1. A company has a Microsoft Windows-based application that must be migrated to AWS. This application requires the use of a shared Windows file system attached to multiple Amazon EC2 Windows instances.What should a solution architect do to accomplish this?
A) Configure an Amazon EBS volume with the required size, Attach each EC2 instance to the volume. Mount the file system within the volume to each Windows instance. B) Configure a volume using Amazon EFS. Mount the EFS volume to each Windows instance C) Configure AWS Storage Gateway in Volume Gateway mode. Mount the volume to each Windows instance. D) Configure Amazon FSx for Windows File Server. Mount the Amazon FSx volume to each Windows instance
2. An application runs on Amazon EC2 instances in private subnets. The application needs to access an Amazon DynamoDB table. What is the MOST secure way to access the table while ensuring that the traffic does not leave the AWS network?
A) Use a VPC endpoint for DynamoDB. B) Use the internet gateway attached to the VPC. C) Use a NAT gateway in a public subnet. D) Use a NAT instance in a private subnet.
3. A company is designing a new web service that will run on Amazon EC2 instances behind an Elastic Load Balancer. However, many of the web service clients can only reach IP address whitelisted on their firewalls.What should a solution architect recommend to meet the clients' needs?
A) An Application Load Balancer with an associated Elastic IP address B) A Network Load Balancer with an associated Elastic IP address C) An A record in an Amazon Route 53 hosted zone pointing to an Elastic IP address D) An EC2 instance with a public IP address running as a proxy in front of the load balancer
4. A company has an application that posts message to Amazon SQS. Another application polls the queue and processes the messages in an I/O intensive operation. The company has a service level agreement (SLA) that specifies the maximum amount of time that can elapse between receiving the messages and responding to the users. Due to an increase in the number of messages, the company has difficulty meeting its SLA consistently. What should a solutions architect do to help improve the application's processing time and ensure it can handle the load at any level?
A) Create in Amazon Machine Image (AMI) from the instance used for processing. Terminate the instance and replace it with a larger size. B) Create in Amazon Machine Image (AMI) from the instance used for processing. Create an Auto Scaling group using this image in it launch configuration. Configure the group with a target tracking policy based on the age of the oldest message in the SQS queue C) Create in Amazon Machine Image (AMI) from the instance used for processing. Create an Auto Scaling group using this image in its launch configuration. Configure the group with a target tracking policy to keep its aggregate CPU utilization below 70% D) Create in Amazon Machine Image (AMI) from the instance used for processing. Terminate the instance and replace it with an Amazon EC2 Dedicated Instance.
5. A company has created a VPC with multiple private subnets in multiple Availability Zones (AZs) and one public subnet in one of the AZs. The public subnet is used to launch a NAT gateway. There is instance in the private subnet that use a NAT gateway to connect to the internet. In case of an AZ failure, the company wants to ensure that the instance is not all experiencing internet connectivity issues and that there is a backup plan ready.Which solution should a solutions architect recommend that is MOST highly available?
A) Create public subnets. In each AZ and launch a NAT gateway in each subnet. Configure the traffic from the private subnets in each AZ to the respective NAT gateway. B) Create an Amazon EC2 NAT instance in a now public subnet. Distribute the traffic between the NAT gateway and the NAT instance. C) Create an Amazon EC2 NAT instance in the same public subnet. Replace the NAT gateway with the NAT instance and associate the instance with an Auto Scaling group with an appropriate scaling policy. D) Create a new public subnet with a NAT gateway in the same AZ. Distribute the traffic between the two NAT gateways.
1. Right Answer: D Explanation:
2. Right Answer: A Explanation: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/vpc-endpoints-dynamodb.html
Leave a comment