with route tables.

A SysOps administrator is looking into a way to automate the deployment of new SSL/TLS certificates to their web servers, and a centralized way to track and manage the deployed certificates. Which AWS service can the administrator use to fulfill the above-mentioned needs?

AWS Systems Manager Parameter Store

Configure AWS Systems Manager Run Command

A data processing facility wants to move a group of Microsoft Windows servers to the AWS Cloud. Theses servers require access to a shared file system that can integrate with the facility's existing Active Directory infrastructure for file and folder permissions. The solution needs to provide seamless support for shared files with AWS and on-premises servers and allow the environment to be highly available. The chosen solution should provide added security by supporting encryption at rest and in transit. Which storage solution would meet these requirements?

An Amazon FSx for the Windows File Server file system joined to the existing Active Directory domain

An Amazon S3 bucket mounted on Amazon EC2 instances in multiple Availability Zones running Windows Server

An Amazon S3 File Gateway joined to the existing Active Directory domain

An Amazon Elastic File System (Amazon EFS) file system joined to an AWS Managed Microsoft AD domain

A company is migrating its on-premises application to Amazon Web Services and refactoring its design. The design will consist of frontend Amazon EC2 instances that receive requests, backend EC2 instances that process the requests, and a message queuing service to address decoupling the application. The Solutions Architect has been informed that a key aspect of the application is that requests are processed in the order in which they are received. Which AWS service should the Solutions Architect to decouple the application?

Amazon Simple Queue Service (Amazon SQS) FIFO queue

Amazon Simple Notification Service (Amazon SNS)

Amazon Simple Queue Service (Amazon SQS) standard queue

A hospital client is migrating from another cloud provider to AWS and is looking for advice on modernizing as they migrate. They have containerized applications that run on tablets. During spikes caused by increases in patient visits, the communications from the applications to the central database occasionally fail. As a result, the client currently has the applications try to write to the central database once, and if that write fails, it writes to a dedicated application PostgreSQL database run by the hospital IT team on premises. Each of those PostgreSQL databases then sends batch information on to the central database. The client is asking for recommendations for migrating or refactoring the database write process to decrease operational overhead. What should the solutions architect recommend? (Select TWO.)

Migrate the local databases to Aurora Serverless for PostgreSQL.

Refactor the applications to use Amazon Simple Queue Service and eliminate the local PostgreSQL databases.

Migrate the PostgreSQL databases to an RDS instance with a read replica that replaces each of the local databases.

Refactor the central database to add an Amazon ElastiCache lazy loading cache in front of the database.

Migrate the containerized applications to AWS Fargate.

A solutions architect needs to design a secure environment for AWS resources that are being deployed to Amazon EC2 instances in a VPC. The solution should support for a three-tier architecture consisting of web servers, application servers, and a database cluster. The VPC needs to allow resources in the web tier to be accessible from the internet with only the HTTPS protocol. Which combination of actions would meet these requirements? (Select TWO.)

Attach an internet gateway to the VPC. Create public subnets for the web tier. Create private subnets for the application and database tiers.

Create a web server security group that allows HTTPS requests from the internet. Create an application server security group that allows requests from the web security group only. Create a database cluster security group that allows TCP connections from the application security group on the database port only.

Attach Amazon API Gateway to the VPC. Create private subnets for the web, application, and database tiers.

Create a web server security group that allows all traffic from the internet. Create an application server security group that allows requests from only the Amazon API Gateway on the application port. Create a database cluster security group that allows TCP connections from the application security group on the database port only.

Attach a virtual private gateway to the VPC. Create public subnets for the web and application tiers. Create private subnets for the database tier.

A company is building a distributed application, which will send sensor IoT data-- including weather conditions and wind speed from wind turbines--to the AWS Cloud for further processing. Because the nature of the data is spiky, the application needs to be able to scale. It is important to store the streaming data in a key-value database and then send it over to a centralized data lake, where it can be transformed, analyzed, and combined with diverse organizational datasets to derive meaningful insights and make predictions. Which combination of solutions would accomplish the business need with minimal operational overhead? (Select TWO.)

Configure Amazon Kinesis to deliver streaming data to an Amazon S3 data lake.

Use Amazon DynamoDB to store the IoT sensor data, and enable DynamoDB Streams.

Use Amazon DocumentDB to store IoT sensor data.

