AWS Certified Solutions Architect - Associate (SAA-C03) - 4

You currently host a file server on EC2 with the files being stored on EBS. After an outage lasting several hours, you need to design a fault-tolerant architecture so that if the EC2 instance goes down, your customers will still be able to access their files. What is the most fault-tolerant architecture below?

• Lambda Function behind API Gateway with three EBS volumes mounted to the function.

• Three EC2 instances behind an Application Load Balancer and Autoscaling group, connected to an EFS mount.

• An EC2 instance behind a classic load balancer connected to an EBS volume in another region.

• Two EC2 instances behind an application load balancer and autoscaling group connected to two EBS volumes in separate regions.

You have an internal data warehouse running custom database software on an on-premises server at your work. You need to migrate this application to AWS. Unfortunately, your application is not compatible with Redshift, so you need to run this on a custom EC2 instance with the appropriate EBS volumes. You need to use an EBS volume that can handle large, sequential I/O operations for this infrequently accessed data. What is the most cost-effective EBS volume to meet this requirement?

• Provisioned IOPS SSD (io1)

• EBS General Purpose SSD (gp2)

• Cold HDD (sc1)

• Throughput Optimized HDD (st1)

You are migrating a media server to the AWS cloud that contains only images and video files. The server needs to be publicly accessible globally and you must keep costs to a minimum. What is the most cost-effective solution?

• Use an EC2 instance connected to an EBS volume with general purpose SSD (gp2).

• Use an EC2 instance connected to an EBS volume with provisioned IOPS.

• Use a public S3 bucket backed by CloudFormation.

• Use a public S3 bucket backed by CloudFront.

Which architecture below fulfills the requirement of being serverless while maintaining the most cost-effective solution?

• API Gateway < Lambda < DynamoDB < S3

• Application Load Balancer < EC2 < RDS < S3

• Application Load Balancer < EC2 < EFS < S3

• Application Load Balancer < EC2 < DynamoDB < S3

A small startup company has begun using AWS for all of its IT infrastructure. The company has two AWS Solutions Architects, and they are very proficient with AWS deployments. They want to choose a deployment service that best meets the given requirements. Those requirements include version control of their infrastructure documentation and granular control of all of the services to be deployed. Which AWS service would best meet these requirements?

• Elastic Beanstalk

• Terraform

• OpsWorks

• CloudFormation

You are building an application on EC2 that will require access to S3 and DynamoDB. You need to provide access to these services in the most secure way possible to your developers. What should you use to achieve this?

• Create a master IAM username and password with power user access and share this user name and password with your developers.

• Assign a role to the EC2 instance allowing access to S3 and DynamoDB.

• Create a master IAM username and password with Admin Access and share this user name and password with your developers.

• Use AWS KMS to provide access to these resources.

You work for a security company with a custom VPC and S3 buckets. You plan on allowing access to your trusted S3 buckets using a gateway endpoint. Which of the following would assist with this?

• Create a bucket policy for trusted S3 buckets.

• Create an endpoint policy for your trusted S3 buckets.

• Create an endpoint policy for your trusted VPCs.

• Create an object policy for trusted S3 objects.

Which of the following services is NOT included in AWS Free Tier?

• Snowball

• RDS

• EC2

• Lambda

You have recently terminated an employee from the company due to gross misconduct. Unfortunately, you discover they have been using a backdoor account to access your internal web application. They have been doing this from their home, which has a static IP address. You need to block access from this IP address immediately and then fix the backdoor. What is the fastest approach to achieve this?

• Block the IP address on the public NACL.

• Block the IP address using an Internet Gateway.

• Use Amazon Shield to block the IP address.

• Block the IP address using a security group.

You work for an online photography startup that allows users to sell their photos to customers around the world. The files are being stored in an on-premises server that is fast running out of space. You need a durable place to store your pictures while being able to simultaneously deliver content globally and in an efficient manner. What AWS services can help you achieve this?

• S3 and CloudFormation

• EC2 and API Gateway

• S3 and CloudWatch

• S3 and CloudFront