You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a
single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the
Internet.
Which of the following options would you consider? (Choose 2 answers)

Your company is getting ready to do a major public announcement of a social media site on AWS. The website
is running on EC2 instances deployed across multiple Availability Zones with a Multi-AZ RDS MySQL Extra
Large DB Instance. The site performs a high number of small reads and writes per second and relies on an
eventual consistency model. After comprehensive tests you discover that there is read contention on RDS
MySQL. Which are the best approaches to meet these requirements? (Choose 2 answers)

Company B is launching a new game app for mobile devices. Users will log into the game using their existing
social media account to streamline data capture. Company B would like to directly save player data and scoring
information from the mobile app to a DynamoDS table named Score Data When a user saves their game the
progress data will be stored to the Game state S3 bucket. What is the best approach for storing data to
DynamoDB and S3?

You are implementing a URL whitelisting system for a company that wants to restrict outbound HTTP’S
connections to specific domains from their EC2-hosted applications you deploy a single EC2 instance running
proxy software and configure It to accept traffic from all subnets and EC2 instances in the VPC. You configure
the proxy to only pass through traffic to domains that you define in its whitelist configuration You have a nightly
maintenance window or 10 minutes where ail instances fetch new software updates. Each update Is about
200MB In size and there are 500 instances In the VPC that routinely fetch updates After a few days you notice
that some machines are failing to successfully download some, but not all of their updates within the
maintenance window. The download URLs used for these updates are correctly listed in the proxy’s whitelist
configuration and you are able to access them manually using a web browser on the instances. What might be
happening? (Choose 2 answers)

An AWS customer runs a public blogging website. The site users upload two million blog entries a month. The
average blog entry size is 200 KB. The access rate to blog entries drops to negligible 6 months after publication
and users rarely access a blog entry 1 year after publication. Additionally, blog entries have a high update rate
during the first 3 months following publication, this drops to no updates after 6 months. The customer wants to
use CloudFront to improve his user’s load times. Which of the following recommendations would you make to
the customer?