A two-tier application has an Elastic Load Balancing (ELB) load balancer configured in front of the application tier that is driven via RESTful interfaces. The data tier uses RDS MySQL. The company's new policies require end-to-end encryption of all data in transit.
How will you configure this requirement?
Response:

• A.Configure HTTPS as the ELB load balancer protocol. Offload application instance encryption to the load balancer. Install your SSL certificate on Amazon RDS, and configure SSL
• B.Configure the ELB with a TCP listener. Configure the application instances for SSL termination.
  Configure RDS for SSL, and use REQUIRE SSL grants
• C.Configure the ELB load balancer with an HTTP listener. Configure the application instances for SSL termination. Configure Amazon RDS for SSL, and use REQUIRE SSL grants
• D.Configure the ELB with SSL protocol. Offload encryption of application instance to the load balancer.
  Install your SSL/TLS certificate on Amazon RDS, and configure SSL

Comment: *

Name: *

Email: *

Verification: *

In Amazon CloudFront, to link to your objects, if your domain name is d111111abcdef8.cloudfront.net and your object is image.jpg, then the URL for the link in your webpage will be _____.
Response:

• A.http://d111111abcdef8.dns/images/image.jpg
• B.http://d111111abcdef8.dns/image.jpg
• C.http://d111111abcdef8.cloudfront.net/image.jpg
• D.http://d111111abcdef8.cloudfront.net/images/image.jpg

Comment: *

Name: *

Email: *

Verification: *

You can use the ____ page of the AWS Config console to look up resources that AWS Config has discovered, including deleted resources and resources that are not currently being recorded.
Response:

• A.configuration history
• B.resource inventory
• C.resource database
• D.snapshot listing

Comment: *

Name: *

Email: *

Verification: *

You have two VPCs that you've peered. You created a route for VPC A to get to an instance in VPC. You are unable to ping the instance. You have double checked your security groups and NACLs. Why might this be?
Response:

• A.You forgot to add a return route.
• B.You have to enable Source/Destination check in the VPCs.
• C.ICMP is not supported over peering connections.
• D.You have to configure the peering connection to allow two way traffic.

Comment: *

Name: *

Email: *

Verification: *

You are in charge of creating a network architecture for a development group that is interested in running a real-time exchange on AWS. The participants (businesses like banks) of the exchange expect very low latency but do not operate on AWS.
Which description most accurately describes the networking and security tradeoffs for potential network designs?
Response:

• A.Use AWS Direct Connect to connect to the exchange application. This allows for lower latency and native encryption but requires additional configuration to support multi-tenancy and agreements from participants.
• B.Configure a separate Virtual Private Network (VPN) connection on the Virtual Private Gateway (VGW) for each participant. This will allow individual scaling per participant and the lowest latency but requires customers to support VPN devices.
• C.Allow participants to connect directly via the Internet. This allows for customers to come in freely but does not guarantee security. Latency can be managed with Transmission Control Protocol (TCP) tuning and network performance appliances.
• D.Use AWS Direct Connect to connect to the exchange application. This allows for more control of the latency, but it requires organizing connectivity to each of the participants. The traffic is not encrypted though.

Comment: *

Name: *

Email: *

Verification: *