AWS-11

A business operates a website that is protected by numerous Application Load Balancers. The corporation has a variety of distribution rights to its material in several countries. A solutions architect must verify that the proper material is given to users without infringing on distribution rights.Which configuration should the solution architect use in order to satisfy these requirements?

• Configure Amazon CloudFront with AWS WAF

• Configure Application Load Balancers with AWS WAF

• Configure Amazon Route 53 with a geolocation policy

• Configure Amazon Route 53 with a geoproximity routing policy

A solutions architect is tasked with developing the storage architecture for a new online application that will be used to store and display engineering drawings. All application components will be hosted on AWS.The application's architecture must use caching in order to decrease the time users spend waiting for engineering drawings to load. Petabytes of data must be able to be stored in the program.Which storage and caching mix should the solutions architect use?

• Amazon S3 with Amazon CloudFront

• Amazon S3 Glacier with Amazon ElastiCache

• Amazon Elastic Block Store (Amazon EBS) volumes with Amazon CloudFront

• AWS Storage Gateway with Amazon ElastiCache

A business is examining a recent transfer of a three-tier application to a virtual private cloud (VPC). The security team detects that the concept of least privilege is not being applied to the entrance and egress rules for Amazon EC2 security groups between application layers.What actions should a solutions architect take to rectify this situation?

• Create security group rules using the instance ID as the source or destination

• Create security group rules using the security group ID as the source or destination

• Create security group rules using the VPC CIDR blocks as the source or destination

• Create security group rules using the subnet CIDR blocks as the source or destination

A corporation that provides live video streaming captures and saves real-time data in a disk-optimized database system. The organization is experiencing lower-than-expected throughput and is looking for an in-memory database storage solution that is speedier and delivers high availability via data replication.Which database should be recommended by a solutions architect?

• Amazon RDS for MySQL

• Amazon RDS for PostgreSQL.

• Amazon ElastiCache for Redis

• mazon ElastiCache for Memcached

A web application operating on an Amazon EC2 instance in VPC-A requires access to files located on another Amazon EC2 instance in VPC-B. Both are distinct. AWS credentials. The network administrator must build a solution that enables safe access from VPC-A to an EC2 instance in VPC-B. There should be no single point of failure or issues about bandwidth.Which solution will satisfy these criteria?

• Set up a VPC peering connection between VPC-A and VPC-B

• Set up VPC gateway endpoints for the EC2 instance running in VPC-B

• Attach a virtual private gateway to VPC-B and enable routing from VPC-A

• Create a private virtual interface (VIF) for the EC2 instance running in VPC-B and add appropriate routes from VPC-B

A business is offering an application that makes use of an Amazon RDS MySQL database. The database must be designed in such a way that it maintains high availability across Availability Zones and AWS Regions with the least amount of downtime possible.What is the best way for a solutions architect to fulfill this requirement?

• Set up an RDS MySQL Multi-AZ DB instance. Configure an appropriate backup window

• Set up an RDS MySQL Multi-AZ DB instance. Configure a read replica in a different Region

• Set up an RDS MySQL Single-AZ DB instance. Configure a read replica in a different Region

• Set up an RDS MySQL Single-AZ DB instance. Copy automated snapshots to at least one other Region

A business runs a multi-tier web application that stores data on an Amazon Aurora MySQL DB cluster. Amazon EC2 instances are used to host the application tier. The company's information technology security policies require that database credentials be encrypted and changed every 14 days. What should a solutions architect do in order to satisfy this demand with the LEAST amount of operational work possible?

• Create a new AWS Key Management Service (AWS KMS) encryption key. Use AWS Secrets Manager to create a new secret that uses the KMS key with the appropriate credentials. Associate the secret with the Aurora DB cluster. Configure a custom rotation period of 14 days.

• Create two parameters in AWS Systems Manager Parameter Store: one for the user name as a string parameter and one that uses the SecureString type for the password. Select AWS Key Management Service (AWS KMS) encryption for the password parameter, and load these parameters in the application tier. Implement an AWS Lambda function that rotates the password every 14 days.

• Store a file that contains the credentials in an AWS Key Management Service (AWS KMS) encrypted Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system in all EC2 instances of the application tier. Restrict the access to the file on the file system so that the application can read the file and that only super users can modify the file. Implement an AWS Lambda function that rotates the key in Aurora every 14 days and writes new credentials into the file.

• Store a file that contains the credentials in an AWS Key Management Service (AWS KMS) encrypted Amazon S3 bucket that the application uses to load the credentials. Download the file to the application regularly to ensure that the correct credentials are used. Implement an AWS Lambda function that rotates the Aurora credentials every 14 days and uploads these credentials to the file in the S3 bucket.

A user requests a list of the IAM roles associated with their Amazon EC2 instance. The user has access to the EC2 instance through the login interface but does not have IAM rights..How might a solutions architect go about retrieving this data?

• Run the following EC2 command: curl http://169.254.169.254/latest/meta-data/iam/info

• Run the following EC2 command: curl http://169.254.169.254/latest/user-data/iam/info

• Run the following EC2 command: http://169.254.169.254/latest/dynamic/instance-identity/

• Run the following AWS CLI command: aws iam get-instance-profile --instance-profile-name ExampleInstanceProfile

A business is expanding as demand for its goods increases. When traffic increases, the company's current purchase application is sluggish. The application is a three-layer monolith that employs synchronous transactions and sometimes has bottlenecks at the application tier. A solutions architect must build a solution that satisfies application response time requirements while allowing for surges in traffic flow.Which solution will satisfy these criteria?

• Vertically scale the application instance using a larger Amazon EC2 instance size.

• Scale the application's persistence layer horizontally by introducing Oracle RAC on AWS.

• Scale the web and application tiers horizontally using Auto Scaling groups and an Application Load Balancer.

• Decouple the application and data tiers using Amazon Simple Queue Service (Amazon SQS) with asynchronous AWS Lambda calls.

A solutions architect has established a new AWS account and is responsible for securing root user access to the account.Which action(s) will do this? (Select two.)

• Ensure the root user uses a strong password.

• Enable multi-factor authentication to the root user.

• Store root user access keys in an encrypted Amazon S3 bucket.

• Add the root user to a group containing administrative permissions.

• Apply the required permissions to the root user with an inline policy document.

  Reveal Solution