Application servers currently deployed in a private subnet require the ability to integrate with a third-party service accessible through the Internet.
Which changes are required to provide outbound Internet connectivity In the VPC without providing inbound Internet connectivity to the application servers?

• A.Create a NAT Gateway without attaching an Internet Gateway to the VPC
• B.Create a NAT Gateway and attach an Internet Gateway to the VPC.
• C.Attach an Internet Gateway to the VPC without creating a NAT Gateway.
• D.Attach a Virtual Private Gateway to the VPC and create a NAT Gateway.

Correct Answer: B

Explanation
NAT Gateway Basics
To create a NAT gateway, you must specify the public subnet in which the NAT gateway should reside. For more information about public and private subnets, see Subnet Routing. You must also specify an Elastic IP address to associate with the NAT gateway when you create it. After you've created a NAT gateway, you must update the route table associated with one or more of your private subnets to point Internet-bound traffic to the NAT gateway. This enables instances in your private subnets to communicate with the internet.
Each NAT gateway is created in a specific Availability Zone and implemented with redundancy in that zone.
You have a limit on the number of NAT gateways you can create in an Availability Zone. For more information, see Amazon VPC Limits.
Note
If you have resources in multiple Availability Zones and they share one NAT gateway, in the event that the NAT gateway's Availability Zone is down, resources in the other Availability Zones lose internet access. To create an Availability Zone-independent architecture, create a NAT gateway in each Availability Zone and configure your routing to ensure that resources use the NAT gateway in the same Availability Zone.
If you no longer need a NAT gateway, you can delete it. Deleting a NAT gateway disassociates its Elastic IP address, but does not release the address from your account.
The following diagram illustrates the architecture of a VPC with a NAT gateway. The main route table sends internet traffic from the instances in the private subnet to the NAT gateway. The NAT gateway sends the traffic to the internet gateway using the NAT gateway's Elastic IP address as the source IP address.
A VPC with public and private subnets and a NAT gateway

Comment: *

Name: *

Email: *

Verification: *

A Solutions Architect is working with an infrastructure that consists of multiple Amazon EC2 application and web servers. The Architect needs to be able to meet demand for an expected spike in traffic to the website.
How can the Architect ensure high availability and durability?

• A.Elastic Load Balancing and AWS CloudFormation
• B.Placement groups and Amazon CloudFront
• C.AWS CloudFormation and Amazon CloudFront
• D.Auto scaling and Elastic Load Balancing

Comment: *

Name: *

Email: *

Verification: *

A Solutions Architect is designing the architecture for a web application that will be hosted on AWS. Internet users will access the application using HTTP and HTTPS.
How should the Architect design the traffic control requirements?

• A.Use a network ACL to allow inbound ports for HTTP and HTTPS. Deny other traffic for inbound and outbound.
• B.Allow inbound ports for HTTP and HTTPS in the security group used by the web servers.
• C.Allow outbound ports for HTTP and HTTPS in the security group used by the web servers.
• D.Use a network ACL to allow outbound ports for HTTP and HTTPS. Deny other traffic for inbound and outbound.

Comment: *

Name: *

Email: *

Verification: *

Which system is used by Amazon Machine Images paravirtual (PV) virtualization during the boot process?

• A.PV-BOOT
• B.PV-AMI
• C.PV-WORM
• D.PV-GRUB

Comment: *

Name: *

Email: *

Verification: *

Will I be alerted when automatic failover occurs?

• A.Only if SNS configured
• B.No
• C.Yes
• D.Only if Cloudwatch configured

Comment: *

Name: *

Email: *

Verification: *