How To Configure Mongodb Replica Set In Aws
You are working for a large IT consultancy company as a Solutions Architect. 1 of your clients is launching a file sharing web application in AWS(Amazon Web Service) which requires a durable storage service for hosting their static contents such as PDFs, Word Documents, high resolution images and many others.
Which type of storage service should you employ to run into this requirement?
Options are :
- Amazon EBS volume
- Amazon S3
- Amazon EC2 instance store
- Amazon RDS example
An online stocks trading application that stores financial data in an S3 saucepan has a lifecycle policy that moves older data to Glacier every month. At that place is a strict compliance requirement where a surprise audit can happen at someday and you should be able to retrieve the required data in under xv minutes under all circumstances. Your manager instructed you lot to ensure that retrieval capacity is available when you lot need information technology and should handle up to 150 MB/due south of retrieval throughput.
Which of the following should you do to run across the above requirement? (Choose ii)
Options are :
- Recall the data using Amazon Glacier Select.
- Use Expedited Retrieval to access the fiscal information.
- Use Bulk Retrieval to access the financial data.
- Specify a range, or portion, of the fiscal data archive to retrieve.
- Buy provisioned retrieval capacity.
You are working as an IT Consultant for a big media visitor where you are tasked to design a web application that stores static assets in an Amazon Unproblematic Storage Service (S3) bucket. You wait this S3 saucepan to immediately receive over 2000 PUT requests and 3500 GET requests per 2nd at height 60 minutes.
What should y'all do to ensure optimal operation?
You are working as an IT Consultant for a big media visitor where you are tasked to design a web application that stores static assets in an Amazon Unproblematic Storage Service (S3) bucket. You wait this S3 saucepan to immediately receive over 2000 PUT requests and 3500 GET requests per 2nd at height 60 minutes.
What should y'all do to ensure optimal operation?
Options are :
- Use Amazon Glacier instead.
- Add together a random prefix to the fundamental names.
- Do nothing. Amazon S3 will automatically manage performance at this scale.
- Utilize a anticipated naming scheme in the key names such every bit sequential numbers or date fourth dimension sequences.
AWS Certified Programmer Acquaintance Practice Test 2022 Prepare 12
You are working every bit a Solutions Builder for a multinational fiscal house. They have a global online trading platform in which the users from all over the world regularly upload terabytes of transactional information to a centralized S3 bucket. What AWS(Amazon Web Service) characteristic should you employ in your present system to improve throughput and ensure consistently fast data transfer to the Amazon S3 bucket, regardless of your user's location?
Options are :
- FTP
- AWS Direct Connect
- Amazon S3 Transfer Acceleration
- Use CloudFront Origin Admission Identity
You are a new Solutions Builder working for a fiscal visitor. Your manager wants to have the ability to automatically transfer obsolete data from their S3 bucket to a low toll storage system in AWS.
What is the all-time solution you can provide to them?
Options are :
- Use an EC2 instance and a scheduled job to transfer the obsolete data from their S3 location to Amazon Glacier.
- Use Lifecycle Policies in S3 to move obsolete data to Glacier.
- Use AWS(Amazon Spider web Service) SQS.
- Use AWS(Amazon Web Service) SWF.
Y'all are designing a social media website for a startup company and the founders want to know the ways to mitigate distributed denial-of-service (DDoS) attacks to their website.
Which of the following are not viable mitigation techniques? (Choose 2)
Options are :
- Employ Dedicated EC2 instances to ensure that each case has the maximum functioning possible.
- Add together multiple elastic network interfaces (ENIs) to each EC2 instance to increase the network bandwidth.
- Utilise an Amazon CloudFront service for distributing both static and dynamic content.
- Use an Application Load Balancer with Auto Scaling groups for your EC2 instances and then restrict direct Net traffic to your Amazon RDS database past deploying to a private subnet.
- Use AWS(Amazon Web Service) Shield and AWS(Amazon Web Service) WAF.
Exercise Exams | AWS Certified Cloud Practitioner CLF-C01 Set 22
You are working for a tech company that uses a lot of EBS volumes in their EC2 instances. An incident occurred that requires you to delete the EBS volumes and then re-create them again.
What stride should y'all exercise before y'all delete the EBS volumes?
Options are :
- Create a copy of the EBS volume using the CopyEBSVolume command.
- Store a snapshot of the book.
- Download the content to an EC2 instance.
- Back upwards the information into a physical disk.
One of your clients is leveraging on Amazon S3 in the ap-southeast-1 region to store their training videos for their employee onboarding process. The client is storing the videos using the Standard Storage class.
Where are your client's training videos replicated?
Options are :
- A single facility in ap-southeast-1 and a single facility in eu-central-1
- A unmarried facility in ap-southeast-ane and a single facility in us-east-ane
- Multiple facilities in ap-southeast-1
- A single facility in ap-southeast-1
Your company has recently deployed a new web application which uses a serverless-based architecture in AWS. Your manager instructed y'all to implement CloudWatch metrics to monitor your systems more effectively. Y'all know that Lambda automatically monitors functions on your behalf and reports metrics through Amazon CloudWatch.
