Quiz 2

An application runs on an Amazon EC2 instance that has an Elastic IP address in VPC A. The application requires access to a database in VPC B. Both VPCs are in the same AWS account.

Which solution will provide the required access MOST securely?

• Create a DB instance security group that allows all traffic from the public IP address of the application server in VPC A.

• Configure a VPC peering connection between VPC A and VPC B.

• Make the DB instance publicly accessible. Assign a public IP address to the DB instance.

• Launch an EC2 instance with an Elastic IP address into VPC B. Proxy all requests through the new EC2 instance.

Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?

• Agility

• Elasticity

• Scalability

• High availability

A solutions architect has created a new AWS account and must secure AWS account root user access.

Which combination of actions will accomplish this? (Choose two.)

• Ensure the root user uses a strong password.

• Enable multi-factor authentication to the root user.

• Store root user access keys in an encrypted Amazon S3 bucket.

• Add the root user to a group containing administrative permissions.

• Apply the required permissions to the root user with an inline policy document.

Which task is the customer’s responsibility, according to the AWS shared responsibility model?

• Maintain the security of the AWS Cloud.

• Patch the operating system of Amazon RDS instances.

• Implement physical and environmental controls.

• Configure firewalls and networks.

A company hosts its web application on AWS using seven Amazon EC2 instances. The company requires that the IP addresses of all healthy EC2 instances be returned in response to DNS queries.

Which policy should be used to meet this requirement?

• Simple routing policy

• Latency routing policy

• Multivalue routing policy

• Geolocation routing policy

What is the best resource for a user to find compliance-related information and reports about AWS?

• AWS Artifact

• AWS Marketplace

• Amazon Inspector

• AWS Support

A solutions architect needs to design a system to store client case files. The files are core company assets and are important. The number of files will grow over time.

The files must be simultaneously accessible from multiple application servers that run on Amazon EC2 instances. The solution must have built-in redundancy.

Which solution meets these requirements?

• Amazon Elastic File System (Amazon EFS)

• Amazon Elastic Block Store (Amazon EBS)

• Amazon S3 Glacier Deep Archive

• AWS Backup

Which AWS service provides highly durable object storage?

• Amazon Elastic Block Store (Amazon EBS)

• Amazon FSx

• Amazon S3

• Amazon Elastic File System (Amazon EFS)

A company has a web application hosted over 10 Amazon EC2 instances with traffic directed by Amazon Route 53. The company occasionally experiences a timeout error when attempting to browse the application. The networking team finds that some DNS queries return IP addresses of unhealthy instances, resulting in the timeout error.

What should a solutions architect implement to overcome these timeout errors?

• Create a Route 53 simple routing policy record for each EC2 instance. Associate a health check with each record.

• Create a Route 53 failover routing policy record for each EC2 instance. Associate a health check with each record.

• Create an Amazon CloudFront distribution with EC2 instances as its origin. Associate a health check with the EC2 instances.

• Create an Application Load Balancer (ALB) with a health check in front of the EC2 instances. Route to the ALB from Route 53.

Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:

• restricted access.

• as-needed access.

• least privilege access.

• token access.