The user account has reached the maximum volume limit.

The AMI is missing. It is the required part.

The user account has reached the maximum EC2 instance limit.

A video transcoding pipeline running on EC2 using SQS to distribute tasks and Auto Scaling to adjust the number of nodes depending on the length of the queue. EBS volumes to host videos and EBS snapshots to incrementally backup original files after a few days. CloudFront to serve HLS transcoded videos from EC2.

Elastic Transcoder to transcode original high-resolution MP4 videos to HL.

EBS volumes to host videos and EBS snapshots to incrementally backup original files after a few days. CloudFront to serve HLS transcoded videos from EC2.

Elastic Transcoder to transcode original high-resolution MP4 videos to HL.

Amazon S3 to host videos with Lifecycle Management to archive original files to Glacier after a few days. CloudFront to serve HLStranscoded videos from S3.

A video transcoding pipeline running on EC2 using SQS to distribute tasks and Auto Scaling to adjust the number of nodes depending on the length of the queue. S3 to host videos with Lifecycle Management to archive all files to Glacier after a few days. CloudFront to serve HLS transcoded videos from Glacier.

Implement IDS/IPS agents on each Instance running in VPC.

Configure an instance in each subnet to switch its network interface card to promiscuous mode and analyze network traffic.

Implement Elastic Load Balancing with SSL listeners in front of the web applications.

Implement a reverse proxy layer in front of web servers and configure IDS/ IPS agents on each reverse proxy server.

Amazon S3 provides read-after-write consistency for any type of PUT or DELETE.

Consistency is not guaranteed for any type of PUT or DELETE.

A successful response to a PUT request only occurs when a complete object is saved.

Partially saved objects are immediately readable with a GET after an overwrite PU.

S3 provides eventual consistency for overwrite PUTS and DELETE.

By using an Amazon Route 53 Alias record.

By using an Amazon Route 53 CNAME record.

If you use production online transaction processing (OLTP) workloads.

If you have workloads that are not sensitive to consistent performance.

Use reduced redundancy storage (RRS) for all data in S3. Use a combination of Spot Instances and Reserved Instances for Amazon EMR jobs. Use Reserved Instances for Amazon Redshift.

Use reduced redundancy storage (RRS) for PDF and .csv data in S3. Add Spot Instances to EMR jobs. Use Spot Instances for Amazon Redshift.

Use reduced redundancy storage (RRS) for PDF and .csv data in Amazon S3. Add Spot Instances to Amazon EMR jobs. Use Reserved Instances for Amazon Redshift.

Use reduced redundancy storage (RRS) for all data in Amazon S3. Add Spot Instances to Amazon EMR jobs. Use Reserved Instances for Amazon Redshift.

Yes, EC2 Container Service supports any container service you need.

Yes, EC2 Container Service also supports Microsoft container service.

No, Docker is the only container platform supported by EC2 Container Service presently.

Yes, EC2 Container Service supports Microsoft container service and Openstack.

Amazon S3 as both the origin server and for caching.

AWS Storage Gateway as the origin server and Amazon EC2 for caching.

AWS CloudFront as both the origin server and for caching.

Amazon S3 as the origin server and Amazon CloudFront for caching.

Only if the tag 'VPC_Change_Group' is true.

Only if the tag 'VPC Change Group' is true.

A web server running in your infrastructure.

A web server running on Amazon EC2 instances.

By using the service specific console or APICLI commands.

Depends on the Weighted Resource Record Sets.

A predictable and scalable MySQL database.

A fast and reliable PL/SQL database cluster.

A standalone Cassandra database, managed by Amazon Web Services.

A fast, highly scalable managed NoSQL database service.

Force IAM users to contact an account administrator when the user has allowed his or her password to expire.

Force IAM users to contact an account administrator when the user has entered his password incorrectly.

Prevent IAM users from reusing previous passwords.

A scalable storage appliance on top of Amazon Web Services.

An application container on top of Amazon Web Services.

