EMT Practice Test

1. Question Content...

---

Question1: A read only news reporting site with a combined web and application tier and a database tier that receives
large and unpredictable traffic demands must be able to respond to these traffic fluctuations automatically.
What AWS services should be used meet these requirements?

Question2: The following policy can be attached to an IAM group. It lets an IAM user in that group access a "home
directory" in AWS S3 that matches their user name using the console.
{
"Version": "2012-10-17",
"Statement": [
{
"Action": ["s3:*"],
"Effect": "Allow",
"Resource": ["arn:aws:s3:::bucket-name"],
"Condition":{"StringLike":{"s3:prefix":["home/${aws:username}/*"]}}
},
{
"Action":["s3:*"],
"Effect":"Allow",
"Resource": ["arn:aws:s3:::bucket-name/home/${aws:username}/*"]
}
]
}

Question3: You are designing a data leak prevention solution for your VPC environment. You want your VPC
Instances to be able to access software depots and distributions on the Internet for product updates.
The depots and distributions are accessible via third party CDNs by their URLs. You want to explicitly
deny any other outbound connections from your VPC instances to hosts on the internet.
Which of the following options would you consider?

Question4: You are designing an SSUTLS solution that requires HTTPS clients to be authenticated by the Webserver
using client certificate authentication. The solution must be resilient.
Which of the following options would you consider for configuring the web server infrastructure? (Choose
2 answers)

Question5: To serve Web traffic for a popular product your chief financial officer and IT director have purchased 10 ml
large heavy utilization Reserved Instances (RIs) evenly spread across two availability zones: Route 53 is
used to deliver the traffic to an Elastic Load Balancer (ELB). After several months, the product grows even
more popular and you need additional capacity As a result, your company purchases two C3.2xlarge
medium utilization Ris You register the two c3 2xlarge instances with your ELB and quickly find that the ml
large instances are at 100% of capacity and the c3 2xlarge instances have significant capacity that's
unused Which option is the most cost effective and uses EC2 capacity most effectively?

Question6: A web-startup runs its very successful social news application on Amazon EC2 with an Elastic Load
Balancer, an Auto-Scaling group of Java/Tomcat application-servers, and DynamoDB as data store. The
main web-application best runs on m2 x large instances since it is highly memory- bound Each new
deployment requires semi-automated creation and testing of a new AMI for the application servers which
takes quite a while ana is therefore only done once per week.
Recently, a new chat feature has been implemented in nodejs and wails to be integrated in the
architecture. First tests show that the new component is CPU bound Because the company has some
experience with using Chef, they decided to streamline the deployment process and use AWS Ops Works
as an application life cycle tool to simplify management of the application and reduce the deployment
cycles.
What configuration in AWS Ops Works is necessary to integrate the new chat module in the most
cost-efficient and flexible way?

Question7: Your fortune 500 company has under taken a TCO analysis evaluating the use of Amazon S3 versus
acquiring more hardware The outcome was that ail employees would be granted access to use Amazon
S3 for storage of their personal documents.
Which of the following will you need to consider so you can set up a solution that incorporates single
sign-on from your corporate AD or LDAP directory and restricts access for each user to a designated user
folder in a bucket? (Choose 3 Answers)

Question8: What does elasticity mean to AWS?

Question9: Your application is using an ELB in front of an Auto Scaling group of web/application servers deployed
across two AZs and a Multi-AZ RDS Instance for data persistence.
The database CPU is often above 80% usage and 90% of I/O operations on the database are reads. To
improve performance you recently added a single-node Memcached ElastiCache Cluster to cache
frequent DB query results. In the next weeks the overall workload is expected to grow by 30%.
Do you need to change anything in the architecture to maintain the high availability or the application with
the anticipated additional load? Why?

Question10: Select the correct set of options. These are the initial settings for the default security group:

Question11: Your firm has uploaded a large amount of aerial image data to S3 In the past, in your on-premises
environment, you used a dedicated group of servers to oaten process this data and used Rabbit MQ - An
open source messaging system to get job information to the servers. Once processed the data would go
to tape and be shipped offsite. Your manager told you to stay with the current design, and leverage AWS
archival storage and messaging services to minimize cost. Which is correct?