In this scenario, what types of data do these metrics monitor? (Choose 2)
Options are :
- ReservedConcurrentExecutions
- Invocations
- Errors
- IteratorSize
- Dead Letter Queue
AWS SOA-C00 Certified Sys Ops Administrator Associate Test Set 5
A company is hosting EC2 instances that are on non-production environment and processing non-priority batch loads, which can be interrupted at whatever fourth dimension.
What is the best instance purchasing option which can be practical to your EC2 instances in this case?
Options are :
- Reserved Instances
- On-Need Instances
- Spot Instances
- Scheduled Reserved Instances
You lot are working as a Solutions Architect for a leading airline company where you are edifice a decoupled application in AWS(Amazon Web Service) using EC2, Automobile Scaling group, S3 and SQS. You designed the architecture in such a way that the EC2 instances will swallow the bulletin from the SQS queue and volition automatically scale upwardly or down based on the number of messages in the queue.
In this scenario, which of the following statements is simulated about SQS?
Options are :
- Standard queues provide at-to the lowest degree-one time delivery, which means that each message is delivered at least in one case.
- Standard queues preserve the order of letters.
- Amazon SQS can help you build a distributed application with decoupled components.
- FIFO queues provide exactly-once processing.
The media company that you are working for has a video transcoding application running on Amazon EC2. Each EC2 instance polls a queue to observe out which video should exist transcoded, and and then runs a transcoding process. If this process is interrupted, the video volition be transcoded by some other instance based on the queuing system. This application has a large backlog of videos which need to be transcoded. Your managing director would like to reduce this backlog by adding more EC2 instances, withal, these instances are only needed until the backlog is reduced.
In this scenario, which type of Amazon EC2 example is the well-nigh cost-effective blazon to apply without sacrificing performance?
Options are :
- Reserved instances
- Spot instances
- Dedicated instances
- On-demand instances
AWS Solutions Architect Associate Practice Exams SAA-C01 Gear up 37
Y'all currently have an Augment Reality (AR) mobile game which has a serverless backend. It is using a DynamoDB table which was launched using the AWS(Amazon Web Service) CLI to store all the user data and data gathered from the players and a Lambda function to pull the data from DynamoDB. The game is being used past millions of users each twenty-four hour period to read and store information.
How would you lot pattern the awarding to improve its overall functioning and brand it more than scalable while keeping the costs depression? (Choose 2)
Options are :
- Enable DynamoDB Accelerator (DAX) and ensure that the Car Scaling is enabled and increment the maximum provisioned read and write capacity.
- Configure CloudFront with DynamoDB as the origin; cache oftentimes accessed data on client device using ElastiCache.
- Utilise AWS(Amazon Spider web Service) SSO and Cognito to authenticate users and accept them directly access DynamoDB using single-sign on. Manually set the provisioned read and write capacity to a higher RCU and WCU.
- Employ API Gateway in conjunction with Lambda and turn on the caching on frequently accessed information and enable DynamoDB global replication.
- Since Auto Scaling is enabled by default, the provisioned read and write capacity will arrange automatically. Also enable DynamoDB Accelerator (DAX) to improve the functioning from milliseconds to microseconds.
An online chore site is using NGINX for its application servers hosted in EC2 instances and MongoDB Atlas for its database-tier. MongoDB Atlas is a fully automated third-party cloud service which is not provided by AWS, merely supports VPC peering to connect to your VPC.
Which of the following items are invalid VPC peering configurations? (Cull 2)
Options are :
- Two VPCs peered to a specific CIDR block in one VPC
- Transitive Peering
- Edge to Border routing via a gateway
- One to one relationship between two Virtual Private Cloud networks
- I VPC Peered with two VPCs using longest prefix match
Yous are a new Solutions Architect in your company. Upon checking the existing Inbound Rules of your Network ACL, you saw this configuration:
If a reckoner with an IP address of 110.238.109.37 sends a request to your VPC, what volition happen?
Options are :
- Initially, it will be allowed and so after a while, the connection volition be denied.
- Initially, it will exist denied and so afterward a while, the connection will be allowed.
- It will be immune.
- It will be denied.
AWS Solutions Architect - Associate SAA-C01 Do Exams Set 10
Your visitor has an east-commerce application that saves the transaction logs to an S3 saucepan. Yous are instructed by the CTO to configure the application to continue the transaction logs for one calendar month for troubleshooting purposes, so afterwards, purge the logs. What should y'all practice to accomplish this requirement?
Options are :
- Add a new bucket policy on the Amazon S3 bucket.
