AWS_4

Your company has multiple IT departments, each with their own VPC. Some VPCs are located within the same AWS account, and others in a different AWS account. You want to peer together all VPCs to enable the IT departments to have full access to each others' resources. There are certain limitations placed on VPC peering. Which of the following statements is incorrect in relation to VPC peering?

• Private DNS values cannot be resolved between instances in peered VPCs.

• You can have up to 3 VPC peering connections between the same two VPCs at the same time.

• You cannot create a VPC peering connection between VPCs in different regions.

• • You have a limit on the number active and pending VPC peering connections that you can have per VP.

A company has an AWS account that contains three VPCs (Dev, Test, and Prod) in the same region. Test is peered to both Prod and Dev. All VPCs have non-overlapping CIDR blocks. The company wants to push minor code releases from Dev to Prod to speed up time to market. Which of the following options helps the company accomplish this?

• Create a new peering connection Between Prod and Dev along with appropriate routes.

• Create a new entry to Prod in the Dev route table using the peering connection as the target.

• • Attach a second gateway to Dev. Add a new entry in the Prod route table identifying the gateway as the target.

• The VPCs have non-overlapping Cl DR blocks in the same account. The route tables contain local routes for all VPCs.

You are configuring a new VPC for one of your clients for a cloud migration project, and only a public VPN will be in place. After you created your VPC, you created a new subnet, a new internet gateway, and attached your internet gateway to your VPC. When you launched your first instance into your VPC, you realized that you aren't able to connect to the instance, even if it is configured with an elastic IP. What should be done to access the instance?

• A route should be created as 0.0.0.0/0 and your internet gateway as target.

• Attach another ENI to the instance and connect via new EN.

• A NAT instance should be created and all traffic should be forwarded to NAT instance

• A NACL should be created that allows all outbound traffic.

A major client who has been spending a lot of money on his internet service provider asks you to set up an AWS Direct Connection to try and save him some money. You know he needs high-speed connectivity. Which connection port speeds are available on AWS Direct Connect?

• 500Mbps and 1Gbps.

• 1Gbps and 10Gbps.

• 100Mbps and 1Gbps.

• 1Gbps.

A company has multiple VPCs across AWS Regions to support and run workloads that are isolated from workloads in other Regions. Because of a recent application launch requirement, the company’s VPCs must communicate with all other VPCs across all Regions.

Which solution will meet these requirements with the LEAST amount of administrative effort?

• Use VPC peering to manage VPC communication in a single Region. Use VPC peering across Regions to manage VPC communications.

• Use AWS Direct Connect gateways across all Regions to connect VPCs across regions and manage VPC communications.

• Use AWS Transit Gateway to manage VPC communication in a single Region and Transit Gateway peering across Regions to manage VPC communications.

• Use AWS PrivateLink across all Regions to connect VPCs across Regions and manage VPC communications

What should you do in order to keep the data on EBS volumes safe? (Choose TWO)

• • Regularly update firmware on EBS devices.

• • Create EBS snapshots.

• • Ensure that EBS data is encrypted at rest.

• • Store a backup daily in an external drive.

• • Prevent any unauthorized access to AWS data centers

A company is deploying a new two-tier web application in AWS. Where should the most frequently accessed data be stored so that the application’s response time is optimal?

• AWS OpsWorks.

• AWS Storage Gateway.

• Amazon EBS volume.

• Amazon ElastiCache.

Which of the following can help secure your sensitive data in Amazon S3? (Choose TWO)

• Delete the encryption keys once your data is encrypted.

• With AWS you do not need to worry about encryption.

• Enable S3 Encryption.

• Encrypt the data prior to uploading it.

• Delete all IAM users that have access to S3.

Which AWS service provides a simple and scalable shared file storage solution for use with Linux-based AWS and on-premises servers?

• Amazon S3

• Amazon Glacier

• Amazon EBS

• Amazon EFS

What should you consider when storing data in Amazon Glacier?

• Amazon Glacier only accepts data in a compressed format.

• Glacier can only be used to store frequently accessed data and data archives.

• Amazon Glacier does not provide immediate retrieval of data.

• Attach Glacier to an EC2 Instance to be able to store data.