Question12: You have launched an EC2 instance with four (4) 500 GB EBS Provisioned IOPS volumes attached. The
EC2 instance is EBS-Optimized and supports 500 Mbps throughput between EC2 and EBS. The four
EBS volumes are configured as a single RAID 0 device, and each Provisioned IOPS volume is
provisioned with 4,000 IOPS (4,000 16KB reads or writes), for a total of 16,000 random IOPS on the
instance. The EC2 instance initially delivers the expected 16,000 IOPS random read and write
performance. Sometime later, in order to increase the total random I/O performance of the instance, you
add an additional two 500 GB EBS Provisioned IOPS volumes to the RAID. Each volume is provisioned to
4 ,000 IOPs like the original four, for a total of 24,000 IOPS on the EC2 instance. Monitoring shows that
the EC2 instance CPU utilization increased from 50% to 70%, but the total random IOPS measured at the
instance level does not increase at all.
What is the problem and a valid solution?

Question13: You've been brought in as solutions architect to assist an enterprise customer with their migration of an
e-commerce platform to Amazon Virtual Private Cloud (VPC) The previous architect has already deployed
a 3-tier VPC.
The configuration is as follows:
VPC: vpc-2f8bc447
IGW: igw-2d8bc445
NACL: ad-208bc448
Subnets and Route Tables:
Web servers: subnet-258bc44d
Application servers: subnet-248bc44c
Database servers: subnet-9189c6f9
Route Tables:
rrb-218bc449
rtb-238bc44b
Associations:
subnet-258bc44d : rtb-218bc449
subnet-248bc44c : rtb-238bc44b
subnet-9189c6f9 : rtb-238bc44b
You are now ready to begin deploying EC2 instances into the VPC Web servers must have direct access
to the internet Application and database servers cannot have direct access to the internet.
Which configuration below will allow you the ability to remotely administer your application and database
servers, as well as allow these servers to retrieve updates from the Internet?

Question14: Your startup wants to implement an order fulfillment process for selling a personalized gadget that needs
an average of 3-4 days to produce with some orders taking up to 6 months you expect 10 orders per day
on your first day. 1000 orders per day after 6 months and 10,000 orders after 12 months.
Orders coming in are checked for consistency men dispatched to your manufacturing plant for production
quality control packaging shipment and payment processing If the product does not meet the quality
standards at any stage of the process employees may force the process to repeat a step Customers are
notified via email about order status and any critical issues with their orders such as payment failure.
Your case architecture includes AWS Elastic Beanstalk for your website with an RDS MySQL instance for
customer data and orders.
How can you implement the order fulfillment process while making sure that the emails are delivered
reliably?

Question15: You are the new IT architect in a company that operates a mobile sleep tracking application.
When activated at night, the mobile app is sending collected data points of 1 kilobyte every 5 minutes to
your backend.
The backend takes care of authenticating the user and writing the data points into an Amazon DynamoDB
table.
Every morning, you scan the table to extract and aggregate last night's data on a per user basis, and store
the results in Amazon S3. Users are notified via Amazon SNS mobile push notifications that new data is
available, which is parsed and visualized by the mobile app.
Currently you have around 100k users who are mostly based out of North America.
You have been tasked to optimize the architecture of the backend system to lower cost.
What would you recommend? Choose 2 answers

Question16: Your company has recently extended its datacenter into a VPC on AVVS to add burst computing capacity
as needed Members of your Network Operations Center need to be able to go to the AWS Management
Console and administer Amazon EC2 instances as necessary You don't want to create new IAM users for
each NOC member and make those users sign in again to the AWS Management Console Which option
below will meet the needs for your NOC members?

Question17: A customer has a 10 GB AWS Direct Connect connection to an AWS region where they have a web
application hosted on Amazon Elastic Computer Cloud (EC2). The application has dependencies on an
on-premises mainframe database that uses a BASE (Basic Available. Sort stale Eventual consistency)
rather than an ACID (Atomicity. Consistency isolation. Durability) consistency model. The application is
exhibiting undesirable behavior because the database is not able to handle the volume of writes. How can
you reduce the load on your on-premises database resources in the most cost-effective way?

Question18: An AWS customer runs a public blogging website. The site users upload two million blog entries a month.
The average blog entry size is 200 KB. The access rate to blog entries drops to negligible 6 months after
publication and users rarely access a blog entry 1 year after publication. Additionally, blog entries have a
high update rate during the first 3 months following publication, this drops to no updates after 6 months.
The customer wants to use CloudFront to improve his user's load times. Which of the following
recommendations would you make to the customer?

Question19: Your website is serving on-demand training videos to your workforce. Videos are uploaded monthly in
high resolution MP4 format. Your workforce is distributed globally often on the move and using
company-provided tablets that require the HTTP Live Streaming (HLS) protocol to watch a video. Your
company has no video transcoding expertise and it required you may need to pay for a consultant.
How do you implement the most cost-efficient architecture without compromising high availability and
quality of video delivery'?

Question20: You are implementing AWS Direct Connect. You intend to use AWS public service end points such as
Amazon S3, across the AWS Direct Connect link. You want other Internet traffic to use your existing link
to an Internet Service Provider.
What is the correct way to configure AWS Direct connect for access to services such as Amazon S3?

Question21: You have been asked to design the storage layer for an application. The application requires disk
performance of at least 100,000 IOPS. In addition, the storage layer must be able to survive the loss of an
individual disk, EC2 instance, or Availability Zone without any data loss. The volume you provide must
have a capacity of at least 3 TB. Which of the following designs will meet these objectives?

Question22: A customer has established an AWS Direct Connect connection to AWS. The link is up and routes are
being advertised from the customer's end, however the customer is unable to connect from EC2 instances
inside its VPC to servers residing in its datacenter.
Which of the following options provide a viable solution to remedy this situation? (Choose 2 answers)

Question23: You have deployed a web application targeting a global audience across multiple AWS Regions under the
domain name.example.com. You decide to use Route53 Latency-Based Routing to serve web requests to
users from the region closest to the user. To provide business continuity in the event of server downtime
you configure weighted record sets associated with two web servers in separate Availability Zones per
region. Dunning a DR test you notice that when you disable all web servers in one of the regions Route53
does not automatically direct all users to the other region. What could be happening? (Choose 2 answers)

Question24: You are designing the network infrastructure for an application server in Amazon VPC. Users will access
all application instances from the Internet, as well as from an on-premises network. The on-premises
network is connected to your VPC over an AWS Direct Connect link.
How would you design routing to meet the above requirements?

Question25: A web company is looking to implement an intrusion detection and prevention system into their deployed
VPC. This platform should have the ability to scale to thousands of instances running inside of the VPC.
How should they architect their solution to achieve these goals?

Question26: You are running a successful multitier web application on AWS and your marketing department has asked
you to add a reporting tier to the application. The reporting tier will aggregate and publish status reports
every 30 minutes from user-generated information that is being stored in your web application s database.
You are currently running a Multi-AZ RDS MySQL instance for the database tier. You also have
implemented Elasticache as a database caching layer between the application tier and database tier.
Please select the answer that will allow you to successfully implement the reporting tier with as little
impact as possible to your database.

Question27: When you put objects in Amazon S3, what is the indication that an object was successfully stored?

Question28: An administrator is using Amazon CloudFormation to deploy a three tier web application that consists of a
web tier and application tier that will utilize Amazon DynamoDB for storage when creating the
CloudFormation template which of the following would allow the application instance access to the
DynamoDB tables without exposing API credentials?

Question29: A web design company currently runs several FTP servers that their 250 customers use to upload and
download large graphic files They wish to move this system to AWS to make it more scalable, but they
wish to maintain customer privacy and Keep costs to a minimum.
What AWS architecture would you recommend?

Question30: Your customer is willing to consolidate their log streams (access logs application logs security logs etc.) in
one single system. Once consolidated, the customer wants to analyze these logs in real time based on
heuristics. From time to time, the customer needs to validate heuristics, which requires going back to data
samples extracted from the last 12 hours?
What is the best approach to meet your customer's requirements?

Question31: Your company previously configured a heavily used, dynamically routed VPN connection between your
on-premises data center and AWS. You recently provisioned a DirectConnect connection and would like
to start using the new connection. After configuring DirectConnect settings in the AWS Console, which of
the following options win provide the most seamless transition for your users?

Question32: You are responsible for a web application that consists of an Elastic Load Balancing (ELB) load balancer
in front of an Auto Scaling group of Amazon Elastic Compute Cloud (EC2) instances. For a recent
deployment of a new version of the application, a new Amazon Machine Image (AMI) was created, and
the Auto Scaling group was updated with a new launch configuration that refers to this new AMI. During
the deployment, you received complaints from users that the website was responding with errors. All
instances passed the ELB health checks.
What should you do in order to avoid errors for future deployments? (Choose 2 answer)

Question33: You need a persistent and durable storage to trace call activity of an IVR (Interactive Voice Response)
system. Call duration is mostly in the 2-3 minutes timeframe. Each traced call can be either active or
terminated. An external application needs to know each minute the list of currently active calls. Usually
there are a few calls/second, but once per month there is a periodic peak up to 1000 calls/second for a
few hours. The system is open 24/7 and any downtime should be avoided. Historical data is periodically
archived to files. Cost saving is a priority for this project.
What database implementation would better fit this scenario, keeping costs as low as possible?

Question34: A customer is deploying an SSL enabled web application to AWS and would like to implement a
separation of roles between the EC2 service administrators that are entitled to login to instances as well
as making API calls and the security officers who will maintain and have exclusive access to the
application's X.509 certificate that contains the private key.

Question35: Your customer wishes to deploy an enterprise application to AWS which will consist of several web
servers, several application servers and a small (50GB) Oracle database information is stored, both in the
database and the file systems of the various servers. The backup system must support database recovery
whole server and whole disk restores, and individual file restores with a recovery time of no more than two
hours. They have chosen to use RDS Oracle as the database
Which backup architecture will meet these requirements?

Question36: Your company runs a customer facing event registration site This site is built with a 3-tier architecture with
web and application tier servers and a MySQL database The application requires 6 web tier servers and 6
application tier servers for normal operation, but can run on a minimum of 65% server capacity and a
single MySQL database. When deploying this application in a region with three availability zones (AZs)
which architecture provides high availability?

Question37: You're running an application on-premises due to its dependency on non-x86 hardware and want to use
AWS for data backup. Your backup application is only able to write to POSIX-compatible block-based
storage. You have 140TB of data and would like to mount it as a single folder on your file server Users
must be able to access portions of this data while the backups are taking place. What backup solution
would be most appropriate for this use case?

Question38: Your team has a tomcat-based Java application you need to deploy into development, test and production
environments. After some research, you opt to use Elastic Beanstalk due to its tight integration with your
developer tools and RDS due to its ease of management. Your QA team lead points out that you need to
roll a sanitized set of production data into your environment on a nightly basis.
Similarly, other software teams in your org want access to that same restored data via their EC2 instances
in your VPC .The optimal setup for persistence and security that meets the above requirements would be
the following.

Question39: A benefits enrollment company is hosting a 3-tier web application running in a VPC on AWS which
includes a NAT (Network Address Translation) instance in the public Web tier. There is enough
provisioned capacity for the expected workload tor the new fiscal year benefit enrollment period plus
some extra overhead Enrollment proceeds nicely for two days and then the web tier becomes
unresponsive, upon investigation using CloudWatch and other monitoring tools it is discovered that there
is an extremely large and unanticipated amount of inbound traffic coming from a set of 15 specific IP
addresses over port 80 from a country where the benefits company has no customers. The web tier
instances are so overloaded that benefit enrollment administrators cannot even SSH into them. Which
activity would be useful in defending against this attack?

Question40: An International company has deployed a multi-tier web application that relies on DynamoDB in a single
region For regulatory reasons they need disaster recovery capability In a separate region with a Recovery
Time Objective of 2 hours and a Recovery Point Objective of 24 hours. They should synchronize their
data on a regular basis and be able to provision me web application rapidly using CloudFormation.
The objective is to minimize changes to the existing web application, control the throughput of DynamoDB
used for the synchronization of data and synchronize only the modified elements.
Which design would you choose to meet these requirements?

Question41: Your company produces customer commissioned one-of-a-kind skiing helmets combining nigh fashion
with custom technical enhancements Customers can show off their Individuality on the ski slopes and
have access to head-up-displays. GPS rear-view cams and any other technical innovation they wish to
embed in the helmet.
The current manufacturing process is data rich and complex including assessments to ensure that the
custom electronics and materials used to assemble the helmets are to the highest standards
Assessments are a mixture of human and automated assessments you need to add a new set of
assessment to model the failure modes of the custom electronics using GPUs with CUDA, across a
cluster of servers with low latency networking.
What architecture would allow you to automate the existing process using a hybrid approach and ensure
that the architecture can support the evolution of processes over time?

Question42: You have an application running on an EC2 Instance which will allow users to download flies from a
private S3 bucket using a pre-signed URL. Before generating the URL the application should verify the
existence of the file in S3.
How should the application use AWS credentials to access the S3 bucket securely?

Question43: A web design company currently runs several FTP servers that their 250 customers use to upload and
download large graphic files They wish to move this system to AWS to make it more scalable, but they
wish to maintain customer privacy and Keep costs to a minimum.
What AWS architecture would you recommend?