- Configure the lifecycle configuration rules on the Amazon S3 bucket to purge the transaction logs subsequently a month
- Create a new IAM policy for the Amazon S3 bucket that automatically deletes the logs after a month
- Enable CORS on the Amazon S3 bucket which volition enable the automatic monthly deletion of data
A company is using a custom shell script to automate the deployment and management of their EC2 instances. The script is using various AWS(Amazon Web Service) CLI commands such as revoke-security-grouping-ingress, revoke-security-group-egress, run-scheduled-instances and many others.
In the shell script, what does the revoke-security-group-ingress command do?
Options are :
- Removes one or more security groups from a rule.
- Removes one or more security groups from an Amazon EC2 instance.
- Removes one or more than ingress rules from a security group.
- Removes one or more than egress rules from a security grouping.
Yous are unable to connect to your new EC2 instance via SSH from your habitation figurer, which y'all have recently deployed. Withal, you were able to successfully access other existing instances in your VPC without whatsoever issues.
Which of the following should you check and maybe correct to restore connectivity?
Options are :
- Use Amazon Information Lifecycle Manager.
- Configure the Network Access Command Listing of your VPC to let ingress traffic over port 22 from your IP.
- Configure the Security Group of the EC2 instance to permit ingress traffic over port 3389 from your IP.
- Configure the Security Group of the EC2 instance to permit ingress traffic over port 22 from your IP.
AWS Develops Engineer Professional Practice Concluding File Test Set 8
A leading media company has an awarding hosted in an EBS-backed EC2 instance which uses Uncomplicated Workflow Service (SWF) to handle its sequential background jobs. The application works well in production and your manager asked you to too implement the same solution to other areas of their business.
In which other scenarios tin can you use both Simple Workflow Service (SWF) and Amazon EC2 as a solution? (Cull two)
Options are :
- For a distributed session management for your mobile application.
- Managing a multi-step and multi-determination checkout process of an e-commerce mobile app.
- Orchestrating the execution of distributed business processes.
- For applications that require a message queue.
- For web applications that require content delivery networks.
Yous are a new Solutions Architect in a large insurance firm. To maintain compliance with HIPPA laws, all information being backed up or stored on Amazon S3 needs to be encrypted at rest. In this scenario, what is the best method of encryption for your data, assuming S3 is beingness used for storing financial-related data? (Cull 2)
Options are :
- Enable SSE on an S3 saucepan to make use of AES-256 encryption
- Store the information in encrypted EBS snapshots
- Encrypt the data locally using your ain encryption keys, then copy the data to Amazon S3 over HTTPS endpoints
- Store the data on EBS volumes with encryption enabled instead of using Amazon S3
- Apply AWS(Amazon Web Service) Shield to protect your data at rest
A tech company is currently using Auto Scaling for their web awarding. A new AMI now needs to be used for launching a fleet of EC2 instances.
Which of the following changes needs to be done?
Options are :
- Do nothing. You can showtime straight launching EC2 instances in the Auto Scaling grouping with the aforementioned launch configuration.
- Create a new launch configuration.
- Create a new target grouping.
- Create a new target group and launch configuration.
AWS Solutions Architect Associate Practice Exams SAA-C01 Set half-dozen
You are working equally a Deject Engineer for a top aerospace engineering house. Ane of your tasks is to gear up a document storage organisation using S3 for all of the applied science files. In Amazon S3, which of the post-obit statements are truthful? (Choose two)
Options are :
- The total volume of data and number of objects you tin can store are unlimited.
- The largest object that can be uploaded in a single PUT is 5 TB.
- S3 is an object storage service that provides file organization access semantics (such as strong consistency and file locking), and concurrently-accessible storage.
- You can merely store Aught or TAR files in S3.
- The largest object that can be uploaded in a single PUT is 5 GB.
Y'all are setting up the cloud architecture for an international money transfer service to be deployed in AWS(Amazon Web Service) which will have thousands of users effectually the world. The service should exist available 24/vii to avert any business disruption and should be resilient enough to handle the outage of an entire AWS(Amazon Web Service) region. To meet this requirement, yous take deployed your AWS(Amazon Web Service) resources to multiple AWS(Amazon Web Service) Regions. You need to utilize Route 53 and configure it to set all of your resources to be bachelor all the time as much equally possible. When a resource becomes unavailable, your Route 53 should detect that information technology's unhealthy and stop including information technology when responding to queries.
Which of the following is the most fault tolerant routing configuration that y'all should utilize in this scenario?
Options are :
- Configure an Active-Active Failover with Weighted routing policy.
- Configure an Agile-Passive Failover with Weighted Records.
- Configure an Active-Active Failover with I Primary and 1 Secondary Resource.
- Configure an Active-Passive Failover with Multiple Primary and Secondary Resources.
You lot are working as a Solutions Architect for a global game evolution company. They have a web application currently running on twenty EC2 instances as part of an Auto Scaling group. All twenty instances have been running at a maximum of 100% CPU Utilization for the past 40 minutes notwithstanding, the Auto Scaling group has not added whatsoever additional EC2 instances to the group.
