You have created a custom VPC. What are two things you may need to do in order to SSH directly into your instance?
Choose the 2 correct answers:

• A.Enable SSH on the instance
• B.Attach a NAT Gateway
• C.Enable Public IP addresses
• D.Attach an Internet Gateway

Comment: *

Name: *

Email: *

Verification: *

An organization delivers high-resolution, dynamic web content. Internet users access the content from a variety of platforms, including mobile, tablet and desktop. Each platform receives a customized experience to account for the differences in viewing modes. A dedicated, automatic-scaling fleet of Amazon EC2 instances is used for each platform to server content based on path-based headers.
Which combination of services will MINIMIZE cost and MAXIMIZE performance? (Select two.)

• A.Amazon CloudFront with Lambda@Edge
• B.Network Load Balancer
• C.Amazon S3 static websites
• D.Amazon Route 53 with traffic flow policies
• E.Application Load Balancer

Comment: *

Name: *

Email: *

Verification: *

A company's web application is deployed on Amazon EC2 instances behind a public Application Load Balancer. The application flags malicious requests and uses an AWS Lambda function to add the offending IP addresses to the network ACL to block any further request for 24 hours.
Recently, the application has been receiving more malicious requests, which causes the network ACL to reach its limit of allowed entries.
Which action should be taken to block more IP addresses, without compromising the existing security requirements?

• A.Update the AWS Lambda function to remove blocked entries from the network ACL after 2 hours.
• B.Update the AWS Lambda function to add an additional network ACL to the subnets once the limit for the previous ones has been reached.
• C.Update the AWS Lambda function to block malicious IPs in AWS WAF attached to the Application Load Balancer.
• D.Update the AWS Lambda function to block malicious IPs in security groups rather than the network ACL.

Comment: *

Name: *

Email: *

Verification: *

A Systems Administrator is designing a hybrid DNS solution with spilt-view. The apex-domain "example.com" should be served through name servers across multiple top-level domains (TLDs). The name server for subdomain "dev.example.com" should reside on-premises. The administrator has decided to use Amazon Route 53 to achieve this scenario.
What procedurals steps must be taken to implement the solution?

• A.Use a Route 53 public hosted zone for example.com and a private hosted zone for dev.example.com
• B.Use a Route 53 public and private hosted zone for example.com and perform subdomain delegation for dev.example.com
• C.Use a Route 53 public hosted zone for example.com and perform subdomain delegation for dev.example.com
• D.Use a Route 53 private hosted zone for example.com and perform subdomain delegation for dev.example.com

Comment: *

Name: *

Email: *

Verification: *

You deploy an Amazon EC2 instance that runs a web server into a subnet in a VPC. An Internet gateway is attached, and the main route table has a default route (0.0.0.0/0) configured with a target of the Internet gateway.
The instance has a security group configured to allow as follows:
* Protocol: TCP
* Port: 80 inbound, nothing outbound
The Network ACL for the subnet is configured to allow as follows:
* Protocol: TCP
* Port: 80 inbound, nothing outbound
When you try to browse to the web server, you receive no response.
Which additional step should you take to receive a successful response?

• A.Add an entry to the Network Acl outbound rules for Protocol: TCP, Port Range: 80
• B.Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 80
• C.Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 1024-65535
• D.Add an entry to the Network Acl outbound rules for Protocol: TCP, Port Range: 1024-65535

Comment: *

Name: *

Email: *

Verification: *