Question44: Your company hosts a social media site supporting users in multiple countries. You have been asked to
provide a highly available design tor the application that leverages multiple regions tor the most recently
accessed content and latency sensitive portions of the wet) site The most latency sensitive component of
the application involves reading user preferences to support web site personalization and ad selection.
In addition to running your application in multiple regions, which option will support this application's
requirements?

Question45: A large real-estate brokerage is exploring the option o( adding a cost-effective location based alert to their
existing mobile application The application backend infrastructure currently runs on AWS Users who opt
in to this service will receive alerts on their mobile device regarding real-estate otters in proximity to their
location. For the alerts to be relevant delivery time needs to be in the low minute count the existing mobile
app has 5 million users across the US. Which one of the following architectural suggestions would you
make to the customer?

Question46: Your application provides data transformation services. Files containing data to be transformed are first
uploaded to Amazon S3 and then transformed by a fleet of spot EC2 instances. Files submitted by your
premium customers must be transformed with the highest priority. How should you implement such a
system?

Question47: You require the ability to analyze a large amount of data, which is stored on Amazon S3 using Amazon
Elastic Map Reduce. You are using the cc2 8x large Instance type, whose CPUs are mostly idle during
processing. Which of the below would be the most cost efficient way to reduce the runtime of the job?

Question48: You have a periodic Image analysis application that gets some files In Input analyzes them and tor each
file writes some data in output to a ten file the number of files in input per day is high and concentrated in
a few hours of the day.
Currently you have a server on EC2 with a large EBS volume that hosts the input data and the results it
takes almost 20 hours per day to complete the process
What services could be used to reduce the elaboration time and improve the availability of the solution?

Question49: You are designing a personal document-archiving solution for your global enterprise with thousands of
employee. Each employee has potentially gigabytes of data to be backed up in this archiving solution.
The solution will be exposed to the employees as an application, where they can just drag and drop their
files to the archiving system. Employees can retrieve their archives through a web interface. The
corporate network has high bandwidth AWS Direct Connect connectivity to AWS.
You have a regulatory requirement that all data needs to be encrypted before being uploaded to the
cloud.
How do you implement this in a highly available and cost-efficient way?

Question50: Your company currently has a 2-tier web application running in an on-premises data center. You have
experienced several infrastructure failures in the past two months resulting in significant financial losses.
Your CIO is strongly agreeing to move the application to AWS. While working on achieving buy-in from
the other company executives, he asks you to develop a disaster recovery plan to help improve Business
continuity in the short term. He specifies a target Recovery Time Objective (RTO) of 4 hours and a
Recovery Point Objective (RPO) of 1 hour or less. He also asks you to implement the solution within 2
weeks. Your database is 200GB in size and you have a 20Mbps Internet connection. How would you do
this while minimizing costs?

Question51: You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a
single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from
the Internet.
Which of the following options would you consider? (Choose 2 answers)

Question52: Which is a valid Amazon Resource name (ARN) for IAM?

Question53: Your system recently experienced down time during the troubleshooting process. You found that a new
administrator mistakenly terminated several production EC2 instances.
Which of the following strategies will help prevent a similar situation in the future?
The administrator still must be able to:
launch, start stop, and terminate development resources.
launch and start production instances.

Question54: How is AWS readily distinguished from other vendors in the traditional IT computing landscape?

Question55: How can an EBS volume that is currently attached to an EC2 instance be migrated from one Availability
Zone to another?

Question56: Which of the following are characteristics of Amazon VPC subnets? Choose 2 answers

Question57: You control access to S3 buckets and objects with:

Question58: Your must architect the migration of a web application to AWS. The application consists of Linux web
servers running a custom web server. You are required to save the logs generated from the application to
a durable location.
What options could you select to migrate the application to AWS? (Choose 2)

Question59: You currently operate a web application In the AWS US-East region The application runs on an
auto-scaled layer of EC2 instances and an RDS Multi-AZ database Your IT security compliance officer
has tasked you to develop a reliable and durable logging solution to track changes made to your EC2.IAM
And RDS resources. The solution must ensure the integrity and confidentiality of your log data. Which of
these solutions would you recommend?

Question60: Your company has an on-premises multi-tier PHP web application, which recently experienced downtime
due to a large burst In web traffic due to a company announcement Over the coming days, you are
expecting similar announcements to drive similar unpredictable bursts, and are looking to find ways to
quickly improve your infrastructures ability to handle unexpected increases in traffic.
The application currently consists of 2 tiers a web tier which consists of a load balancer and several Linux
Apache web servers as well as a database tier which hosts a Linux server hosting a MySQL database.
Which scenario below will provide full site functionality, while helping to improve the ability of your
application in the short timeframe required?

