Your website is serving on-demand training videos to your workforce. Videos are uploaded monthly in high
resolution MP4 format. Your workforce is distributed globally often on the move and using company-provided
tablets that require the HTTP Live Streaming (HLS) protocol to watch a video. Your company has no video
transcoding expertise and it required you may need to pay for a consultant.
How do you implement the most cost-efficient architecture without compromising high availability and quality of
video delivery’?

A web company is looking to implement an external payment service into their highly available application
deployed in a VPC Their application EC2 instances are behind a public lacing ELB Auto scaling is used to add
additional instances as traffic increases under normal load the application runs 2 instances in the Auto Scaling
group but at peak it can scale 3x in size. The application instances need to communicate with the payment
service over the Internet which requires whitelisting of all public IP addresses used to communicate with it. A
maximum of 4 whitelisting IP addresses are allowed at a time and can be added through an API.
How should they architect their solution?

Your must architect the migration of a web application to AWS. The application consists of Linux web servers
running a custom web server. You are required to save the logs generated from the application to a durable
location.
What options could you select to migrate the application to AWS? (Choose 2)

You are designing a social media site and are considering how to mitigate distributed denial-of-service (DDoS)
attacks. Which of the below are viable mitigation techniques? (Choose 3 answers)

An International company has deployed a multi-tier web application that relies on DynamoDB in a single region
For regulatory reasons they need disaster recovery capability In a separate region with a Recovery Time
Objective of 2 hours and a Recovery Point Objective of 24 hours. They should synchronize their data on aregular basis and be able to provision me web application rapidly using CloudFormation.
The objective is to minimize changes to the existing web application, control the throughput of DynamoDB used
for the synchronization of data and synchronize only the modified elements.
Which design would you choose to meet these requirements?

Refer to the architecture diagram above of a batch processing solution using Simple Queue Service (SQS) to
set up a message queue between EC2 instances which are used as batch processors Cloud Watch monitors
the number of Job requests (queued messages) and an Auto Scaling group adds or deletes batch servers
automatically based on parameters set in Cloud Watch alarms. You can use this architecture to implement
which of the following features in a cost effective and efficient manner?

You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a
single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the
Internet.
Which of the following options would you consider? (Choose 2 answers)

Your company is getting ready to do a major public announcement of a social media site on AWS. The website
is running on EC2 instances deployed across multiple Availability Zones with a Multi-AZ RDS MySQL Extra
Large DB Instance. The site performs a high number of small reads and writes per second and relies on an
eventual consistency model. After comprehensive tests you discover that there is read contention on RDS
MySQL. Which are the best approaches to meet these requirements? (Choose 2 answers)

Company B is launching a new game app for mobile devices. Users will log into the game using their existing
social media account to streamline data capture. Company B would like to directly save player data and scoring
information from the mobile app to a DynamoDS table named Score Data When a user saves their game the
progress data will be stored to the Game state S3 bucket. What is the best approach for storing data to
DynamoDB and S3?

You are implementing a URL whitelisting system for a company that wants to restrict outbound HTTP’S
connections to specific domains from their EC2-hosted applications you deploy a single EC2 instance running
proxy software and configure It to accept traffic from all subnets and EC2 instances in the VPC. You configure
the proxy to only pass through traffic to domains that you define in its whitelist configuration You have a nightly
maintenance window or 10 minutes where ail instances fetch new software updates. Each update Is about
200MB In size and there are 500 instances In the VPC that routinely fetch updates After a few days you notice
that some machines are failing to successfully download some, but not all of their updates within the
maintenance window. The download URLs used for these updates are correctly listed in the proxy’s whitelist
configuration and you are able to access them manually using a web browser on the instances. What might be
happening? (Choose 2 answers)