Amazon AWS Certified Solutions Architect Associate 2018

1.

A development team is building an application with front-end and backend application tiers. Each tier consists of Amazon EC2 instances behind an ELB Classic Load Balancer. The instances run in Auto Scaling groups across multiple Availability Zones. The network team has allocated the 10.0.0.0/24 address space for this application. Only the front-end load balancer should be exposed to the Internet. There are concerns about the limited size of the address space and the ability of each tier to scale. What should the VPC subnet design be in each Availability Zone?

One public subnet for the load balancer tier, one public subnet for the front-end tier, and one private subnet for the backend tier. One shared public subnet for all tiers of the application. One public subnet for the load balancer tier and one shared private subnet for the application tiers. One shared private subnet for all tiers of the application.

2.

A client notices that their engineers often make mistakes when creating Amazon SQS queues for their backend system. Which action should a Solutions Architect recommend to improve this process?

Use the AWS CLI to create queues using AWS IAM Access Keys. Write a script to create the Amazon SQS queue using AWS Lambda. Use AWS Elastic Beanstalk to automatically create the Amazon SQS queues. Use AWS CloudFormation Templates to manage the Amazon SQS queue creation.

3.

As part of securing an API layer built on Amazon API gateway, a Solutions Architect has to authorize users who are currently authenticated by an existing identity provider. The users must be denied access for a period of one hour after three unsuccessful attempts. How can the Solutions Architect meet these requirements?

Use AWS IAM authorization and add least-privileged permissions to each respective IAM role. Use an API Gateway custom authorizer to invoke an AWS Lambda function to validate each user's identity. Use Amazon Cognito user pools to provide built-in user management. Use Amazon Cognito user pools to integrate with external identity providers.

4.

An organization runs an online media site, hosted on-premises. An employee posted a product review that contained videos and pictures. The review went viral and the organization needs to handle the resulting spike in website traffic What action would provide an immediate solution?

Redesign the website to use Amazon API Gateway, and use AWS Lambda to deliver content. Add server instances using Amazon EC2 and use Amazon Route 53 with a failover routing policy. Serve the images and videos via an Amazon CloudFront distribution created using the news site as the origin. Use Amazon ElasticCache for Redis for caching and reducing the load requests from the origin.

5.

A company runs a legacy application with a single-tier architecture on an Amazon EC2 instance. Disk I/O is low, with occasional small spikes during business hours. The company requires the instance to be stopped from 8 PM to 8 AM daily. Which storage option is MOST appropriate for this workload?

Amazon EC2 instance storage Amazon EBS General Purpose SSD (gp2) storage Amazon S3 Amazon EBS Provision IOPS SSD (io1) storage

Amazon AWS Certified Solutions Architect Associate 2018

Congratulations

COMPANY

Products

OTHERS

Partner

Amazon AWS Certified Solutions Architect Associate 2018

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner