You are implementing a URL whitelisting system for a company that wants to restrict outbound HTTP’S
connections to specific domains from their EC2-hosted applications you deploy a single EC2 instance running
proxy software and configure It to accept traffic from all subnets and EC2 instances in the VPC. You configure
the proxy to only pass through traffic to domains that you define in its whitelist configuration You have a nightly
maintenance window or 10 minutes where ail instances fetch new software updates. Each update Is about
200MB In size and there are 500 instances In the VPC that routinely fetch updates. After a few days you notice
that some machines are failing to successfully download some, but not all of their updates within the
maintenance window. The download URLs used for these updates are correctly listed in the proxy’s whitelist
configuration and you are able to access them manually using a web browser on the instances. What might be
happening? (Choose two.)

A company is running a batch analysis every hour on their main transactional DB. running on an RDS MySQL
instance to populate their central Data Warehouse running on Redshift During the execution of the batch their
transactional applications are very slow When the batch completes they need to update the top management
dashboard with the new data The dashboard is produced by another system running on-premises that is
currently started when a manually-sent email notifies that an update is required The on-premises system
cannot be modified because is managed by another team.
How would you optimize this scenario to solve performance issues and automate the process as much as
possible?

Your company is getting ready to do a major public announcement of a social media site on AWS. The website
is running on EC2 instances deployed across multiple Availability Zones with a Multi-AZ RDS MySQL Extra
Large DB Instance. The site performs a high number of small reads and writes per second and relies on an
eventual consistency model. After comprehensive tests you discover that there is read contention on RDS
MySQL. Which are the best approaches to meet these requirements? (Choose two.)

An AWS customer runs a public blogging website. The site users upload two million blog entries a month The
average blog entry size is 200 KB. The access rate to blog entries drops to negligible 6 months after publication
and users rarely access a blog entry 1 year after publication. Additionally, blog entries have a high update rate
during the first 3 months following publication, this drops to no updates after 6 months. The customer wants to
use CloudFront to improve his user’s load times. Which of the following recommendations would you make to
the customer?

You require the ability to analyze a customer’s clickstream data on a website so they can do behavioral
analysis. Your customer needs to know what sequence of pages and ads their customer clicked on. This data
will be used in real time to modify the page layouts as customers click through the site to increase stickiness
and advertising click-through. Which option meets the requirements for captioning and analyzing this data?

You have a periodic Image analysis application that gets some files In Input analyzes them and tor each file
writes some data in output to a ten file the number of files in input per day is high and concentrated in a few
hours of the day.
Currently you have a server on EC2 with a large EBS volume that hosts the input data and the results it takes
almost 20 hours per day to complete the process
What services could be used to reduce the elaboration time and improve the availability of the solution?

Your company policies require encryption of sensitive data at rest. You are considering the possible options for
protecting data while storing it at rest on an EBS data volume, attached to an EC2 instance. Which of these
options would allow you to encrypt your data at rest? (Choose three.)

Your fortune 500 company has under taken a TCO analysis evaluating the use of Amazon S3 versus acquiring
more hardware The outcome was that ail employees would be granted access to use Amazon S3 for storage of
their personal documents.
Which of the following will you need to consider so you can set up a solution that incorporates single sign-on
from your corporate AD or LDAP directory and restricts access for each user to a designated user folder in a
bucket? (Choose three.)

A benefits enrollment company is hosting a 3-tier web application running in a VPC on AWS which includes a
NAT (Network Address Translation) instance in the public Web tier. There is enough provisioned capacity for
the expected workload tor the new fiscal year benefit enrollment period plus some extra overhead Enrollment
proceeds nicely for two days and then the web tier becomes unresponsive, upon investigation using
CloudWatch and other monitoring tools it is discovered that there is an extremely large and unanticipated
amount of inbound traffic coming from a set of 15 specific IP addresses over port 80 from a country where the
benefits company has no customers. The web tier instances are so overloaded that benefit enrollmentadministrators cannot even SSH into them. Which activity would be useful in defending against this attack?

You are designing a social media site and are considering how to mitigate distributed denial-of-service (DDoS)
attacks. Which of the below are viable mitigation techniques? (Choose three.)