Security groups in Amazon VPC ______.

• A.control incoming traffic only
• B.control both inbound and outbound traffic
• C.control neither incoming nor outgoing traffic
• D.control outgoing traffic only

Comment: *

Name: *

Email: *

Verification: *

A company has a business application hosted on Amazon EC2 instances behind an Application Load Balancer.
Amazon CloudWatch metrics show that the CPU utilization on the EC2 instances is very high. There are also reports from users that receive HTTP 503 and 504 errors when they try to connect to the application.
Which action will resolve these issues?

• A.Place the EC2 instances into an AWS Auto Scaling group.
• B.Configure the ALB's Target Group to use more frequent health checks.
• C.Enable sticky sessions on the Application Load Balancer.
• D.Increase the idle timeout setting of the Application Load Balancer.

Comment: *

Name: *

Email: *

Verification: *

You have been asked to leverage Amazon VPC BC2 and SOS to implement an application that submits and receives millions of messages per second to a message queue. You want to ensure your application has sufficient bandwidth between your EC2 instances and SQS Which option will provide the most scalable solution for communicating between the application and SQS?

• A.Ensure the application instances are properly configured with an Elastic Load Balancer
• B.Ensure the application instances are launched in private subnets with the EBS-optimized option enabled
• C.Ensure the application instances are launched in public subnets with the associate-public-IP- address=true option enabled
• D.Launch application instances in private subnets with an Auto Scaling group and Auto Scaling triggers configured to watch the SQS queue size

Comment: *

Name: *

Email: *

Verification: *

You have two Elastic Compute Cloud (EC2) instances inside a Virtual Private Cloud (VPC) in the same Availability Zone (AZ) but in different subnets.
One instance is running a database and the other instance an application that will interface with the database.
You want to confirm that they can talk to each other for your application to work properly.
Which two things do we need to confirm in the VPC settings so that these EC2 instances can communicate inside the VPC? Choose 2 answers

• A.A network ACL that allows communication between the two subnets.
• B.Both instances are the same instance class and using the same Key-pair.
• C.That the default route is set to a NAT instance or internet Gateway (IGW) for them to communicate.
• D.Security groups are set to allow the application host to talk to the database on the right port/protocol.

Comment: *

Name: *

Email: *

Verification: *

A SysOps Administrator is configuring AWS SSO for the first time. The Administrator has already created a
directory in the master account using AWS Directory Service and enabled full access in AWS Organizations.
What should the Administrator do next to configure the service?

• A.Create IAM roles in each account to be used by AWS SSO, and associate users with these roles using
  AWS SSO.
• B.Create IAM users in the master account, and use AWS SSO to associate the users with the accounts they
  will access.
• C.Create permission sets in AWS SSO, and associate the permission sets with Directory Service users or
  groups.
• D.Create service control policies (SCPs) in Organizations, and associate the SCPs with Directory Service
  users or groups.

Comment: *

Name: *

Email: *

Verification: *