单选题

A Solutions Architect is unable to connect to the newly deployed EC2 instance via SSH using a home computer. However, the Architect was able to successfully access other existing instances in the VPC without any issues.
Which of the following should the Architect check and possibly correct to restore connectivity?

A、

Configure the Security Group of the EC2 instance to permit ingress traffic over port 22 from your IP.

B、

Configure the Network Access Control List of your VPC to permit ingress traffic over port 22 from your IP.

C、

Use Amazon Data Lifecycle Manager.

D、

Configure the Security Group of the EC2 instance to permit ingress traffic over port 3389 from your IP.

下载APP答题
由4l***3d提供 分享 举报 纠错

相关试题

单选题 A company plans to set up a cloud infrastructure in AWS. In the planning, it was discussed that you need to deploy two EC2 instances that should continuously run for three years. The CPU utilization of the EC2 instances is also expected to be stable and predictable.
Which is the most cost-efficient Amazon EC2 Pricing type that is most appropriate for this scenario?

A、

Spot instances

B、

Reserved Instances

C、

Dedicated Hosts

D、

On-Demand instances

单选题 A company is hosting EC2 instances that are on non-production environment and processing non-priority
batch loads, which can be interrupted at any time.
What is the best instance purchasing option which can be applied to your EC2 instances in this case?

A、

Spot Instances

B、

On-Demand Capacity Reservations

C、

Reserved Instances

D、

On-Demand Instances

单选题 A travel company has a suite of web applications hosted in an Auto Scaling group of On-Demand EC2 instances behind an Application Load Balancer that handles traffic from various web domains such as i- lovemanila.com, i-love-boracay.com, i-love-cebu.com and many others. To improve security and lessen the overall cost, you are instructed to secure the system by allowing multiple domains to serve SSL traffic without the need to reauthenticate and reprovision your certificate everytime you add a new domain. This migration from HTTP to HTTPS will help improve their SEO and Google search ranking. Which of the following is the most costeffective solution to meet the above requirement?

A、

Use a wildcard certificate to handle multiple sub-domains and different domains.

B、

Add a Subject Alternative Name (SAN) for each additional domain to your certificate.

C、

Upload all SSL certificates of the domains in the ALB using the console and bind multiple certificates to the same
secure listener on your load balancer. ALB will automatically choose the optimal TLS certificate for each client using
Server Name Indication (SNI).

D、

Create a new CloudFront web distribution and configure it to serve HTTPS requests using dedicated IP addresses in
order to associate your alternate domain names with a dedicated IP address in each CloudFront edge location.

单选题 The media company that you are working for has a video transcoding application running on Amazon EC2. Each EC2 instance polls a queue to find out which video should be transcoded, and then runs a transcoding process. If this process is interrupted, the video will be transcoded by another instance based on the queuing system. This application has a large backlog of videos which need to be transcoded. Your manager would like to reduce this backlog by adding more EC2 instances, however, these instances are only needed until the backlog is reduced.
In this scenario, which type of Amazon EC2 instance is the most cost-effective type to use?

A、

Spot instances

B、

Reserved instances

C、

Dedicated instances

D、

On-demand instances

单选题 A Solutions Architect needs to deploy a mobile application that can collect votes for a popular singing competition. Millions of users from around the world will submit votes using their mobile phones. These votes must be collected and stored in a highly scalable and highly available data store which will be queried for realtime ranking.

Which of the following combination of services should the architect use to meet this requirement?

A、

Amazon Redshift and AWS Mobile Hub

B、

Amazon Relational Database Service (RDS) and Amazon MQ

C、

Amazon Aurora and Amazon Cognito

D、

Amazon DynamoDB and AWS AppSync

单选题 A media company recently launched their newly created web application. Many users tried to visit the website, but they are receiving a 503 Service Unavailable Error. The system administrator tracked the EC2 instance status and saw the capacity is reaching its maximum limit and unable to process all the requests. To gain insights from the application's data, they need to launch a real-time analytics service. 

Which of the following allows you to read records in batches?

A、

Create a Kinesis Data Stream and use AWS Lambda to read records from the data stream.

B、

Create an Amazon S3 bucket to store the captured data and use Amazon Athena to analyze the data.

C、

Create a Kinesis Data Firehose and use AWS Lambda to read records from the data stream.

D、

Create an Amazon S3 bucket to store the captured data and use Amazon Redshift Spectrum to analyze the data.

单选题 A manufacturing company has EC2 instances running in AWS. The EC2 instances are configured with Auto Scaling. There are a lot of requests being lost because of too much load on the servers. The Auto Scaling is launching new EC2 instances to take the load accordingly yet, there are still some requests that are being lost.
Which of the following is the MOST suitable solution that you should implement to avoid losing recently submitted requests?

A、

Set up Amazon Aurora Serverless for on-demand, auto-scaling configuration of your EC2 Instances and also enable
Amazon Aurora Parallel Query feature for faster analytical queries over your current data.

B、

Use an Amazon SQS queue to decouple the application components and scale-out the EC2 instances based upon the ApproximateNumberOfMessages metric in Amazon CloudWatch.

C、

Use larger instances for your application with an attached Elastic Fabric Adapter (EFA).

D、

Replace the Auto Scaling group with a cluster placement group to achieve a low-latency network performance
necessary for tightly-coupled node-to-node communication.

单选题 A company has an On-Demand EC2 instance located in a subnet in AWS that hosts a web application.
The security group attached to this EC2 instance has the following Inbound Rules:

1669015694428.png

The Route table attached to the VPC is shown below. You can establish an SSH connection into the EC2 instance
from the Internet. However, you are not able to connect to the web server using your Chrome browser.

1669015742636.png

Which of the below steps would resolve the issue?

A、

In the Route table, add this new route entry: 10.0.0.0/27 -> local

B、

In the Route table, add this new route entry: 0.0.0.0 -> igw-b51618cc

C、

In the Security Group, add an Inbound HTTP rule.

D、

In the Security Group, remove the SSH rule.