1. A company wants to use an AWS Region as a disaster recovery location for its on-premises infrastructure. The company has 10 TB of existing data, and the on- premise data center has a 1 Gbps internet connection. A solutions architect must find a solution so the company can have its existing data on AWS in 72 hours without transmitting it using an unencrypted channel. Which solution should the solutions architect select?
A) Establish an AWS Direct Connect connection between Amazon VPC and the company's data center. B) Send the initial 10 TB of data to AWS using AWS Snowball. C) Send the initial 10 TB of data to AWS using FTP. D) Establish a VPN connection between Amazon VPC and the company's data center.
2. A company has established a new AWS account. The account is newly provisioned and no changed have been made to the default settings. The company is concerned about the security of the AWS account root user.What should be done to secure the root user?
A) Create IAM users for daily administrative tasks. Enable multi-factor authentication on the root user. B) Generate an access key for the root user. Use the access key for daily administration tasks instead of the AWS Management Console. C) Create IAM users for daily administrative tasks. Disable the root user. D) Provide the root user credentials to the most senior solution architect. Have the solution architect use the root user for daily administration tasks
3. A company uses an Amazon S3 bucket to store static images for its website. The company configured permissions to allow access to Amazon S3 objects by privileged users only.What should a solutions architect do to protect against data loss? (Choose two.)(Select 2answers)
A) Enable versioning on the S3 bucket. B) Enable access logging on the S3 bucket. C) Enable server-side encryption on the S3 bucket. D) Configure an S3 lifecycle rule to transition objects to Amazon S3 Glacier. E) Use MFA Delete to require multi-factor authentication to delete an object.
4. A company is developing a real-time multiplier game that uses UDP for communications between client and servers in an Auto Scaling group. Spikes in demand are anticipated during the day, so the game server platform must adapt accordingly. Developers want to store gamer scores and other non-relational data in a database solution that will scale without intervention. Which solution should a solution architect recommend?
A) Use a Network Load Balancer for traffic distribution and Amazon DynamoDB on demand for data storage. B) Use Amazon Route 53 for traffic distribution and Amazon Aurora Serverless for data storage. C) Use an Application Load Balancer for traffic distribution and Amazon DynamoDB global tables for data storage. D) Use a Network Load Balancer for traffic distribution and Amazon Aura Global for data storage.
5. A company is using Amazon EC2 to run its big data analytics workloads. These variable workloads run each night, and it is critical they finish by the start of business the following day. A solutions architect has been tasked with designing the MOST cost-effective solution.Which solution will accomplish this?
A) Spot Fleet B) On-Demand Instances C) Reserved Instances D) Spot Instances
1. Right Answer: D Explanation: Encrypted is the keyword you need to remember. A VPC VPN Connection utilizes IPSec to establish encrypted network connectivity between your intranet and Amazon VPC over the Internet
2. Right Answer: A Explanation: Core understanding of IAM users and security. Basics that everyone can find in start of any AWS course.
3. Right Answer: A,E Explanation:
4. Right Answer: A Explanation:
5. Right Answer: A Explanation: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet.html#spot-fleet-control-spending
Leave a comment