What could exist the root cause of this issue? (Choose 2)
Options are :
- You lot already have 20 on-demand instances running in your entire VPC.
- The maximum size of your Auto Scaling group is set to 20.
- The calibration down policy of your Machine Scaling group is also high.
- The scale upwardly policy of your Auto Scaling grouping, which is based on the boilerplate CPU Utilization metric, is not yet reached.
- You lot are using burstable instances which accept the ability to sustain loftier CPU performance of more than twoscore minutes, which in consequence, suspends your scale-upwardly policy.
Certification : Get AWS(Amazon Web Service) Certified Solutions Architect Set 5
A new online banking platform has been re-designed to have a microservices architecture in which complex applications are decomposed into smaller, independent services. The new platform is using Docker considering that application containers are optimal for running small, decoupled services.
Which service can you use to migrate this new platform to AWS?
Options are :
- EKS
- EFS
- ECS
- EBS
You are working for a large telecommunications company where you demand to run analytics confronting all combined log files from your Awarding Load Balancer as part of the regulatory requirements.
Which AWS(Amazon Web Service) services can exist used together to collect logs and and so easily perform log analysis?
Options are :
- Amazon DynamoDB for storing and EC2 for analyzing the logs.
- Amazon EC2 with EBS volumes for storing and analyzing the log files.
- Amazon S3 for storing the ELB log files and an EC2 example for analyzing the log files using a custom-congenital application.
- Amazon S3 for storing ELB log files and Amazon EMR for analyzing the log files.
Your company is in a hurry of deploying their new spider web application written in NodeJS to AWS. As the Solutions Builder of the company, you were assigned to practise the deployment without worrying about the underlying infrastructure that runs the awarding. Which service will you employ to easily deploy and manage your new spider web awarding in AWS?
Options are :
- AWS Rubberband Beanstalk
- AWS CloudFront
- AWS CloudFormation
- AWS CodeCommit
AWS BDS-C00 Certified Large Information Speciality Do Test Set v
Your web application is relying entirely on slower disk-based databases, causing it to perform slowly. To improve its performance, you integrated an in-retentivity data shop to your web application using ElastiCache. How does Amazon ElastiCache improve database performance?
Options are :
- It securely delivers data to customers globally with low latency and high transfer speeds.
- It provides an in-memory cache that delivers upward to 10x operation improvement from milliseconds to microseconds or even at millions of requests per second.
- Past caching database query results.
- It reduces the load on your database past routing read queries from your applications to the Read Replica.
In your VPC, you have a Archetype Load Balancer distributing traffic to 2 running EC2 instances in ap-southeast-1a AZ and 8 EC2 instances in ap-southeast-1b AZ. However, y'all noticed that half of your incoming traffic goes to ap-southeast-1a AZ which over-utilise its 2 instances simply underutilize the other 8 instances in the other AZ.
What could be the most likely cause of this problem?
Options are :
- The Archetype Load Balancer listener is not set to port 80.
- The security group of the EC2 instances does not permit HTTP traffic.
- Cross-Zone Load Balancing is disabled.
- The Classic Load Balancer listener is not prepare to port 22.
You are trying to convince a team to utilise Amazon RDS Read Replica for your multi-tier web application. What are two benefits of using read replicas? (Choose ii)
Options are :
- Information technology provides elasticity to your Amazon RDS database.
- Allows both read and write operations on the read replica to complement the main database.
- Improves operation of the primary database past taking workload from it.
- Automated failover in the case of Availability Zone service failures.
- It enhances the read performance of your main database.
Practice Exams | AWS Certified Cloud Practitioner CLF-C01 Set xvi
As a Network Architect developing a food ordering application, you need to retrieve the instance ID, public keys, and public IP address of the EC2 server you made for tagging and group the attributes into your internal application running on-premises.
Which EC2 feature volition help you achieve your requirements?
Options are :
- Instance user data
- Resource tags
- Instance metadata
- Amazon Automobile Prototype
You are working for a central bank equally the Master AWS(Amazon Web Service) Solutions Builder. Due to compliance requirements and security concerns, you are tasked to implement strict access to the primal bank's AWS(Amazon Web Service) resources using the AWS(Amazon Web Service) Identity and Access Management service.
Which of the following can you manage in the IAM dashboard? (Choose two)
Options are :
- Groups
- Identity providers
- Cost Allotment Reports
- Security Groups
- Network Access Control Listing
Your fellow AWS(Amazon Web Service) Engineer has created a new Standard-grade S3 bucket to store financial reports that are not ofttimes accessed but should be immediately available when an auditor requests for it. To save costs, you changed the storage grade of the S3 bucket from Standard to Infrequent Admission storage class.
In Amazon S3 Standard - Infrequent Access storage class, which of the following statements are truthful? (Cull 2)
Options are :
- It is designed for data that is accessed less frequently.
- It is the best storage option to store noncritical and reproducible data
- It is designed for data that requires rapid access when needed.