Write AWS Lambda functions to deliver streaming data to Amazon S3.

Use Amazon Kinesis to deliver streaming data to Amazon Redshift, and enable Amazon Redshift Spectrum.

An organization is planning to migrate from an on-premises data center to an AWS environment that spans multiple Availability Zones. A migration engineer has been tasked to plan how to transfer the home directories and other shared network attached storage from the data center to AWS. The migration design should support connections from multiple Amazon EC2 instances running the Linux operating system to this common shared storage platform. What storage option best fits their design?

Transfer the files to Amazon EFS and mount that file system to the EC2 instances.

Transfer the files to one EBS volume and mount that volume to the EC2 instances.

Transfer the files to Amazon S3 and access that data from the EC2 instances.

Transfer the files to the EC2 Instance Store attached to the EC2 instances.

A company uses AWS Organizations. The company recently acquired a new business unit and invited the new unit’s existing account to the company’s organization. The organization uses a deny list SCP in the root of the organization and all accounts are members of a single OU named Production. The administrators of the new business unit discovered that they are unable to access AWS Database Migration Service (DMS) to complete an in-progress migration. Which option will temporarily allow administrators to access AWS DMS and complete the migration project?

Create a temporary OU named Staging for the new account. Apply an SCP to the Staging OU to allow AWS DMS actions. Move the organization's deny list SCP to the Production OU. Move the new account to the Production OU when adjustments to AWS DMS are complete.

Remove the organization's root SCPs that limit access to AWS DMS. Create an SCP that allows AWS DMS actions and apply the SCP to the Production OU.

Convert the organization's root SCPs from deny list SCPs to allow list SCPs to allow the required services only. Temporarily apply an SCP to the organization's root that allows AWS DMS actions for principals only in the new account.

Create a temporary OU named Staging for the new account. Apply an SCP to the Staging OU to allow AWS DMS actions. Move the new account to the Production OU when the migration project is complete.

A solutions architect has been tasked with designing a three-tier application for deployment in AWS. There will be a web tier as the frontend, a backend application tier for data processing, and a database that will be hosted on Amazon RDS. The application frontend will be distributed to end users by CloudFront. Following best practices, it is decided that there should not be any point-to-point dependencies between the different layers of the infrastructure. How many Elastic Load Balancing load balancers should the architect deploy in the architecture so that this application's design follows best practices?

Two load balancers. One public load balancer would direct traffic to the web tier, and one private load balancer would direct traffic to the application tier.

Zero. Use the load balancer that is automatically enabled when CloudFront is deployed.

Three load balancers. One public load balancer would direct traffic to the web tier. One private load balancer would direct traffic to the application tier. Another private load balancer would direct traffic to the Amazon RDS database.

One load balancer. This load balancer would be between the web tier and the application tier.

A client has created a website ( www.example.com ), with an Application Load Balancer in a public subnet. The load balancer targets an application hosted on EC2 instances in private subnets, which rely on an Amazon Aurora PostgreSQL-Compatible Edition DB instance in separate private subnets. When testing the website, static content from the EC2 instance is displayed, but any content driven by database queries fails to load. What should the administrator check?

Check if the security group of the database subnet allows inbound traffic from the EC2 subnets.

Check the Amazon Route 53 CNAME record to ensure that www.example.com points to the top-level domain (example.com).

Check that the route table for the database subnets includes a default route to the internet gateway for the VPC.

Check the network access control list (network ACL) of the application subnets for an outbound allow statement.

A company has developed an application that processes photos and videos. When users upload photos and videos, a job processes the files. The job can take up to 1 hour to process long videos. The company is using Amazon EC2 On-Demand Instances to run web servers and processing jobs. The web layer and the processing layer have instances that run in an Auto Scaling group behind an Application Load Balancer. During peak hours, users report that the application is slow and that the application does not process some requests at all. During evening hours, the systems are idle. What should a solutions architect do so that the application will process all jobs in the MOST cost-effective manner?

Use an Amazon Simple Queue Service (Amazon SQS) standard queue between the web layer and the processing layer. Use a custom queue metric to scale the Auto Scaling group in the processing layer.

Use AWS Lambda functions instead of EC2 instances and Auto Scaling groups. Increase the service quota so that sufficient concurrent functions can run at the same time.

Use Spot Instances for the Auto Scaling groups of the web layer and the processing layer.

