Which statement is NOT true about accessing remote AWS region in the US by your AWS Direct Connect which is located in the US?

• A.AWS Direct Connect locations in the United States can access public resources in any US region.
• B.You can use a single AWS Direct Connect connection to build multi-region services.
• C.Any data transfer out of a remote region is billed at the location of your AWS Direct Connect data transfer rate.
• D.To connect to a VPC in a remote region, you can use a virtual private network (VPN) connection over your public virtual interface.

Comment: *

Name: *

Email: *

Verification: *

You are designing a social media site and are considering how to mitigate distributed denial-of-service (DDoS) attacks.
Which of the below are viable mitigation techniques? (Choose 3)

• A.Add alert Amazon CloudWatch to look for high Network in and CPU utilization.
• B.Use an Amazon CloudFront distribution for both static and dynamic content.
• C.Use dedicated instances to ensure that each instance has the maximum performance possible.
• D.Create processes and capabilities to quickly add and remove rules to the instance OS firewall.
• E.Add multiple elastic network interfaces (ENIs) to each EC2 instance to increase the network bandwidth.
• F.Use an Elastic Load Balancer with auto scaling groups at the web, app and Amazon Relational Database Service (RDS) tiers

Comment: *

Name: *

Email: *

Verification: *

An application stores data in a My SQL database hosted on an EC2 instance. A Solutions Architect must address reports of high latency and dropped requests. The web tier EC2 instances are mostly idle, but the database instance has a large number of read requests that result in a large-disk read queue.
Which solution will address the problems?

• A.Provision a database replica, and place a Network Load Balancer in front of both databases.
• B.Provision all the EC2 instances, both web tier and database, in a placement group.
• C.Cache database query results in an Amazon ElastiCache cluster, and check the cluster for cached results before calling the database.
• D.Import the database into a Mufti-AZ RDS instance and direct the read-only queries to the standby instance.

Comment: *

Name: *

Email: *

Verification: *

You currently operate a web application. In the AWS US-East region. The application runs on an auto- scaled layer of EC2 instances and an RDS Multi-AZ database. Your IT security compliance officer has tasked you to develop a reliable and durable logging solution to track changes made to your EC2.IAM And RDS resources. The solution must ensure the integrity and confidentiality of your log data.
Which of these solutions would you recommend?

• A.Create a new CloudTrail with one new S3 bucket to store the logs Configure SNS to send log file delivery notifications to your management system. Use IAM roles and S3 bucket policies on the S3 bucket mat stores your logs.
• B.Create a new CloudTrail trail with an existing S3 bucket to store the logs and with the global services option selected. Use S3 ACLs and Multi Factor Authentication (MFA). Delete on the S3 bucket that stores your logs.
• C.Create a new CloudTrail trail with one new S3 bucket to store the logs and with the global services option selected. Use IAM roles S3 bucket policies and Multi Factor Authentication (MFA) Delete on the S3 bucket that stores your logs.
• D.Create three new CloudTrail trails with three new S3 buckets to store the logs one for the AWS Management console, one for AWS SDKs and one for command line tools. Use IAM roles and S3 bucket policies on the S3 buckets that store your logs.

Comment: *

Name: *

Email: *

Verification: *

A company wants to deploy a shared file system for its .NET application servers and Microsoft SQL Server databases running on Amazon EC2 instances with Windows Server 2016. The solution must be able to be integrated into the corporate Active Directory domain, be highly durable, be managed by AWS, and provide high levels of throughput and IOPS.
Which solution meets these requirements?

• A.Use Amazon FSx for Windows File Server.
• B.Use AWS Storage Gateway in file gateway mode.
• C.Deploy a Windows file server on two On Demand instances across two Availability Zones.
• D.Use Amazon Elastic File System (Amazon EFS).

Comment: *

Name: *

Email: *

Verification: *