Instant Access Amazon.AWS-Solutions-Architect-Associate.v2022-08-04.q384 Actual Practice Test Engine for Free (Page 3)

40%off

AWS-Solutions-Architect-Associate Premium Dumps

Latest AWS-Solutions-Architect-Associate Exam Premium Dumps provide by TrainingQuiz.com to help you Passing AWS-Solutions-Architect-Associate Exam! TrainingQuiz.com offers the updated AWS-Solutions-Architect-Associate exam dumps, the TrainingQuiz.com AWS-Solutions-Architect-Associate exam questions has been updated to correct Answer. Get the latest TrainingQuiz.com AWS-Solutions-Architect-Associate pdf dumps with Exam Engine here:

(652 Q&As Dumps, 40%OFF Special Discount: DumpsDB)

Question 6

You have set up an S3 bucket with a number of images in it and you have decided that you want anybody to be able to access these images, even anonymous users. To accomplish this you create a bucket policy.
You will need to use an Amazon S3 bucket policy that specifies a __________ in the principal element, which means anyone can access the bucket.

A.hash tag (#)
B.anonymous user
C.wildcard (*)
D.S3 user

Question 7

A company uses Amazon S3 for storing a vanety of files. A Solutions Architect needs to design a feature that will allow users to instantly restore any deleted files within 30 days of deletion.
Which is the MOST cost-efficient solution?

A.Enable versioning and create a lifecycle policy to remove expired versions after 30 days.
B.Enable cross-region replication. Empty the replica bucket every 30 days using an AWS Lambda function.
C.Create lifecycle policies that move the objects to Amazon Glacier and delete them after 30 days.
D.Enable versioning and MFA Delete. Using a Lambda function, remove MFA delete from objects more than 30 days old.

Question 8

A company's website is used to sell products to the public The site runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB) There is also an Amazon CloudFront distribution and AWS WAF is being used to protect against SQL injection attacks The ALB is the origin for the CloudFront distribution A recent review of security logs revealed an external malicious IP that needs to be blocked from accessing the website What should a solutions architect do to protect the application?

A.Modify the network ACL on the CloudFront distribution to add a deny rule for the malicious IP address
B.Modify the configuration of AWS WAF to add an IP match condition to block the malicious IP address
C.Modify the network ACL for the EC2 instances in the target groups behind the ALB to deny the malicious IP address
D.Modify the security groups for the EC2 instances in the target groups behind the ALB to deny the malicious IP address

Correct Answer: B

Reference:
https://aws.amazon.com/blogs/aws/aws-web-application-firewall-waf-for-application-loadbalancers/
https://docs.aws.amazon.com/waf/latest/developerguide/classic-web-acl-ip-conditions.html A new version of the AWS Web Application Firewall was released in November 2019. With AWS WAF classic you create "IP match conditions", whereas with AWS WAF (new version) you create "IP set match statements". Look out for wording on the exam.
The IP match condition / IP set match statement inspects the IP address of a web request's origin against a set of IP addresses and address ranges. Use this to allow or block web requests based on the IP addresses that the requests originate from.
AWS WAF supports all IPv4 and IPv6 address ranges. An IP set can hold up to 10,000 IP addresses or IP address ranges to check.
CORRECT: "Modify the configuration of AWS WAF to add an IP match condition to block the malicious IP address" is the correct answer.
INCORRECT: "Modify the network ACL on the CloudFront distribution to add a deny rule for the malicious IP address" is incorrect as CloudFront does not sit within a subnet so network ACLs do not apply to it.
INCORRECT: "Modify the network ACL for the EC2 instances in the target groups behind the ALB to deny the malicious IP address" is incorrect as the source IP addresses of the data in the EC2 instances' subnets will be the ELB IP addresses.
INCORRECT: "Modify the security groups for the EC2 instances in the target groups behind the ALB to deny the malicious IP address." is incorrect as you cannot create deny rules with security groups.
References:
https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-ipset-match.html If you want to allow or block web requests based on the IP addresses that the requests originate from, create one or more IP match conditions. An IP match condition lists up to 10,000 IP addresses or IP address ranges that your requests originate from. Later in the process, when you create a web ACL, you specify whether to allow or block requests from those IP addresses.
AWS Web Application Firewall (WAF) - Helps to protect your web applications from common application-layer exploits that can affect availability or consume excessive resources. As you can see in my post (New - AWS WAF), WAF allows you to use access control lists (ACLs), rules, and conditions that define acceptable or unacceptable requests or IP addresses. You can selectively allow or deny access to specific parts of your web application and you can also guard against various SQL injection attacks. We launched WAF with support for Amazon CloudFront
https://docs.aws.amazon.com/waf/latest/developerguide/classic-web-acl-ip-conditions.html
https://aws.amazon.com/blogs/aws/aws-web-application-firewall-waf-for-application-load-balancers/

Question 9

You are using an m1.small EC2 Instance with one 300GB EBS volume to host a relational database.
You determined that write throughput to the database needs to be increased. Which of the following approaches can help achieve this? Choose 2 answers

A.Increase the size of the EC2 Instance.
B.Place the instance in an Auto Scaling Groups
C.Put the database behind an Elastic Load Balancer.
D.Add an EBS volume and place into RAID 5.
E.Enable Multi-AZ mode.
F.Use an array of EBS volumes.

Question 10

For each DB Instance class, what is the maximum size of associated storage capacity?

A.500GB
B.2TB
C.5GB
D.1TB