Lesson7_test

An application stack is being created which needs a message bus to decouple the application components from each other. The application will generate up to 300 messages per second without using batching. A Solutions Architect needs to ensure that a message is delivered only once and duplicates are not introduced into the queue. It is not necessary to maintain the order of the messages. 
Which SQS queue type should be used?

• Auto Scaling queues

• FIFO queues

• Standard queues

• Long polling queues

A large multi-national client has requested a design for a multi-region database. The master database will be in the EU (Frankfurt) region and databases will be located in 4 other regions to service local read traffic. The database should be a managed service including the replication. 
The solution should be cost-effective and secure. Which AWS service can deliver these requirements?

• RDS with cross-region Read Replicas

• ElastiCache with Redis and clustering mode enabled

• RDS with Multi-AZ

• EC2 instances with EBS replication

An application that is being installed on an Amazon EC2 instance requires a persistent block storage volume. The data must be encrypted at rest and regular volume-level backups must be automated. 
Which solution options should be used?

• Use an encrypted Amazon EC2 instance store and copy the data to another EC2 instance using a cron job and a batch script 
  

• Use an encrypted Amazon EFS filesystem and use an Amazon CloudWatch Events rule to start a backup copy of data using AWS Lambda 
  

• Use server-side encryption on an Amazon S3 bucket and use Cross-Region-Replication to backup on a schedule 
  

• Use an encrypted Amazon EBS volume and use Data Lifecycle Manager to automate snapshots 
  

An Amazon VPC contains a mixture of Amazon EC2 instances in production and non-production environments. A Solutions Architect needs to devise a way to segregate access permissions to different sets of users for instances in different environments. 
How can this be achieved? (choose 2)

• Create an IAM policy with a conditional statement that matches the environment variables

• Create an IAM policy that grants access to any instances with the specific tag

• Attach an Identity Provider (IdP) and delegate access to the instances to the relevant groups

• Add a specific tag to the instances you want to grant the users or groups access to

• Add an environment variable to the instances using user data

A Solutions Architect just completed the implementation of a 2-tier web application for a client. The application uses Amazon EC2 instances, Amazon ELB and Auto Scaling across two subnets. After deployment the Solutions Architect noticed that only one subnet has EC2 instances running in it. What might be the cause of this situation?

• The AMI is missing from the ASG’s launch configuration

• The Auto Scaling Group has not been configured with multiple subnets

• Cross-zone load balancing is not enabled on the ELB

• The ELB is configured as an internal-only load balancer

An application is running on EC2 instances in a private subnet of an Amazon VPC. A Solutions Architect would like to connect the application to Amazon API Gateway. For security reasons, it is necessary to ensure that no traffic traverses the Internet and to ensure all traffic uses private IP addresses only. 
How can this be achieved?

• Create a NAT gateway

• Create a public VIF on a Direct Connect connection

• Add the API gateway to the subnet the EC2 instances are located in

• Create a private API using an interface VPC endpoint 
  

A Solutions Architect created a new subnet in an Amazon VPC and launched an Amazon EC2 instance into it. The Solutions Architect needs to directly access the EC2 instance from the Internet and cannot connect. Which steps should be undertaken to troubleshoot the issue? (choose 2)

• Check that Security Group has a rule for outbound traffic 
  

• Check that the instance has a public IP address 
  

• Check that the route table associated with the subnet has an entry for an Internet Gateway

• Check that there is a NAT Gateway configured for the subnet

• Check that you can ping the instance from another subnet

A new financial platform has been re-architected to use Docker containers in a micro-services architecture. The new architecture will be implemented on AWS and a Solutions Architect must recommend the solution configuration. For operational reasons, it will be necessary to access the operating system of the instances on which the containers run. 
Which solution delivery option should the Architect select? 

• ECS with a default cluster

• EKS with Kubernetes managed infrastructure

• ECS with the Fargate launch type

• ECS with the EC2 launch type