A company plans to use an Amazon VPC to deploy a web application consisting of an elastic load balancer, a fleet of web and application servers, and an Amazon RDS MySQL database that should not be accessible from the Internet. The proposed design must be highly available and distributed over two Availability Zones.
What would be the MOST appropriate VPC design for this specific use case?

• A.Two public subnets for the elastic load balancer, two public subnets for the web servers, and two public subnets for Amazon RDS.
• B.One public subnet for the elastic load balancer, two private subnets for the web servers, and two private subnets for Amazon RDS.
• C.One public subnet for the elastic load balancer, one public subnet for the web servers, and one private subnet for the database.
• D.Two public subnets for the elastic load balancer, two private subnets for the web servers, and two private subnets for RDS.

Comment: *

Name: *

Email: *

Verification: *

A Solutions Architect is building an application that stores object data. Compliance requirements state that the data stored is immutable.
Which service meets these requirements?

• A.Amazon S3
• B.Amazon Glacier
• C.Amazon EFS
• D.AWS Storage Gateway

Comment: *

Name: *

Email: *

Verification: *

You need to create a load balancer in a VPC network that you are building. You can make your load balancer internal (private) or internet-facing (public). When you make your load balancer internal, a DNS name will be created, and it will contain the private IP address of the load balancer. An internal load balancer is not exposed to the internet. When you make your load balancer internet-facing, a DNS name will be created with the public IP address. If you want the Internet-facing load balancer to be connected to the Internet, where must this load balancer reside?

• A.The load balancer must reside in a subnet that is connected to the internet using the internet gateway.
• B.The load balancer must reside in a subnet that is not connected to the internet.
• C.The load balancer must not reside in a subnet that is connected to the internet.
• D.The load balancer must be completely outside of your VPC.

Comment: *

Name: *

Email: *

Verification: *

Select the most correct
answer: The
device name /dev/sda1 (within Amazon EC2) is _____

• A.Recommended for EBS volumes
• B.Recommended for instance store volumes
• C.Reserved for the root device
• D.Possible for EBS volumes

Comment: *

Name: *

Email: *

Verification: *

You are designing a connectivity solution between on-premises infrastructure and Amazon VPC Your server's on-premises will De communicating with your VPC instances You will De establishing IPSec tunnels over the internet You will be using VPN gateways and terminating the IPsec tunnels on AWS-supported customer gateways.
Which of the following objectives would you achieve by implementing an IPSec tunnel as outlined above? (Choose 4 answers)

• A.Protection of data in transit over the Internet
• B.Peer identity authentication between VPN gateway and customer gateway
• C.End-to-end protection of data in transit
• D.End-to-end Identity authentication
• E.Data integrity protection across the Internet
• F.Data encryption across the Internet

Comment: *

Name: *

Email: *

Verification: *