1. A company hosts an application on an Amazon EC2 instance that requires a maximum of 200 GB storage space. The application is used infrequently, with peaks during mornings and evenings. Disk I/O varies, but peaks at 3,000 IOPS. The chief financial officer of the company is concerned about costs and has asked a solutions architect to recommend the most cost-effective storage option that does not sacrifice performance.Which solution should the solutions architect recommend?
A) Amazon EBS Throughput Optimized HDD (st1)
B) Amazon EBS Provisioned IOPS SSD (io1)
C) Amazon EBS General Purpose SSD (gp2)
D) Amazon EBS Cold HDD (sc1)
2. A company recently expanded globally and wants to make its application accessible to users in those geographic locations. The application is deploying on Amazon EC2 instances behind an Application Load balancer in an Auto Scaling group. The company needs the ability shift traffic from resources in one region to another.What should a solutions architect recommend?
A) Configure an Amazon Route 53 latency routing policy.
B) Configure an Amazon Route 53 geolocation routing policy.
C) Configure an Amazon Route 53 multivalue answer routing policy.
D) Configure an Amazon Route 53 geoproximity fouling policy.
3. A company's packaged application dynamically creates and returns single-use text file in response to user requests. The company is using Amazon CloudFront for distribution, but wants to further reduce data transfer costs. The company cannot modify the application's source code.What should a solutions architect do to reduce costs?
A) Use Amazon S3 multipart uploads to move the files to Amazon S3 before returning them to users.
B) Enable caching on the CloudFront distribution to store generated files at the edge.
C) Enable Amazon S3 Transfer Acceleration to reduce the response times.
D) Use Lambda@Edge to compress the files as they are sent to users.
4. A solutions architect has created two IAM polices: Policy 1 and Policy 2. Both policiesare attached to an IAM group. Policy1 { 'Version': '2012-10-17', 'Statement':[ { 'Effect': 'Allow', 'Action':[ 'iam:Get*', 'iam:List*', 'ksm:List*', 'ec2:*', 'ds:*', 'logs:Get*', 'logs:Describe*' ], 'Resource': '*' } ] } Policy2 { 'Version': '2012-10-17', 'Statement':[ { 'Effect': 'Deny', 'Action': 'ds:Delete*', 'Resource': '*' } ] }A cloud engineer is added as an IAM user to the IAM group. Which action will the cloud engineer be able to perform?
A) Deleting Amazon EC2 instances
B) Deleting logs from Amazon CloudWatch Logs
C) Deleting directories
D) Deleting IAM users
5. An application running on an Amazon EC2 instance in VPC-A needs to access files in another EC2 instance in VPC-B. Both are in separate. AWS accounts. The network administrator needs to design a solution to enable secure access to EC2 instance in VPC-B from VPC-A. The connectivity should not have a single point of failure or bandwidth concerns.Which solution will meet these requirements?
A) Attach a virtual private gateway to VPC-B and enable routing from VPC-A.
B) Set up VPC gateway endpoints for the EC2 instance running in VPC-B.
C) Create a private virtual interface (VIF) for the EC2 instance running in VPC-B and add appropriate routes from VPC-B.
D) Set up a VPC peering connection between VPC-A and VPC-B.
Leave a comment