A company uses AWS Direct Connect lo connect its corporate network to multiple VPCs in the same AWS account and the same AVVS Region Each VPC uses its own private VIF and its own virtual LAN on the Direct Connect connection The company has grown and will soon surpass the limit of VPCs and private VIFs for each connection What is the MOST scalable way to add VPCs with on-premises connectivity?

• A.Provision a new Direct Connect connection to handle the additional VPCs Use the new connection to connect additional VPCs.
• B.Create a Direct Connect gateway, and add virtual private gateway associations to the VPCs. Configure a private VIF to connect to the corporate network
• C.Create a transit gateway and attach the VPCs Create a Direct Connect gateway, and associate it with the transit gateway Create a transit VIF to the Direct Connect gateway
• D.Create virtual private gateways for each VPC that is over the service quota Use AWS Site-to-Site VPN to connect the virtual private gateways to the corporate network

Comment: *

Name: *

Email: *

Verification: *

You manage a web service that is used by client applications deployed in 300 offices worldwide. The web service architecture is an Elastic Load balancer (ELB) distributing traffic across four application servers deployed in an autoscaling group across two availability zones.
The ELB is configured to use round robin, and sticky sessions are disabled. You have configured the NACLs and Security Groups to allow port 22 from your bastion host, and port 80 from 0.0.0.0/0. The client configuration is managed by each regional IT team.
Upon inspection you find that a large amount of requests from incorrectly configured sites are causing a single application server to degrade. The remainder of the requests are equally distributed across all servers with no negative effects.
What should you do to remedy the situation and prevent future occurrences?

• A.Mark the affected instance as degraded in the ELB and raise it with the client application team.
• B.Update the NACL to only allow port 80 to the application servers from the ELB servers.
• C.Update the Security Groups to only allow port 80 to the application servers from the ELB.
• D.Terminate the affected instance and allow Auto Scaling to create a new instance.

Comment: *

Name: *

Email: *

Verification: *

Your company's policy requires that all VPCs peer with a "common services: VPC. This VPC contains a fleet of layer 7 proxies and an Internet gateway. No other VPC is allowed to provision an Internet gateway. You configure a new VPC and peer with the common service VPC as required by policy. You launch an Amazon EC2. Windows instance configured to forward all traffic to the layer 7 proxies in the common services VPC.
The application on this server should successfully interact with Amazon S3 using its properly configured AWS Identity and Access Management (IAM) role. However, Amazon S3 is returning 403 errors to the application.
Which step should you take to enable access to Amazon S3?

• A.Update the CORS configuration for Amazon S3 to allow traffic from the proxy.
• B.Configure a VPC endpoint for Amazon S3 in the same subnet as the instance.
• C.Exclude 169.254.169.0/24 from the instance's proxy configuration.
• D.Update the S3 bucket policy with the private IP address of the instance.

Comment: *

Name: *

Email: *

Verification: *

You are preparing to launch Amazon WorkSpaces and need to configure the appropriate networking resources. What must be configured to meet this requirement?

• A.At least two subnets in different Availability Zones.
• B.A dedicated VPC with Active Directory Services.
• C.An IPsec VPN to on-premises Active Directory
• D.Network address translation for outbound traffic.

Comment: *

Name: *

Email: *

Verification: *

What are two features of an Application Load Balancer? Choose the 2 correct answers:

• A.Scales to handle any amount of traffic without interference
• B.Can distribute traffic over multiple Availability Zones
• C.Can receive a static IP address
• D.Can support SSLs

Comment: *

Name: *

Email: *

Verification: *