The user can zoom a particular period by selecting that period with the mouse and then releasing the mouse.

The user can zoom a particular period by specifying the aggregation data for that period.

The user can zoom a particular period by double clicking on that period with the mouse.

The user can zoom a particular period by specifying the period in the Time Range.

Replace RDS with Redshift for the batch analysis and SNS to notify the on-premises system to update the dashboard.

Replace ROS with Redshift for the oaten analysis and SQS to send a message to the on-premises system to update the dashboard.

Create an RDS Read Replica for the batch analysis and SNS to notify me on-premises system to update the dashboard.

Create an RDS Read Replica for the batch analysis and SQS to send a message to the on-premises system to update the dashboard.

A route should be created as 0.0.0.0/0 and your internet gateway as target.

Attach another ENI to the instance and connect via new EN.

A NAT instance should be created and all traffic should be forwarded to NAT instance.

A NACL should be created that allows all outbound traffic.

Attach one more volume with RAID 1 configuration.

Attach one more volume with RAID 0 configuration.

Connect multiple volumes and stripe them with RAI.

Set an S3 ACL on the bucket or the object.

Create a CloudFront distribution for the bucket.

Route 53 doesn't support ELB with an internal health check.You need to create your own Route 53 health check of the ELB.

Route 53 natively supports ELB with an internal health check. Turn 'Evaluate target health' off and 'Associate with Health Check' on and R53 will use the ELB's internal health check.

Route 53 doesn't support ELB with an internal health check. You need to associate your resource record set for the ELB with your own health check.

Route 53 natively supports ELB with an internal health check. Turn 'Evaluate target health' on and 'Associate with Health Check' off and R53 will use the ELB's internal health check.

Prevents /dev/sdc from creating the instance.

Prevents /dev/sdc from deleting the instance.

Prevents /dev/sdc from attaching to the instance.

You don't need to specify the resource identifier while terminating a resource.

You can terminate, stop, or delete a resource based solely on its tags.

You can't terminate, stop, or delete a resource based solely on its tags.

You don't need to specify the resource identifier while stopping a resource.

The out bound security group needs to be modified to allow out bound traffic.

The outbound network ACL needs to be modified to allow outbound traffic.

Nothing, it can be accessed from any IP address using SS.

Both the outbound security group and outbound network ACL need to be modified to allow outbound traffic.

Use a separate ELB for each instance type and distribute load to ELBs with Route 53 weighted round robin.

Configure Autoscaning group and Launch Configuration with ELB to add up to 10 more on-demand ml large instances when triggered by Cloudwatch shut off c3 2xlarge instances.

Route traffic to EC2 ml large and c3 2xlarge instances directly using Route 53 latency based routing and health checks shut off ELB.

Configure ELB with two c3 2xiarge Instances and use on-demand Autoscaling group for up to two additional c3.2xlarge instances Shut on mi .large instances.

Upload your customer keys to AWS CloudHS.

Associate the Amazon EBS volume with AWS CloudHS.

Create and mount a new, encrypted Amazon EBS volume. Move the data to the new volume. Delete the old Amazon EBS volume.

Unmount the EBS volume. Toggle the encryption attribute to True. Re-mount the Amazon EBS volume.

Snapshot the current Amazon EBS volume. Restore the snapshot to a new, encrypted Amazon EBS volume. Mount the Amazon EBS volume.

Configure the IP range of the US West region instance as the ingress security rule of RDS.

It is not possible to access RDS of the US East region from the US West region.

Open the security group of the US West region in the RDS security group's ingress rule.

Create an IAM role which has access to RDS and launch an instance in the US West region with it.

Accelerates transferring large amounts of data between the AWS cloud and portable storage devices .

A web service that speeds up distribution of your static and dynamic web content.

Connects an on-premises software appliance with cloud-based storage to provide seamless and secure integration between your on-premises IT environment and AWS's storage infrastructure.

Is a storage service optimized for infrequently used data, or 'cold data'.

Because most reachability issues are resolved by automated processes in less than 20 minutes.