Use a larger instance size in the Auto Scaling groups of the web layer and the processing layer.

A Solutions Architect has been tasked with creating a data store location that will be able to handle different file formats of unknown sizes. It is required that this data be highly available and protected from being accidentally deleted. What solution meets the requirements and is the MOST cost-effective?

Deploy an Amazon S3 bucket and enable Object Versioning.

Deploy an Amazon S3 bucket and enable Cross-Region Replication.

Deploy a database using Amazon RDS and configure a Multi-AZ deployment for that database.

Deploy an Amazon DynamoDB table and enable Global Tables.

A company has a web application in which customers can log in and read near-real-time status updates about their orders. The company hosts the application on Amazon EC2 instances and is expanding the application from the eu-west-1 Region into the us-east-1 Region. The application relies on an Amazon RDS for MySQL database. The company already has provisioned the necessary EC2 instances in the new Region. The company needs to deploy the application in us-east-1 with the least possible change to the application. The company also needs fast, local database queries in both Regions. Which modification of the database will meet these requirements?

Migrate the RDS database to an Amazon Aurora global database. Add a secondary cluster in us-east-1.

Migrate the RDS database to an Amazon DynamoDB table. Create global tables for us-east-1.

Migrate the RDS database to an Amazon Aurora Serverless database. Configure automatic scaling in us-east-1.

Place an accelerator from AWS Global Accelerator in front of the RDS database to reduce the network latency from us-east-1.

A large international company has a management account in AWS Organizations, and over 50 individual accounts for each country they operate in. Each of the country accounts has least four VPCs set up for functional divisions. There is a high amount of trust across the accounts, and communication among all of the VPCs should be allowed. Each of the individual VPCs throughout the entire global organization will need to access an account and VPC that provide shared services to all the other accounts. How can the member accounts access the shared services VPC with the LEAST operational overhead?

Create a Network Load Balancer across the Availability Zones in the shared services VPC. Create service consumer roles in IAM, and set endpoint connection acceptance to automatically accept. Create consumer endpoints in each division VPC and point to the Network Load Balancer.

Create a peering connection between each of the VPCs and the shared services VPC.

Create an Application Load Balancer, with a target of the private IP address of the shared services VPC. Add a Certification Authority Authorization (CAA) record for the Application Load Balancer to Amazon Route 53. Point all requests for shared services in the routing tables of the VPCs to the CAA record.

Create a VPN connection between each of the VPCs and the shared service VPC.

After reviewing the cost optimization checks in AWS Trusted Advisor, a team finds that it has 10,000 Amazon Elastic Block Store (Amazon EBS) snapshots in its account that are more than 30 days old. The team has determined that it needs to implement better governance for the lifecycle of its resources. Which actions should the team take to automate the lifecycle management of the EBS snapshots with the LEAST effort? (Select TWO.)

Create and schedule a backup plan with AWS Backup.

Use Amazon Data Lifecycle Manager (Amazon DLM).

Schedule and run backups in AWS Systems Manager.

Use a scheduled event in Amazon EventBridge (Amazon CloudWatch Events) and invoke AWS Step Functions to manage the snapshots.

Copy the EBS snapshots to Amazon S3, and then create lifecycle configurations in the S3 bucket.

A company is deploying an environment for a new data processing application. This application will be frequently accessed by 20 different departments across the globe seeking to run analytics. The company plans to charge each department for the cost of that department's access. Which solution will meet these requirements with the LEAST effort?

Amazon Athena with workgroups set up for each department. Each department will query via the workgroup tagged for their team in the billing console.

PostgreSQL on Amazon RDS, with read replicas for each department. Each department will query the read replica tagged for their team in the billing console.

Amazon Redshift, with clusters set up for each department. Each department will query the cluster tagged for their team in the billing console.

Amazon Aurora with global databases. Each department will query a database in a different Region, and the Region is tagged in the billing console.

A startup company is looking for a solution to cost-effectively run and access microservices without the operational overhead of managing infrastructure. The solution needs to be able scale quickly to accommodate rapid changes in the volume of requests and protect against common DDoS attacks. What is the MOST cost-effective solution that meets these requirements?

Run the microservices in AWS Lambda behind an Amazon API Gateway.

Run the microservices in containers using Amazon Elastic Container Service (Amazon ECS) backed by EC2 instances

Run the microservices on Amazon EC2 instances in an Auto Scaling group.

