Question 11.
Which of the following are characteristics of Amazon VPC subnets?
(Choose two.) Each subnet maps to a single Availability Zone. A CIDR block mask of /25 is the smallest range supported. Instances in a private subnet can communicate with the internet only if they have an Elastic IP. By default, all subnets can route between each other, whether they are private or public. Each subnet spans at least 2 Availability zones to provide a high-availability environment.
Question 12
You are creating an Auto Scaling group whose Instances need to insert a custom metric into CloudWatch.
Which method would be the best way to authenticate your CloudWatch PUT request? Create an IAM role with the Put MetncData permission and modify the Auto Scaling launch configuration to launch instances in that role. Create an IAM user with the PutMetricData permission and modify the Auto Scaling launch configuration to inject the
users credentials into the instance User Data. Modify the appropriate Cloud Watch metric policies to allow the Put MetricData permission to instances from the Auto Scaling group. Create an IAM user with the PutMetricData permission and put the credentials in a private repository and have applications on the server pull the credentials as needed.
Question 13
When an EC2 instance that is backed by an S3-based AMI is terminated, what happens to the data on me root volume? Data is automatically saved as an EBS volume. Data is automatically saved as an ESS snapshot. Data is automatically deleted. Data is unavailable until the instance is restarted.
Question 14
You have a web application leveraging an Elastic Load Balancer (ELB) In front of the web servers deployed using an Auto Scaling Group. Your database is running on Relational Database Service (RDS).The application serves out technical articles and responses to them in general there are more views of an article than there are responses to the article. On occasion, an article on the site becomes extremely popular resulting in significant traffic Increases that causes the site to go down.
What could you do to help alleviate the pressure on the infrastructure while maintaining availability during these events? (Choose three.) Leverage CloudFront for the delivery of the articles. Add RDS read-replicas for the read traffic going to your relational database. Leverage ElastiCache for caching the most frequently used data. Use SQS to queue up the requests for the technical posts and deliver them out of the queue. Use Route53 health checks to fail over to an S3 bucket for an error page.
Question 15
The majority of your Infrastructure is on premises and you have a small footprint on AWS. Your company has decided to roll out a new application that is heavily dependent on low latency connectivity to LDAP for authentication. Your security policy requires minimal changes to the company's existing application user management processes.
What option would you implement to successfully launch this application? Create a second independent LDAP server in AWS for your application to use for authentication. Establish a VPN connection so your applications can authenticate against your existing on-premises LDAP servers. Establish a VPN connection between your data center and AWS. Create a LDAP replica on AWS and configure your
application to use the LDAP replica for authentication. Create a second LDAP domain on AWS establish a VPN connection to establish a trust relationship between your
new and existing domains and use the new domain for authentication.
Question 16
You need to design a VPC for a web-application consisting of an Elastic Load Balancer (ELB), a fleet of web/application servers, and a RDS database. The entire Infrastructure must be distributed over 2 availability zones.
Which VPC configuration works while assuring the database is not available from the Internet? One public subnet for ELB one public subnet for the web-servers, and one private subnet for the database. One public subnet for ELB two private subnets for the web-servers, two private subnets for RDS. Two public subnets for ELB two private subnets for the web-servers and two private subnets for RDS Two public subnets for ELB two public subnets for the web-servers, and two public subnets for RDS.
Question 17
An application that you are managing has EC2 instances & DynamoDB tables deployed to several AWS Regions in order to monitor the performance of the application globally, you would like to see two graphs:
1) Avg CPU Utilization across all EC2 instances
2) Number of Throttled Requests for all DynamoDB tables.
How can you accomplish this? Tag your resources with the application name, and select the tag name as the dimension in the Cloudwatch Management
console to view the respective graphs. Use the Cloud Watch CLI tools to pull the respective metrics from each regional endpoint. Aggregate the data offline & store it for graphing In CloudWatch. Add SNMP traps to each instance and DynamoDB table Leverage a central monitoring server to capture data from each
instance and table Put the aggregate data into Cloud Watch for graphing. Add a CloudWatch agent to each instance and attach one to each DynamoDB table. When configuring the agent
set the appropriate application name & view the graphs in CloudWatch.
Question 18
When assessing an organization's use of AWS API access credentials which of the following three credentials should be evaluated?
(Choose three.) Key pairs. Console passwords. Access keys. Signing certificates. Security Group memberships.
Question 19
You have a Linux EC2 web server instance running inside a VPC. The instance is In a public subnet and has an EIP associated with it so you can connect to It over the Internet via HTTP or SSH. The instance was also fully accessible when you last logged in via SSH and was also serving web requests on port 80.
Now you are not able to SSH into the host nor does it respond to web requests on port 80 that were working fine last time you checked. You have double-checked that all networking configuration parameters (security groups, route tables, IGW, EIP, NACLs etc) are properly configured and you haven't made any changes to those anyway since you were last able to reach the Instance.
You look at the EC2 console and notice that system status check shows "impaired."
Which should be your next step in troubleshooting and attempting to get the instance back to a healthy state so that you can log in again? Stop and start the anstance so that it will be able to be redeployed on a healthy host system that most likely will fix th
impaired" system status. Reboot your instance so that the operating system will have a chance to boot in a clean healthy state that most likely will fix the 'impaired" system status. Add another dynamic private IP address to my instance and try to connect via that new path, since the networking stack of the OS may be locked up causing the "impaired" system status. Add another Elastic Network Interface to the instance and try to connect via that new path since the networking stack of the OS may be locked up causing the "impaired" system status. Un-map and then re-map the EIP to the instance, since the IGW/NAT gateway may not be working properly, causing the
"impaired" system status.
Question 20
What is a placement group? A collection of Auto Scaling groups in the same Region. Feature that enables EC2 instances to interact with each other via high bandwidth, low latency connections. A collection of Elastic Load Balancers in the same Region or Availability Zone. A collection of authorized Cloud Front edge locations for a distribution.
|
