You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a
single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the
Internet.
Which of the following options would you consider? (Choose 2 answers)

Your company is getting ready to do a major public announcement of a social media site on AWS. The website
is running on EC2 instances deployed across multiple Availability Zones with a Multi-AZ RDS MySQL Extra
Large DB Instance. The site performs a high number of small reads and writes per second and relies on an
eventual consistency model. After comprehensive tests you discover that there is read contention on RDS
MySQL. Which are the best approaches to meet these requirements? (Choose 2 answers)

Company B is launching a new game app for mobile devices. Users will log into the game using their existing
social media account to streamline data capture. Company B would like to directly save player data and scoring
information from the mobile app to a DynamoDS table named Score Data When a user saves their game the
progress data will be stored to the Game state S3 bucket. What is the best approach for storing data to
DynamoDB and S3?

You are implementing a URL whitelisting system for a company that wants to restrict outbound HTTP’S
connections to specific domains from their EC2-hosted applications you deploy a single EC2 instance running
proxy software and configure It to accept traffic from all subnets and EC2 instances in the VPC. You configure
the proxy to only pass through traffic to domains that you define in its whitelist configuration You have a nightly
maintenance window or 10 minutes where ail instances fetch new software updates. Each update Is about
200MB In size and there are 500 instances In the VPC that routinely fetch updates After a few days you notice
that some machines are failing to successfully download some, but not all of their updates within the
maintenance window. The download URLs used for these updates are correctly listed in the proxy’s whitelist
configuration and you are able to access them manually using a web browser on the instances. What might be
happening? (Choose 2 answers)

An AWS customer runs a public blogging website. The site users upload two million blog entries a month. The
average blog entry size is 200 KB. The access rate to blog entries drops to negligible 6 months after publication
and users rarely access a blog entry 1 year after publication. Additionally, blog entries have a high update rate
during the first 3 months following publication, this drops to no updates after 6 months. The customer wants to
use CloudFront to improve his user’s load times. Which of the following recommendations would you make to
the customer?

You are responsible for a legacy web application whose server environment is approaching end of life You
would like to migrate this application to AWS as quickly as possible, since the application environment currently
has the following limitations:
The VM’s single 10GB VMDK is almost full;
Me virtual network interface still uses the 10Mbps driver, which leaves your 100Mbps WAN connection
completely underutilized;
It is currently running on a highly customized. Windows VM within a VMware environment;
You do not have me installation media;
This is a mission critical application with an RTO (Recovery Time Objective) of 8 hours. RPO (Recovery Point
Objective) of 1 hour. How could you best migrate this application to AWS while meeting your business
continuity requirements?

A customer has a 10 GB AWS Direct Connect connection to an AWS region where they have a web application
hosted on Amazon Elastic Computer Cloud (EC2). The application has dependencies on an on-premises
mainframe database that uses a BASE (Basic Available. Sort stale Eventual consistency) rather than an ACID
(Atomicity. Consistency isolation. Durability) consistency model. The application is exhibiting undesirable
behavior because the database is not able to handle the volume of writes. How can you reduce the load on your
on-premises database resources in the most cost-effective way?

An enterprise wants to use a third-party SaaS application. The SaaS application needs to have access to issue
several API commands to discover Amazon EC2 resources running within the enterprise’s account The
enterprise has internal security policies that require any outside access to their environment must conform to
the principles of least privilege and there must be controls in place to ensure that the credentials used by the
SaaS vendor cannot be used by any other third party. Which of the following would meet all of these
conditions?

Your company currently has a 2-tier web application running in an on-premises data center. You have
experienced several infrastructure failures in the past two months resulting in significant financial losses. Your
CIO is strongly agreeing to move the application to AWS. While working on achieving buy-in from the other
company executives, he asks you to develop a disaster recovery plan to help improve Business continuity in the
short term. He specifies a target Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective
(RPO) of 1 hour or less. He also asks you to implement the solution within 2 weeks. Your database is 200GB in
size and you have a 20Mbps Internet connection. How would you do this while minimizing costs?

You would like to create a mirror image of your production environment in another region for disaster recovery
purposes. Which of the following AWS resources do not need to be recreated in the second region? (Choose 2
answers)