AWS CloudFormation is a service that helps you model and set up your Amazon Web Services resources so that you can spend less time managing those resources and more time focusing on your applications that run in AWS. You create a template that describes all the AWS resources that you want (like Amazon EC2 instances or Amazon RDS DB instances), and AWS CloudFormation takes care of provisioning and configuring those resources for you. What formatting is required for this template?

• A.JSON-formatted document
• B.CSS-formatted document
• C.XML-formatted document
• D.HTML-formatted document

Comment: *

Name: *

Email: *

Verification: *

You have been asked to design a fault-tolerant and scalable web application across three availability zones. The presentation logic will reside on web servers behind an ELB classic load balancer, and the application logic will reside on a set of app servers behind a second load balancer. How should you use auto scaling groups?

• A.Deploy six auto scaling groups: a web server group in each Availability zone and an app server group in each availability zone
• B.Deploy three auto scaling groups: one for each Availability zone that includes both web and app servers
• C.Deploy one auto scaling group that includes al the web and app servers across all availability zones
• D.Deploy two Auto Scaling groups: one for the web servers in all Availability zones and one for the app servers in all Availability zones

Comment: *

Name: *

Email: *

Verification: *

An application runs on multiple Amazon EC2 instances. Each running instance of the application must have access to a shared file system.
Where should the data be stored?

• A.Amazon S3
• B.Amazon DynamoDB
• C.Amazon EFS
• D.Amazon EBS

Comment: *

Name: *

Email: *

Verification: *

You've been hired to enhance the overall security posture for a very large e-commerce site They have a well architected multi-tier application running in a VPC that uses ELBs in front of both the web and the app tier with static assets served directly from S3 They are using a combination of RDS and DynamoOB for their dynamic data and then archiving nightly into S3 for further processing with EMR They are concerned because they found questionable log entries and suspect someone is attempting to gain unauthorized access.
Which approach provides a cost effective scalable mitigation to this kind of attack?

• A.Remove all but TLS 1 2 from the web tier ELB and enable Advanced Protocol Filtering This will enable the ELB itself to perform WAF functionality.
• B.Add previously identified hostile source IPs as an explicit INBOUND DENY NACL to the web tier subnet.
• C.Add a WAF tier by creating a new ELB and an AutoScalmg group of EC2 Instances running a host-based WAF They would redirect Route 53 to resolve to the new WAF tier ELB The WAF tier would thier pass the traffic to the current web tier The web tier Security Groups would be updated to only allow traffic from the WAF tier Security Group
• D.Recommend mat they lease space at a DirectConnect partner location and establish a 1G DirectConnect connection to tneirvPC they would then establish Internet connectivity into their space, filter the traffic in hardware Web Application Firewall (WAF). And then pass the traffic through the DirectConnect connection into their application running in their VPC.

Comment: *

Name: *

Email: *

Verification: *

A company has three VPCs named Development, Testing, and Production in the us-east-1 Region. The three VPCs need to be connected to an on-premises data center and are designed to be separate to maintain security and prevent any resource sharing. A solutions architect needs to find a scalable and secure solution.
What should the solutions architect recommend?

• A.Create an AWS Direct Connect connection and a VPN connection for each VPC to connect back to the data center.
• B.Create a new VPC called Network. Within the Network VPC, create an AWS Transit Gateway with an AWS Direct Connect connection back to the data center. Attach all the other VPCs to the Network VPC.
• C.Connect VPN connections from all the VPCs to a VPN in the Production VPC. Use a VPN connection from the Production VPC back to the data center.
• D.Create VPC peers from all the VPCs to the Production VPC. Use an AWS Direct Connect connection from the Production VPC back to the data center.

Comment: *

Name: *

Email: *

Verification: *