- Information technology provides high latency and low throughput performance
- Ideal to use for data archiving.
AWS Certified Programmer Associate Practise Test 2022 Fix 15
Yous are instructed past your manager to prepare a breastwork host in your Amazon VPC and it should merely be accessed from the corporate data centre via SSH. What is the all-time way for you to achieve this?
Options are :
- Create a large EC2 instance with a security group which only allows access on port 22 using your own pre-configured countersign.
- Create a large EC2 case with a security group which only allows admission on port 22 via the IP accost of the corporate data middle. Use a private key (.pem) file to connect to the bastion host.
- Create a small-scale EC2 instance with a security group which only allows admission on port 22 using your ain pre-configured password.
- Create a small EC2 example and a security group which only allows access on port 22 via the IP address of the corporate data center. Utilise a private key (.pem) file to connect to the bastion host.
Yous are building a cloud infrastructure where yous have EC2 instances that require access to various AWS(Amazon Web Service) services such as S3 and Redshift. You will as well demand to provision admission to organisation administrators so they can deploy and test their changes.
Which configuration should exist used to ensure that the admission to your resource are secured and not compromised? (Choose 2)
Options are :
- Enable Multi-Gene Authentication.
- Assign an IAM role to the Amazon EC2 instance.
- Store the AWS(Amazon Web Service) Admission Keys in the EC2 instance.
- Assign an IAM user for each Amazon EC2 Instance.
- Store the AWS(Amazon Spider web Service) Access Keys in ACM.
You want to constitute an SSH connection to a Linux instance hosted in your VPC via the Cyberspace. Which of the post-obit is not required in order for this to work?
Options are :
- Secondary Private IP Address
- Public IP Address or Elastic IP
- Net Gateway
- Network access control and security grouping rules which allow the relevant traffic to flow to and from your EC2 example.
AWS Certified Security Speciality SCS-C01 Exercise Exam Set i
You are working as a Cloud Consultant for a government agency with a mandate of improving traffic planning, maintenance of roadways and preventing accidents. There is a need to manage traffic infrastructure in real time, alert traffic engineers and emergency response teams when problems are detected, and automatically change traffic signals to become emergency personnel to accident scenes faster by using sensors and smart devices.
Which AWS(Amazon Web Service) service will allow the developers of the agency to connect the said devices to your cloud-based applications?
Options are :
- CloudFormation
- Elastic Beanstalk
- AWS IoT Cadre
- Container service
You need to support your mySQL database hosted on a Reserved EC2 instance. It is using EBS volumes that are configured in a RAID assortment.
What steps will you take to minimize the time during which the database cannot be written to and to ensure a consistent backup?
Options are :
- 1. Detach EBS volumes from the EC2 instance. 2. Commencement EBS snapshot of volumes. 3. Re-attach the EBS volumes.
- i. End all applications from writing to the RAID array. 2. Flush all caches to the deejay. 3. Confirm that the associated EC2 case is no longer writing to the RAID array by taking actions such every bit freezing the file organisation, unmounting the RAID assortment, or even shutting down the EC2 example. four. After taking steps to halt all disk-related activity to the RAID assortment, accept a snapshot of each EBS volume in the array.
- one. Stop all I/O action in the volumes. 2. Create an prototype of the EC2 Case. iii. Resume all I/O activity in the volume.
- ane. Finish all I/O activity in the volumes. 2. Start EBS snapshot of volumes. three. While the snapshot is in progress, resume all I/O activity.
Y'all are developing a meal planning application that provides repast recommendations for the calendar week as well as the food consumption of your users. Your application resides on an EC2 instance which requires access to various AWS(Amazon Web Service) services for its mean solar day-to-mean solar day operations.
Which of the following is the all-time way to allow your EC2 example to access your S3 bucket and other AWS(Amazon Web Service) services?
Options are :
- Create a role in IAM and assign information technology to the EC2 instance.
- Shop the API credentials in the EC2 instance.
- Add the API Credentials in the Security Group and assign it to the EC2 instance.
- Store the API credentials in a breastwork host.
QA : AWS(Amazon Web Service) Certified Solutions Architect Associate
Your company just recently adopted a hybrid compages that integrates their on-premises data center to their AWS(Amazon Web Service) deject. You are assigned to configure the VPC also as to implement the required IAM users, IAM roles, IAM groups and IAM policies.
In this scenario, what is a best practice when creating IAM policies?
Options are :
- Employ the principle of least privilege which means granting simply the permissions required to perform a task.
- Grant all permissions to any EC2 user.
- Employ the principle of least privilege which means granting only the least number of people with full root access.
- Determine what users need to do and and then arts and crafts policies for them that let the users perform those tasks including additional administrative operations.
You lot are working as a Solutions Architect for a start-up company that has a not-for-profit crowdfunding platform hosted in AWS. Their platform allows people around the globe to raise money for social enterprise projects including challenging circumstances like accidents and illnesses. Since the organisation handles financial transactions, you lot have to ensure that your cloud compages is secure.
