A Solutions Architect has deployed an application on Amazon EC2 instances in a private subnet behind a Network Load Balancer (NLB) in a public subnet.
Customers have attempted to connect from their office location and are unable to access the application.
That targets were registered by instance-id and are all healthy in the associated target group.
What step should the Solutions Architect take to resolve the issue and enable access for the customers? "Check the security group for the EC2 instances to ensure it allows ingress from the customer office" "Check the security group for the EC2 instances to ensure it allows ingress from the NLB subnets" "Check the security group for the NLB to ensure it allows ingress from the customer office" "Check the security group for the NLB to ensure it allows egress to the private subnet".
A company is planning to migrate an application from an on-premises data center to the AWS Cloud.
The application consists of a stateful servers and a separate MySQL database.
The application is expected to receive significant traffic and must scale seamlessly.
The solution design on AWS includes an Amazon Aurora MySQL database, Amazon EC2 Auto Scaling and Elastic Load Balancing.
A Solutions Architect needs to finalize the design for the solution.
Which of the following configurations will ensure a consistent user experience and seamless scalability for both the application and database tiers? "Add Aurora Replicas and define a scaling policy. Use an Application Load Balancer and set the load balancing algorithm type to round_robin" "Add Aurora Replicas and define a scaling policy. Use an Application Load Balancer and set the load balancing algorithm type to least_outstanding_requests" "Add Aurora Replicas and define a scaling policy. Use a Network Load Balancer and set the load balancing algorithm type to least_outstanding_requests" "Add Aurora Replicas and define a scaling policy. Use a Network Load Balancer and set the load balancing algorithm type to round_robin".
A company has deployed a new application into an Amazon VPC that does not have Internet access.
The company has connected an AWS Direct Connection (DX) private VIF to the VPC and all communications will over the DX connection.
A new requirement states that all data in transit must be encrypted between users and the VPC.
Which strategy should a Solutions Architect use to maintain consistent network performance while meeting this new requirement? "Create a new public virtual interface for the existing DX connection, and create a new VPN that connects to the VPC over the DX public virtual interface" "Create a new private virtual interface for the existing DX connection, and create a new VPN that connects to the VPC over the DX private virtual interface" "Create a client VPN endpoint and configure the users’ computers to use an AWS client VPN to connect to the VPC over the Internet" "Create a new Site-to-Site VPN that connects to the VPC over the internet".
|
