Solutions Architect Professional (Page 120)

In which step of “start using AWS Direct Connect” steps is the virtual interface you created tagged with a customer-provided tag that complies with the Ethernet802.1Q standard?Read More →

A user has created a VPC with CIDR 20.0.0.0/16 using the VPC wizard.The user has created public and VPN only subnets along with hardware VPN access to connect to the user’s data center.The user has not yet launched any instance as well as modified or deleted any setup.He wants to delete this VPC from the console.Will the console allow the user to delete the VPC?Read More →

You have been asked to set up a public website on AWS with the following criteria:You want the database and the application server running on an Amazon VPC.You want the database to be able to connect to the Internet so that it can be automatically updated to the correct patch level.You do not want to receive any incoming traffic from the Internet to the database.Which solutions would be the best to satisfy all the above requirements for your planned public website on AWS? (Choose two.)Read More →

A user has created a VPC with a public subnet.The user has terminated all the instances which are part of the subnet.Which of the below mentioned statements is true with respect to this scenario?Read More →

A company is running an application distributed over several Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer.The security team requires that all application access attempts be made available for analysis.Information about the client IP address, connection type, and user agent must be included.Which solution will meet these requirements?Read More →

A company uses Amazon S3 to store documents that may only be accessible to an Amazon EC2 instance in a certain virtual private cloud (VPC).The company fears that a malicious insider with access to this instance could also set up an EC2 instance in another VPC to access these documents.Which of the following solutions will provide the required protection?Read More →

A company wants to use a third-party software-as-a-service (SaaS) application.The third-party SaaS application is consumed through several API calls.The third- party SaaS application also runs on AWS inside a VPC.The company will consume the third-party SaaS application from inside a VPC.The company has internal security policies that mandate the use of private connectivity that does not traverse the internet.No resources that run in the company VPC are allowed to be accessed from outside the company’s VPC.All permissions must conform to the principles of least privilege.Which solution meets these requirements?Read More →

A company runs an application on a fleet of Amazon EC2 instances.The application requires low latency and random access to 100 GB of data.The application must be able to access the data at up to 3.000 IOPS.A Development team has configured the EC2 launch template to provision a 100-GB Provisioned IOPS(PIOPS) Amazon EBS volume with 3 000 IOPS provisioned.A Solutions Architect is tasked with lowering costs without impacting performance and durability.Which action should be taken?Read More →

A company has an Amazon VPC that is divided into a public subnet and a private subnet.A web application runs in Amazon VPC, and each subnet has its ownNACL.The public subnet has a CIDR of 10.0.0.0/24.An Application Load Balancer is deployed to the public subnet.The private subnet has a CIDR of 10.0.1.0/24.Amazon EC2 instances that run a web server on port 80 are launched into the private subnet.Only network traffic that is required for the Application Load Balancer to access the web application can be allowed to travel between the public and private subnets.What collection of rules should be written to ensure that the private subnet’s NACL meets the requirement? (Choose two.)Read More →

A company standardized its method of deploying applications to AWS using AWS CodePipeline and AWS CloudFormation.The applications are in TypeScript andPython.The company has recently acquired another business that deploys applications to AWS using Python scripts.Developers from the newly acquired company are hesitant to move their applications under CloudFormation because it would require that they learn a new domain-specific language and eliminate their access to language features, such as looping.How can the acquired applications quickly be brought up to deployment standards while addressing the developers’ concerns?Read More →