Which of the following AWS(Amazon Spider web Service) services encrypts data at rest by default? (Choose 2)
Options are :
- AWS Storage Gateway
- Amazon RDS
- Amazon ECS
- Amazon Glacier
- AWS Lambda
You run a website which accepts loftier-quality photos and turns them into a downloadable video montage. The website offers a costless account and a premium business relationship that guarantees faster processing. All requests by both complimentary and premium members go through a single SQS queue and then processed past a group of EC2 instances which generate the videos. You demand to ensure that the premium users who paid for the service have higher priority than your complimentary members.
How exercise y'all re-design your architecture to address this requirement?
Options are :
- For the requests made by premium members, set a college priority in the SQS queue then it will exist processed offset compared to the requests made by complimentary members.
- Create an SQS queue for gratuitous members and another one for premium members. Configure your EC2 instances to consume messages from the premium queue get-go and if it is empty, poll from the free members' SQS queue.
- Apply Amazon Kinesis to process the photos and generate the video montage in real time.
- Use Amazon S3 to store and process the photos and so generate the video montage afterwards.
AWS Solutions Builder Associate Do Exams SAA-C01 Set xviii
In Elastic Load Balancing, there are diverse security features that you lot tin can use such as Server Society Preference, Predefined Security Policy, Perfect Forward Secrecy and many others. Perfect Forward Secrecy is a feature that provides additional safeguards against the eavesdropping of encrypted data through the use of a unique random session key. This prevents the decoding of captured data, even if the secret long-term key is compromised.
Perfect Frontwards Secrecy is used to offering SSL/TLS nothing suites for which two AWS(Amazon Web Service) services?
Options are :
- EC2 and S3
- CloudTrail and CloudWatch
- CloudFront and Elastic Load Balancing
- Trusted Advisor and GovCloud
One member of your DevOps team consulted you lot about a problem in connecting to one of the EC2 instances of your VPC over the Net. Your environment is set upwards with iv EC2 instances that all vest to a public subnet. The EC2 instances also vest to the same security group. Everything works well as expected except for 1 of the EC2 instances which is not able to send nor receive traffic over the Net like the other three instances.
What could be the possible reason for this issue?
Options are :
- The route table is non properly configured to permit traffic to and from the Internet through the Internet gateway.
- The EC2 case is running in an Availability Zone that is not continued to an Internet gateway.
- The EC2 example does not accept a private IP address associated with it.
- The EC2 instance does not take a public IP address associated with it.
Yous have a data analytics application that updates a real-time, strange exchange dashboard and another carve up application that athenaeum information to Amazon Redshift. Both applications are configured to swallow data from the same stream concurrently and independently past using Amazon Kinesis Data Streams. Withal, you noticed that in that location are a lot of occurrences where a shard iterator expires unexpectedly. Upon checking, you plant out that the DynamoDB table used by Kinesis does not have plenty capacity to store the lease information.
Which of the post-obit is the virtually suitable solution to rectify this result?
Options are :
- Increase the write chapters assigned to the shard table.
- Upgrade the storage capacity of the DynamoDB table.
- Enable In-Memory Acceleration with DynamoDB Accelerator (DAX).
- Utilise Amazon Kinesis Data Analytics to properly support the data analytics awarding instead of Kinesis Data Stream.
AWS Solutions Architect Associate 2022 with Practice Test Set four
You have 2 On-Demand EC2 instances inside your Virtual Private Cloud in the same Availability Zone just are deployed to different subnets. One EC2 instance is running a database and the other EC2 instance a spider web application that connects with the database. You want to ensure that these two instances can communicate with each other for your system to piece of work properly.
What are the things you have to cheque so that these EC2 instances tin communicate inside the VPC? (Choose ii)
Options are :
- Check the Network ACL if it allows advice between the ii subnets.
- Check if both instances are the aforementioned instance class.
- Check if the default route is set to a NAT example or Internet Gateway (IGW) for them to communicate.
- Bank check if all security groups are set to allow the application host to communicate to the database on the right port and protocol.
- Ensure that the EC2 instances are in the same Placement Group.
You developed a web application and deployed it on a fleet of EC2 instances, which is using Amazon SQS. The requests are saved as messages in the SQS queue which is configured with the maximum message retentiveness menses. However, after thirteen days of operation, the web application suddenly crashed and there are 10,000 unprocessed messages that are still waiting in the queue. Since you lot developed the application, you can easily resolve the upshot merely you demand to transport a communication to the users on the issue.
What information will yous provide and what will happen to the unprocessed messages?
Options are :
- Tell the users that unfortunately, they take to resubmit all the requests again.
- Tell the users that the awarding will be operational presently nevertheless, requests sent over iii days agone will demand to be resubmitted.
- Tell the users that the application volition exist operational shortly and all received requests will be processed afterwards the spider web application is restarted.
