A solutions architect is redesigning a monolithic application to be a loosely coupled application composed of two microservices: Microservice A and Microservice B.
Microservice A places messages in a main Amazon Simple Queue Service (Amazon SQS) queue for Microservice B to consume. When Microservice B fails to process a message after four retries, the message needs to be removed from the queue and stored for further investigation.
What should the solutions architect do to meet these requirements?

• A.Create an SQS dead-letter queue. Configure the main SQS queue to deliver messages to the dead-letter queue after the message has been received four times.
• B.Create an SQS queue for failed messages. Microservice A adds failed messages to that queue after Microservice B receives and fails to process the message four times.
• C.Create an SQS dead-letter queue. Microservice B adds failed messages to that queue after it receives and fails to process the message four times.
• D.Create an SQS queue for failed messages. Configure the SQS queue for failed messages to pull messages from the main SQS queue after the original message has been received four times.

Comment: *

Name: *

Email: *

Verification: *

Which technique can be used to integrate AWS IAM (Identity and Access Management)
with an on-premise LDAP (Lightweight Directory Access Protocol) directory service?

• A.Use an IAM policy that references the LDAP account identifiers and the AWS credentials.
• B.Use the LDAP credentials to restrict a group of users from launching specific EC2 instance types.
• C.Use IAM roles to automatically rotate the IAM credentials when LDAP credentials are updated.
• D.Use AWS Security Token Service from an identity broker to issue short-lived AWS credentials.
• E.Use SAML (Security Assertion Markup Language) to enable single sign-on between AWS and LDAP.

Comment: *

Name: *

Email: *

Verification: *

A company has an Amazon EC2 instance running on a private subnet that needs to access a public websites to download patches and updates. The company does not want external websites to see the EC2 instance IP address or initiate connection to it.
How can a solution architect achieve this objective?

• A.Create a site-to-site VPN connection between the private subnet and the network in which the public site is deployed
• B.Create a NAT gateway in a public subnet Route outbound traffic from the private subnet through the NAI gateway
• C.Create a network ACL for the private subnet where the EC2 instance deployed only allows access from the IP address range of the public website
• D.Create a security group that only allows connections from the IP address range of the public website.
  Attach the security group to the EC2 instance.

Comment: *

Name: *

Email: *

Verification: *

The one-time payment for Reserved Instances is __________ refundable if the reservation is cancelled.

• A.always
• B.in some circumstances
• C.never

Comment: *

Name: *

Email: *

Verification: *

Which of the following is NOT a characteristic of Amazon Elastic Compute Cloud (Amazon EC2)?

• A.It can be used to launch as many or as few virtual servers as you need.
• B.It increases the need to forecast traffic by providing dynamic IP addresses for static cloud computing.
• C.It eliminates your need to invest in hardware up front, so you can develop and deploy applications faster.
• D.It offers scalable computing capacity in the Amazon Web Services (AWS) cloud.

Comment: *

Name: *

Email: *

Verification: *