A company is developing an application in which IoT devices will report measurements to the AWS Cloud. The application will have millions of end users. The company observes that the IoT devices cannot support DNS resolution. The company needs to implement an Amazon EC2 Auto Scaling solution so that the IoT devices can connect to an application endpoint without using DNS.
Which solution will meet these requirements MOST cost-effectively?

• A.Use an Application Load Balancer (ALB)-type target group for a Network Load Balancer (NLB). Create an EC2 Auto Scaling group. Attach the Auto Scaling group to the ALB. Set up the IoT devices to connect to the IP addresses of the NLB.
• B.Use an AWS Global Accelerator accelerator with an Application Load Balancer (ALB) endpoint. Create an EC2 Auto Scaling group. Attach the Auto Scaling group to the ALSet up the IoT devices to connect to the IP addresses of the accelerator.
• C.Use a Network Load Balancer (NLB). Create an EC2 Auto Scaling group. Attach the Auto Scaling group to the NLB. Set up the IoT devices to connect to the IP addresses of the NLB.
• D.Use an AWS Global Accelerator accelerator with a Network Load Balancer (NLB) endpoint. Create an EC2 Auto Scaling group. Attach the Auto Scaling group to the NLB. Set up the IoT devices to connect to the IP addresses of the accelerator.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements concerning LAGs is incorrect?
Response:

• A.If you create a new connection, you will have to fill out another LOA-CFA
• B.You can pool connections with multiple speeds to create one faster speed
• C.You will receive 1 LOA-CFA with a page for each connection
• D.All connections in the LAG must terminate at the same DX endpoint

Comment: *

Name: *

Email: *

Verification: *

An ecommerce company is migrating its legacy web application to the AWS Cloud. Since the application is complex and may take several months to refactor, the CTO at the company tasked the development team to build an ad-hoc solution of using CloudFront with a custom origin pointing to the SSL endpoint URL for the legacy web application until the replacement is ready and deployed.
The ad-hoc solution has worked for several weeks, however, all browser connections recently began showing an HTTP 502 Bad Gateway error with the header "X-Cache: Error from CloudFront". Network monitoring services show that the HTTPS port 443 on the legacy web application is open and responding to requests.
Which of the following will you attribute as the likely cause of the error and what is the solution to address this issue?
Response:

• A.The SSL certificate on the legacy web application server has expired. Reissue the SSL certificate on the web server that is signed by a globally recognized certificate authority (CA). Install the full certificate chain onto the legacy web application server
• B.The SSL certificate on the legacy web application server has expired. Install a new self-signed certificate along with the full certificate chain onto the legacy web application server
• C.The SSL certificate on the legacy web application server has expired. Reissue the SSL certificate on the web server via the AWS Certificate Manager (ACM) in the us-east-1 Region
• D.The SSL certificate on the CloudFront distribution has expired. Reissue the SSL certificate on the CloudFront distribution via the AWS Certificate Manager (ACM) in the us-east-1 Region

Comment: *

Name: *

Email: *

Verification: *

You have an application that is processing confidential dat
a. The data is currently stored in your data center. You are moving workloads to AWS, and you need to ensure confidentiality and integrity of the data in transit to your VPC. Your company has an existing AWS Direct Connect connection.
What combination of steps should you perform to set up the most cost-effective connection between your on-premises data center and AWS?
(Choose 3)
Response:

• A.Set up a VPC with a virtual private gateway.
• B.Configure a private virtual interface to the virtual private gateway.
• C.Set up an IPsec tunnel between your customer gateway appliance and the virtual private gateway.
• D.Set up an IPsec tunnel between your customer gateway and a software VPN on Amazon EC2 in the VPC.
• E.Configure a public virtual interface on your Direct Connect connection.
• F.Set up a VPC with an Internet gateway.

Comment: *

Name: *

Email: *

Verification: *

An AWS CloudFormation template is being used to create a VPC peering connection between two existing operational VPCs, each belonging to a different AWS account. All necessary components in the
'Remote' (receiving) account are already in place.
The template below creates the VPC peering connection in the Originating account. It contains these components:

Which additional AWS CloudFormation components are necessary in the Originating account to create an operational cross-account VPC peering connection with AWS CloudFormation?
(Select two.)
Response:

• A.Resources:
  NewEC2SecurityGroup:
  Type: AWS::EC2::SecurityGroup
• B.Resources:
  NetworklnterfaceToRemoteVPC:
  Type: "AWS::EC2NetworkInterface"
• C.Resources:
  VPCGatewayToRemoteVPC:
  Type: "AWS::EC2::VPCGatewayAttachment"
• D.Resources:
  newVPCPeeringConnection:
  Type: 'AWS::EC2VPCPeeringConnection'
  PeerRoleArn: !Ref PeerRoleArn
• E.Resources:
  newEC2Route:
  Type: AWS::EC2::Route

Comment: *

Name: *

Email: *

Verification: *