- Tell the users that unfortunately, they accept to resubmit all of the requests since the queue would non be able to procedure the ten,000 messages together.
You take started your new role every bit a Solutions Architect for a media company. They host large volumes of data for their operations which are about 250 TB in size on their internal servers. They accept decided to store this data on S3 because of its immovability and redundancy. The company currently has a 100 Mbps dedicated line connecting their caput office to the Internet.
What is the fastest way to import all this data to Amazon S3?
Options are :
- Upload it directly to S3
- Utilize AWS(Amazon Web Service) Direct connect and transfer the information over to S3.
- Upload the files using AWS(Amazon Spider web Service) Data pipeline.
- Use AWS(Amazon Web Service) Snowball to upload the files.
AWS Solutions Architect Acquaintance Practise Exams SAA-C01 Set 14
Yous are working as a Solutions Architect for a leading commercial depository financial institution which has recently adopted a hybrid cloud architecture. Yous have to ensure that the required data security is in place on all of their AWS(Amazon Web Service) resources to meet the strict financial regulatory requirements.
In the AWS(Amazon Spider web Service) Shared Responsibility Model, which security aspects are the responsibilities of the customer? (Choose 2)
Options are :
- Managing the underlying network infrastructure
- Physical security of hardware
- Bone Patching of an EC2 case
- IAM Policies and Credentials Direction
- Virtualization infrastructure
A corporate and investment banking company has recently decided to adopt a hybrid deject architecture for their Trade Finance web awarding which uses an Oracle database with Oracle Real Application Clusters (RAC) configuration. Since Oracle RAC is not supported in RDS, they decided to launch their database in a large On-Demand EC2 case instead, with multiple EBS Volumes attached. As a Solutions Architect, yous are responsible to ensure the security, availability, scalability, and disaster recovery of the whole architecture.
In this scenario, which of the following will enable yous to have backups of your EBS volumes that are being used by the Oracle database?
Options are :
- EBS-backed EC2 instances.
- Utilize Disk Mirroring, which is also known as RAID one, that replicates data to ii or more disks/EBS Volumes.
- Launch the EBS Volumes to a Placement Group which volition automatically back up your data.
- Create snapshots of the EBS Volumes.
You are working every bit a Solutions Builder for an investment banking concern and your Chief Technical Officer intends to migrate all of your applications to AWS. You are looking for block storage to store all of your data and have decided to go with EBS volumes. Your boss is worried that EBS volumes are not appropriate for your workloads due to compliance requirements, downtime scenarios, and IOPS performance.
Which of the following are valid points in proving that EBS is the all-time service to use for your migration? (Select all that applies)
Options are :
- When yous create an EBS volume in an Availability Zone, it is automatically replicated on a split AWS(Amazon Web Service) region to forestall information loss due to a failure of whatsoever unmarried hardware component.
- EBS volumes tin exist fastened to any EC2 Case in whatsoever Availability Zone.
- An EBS volume is off-instance storage that tin can persist independently from the life of an example.
- EBS volumes back up live configuration changes while in product which ways that yous can modify the volume type, volume size, and IOPS capacity without service interruptions.
- Amazon EBS provides the ability to create snapshots (backups) of whatsoever EBS volume and write a copy of the data in the volume to Amazon RDS, where it is stored redundantly in multiple Availability Zones
AWS SCS-C01 Certified Security Speciality Exercise Exam Set 4
Your company has a superlative priority requirement to monitor a few database metrics and and then subsequently, transport email notifications to the Operations team in case there is an event. Which AWS(Amazon Web Service) services tin accomplish this requirement? (Choose 2)
Options are :
- Amazon Simple Email Service
- Amazon CloudWatch
- Amazon Unproblematic Queue Service (SQS)
- Amazon Route 53
- Amazon Elementary Notification Service (SNS)
You are a Solutions Architect of a multi-national gaming visitor which develops video games for PS4, Xbox One and Nintendo Switch consoles, plus a number of mobile games for Android and iOS. Due to the wide range of their products and services, you proposed that they utilise API Gateway.
What are the key features of API Gateway that you tin can tell your customer? (Choose ii)
Options are :
- It automatically provides a query language for your APIs similar to GraphQL.
- You tin run your APIs with quantum computer servers.
- You can run your APIs without any servers.
- Provides durable data storage
- Y'all pay only for the API calls you receive and the corporeality of data transferred out.
A web awarding, which is used by your clients effectually the world, is hosted in an Automobile Scaling group of EC2 instances behind a Classic Load Balancer. Yous demand to secure your awarding by allowing multiple domains to serve SSL traffic over the aforementioned IP address.
Which of the post-obit should you do to run across the above requirement?
Options are :
- Use Server Name Indication (SNI) on your Classic Load Balancer by adding multiple SSL certificates to let multiple domains to serve SSL traffic.
- Generate an SSL document with AWS(Amazon Web Service) Document Manager and create a CloudFront spider web distribution. Associate the certificate with your web distribution and enable the support for Server Name Indication (SNI).
