Buoi13

Amazon CloudWatch is being used to monitor the performance of AWS Lambda. Which metrics does Lambda track? (choose 2) 

• Number of users

• Total number of requests 
  

• Total number of connections 
  

• Total number of transactions

• Latency per request

An application you manage runs a number of components using a micro-services architecture. Several ECS container instances in your ECS cluster are displaying as disconnected. The ECS instances were created from the Amazon ECS-Optimized AMI. What steps might you take to troubleshoot the issue? (choose 2)

• Verify that the instances have the correct IAM group applied

• Verify that the IAM instance profile has the necessary permissions

• Verify that the container instances have the container agent installed

• Verify that the container agent is running on the container instances

• Verify that the container instances are using the Fargate launch type

A Solutions Architect is creating a solution for an application that must be deployed on Amazon EC2 hosts that are dedicated to the client. Instance placement must be automatic and billing should be per instance. 
Which type of EC2 deployment model should be used?

• Dedicated Instance

• Reserved Instance

• Dedicated Host

• Cluster Placement Group

A customer has requested some advice on how to implement security measures in their Amazon VPC. The client has recently been the victim of some hacking attempts. The client wants to implement measures to mitigate further threats. The client has explained that the attacks always come from the same small block of IP addresses. 
What would be a quick and easy measure to help prevent further attacks? 

• Use CloudFront’s DDoS prevention features 
  

• Use a Security Group rule that denies connections from the block of IP addresses

• Use a Network ACL rule that denies connections from the block of IP addresses

• Create a Bastion Host restrict all connections to the Bastion Host only 
  

A Solutions Architect has created a new security group in an Amazon VPC. No rules have been created. Which of the statements below are correct regarding the default state of the security group? (choose 2) 

• There are is an inbound rule that allows traffic from the Internet Gateway 
  

• There is an outbound rule that allows all traffic to all IP addresses 
  

• There is an inbound rule allowing traffic from the Internet to port 22 for management

• here is an outbound rule allowing traffic to the Internet Gateway 
  

• There are no inbound rules and traffic will be implicitly denied

An Amazon EC2 instance has been launched into an Amazon VPC. A Solutions Architect needs to ensure that instances have both a private and public DNS hostnames. Assuming settings were not changed during creation of the VPC, how will DNS hostnames be assigned by default?

• In a default VPC instances will be assigned a private but not a public DNS hostname

• In a default VPC instances will be assigned a public and private DNS hostname

• In all VPCs instances no DNS hostnames will be assigned

• In a non-default VPC instances will be assigned a private but not a public DNS hostname

• In a non-default VPC instances will be assigned a public and private DNS hostname

A customer is deploying services in a hybrid cloud model. The customer has mandated that data is transferred directly between cloud data centers, bypassing ISPs. 
Which AWS service can be used to enable hybrid cloud connectivity? 

• Amazon Route 53

• IPSec VPN

• AWS Direct Connect

• Amazon VPC

A company is transitioning their web presence into the AWS cloud. As part of the migration the company will be running a web application both on-premises and in AWS for a period of time. During the period of co-existence the client would like 80% of the traffic to hit the AWS-based web servers and 20% to be directed to the on-premises web servers. 
What method can a Solutions Architect use to distribute traffic as requested?

• Use a Network Load Balancer to distribute traffic based on Instance ID 
  

• Use Route 53 with a simple routing policy

• Use an Application Load Balancer to distribute traffic based on IP address

• Use Route 53 with a weighted routing policy and configure the respective weights