An organization is planning to setup a management network on the AWS VPC. The organization is trying to secure the webserver on a single VPC instance such that it allows the internet traffic as well as the back-end management traffic. The organization wants to make so that the back end management network interface can receive the SSH traffic only from a selected IP range, while the internet facing webserver will have an IP address which can receive traffic from all the internet IPs.
How can the organization achieve this by running web server on a single instance?

• A.It is not possible to have two IP addresses for a single instance.
• B.The organization should create two network interfaces with the same subnet and security group to assign separate IPs to each network interface.
• C.The organization should create two network interfaces with separate subnets so one instance can have two subnets and the respective security groups for controlled access.
• D.The organization should launch an instance with two separate subnets using the same network interface which allows to have a separate CIDR as well as security groups.

Comment: *

Name: *

Email: *

Verification: *

A company has created a VPC with multiple private subnets in multiple Availability Zones (AZs) and one public subnet in one of the AZs. The public subnet is used to launch a NAT gateway. There are instance in the private subnet that use a NAT gateway to connect to the internet. In case is used of an AZ failure, the company wants to ensure that the instance are not all experiencing internet connectivity issues and that there is a backup plan ready.
Which solution should a solutions architect recommend that is MOST highly available?

• A.Create an Amazon EC2 NAT instance in a now public subnet Distribute the traffic between the NAT gateway and the NAT instance
• B.Create a new public subnet with a NAT gateway in the same AZ Distribute the traffic between the two NAT gateways
• C.Create an Amazon EC2 NAT instance in the same public subnet Replace the NAT gateway with the NAT instance and associate the instance with an Auto Scaling group with an appropriate scaling policy.
• D.Create public subnets In each f\Z and launch a NAT gateway in each subnet Configure the traffic from the private subnets In each A2 to the respective NAT gateway

Comment: *

Name: *

Email: *

Verification: *

Every user you create in the lAM system starts with ___ _

• A.Partial permissions
• B.Full permissions
• C.No permissions

Comment: *

Name: *

Email: *

Verification: *

A large media site has multiple applications in Amazon ECS. A Solutions Architect needs to use content metadata and route traffic to specific services.
What is the MOST efficient method to perform this task?

• A.Use the AWS CLI to update Amazon Route 53 hosted zone to route traffic as services get updated.
• B.Use Amazon CloudFront to manage and route traffic to the correct service.
• C.Use an AWS Classic Load Balancer with a host-based routing option to route traffic to the correct service.
• D.Use an AWS Application Load Balancer with host-based routing option to route traffic to the correct service.

Comment: *

Name: *

Email: *

Verification: *

A customer has established an AWS Direct Connect connection to AWS. The link is up and routes are being advertised from the customer's end, however the customer is unable to connect from EC2 instances inside its VPC to servers residing in its datacenter.
Which of the following options provide a viable solution to remedy this situation? (Choose 2 answers)

• A.Modify the Instances VPC subnet route table by adding a route back to the customer's on-premises environment.
• B.Add a route to the route table with an iPsec VPN connection as the target.
• C.Enable route propagation to the virtual pinnate gateway (VGW).
• D.Enable route propagation to the customer gateway (CGW).
• E.Modify the route table of all Instances using the 'route' command.

Comment: *

Name: *

Email: *

Verification: *