- Use an Rubberband IP and upload multiple 3rd party certificates in your Classic Load Balancer using the AWS(Amazon Spider web Service) Document Manager.
- Information technology is not possible to allow multiple domains to serve SSL traffic over the same IP address in AWS
AWS DVA-C00 Certified Programmer Acquaintance Practice Exam Set 7
You have a static corporate website hosted in a standard S3 bucket and a new web domain proper noun which was registered using Route 53. You are instructed past your manager to integrate these ii services in order to successfully launch their corporate website.
What are the prerequisites when routing traffic using Amazon Route 53 to a website that is hosted in an Amazon S3 Bucket? (Choose two)
Options are :
- The S3 bucket name must be the same as the domain name
- A registered domain name
- The record fix must be of type "MX"
- The S3 bucket must exist in the same region as the hosted zone
- The Cross-Origin Resource Sharing (CORS) option should be enabled in the S3 saucepan
A software company has resources hosted in AWS(Amazon Web Service) and on-premises servers. You take been requested to create a decoupled architecture for applications which make use of both resources.
Which of the below options are valid? (Choose 2)
A software company has resources hosted in AWS(Amazon Web Service) and on-premises servers. You take been requested to create a decoupled architecture for applications which make use of both resources.
Which of the below options are valid? (Choose 2)
Options are :
- Use SWF to utilize both on-premises servers and EC2 instances for your decoupled awarding
- Use RDS to use both on-premises servers and EC2 instances for your decoupled awarding
- Apply SQS to employ both on-premises servers and EC2 instances for your decoupled application
- Utilize Amazon Simple Decoupling Service to employ both on-bounds servers and EC2 instances for your decoupled application
- Use DynamoDB to employ both on-premises servers and EC2 instances for your decoupled awarding
You are an AWS(Amazon Web Service) Network Engineer working for a utilities provider where you lot are managing a monolithic application with EC2 case using a Windows AMI. Y'all desire to implement a cost-effective and highly available architecture for your application where you lot have an exact replica of the Windows server that is in a running state. If the principal instance terminates, you can attach the ENI to the standby secondary example which allows the traffic flow to resume within a few seconds.
When it comes to the ENI attachment to an EC2 case, what does 'warm attach' refer to?
Options are :
- Attaching an ENI to an example when it is stopped.
- Attaching an ENI to an instance during the launch process.
- Attaching an ENI to an example when it is running.
- Attaching an ENI to an example when information technology is idle.
Certification : Get AWS(Amazon Web Service) Certified Solutions Architect Set half-dozen
You have built a web application that checks for new items in an S3 saucepan once every hour. If new items exist, a message is added to an SQS queue. You have a fleet of EC2 instances which remember messages from the SQS queue, procedure the file, and finally, send y'all and the user an email confirmation that the item has been successfully candy. Your officemate uploaded ane test file to the S3 bucket and after a couple of hours, you lot noticed that yous and your officemate have l emails from your application with the same message.
Which of the following is about likely the root cause why the application has sent you lot and the user multiple emails?
Options are :
- The sqsSendEmailMessage attribute of the SQS queue is configured to 50.
- There is a issues in the application.
- By default, SQS automatically deletes the messages that were processed by the consumers. It might exist possible that your officemate has submitted the request 50 times which is why y'all received a lot of emails.
- Your awarding does non issue a delete command to the SQS queue after processing the message, which is why this message went back to the queue and was processed multiple times.
You are working for a litigation house as the Data Engineer for their instance history awarding. Y'all need to continue rail of all the cases your house has handled. The static assets like .jpg, .png, and .pdf files are stored in S3 for cost efficiency and high immovability. As these files are critical to your business, y'all want to go along rail of what's happening in your S3 saucepan. You constitute out that S3 has an result notification whenever a delete or write operation happens within the S3 saucepan.
What are the possible Issue Notification destinations available for S3 buckets? (Choose 2)
Options are :
- Kinesis
- SES
- SQS
- Lambda function
- SWF
You take a new, dynamic web app written in Hateful stack that is going to be launched in the adjacent month. At that place is a probability that the traffic will be quite loftier in the first couple of weeks. In the effect of a load failure, how can y'all set DNS failover to a static website?
Options are :
- Duplicate the exact application architecture in another region and configure DNS weight-based routing.
- Enable failover to an application hosted in an on-premises data center.
- Use Route 53 with the failover option to a static S3 website bucket or CloudFront distribution.
- Add more servers in case the application fails.
AWS Certified Cloud Practitioner 6 full practice tests Prepare 4
How To Configure Mongodb Replica Set In Aws,
Source: https://chercher.tech/aws-certification/aws-certified-solutions-architect-associate-practice-exams-set-4
Posted by: lathamhade1972.blogspot.com
0 Response to "How To Configure Mongodb Replica Set In Aws"
Post a Comment