Run the microservices in containers using AWS Elastic Beanstalk.

An API receives a high volume of sensor data. The data is written to a queue before being processed to produce trend analysis and forecasting reports. With the current architecture, some data records are being received and processed more than once. How can a solutions architect modify the architecture to ensure that duplicate records are not processed?

Configure the API to send the records to an Amazon Simple Queue Service (Amazon SQS) FIFO queue.

Configure the API to send the records to Amazon Simple Notification Service (Amazon SNS).

Configure the API to send the records to Amazon Kinesis Data Firehose.

Configure the API to send the records to Amazon Kinesis Data Streams.

A financial services company is migrating its multi-tier web application to AWS. The application architecture consists of a fleet of web servers, application servers, and an Oracle database. The company must have full control over the database's underlying operating system, and the database must be highly available. Which approach should a solutions architect use for the database tier to meet these requirements?

Migrate to Amazon EC2 instances in two Availability Zones. Install Oracle Database and configure the instances to operate as a cluster.

Migrate the database to an Amazon RDS for Oracle Multi-AZ DB instance.

Migrate the database to an Amazon RDS for Oracle DB Single-AZ DB instance.

Migrate to Amazon EC2 instances in a single Availability Zone. Install Oracle Database and configure the instances to operate as a cluster.

AWS cuestionario 14 Quiz

1.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A company is using an Amazon S3 bucket to store archived data for audits. The company needs long-term storage for the data. The data is rarely accessed and must be available for retrieval the next business day. After a quarterly review, the company wants to reduce the storage cost for the S3 bucket. A solutions architect must recommend the most cost-effective solution to store the archived data. Which solution will meet these requirements?

Store the data on an Amazon EC2 instance that uses Amazon Elastic Block Store (Amazon EBS).

Store the data in another S3 bucket in a different AWS Region.

Store the data in S3 Glacier.

Use an S3 Lifecycle configuration rule to move the data to S3 Standard-Infrequent Access (S3 Standard-IA).

2.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A company needs to implement a secure data encryption solution to meet regulatory requirements. The solution must provide security and durability in generating, storing, and controlling cryptographic data keys. Which action should be taken to provide the MOST secure solution?

Use OpenSSL to generate the cryptographic keys and upload the keys to an Amazon S3 bucket with encryption enabled. Apply AWS Key Management Service (AWS KMS) key policies to control access to the keys.

Use AWS Key Management Service (AWS KMS) to generate AWS KMS keys and data keys. Use AWS KMS key policies to control access to the KMS keys.

Use AWS Key Management Service (AWS KMS) to generate cryptographic keys and import the keys to AWS Certificate Manager. Use IAM policies to control access to the keys.

Use a third-party solution from AWS Marketplace to generate the cryptographic keys and store them on encrypted instance store volumes. Use IAM policies to control access to the encryption key APIs

3.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A company is developing an application that runs on Amazon EC2 instances in a private subnet. The EC2 instances use a NAT gateway to access the internet. A solutions architect must provide a secure option so that developers can log in to the instances. Which solution meets these requirements MOST cost-effectively?

Configure AWS Site-to-Site VPN to log in directly to the EC2 instances.

Use the existing NAT gateway to log in to the EC2 instances in a private subnet.

Configure a bastion host in a public subnet to log in to the EC2 instances in a private subnet.

Configure AWS Systems Manager Session Manager for the EC2 instances to enable login.

4.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A Solutions Architect notices an abnormal amount of network traffic coming from an Amazon EC2 instance. The traffic is determined to be malicious and the destination needs to be determined. What tool can the Solutions Architect use to identify the destination of the malicious network traffic?

Consult the AWS Personal Health Dashboard.

Enable VPC Flow Logs and filter the logs.

Filter the logs from Amazon CloudWatch.

Enable AWS CloudTrail and filter the logs.

5.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A company is deploying a production portal application on AWS. The database tier runs on a MySQL database. The company requires a highly available database solution that maximizes ease of management. How can the company meet these requirements?

Deploy the database on multiple Amazon EC2 instances that are backed by Amazon Elastic Block Store (Amazon EBS) across multiple Availability Zones. Schedule periodic EBS snapshots.

Use Amazon RDS with a Single-AZ deployment. Schedule periodic database snapshots.

