You’ve been tasked with implementing an automated data backup solution for your application servers that run on
Amazon EC2 with Amazon EBS volumes. You want to use a distributed data store for your backups to avoid single points
of failure and to increase the durability of the data. Daily backups should be retained for 30 days so that you can restore
data within an hour. How can you implement this through a script that a scheduling daemon runs daily on the application
servers?

You work for a startup that has developed a new photo-sharing application for mobile devices. Over recent months your
application has increased in popularity; this has resulted in a decrease in the performance of the application clue to the
increased load. Your application has a two-tier architecture that is composed of an Auto Scaling PHP application tier and
a MySQL RDS instance initially deployed with AWS Cloud Formation. Your Auto Scaling group has a min value of 4 and
a max value of 8. The desired capacity is now at 8 because of the high CPU utilization of the instances. After some

analysis, you are confident that the performance issues stem from a constraint in CPU capacity, although memory
utilization remains low. You therefore decide to move from the general-purpose M3 instances to the compute-optimized
C3 instances. How would you deploy this change while minimizing any interruption to your end users?

You have been given a business requirement to retain log files for your application for 10 years. You need to regularly
retrieve the most recent logs for troubleshooting. Your logging system must be cost-effective, given the large volume of
logs. What technique should you use to meet these requirements?

You have an application running on Amazon EC2 in an Auto Scaling group. Instances are being bootstrapped dynamically,
and the bootstrapping takes over 15 minutes to complete. You find that instances are reported by Auto Scaling as being
In Service before bootstrapping has completed. You are receiving application alarms related to new instances before
they have completed bootstrapping, which is causing confusion. You find the cause: your application monitoring tool is
polling the Auto Scaling Service API for instances that are In Service, and creating alarms for new previously unknown
instances. Which of the following will ensure that new instances are not added to your application monitoring tool before
bootstrapping is completed?

You work for an insurance company and are responsible for the day-to-day operations of your company’s online quote
system used to provide insurance quotes to members of the public. Your company wants to use the application logs
generated by the system to better understand customer behavior. Industry, regulations also require that you retain all
application logs for the system indefinitely in order to investigate fraudulent claims in the future. You have been tasked
with designing a log management system with the following requirements:
– All log entries must be retained by the system, even during unplanned instance failure.

– The customer insight team requires immediate access to the logs from the past seven
days.
– The fraud investigation team requires access to all historic logs, but will wait up to
24 hours before these logs are available.
How would you meet these requirements in a cost-effective manner? (Choose three.)

You need to implement A/B deployments for several multi-tier web applications. Each of them has Its Individual
infrastructure:
Amazon Elastic Compute Cloud (EC2) front-end servers, Amazon ElastiCache clusters, Amazon Simple Queue Service
(SQS) queues, and Amazon Relational Database (RDS) Instances.
Which combination of services would give you the ability to control traffic between different deployed versions of your
application? (Choose one.)

Your company has developed a web application and is hosting it in an Amazon S3 bucket configured for static website
hosting. The application is using the AWS SDK for JavaScript in the browser to access data stored in an Amazon
DynamoDB table. How can you ensure that API keys for access to your data in DynamoDB are kept secure?

You are using a configuration management system to manage your Amazon EC2 instances. On your Amazon EC2
Instances, you want to store credentials for connecting to an Amazon RDS DB instance. How should you securely store
these credentials?

You want to securely distribute credentials for your Amazon RDS instance to your fleet of web server instances. The
credentials are stored in a file that is controlled by a configuration management system. How do you securely deploy the
credentials in an automated manner across the fleet of web server instances, which can number in the hundreds, while
retaining the ability to roll back if needed?

Due to compliance regulations, management has asked you to provide a system that allows for cost-effective long-term
storage of your application logs and provides a way for support staff to view the logs more quickly. Currently your log
system archives logs automatically to Amazon S3 every hour, and support staff must wait for these logs to appear in
Amazon S3, because they do not currently have access to the systems to view live logs. What method should you use
to become compliant while also providing a faster way for support staff to have access to logs?