Because all EC2 instances are unreachable for 20 minutes every day when AWS does routine maintenance.

Because all EC2 instances are unreachable for 20 minutes when first launched.

You can't transfer existing domains to AW.

You can transfer existing domains into Amazon Route 53's management.

You can transfer existing domains via AWS Direct Connect.

You can transfer existing domains via AWS Import/Export.

Data is automatically saved as an EBS snapshot.

Data is automatically saved as an EBS volume.

Data is unavailable until the instance is restarted.

ELB uses a four-tier, key-based architecture for encryption.

ELB offers clients a single point of contact, and can also serve as the first line of defense against attacks on your network.

ELB takes over the encryption and decryption work from the Amazon EC2 instances and manages it centrally on the load balancer.

ELB supports end-to-end traffic encryption using TLS (previously SSL) on those networks that use secure HTTP (HTTPS) connections.

Route payment requests through two NAT instances setup for High Availability and whitelist the Elastic IP addresses attached to the MAT instances.

Whitelist the VPC Internet Gateway Public IP and route payment requests through the Internet Gateway.

Whitelist the ELB IP addresses and route payment requests from the Application servers through the EL.

Automatically assign public IP addresses to the application instances in the Auto Scaling group and run a script on boot that adds each instances public IP address to the payment validation whitelist AP.

New Amazon SES users who have received production access can send up to 1,000 emails per 24-hour period, at a maximum rate of 10 emails per second.

Every Amazon SES sender has a the same set of sending limits.

Sending limits are based on messages rather than on recipients.

Every Amazon SES sender has a unique set of sending limits.

Deploy ElasticCache in-memory cache running in each Availability Zone.

Implement sharding to distribute load to multiple RDS MySQL instances.

Increase the RDS MySQL Instance size and Implement provisioned IOPS.

Add an RDS MySQL read replica in each Availability Zone.

A security group in which only tasks inside can communicate with each other.

The DNS record for the Amazon SWF service.

Allow all inbound traffic and allow no outbound traffic.

Allow no inbound traffic and allow all outbound traffic.

Allow inbound traffic on port 80 only and allow all outbound traffic.

Allow all inbound traffic and allow all outbound traffic.

Enable Multi-Factor Authentication for your AWS root account.

Assign an IAM role to the Amazon EC2 instance.

Store the AWS Access Key ID/Secret Access Key combination in software comments.

Assign an IAM user to the Amazon EC2 Instance.

Use AWS Data Pipeline to manage movement of data & meta-data and assessments Use an autoscaling group of G2 instances in a placement group.

Use Amazon Simple Workflow (SWF) to manages assessments, movement of data & meta-data Use an auto-scaling group of G2 instances in a placement group.

Use Amazon Simple Workflow (SWF) to manages assessments movement of data & meta-data Use an auto-scaling group of C3 instances with SR-IOV (Single Root 1/0 Virtualization).

Use AWS data Pipeline to manage movement of data & meta-data and assessments use autoscaling group of C3 with SR-IOV (Single Root 1/0 virtualization).

Configure a NAT instance in your VPC Create a default route via the NAT instance and associate it with all subnets Configure a DNS A record that points to the NAT instance public IP address.

Configure a CloudFront distribution and configure the origin to point to the private IP addresses of your Web servers Configure a Route 53 CNAME record to your CloudFront distribution.

Place all your web servers behind EL8 Configure a Route 53 CNAME to point to the ELB DNS name.

Assign EIPs to all web servers. Configure a Route 53 record set with all EIPs. With health checks and DNS failover.

Configure ELB with an EIP Place all your Web servers behind ELB Configure a Route 53 A record that points to the EIP.

Set permissions on the object to public read during upload.

Configure the bucket ACL to set all objects to public read.

Configure the bucket policy to set all objects to public read.

Use AWS Identity and Access Management roles to set the bucket to public read.

Amazon S3 objects default to public read, so no action is needed.

Create and maintain AMIs of key servers where fast recovery is required.

Regularly run your servers, test them, and apply any software updates and configuration changes.

All items listed here are important when thinking about disaster recovery.

Ensure that you have all supporting custom software packages available in AW.

Setup an RDS MySQL instance in 2 Availability Zones to store the user preference data. Deploy a public facing application on a server in front of the database to manage security and access credentials.

Setup a DynamoDB table with an item for each user having the necessary attributes to hold the user preferences. The mobile application will query the user preferences directly from the DynamoDB table. Utilize ST.

Web Identity Federation, and DynamoDB Fine Grained Access Control to authenticate and authorize access.

Setup an RDS MySQL instance with multiple read replicas in 2 Availability Zones to store the user preference data. The mobile application will query the user preferences from the read replicas. Leverage the MySQL user management and access privilege system to manage security and access credentials.

Store the user preference data in S3 Setup a DynamoDB table with an item for each user and an item attribute pointing to the user' S3 object. The mobile application will retrieve the S3 URL from DynamoDB and then access the S3 object directly utilize STS, Web identity Federation, and S3 ACLs to authenticate and authorize access.

Latency resource record sets cannot be used in combination with weighted resource record sets.

You did not setup an HTTP health check tor one or more of the weighted resource record sets associated with me disabled web servers.

The value of the weight associated with the latency alias resource record set in the region with the disabled servers is higher than the weight for the other region.

One of the two working web servers in the other region did not pass its HTTP health check.

You did not set 'Evaluate Target Health' to 'Yes' on the latency alias resource record set associated with example com in the region where you disabled the servers.

Recommend that they lease space at a DirectConnect partner location and establish a lG DirectConnect connection to their vPC they would then establish Internet connectivity into their space, filter the traffic in hardware Web Application Firewall (WAF). And then pass the traffic through the DirectConnect connection into their application running in their VPC,

Add previously identified hostile source IPs as an explicit INBOUND DENY NACL to the web tier sub net.

Add a WAF tier by creating a new ELB and an AutoScaling group of EC2 Instances running a host based WAF They would redirect Route 53 to resolve to the new WAF tier ELB The WAF tier wouldthier pass the traffic to the current web tier The web tier Security Groups would be updated to only allow traffic from the WAF tier Security Group

Remove all but TLS 1 2 from the web tier ELB and enable Advanced Protocol Filtering This will enable the ELB itself to perform WAF functionality.

Configure a single routing Table with a default route via the Internet gateway Propagate a default route via BGP on the AWS Direct Connect customer router. Associate the routing table with all VPCsubnets.

Configure a single routing table with a default route via the internet gateway Propagate specific routes for the on-premises networks via BGP on the AWS Direct Connect customer router Associatethe routing table with all VPC subnets.

Configure a single routing table with two default routes: one to the internet via an Internet gateway the other to the on-premises network via the VPN gateway use this routing table across all subnets in your VPC.

Configure two routing tables one that has a default route via the Internet gateway and another that has a default route via the VPN gateway Associate both routing tables with each VPC subnet.

Create a virtual private gateway with multiple customer gateways, each with unique Border Gateway Protocol (BGP) Autonomous System Numbers (ASNs).

Create a virtual private gateway with multiple customer gateways, each with a unique set of keys.

Create a virtual public gateway with multiple customer gateways, each with a unique Private subnet.

Create a virtual private gateway with multiple customer gateways, each with unique subnet id.

The network I/O are not affected during data download.

The policy cannot be set on the network I/O.

There is no way the user can stop scaling as it is already configured.

Supported on all Amazon EBS volume types.

Enable AWS CloudTrail for the load balancer.

Install the Amazon CloudWatch Logs agent on the load balancer.

Enable Amazon CloudWatch metrics on the load balancer.

System-wide visibility into resource utilization, application performance, and operational health.

Custom metrics generated by your applications and services.

Dynamic DB is designed to scale without limits, but if you go beyond 10,000 you have to contact AWS first.

CHỌN SỐ CÂU HỎI CHO BÀI THI