Use Amazon DynamoDB with an Amazon DynamoDB Accelerator (DAX) cluster. Create periodic on-demand backups.

Use Amazon RDS with a Multi-AZ deployment. Schedule periodic database snapshots.

6.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A company is designing a human genome application using multiple Amazon EC2 Linux instances. The high performance computing (HPC) application requires low latency and high performance network communication between the instances. Which solution provides the LOWEST latency between the instances?

Launch the EC2 instances in a cluster placement group.

Launch the EC2 instances in a spread placement group.

Launch the EC2 instances in an Auto Scaling group spanning multiple Availability Zones within a Region.

Launch the EC2 instances in an Auto Scaling group spanning multiple Regions.

7.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A company requires operating system permissions on a relational database server. What should a solutions architect suggest as a configuration for a highly available database architecture?

Multiple Amazon EC2 instances in a database replication configuration that uses two Availability Zones

A database installed on a single Amazon EC2 instance in an Availability Zone

Multiple Amazon EC2 instances in a replication configuration that uses a placement group

Amazon RDS in a Multi-AZ configuration with Provisioned IOPS

8.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A company's application allows users to upload image files to an Amazon S3 bucket. These files are accessed frequently for the first 30 days. After 30 days, these files are rarely accessed, but need to be durably stored and available immediately upon request. A solutions architect is tasked with configuring a lifecycle policy that minimizes the overall cost while meeting the application requirements. Which action will accomplish this?

Configure a lifecycle policy to move the files to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.

Configure a lifecycle policy to move the files to S3 Glacier Deep Archive after 30 days.

Configure a lifecycle policy to move the files to S3 Glacier after 30 days.

Configure a lifecycle policy to move the files to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days

9.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A solutions architect has been given a large number of video files to upload to an Amazon S3 bucket. The file sizes are 100–500 MB. The solutions architect also wants to easily resume failed upload attempts. How should the solutions architect perform the uploads in the LEAST amount of time?

Upload the files with SFTP and the AWS Transfer Family.

Split each file into 5-MB parts. Upload the individual parts normally and use S3 multipart upload to merge the parts into a complete object.

From the Amazon S3 console, select the S3 bucket. Upload the S3 bucket, and drag and drop items into the bucket.

Using the AWS CLI, copy individual objects into the S3 bucket with the aws s3 cp command.

10.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A gaming company is experiencing exponential growth. On multiple occasions, customers have been unable to access resources. To keep up with the increased demand, Management is considering deploying a cloud-based solution. The company is looking for a solution that can match the on-premises resilience of multiple data centers, and is robust enough to withstand the increased growth activity. Which configuration should a Solutions Architect implement to deliver the desired results?

A VPC configured with an ELB Application Load Balancer targeting an EC2 Auto Scaling group consisting of Amazon EC2 instances spanning two AWS Regions

A VPC configured with an ELB Network Load Balancer targeting an EC2 Auto Scaling group consisting of Amazon EC2 instances spanning two Availability Zones

Multiple Amazon EC2 instances configured within peered VPCs across two Availability Zones

A VPC configured with an ELB Application Load Balancer targeting an EC2 Auto Scaling group consisting of Amazon EC2 instances in one Availability Zone

AWS cuestionario 14

31 questions

A company needs to implement a secure data encryption solution to meet regulatory requirements. The solution must provide security and durability in generating, storing, and controlling cryptographic data keys. Which action should be taken to provide the MOST secure solution?

A Solutions Architect notices an abnormal amount of network traffic coming from an Amazon EC2 instance. The traffic is determined to be malicious and the destination needs to be determined. What tool can the Solutions Architect use to identify the destination of the malicious network traffic?

A company is deploying a production portal application on AWS. The database tier runs on a MySQL database. The company requires a highly available database solution that maximizes ease of management. How can the company meet these requirements?

A company is designing a human genome application using multiple Amazon EC2 Linux instances. The high performance computing (HPC) application requires low latency and high performance network communication between the instances. Which solution provides the LOWEST latency between the instances?

A company requires operating system permissions on a relational database server. What should a solutions architect suggest as a configuration for a highly available database architecture?

A solutions architect has been given a large number of video files to upload to an Amazon S3 bucket. The file sizes are 100–500 MB. The solutions architect also wants to easily resume failed upload attempts. How should the solutions architect perform the uploads in the LEAST amount of time?

Create a free account and access millions of resources

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers