You are designing an SSUTLS solution that requires HTTPS clients to be authenticated by the Web server
using client certificate authentication. The solution must be resilient.
Which of the following options would you consider for configuring the web server infrastructure? (Choose 2
answers)

A customer has a 10 GB AWS Direct Connect connection to an AWS region where they have a web application
hosted on Amazon Elastic Computer Cloud (EC2). The application has dependencies on an on-premises
mainframe database that uses a BASE (Basic Available. Sort stale Eventual consistency) rather than an ACID
(Atomicity. Consistency isolation. Durability) consistency model. The application is exhibiting undesirable
behavior because the database is not able to handle the volume of writes. How can you reduce the load on your
on-premises database resources in the most cost-effective way?

Your system recently experienced down time during the troubleshooting process. You found that a new
administrator mistakenly terminated several production EC2 instances.
Which of the following strategies will help prevent a similar situation in the future?The administrator still must be able to:
– launch, start stop, and terminate development resources.
– launch and start production instances.

Your company has an on-premises multi-tier PHP web application, which recently experienced downtime due to
a large burst In web traffic due to a company announcement Over the coming days, you are expecting similar
announcements to drive similar unpredictable bursts, and are looking to find ways to quickly improve your
infrastructures ability to handle unexpected increases in traffic.
The application currently consists of 2 tiers a web tier which consists of a load balancer and several Linux
Apache web servers as well as a database tier which hosts a Linux server hosting a MySQL database.
Which scenario below will provide full site functionality, while helping to improve the ability of your application in
the short timeframe required?

You have an application running on an EC2 Instance which will allow users to download flies from a private S3
bucket using a pre-assigned URL. Before generating the URL the application should verify the existence of thefile in S3.
How should the application use AWS credentials to access the S3 bucket securely?

You are running a news website in the eu-west-1 region that updates every 15 minutes. The website has a
world-wide audience it uses an Auto Scaling group behind an Elastic Load Balancer and an Amazon RDS
database Static content resides on Amazon S3, and is distributed through Amazon CloudFront. Your Auto
Scaling group is set to trigger a scale up event at 60% CPU utilization, you use an Amazon RDS extra large DB
instance with 10.000 Provisioned IOPS its CPU utilization is around 80%. While freeable memory is in the 2 GB
range.
Web analytics reports show that the average load time of your web pages is around 1 5 to 2 seconds, but your
SEO consultant wants to bring down the average load time to under 0.5 seconds.
How would you improve page load times for your users? (Choose 3 answers)

A web company is looking to implement an intrusion detection and prevention system into their deployed VPC.
This platform should have the ability to scale to thousands of instances running inside of the VPC.
How should they architect their solution to achieve these goals?

You need a persistent and durable storage to trace call activity of an IVR (Interactive Voice Response) system.
Call duration is mostly in the 2-3 minutes timeframe. Each traced call can be either active or terminated. An
external application needs to know each minute the list of currently active calls, which are usually a few calls/
second. Put once per month there is a periodic peak up to 1000 calls/second for a few hours. The system is
open 24/7 and any downtime should be avoided. Historical data is periodically archived to files. Cost saving is a
priority for this project.
What database implementation would better fit this scenario, keeping costs as low as possible?

You are designing a social media site and are considering how to mitigate distributed denial-of-service (DDoS)
attacks. Which of the below are viable mitigation techniques? (Choose 3 answers)

You are the new IT architect in a company that operates a mobile sleep tracking application
When activated at night, the mobile app is sending collected data points of 1 kilobyte every 5 minutes to your
backend
The backend takes care of authenticating the user and writing the data points into an Amazon DynamoDB
table.
Every morning, you scan the table to extract and aggregate last night’s data on a per user basis, and store the
results in Amazon S3.
Users are notified via Amazon SMS mobile push notifications that new data is available, which is parsed and
visualized by (The mobile app Currently you have around 100k users who are mostly based out of North
America.
You have been tasked to optimize the architecture of the backend system to lower cost what would you
recommend? (Choose 2 answers)