AWS 20 DEC

An application server with IP Adress 170.20.30.75 is part of the subnet 172.20.30.0/24. Your database server needs to allow connections only from the above server.

What CIDR block would you specify in the database EC2 instance security group?

• 172.20.30.75

• 172.20.30.75/24

• 172.20.30.0/24

• 172.20.30.75/32

For your EC2 instances to directly access the internet using Internet Gateway, EC2 instances must have:

• Public IP Address

• Public IP or Elastic IP Address

• Elastic IP Address

• Private IP Address

A subnet is assigned a /24 CIDR block. How many hosts can be part of this subnet ?

• 8

• 24

• 251

• 256

A public subnet is a one that:

• has to be marked as public during creation

• has a route to the internet gateway

• has a route to the NAT gateway

• does not have a route to the internet gateway

To establish a peering connection between two VPCs, what condition must be met ?

• CIDR blocks should overlap

• CIDR blocks should not overlap

• VPC must belong to the same account

• VPCs must be in the same region

You are designing a software to process large log files, Files are stored in S3. Application running on EC2 would download it from S3 and read the entire content of the file. Analyzed results are stored back in S3.

What type of storage would you recommend for the EC2 instance?

• Magnetic Instance Store

• SSD instance store

• General Purpose EBS volume

• Provisioned IOPS EBS Volume

A Solutions Architect is developing a document sharing application and needs a storage layer. The storage should provide automatic support for versioning so that users can easily roll back to a previous version or recover a deleted account.

Which AWS service will meet the above requirements?

• Amazon S3

• Amazon EBS

• Amazon EFS

• Amazon Storage Gateway VTL

Which of the following requires a custom CloudWatch metric to monitor?

• Memory Utilization of an EC2 instance

• CPU Utilization of an EC2 instance

• Disk usage activity of an EC2 instance

• Data transfer of an EC2 instance

Network ACL attached to your subnet has the following rules:

Rule # 10 that allows SSH access from 0.0.0.0/0.

Rule # 20 denies SSH from 0.0.0.0/0.

What is the behavior you would observe?

• SSH is denied for local VPC traffic

• SSH is allowed for local VPC traffic

• SSH is allowed from anywhere

• SSH is denied from anywhere

Which of these storage options is not correct?

• Multiple EBS volume can be attached to an EC2 instance

• EFS file storage can be used concurrently from multiple EC2 linux instances

• S3 bucket can be used concurrently from multiple EC2 instances

• EBS volume can be used by multiple EC2 instances concurrently