1. Your application stores sensitive information on and EBS volume attached to your EC2 instance. How can you protect your information? Choose two answers from the options given below Please select:

A) Create and mount a new, encrypted Amazon EBS volume. Move the data to the new volume. Delete the old Amazon EBS volume
B) It Is not possible to encrypt an EBS volume, you must use a lifecycle policy to transfer data to 53 for encryption.
C) Copy an unencrypted snapshot of an unencrypted volume, you can encrypt the copy. Volumes restored from this encrypted copy will also be encrypted.
D) un mount the s volume, take a snapshot and encrypt the snapshot. Re-mount the Amazon EBS volume



2. Your application is currently running on Amazon EC2 instances behind a load balancer. Your management has decided to use a Blue/Green deployment strategy. How should you Implement this for each deployment? Please select:

A) Launch more Amazon EC2 instances to ensure high availability. de-register each Amazon EC2 instance from the load balancer, upgrade it and test it. and then register it again with the load balancer.
B) set up Amazon Route 53 health checks to fail over from any Amazon EC2 instance that is currently being deployed to.
C) Create a new load balancer with new Amazon EC2 instances, carry out the deployment, and then switch DNS over to the new load balancer using Amazon Route 53 after testing.
D) Using AWS(Amazon Web Service) Cloud Formation, create a test stack for validating the code, and then deploy the code to each production Amazon EC2 instance.



3. You currently run your infrastructure on Amazon EC2 instances behind an Auto Scaling group> All logs for your application are currently written to ephemeral storage. Recently your company experienced a major bug in code that made it through testing and was ultimately deployed to your fleet. This bug triggered your Auto Scaling group to scale up and back down before you could successfully retrieve the logs off your server to better assist you in troubleshooting the bug. Which technique should you use to make sure you are able to review your logs after your Instances have shut down?

A) Install the Cloud Watch Logs Agent on your AMI, and configure Cloud Watch Logs Agent to stream your logs.
B) Install the Cloud Watch monitoring agent on your AMI. and set up new SNS alert for Cloud Watch metrics that triggers the Cloud Watch monitoring agent to backup all logs on the ephemeral drive.
C) Configure your Auto Scaling policies to create a snapshot of all ephemeral storage on terminate.
D) Configure the ephemeral policies on your Auto Scaling group to back up on terminate.



4. You have been requested to use Cloud Formation to maintain version control and achieve automation for the applications In your organization. How can you best use Cloud Formation to keep everything agile and maintain multiple environments while keeping cost down?

A) Create separate templates based on functionality, create nested stacks with Cloud promotion.
B) Use Cloud Formation custom resources to handle dependencies between stacks
C) Create multiple templates in one Cloud Formation stack
D) Combine all resources into one template for version control and automation.



5. You have been requested to use Cloud Formation to maintain version control and achieve automation for the applications In your organization. How can you best use Cloud Formation to keep everything agile and maintain multiple environments while keeping cost down?

A) Create multiple templates in one Cloud Formation stack.
B) Create separate templates based on functionality, create nested stacks with Cloud Formation.
C) Combine all resources into one template for version control and automation.
D) Use Cloud Formation custom resources to handle dependencies between stacks