Question61: The following are AWS Storage services? Choose 2 Answers

Question62: An AWS customer is deploying an application mat is composed of an AutoScaling group of EC2
Instances.
The customers security policy requires that every outbound connection from these instances to any other
service within the customers Virtual Private Cloud must be authenticated using a unique x 509 certificate
that contains the specific instance-id.
In addition an x 509 certificates must Designed by the customer's Key management service in order to be
trusted for authentication.
Which of the following configurations will support these requirements?

Question63: You are designing a photo-sharing mobile app. The application will store all pictures in a single Amazon
S3 bucket. Users will upload pictures from their mobile device directly to Amazon S3 and will be able to
view and download their own pictures directly from Amazon S3.
You want to configure security to handle potentially millions of users in the most secure manner possible.
What should your server-side application do when a new user registers on the photo-sharing mobile
application?

Question64: Your company is getting ready to do a major public announcement of a social media site on AWS. The
website is running on EC2 instances deployed across multiple Availability Zones with a Multi-AZ RDS
MySQL Extra Large DB Instance. The site performs a high number of small reads and writes per second
and relies on an eventual consistency model. After comprehensive tests you discover that there is read
contention on RDS MySQL. Which are the best approaches to meet these requirements? (Choose 2
answers)

Question65: Your department creates regular analytics reports from your company's log files All log data is collected in
Amazon S3 and processed by daily Amazon Elastic MapReduce (EMR) jobs that generate daily PDF
reports and aggregated tables in CSV format for an Amazon Redshift data warehouse.
Your CFO requests that you optimize the cost structure for this system.
Which of the following alternatives will lower costs without compromising average performance of the
system or data integrity for the raw data?

Question66: You have launched an EC2 instance with four (4) 500 GB EBS Provisioned IOPS volumes attached. The
EC2 instance is EBS-Optimized and supports 500 Mbps throughput between EC2 and EBS. The four
EBS volumes are configured as a single RAID 0 device, and each Provisioned IOPS volume is
provisioned with 4,000 IOPS (4,000 16KB reads or writes), for a total of 16,000 random IOPS on the
instance. The EC2 instance initially delivers the expected 16,000 IOPS random read and write
performance. Sometime later, in order to increase the total random I/O performance of the instance, you
add an additional two 500 GB EBS Provisioned IOPS volumes to the RAID. Each volume is provisioned to
4 ,000 IOPs like the original four, for a total of 24,000 IOPS on the EC2 instance. Monitoring shows that
the EC2 instance CPU utilization increased from 50% to 70%, but the total random IOPS measured at the
instance level does not increase at all.
What is the problem and a valid solution?

Question67: The AWS IT infrastructure that AWS provides, complies with the following IT security standards,
including:

Question68: Your company is in the process of developing a next generation pet collar that collects biometric
information to assist families with promoting healthy lifestyles for their pets Each collar will push 30kb of
biometric data In JSON format every 2 seconds to a collection platform that will process and analyze the
data providing health trending information back to the pet owners and veterinarians via a web portal
Management has tasked you to architect the collection platform ensuring the following requirements are
met.
Provide the ability for real-time analytics of the inbound biometric data
Ensure processing of the biometric data is highly durable. Elastic and parallel
The results of the analytic processing should be persisted for data mining
Which architecture outlined below win meet the initial requirements for the collection platform?

Question69: You are designing Internet connectivity for your VPC. The Web servers must be available on the Internet.
The application must have a highly available architecture.
Which alternatives should you consider? (Choose 2 answers)

Question70: You are migrating a legacy client-server application to AWS. The application responds to a specific DNS
domain (e.g. www.example.com) and has a 2-tier architecture, with multiple application servers and a
database server. Remote clients use TCP to connect to the application servers. The application servers
need to know the IP address of the clients in order to function properly and are currently taking that
information from the TCP socket. A Multi-AZ RDS MySQL instance will be used for the database.
During the migration you can change the application code, but you have to file a change request.
How would you implement the architecture on AWS in order to maximize scalability and high availability?

Question71: Your company hosts a social media website for storing and sharing documents. The web application
allows user to upload large files while resuming and pausing the upload as needed. Currently, files are
uploaded to your PHP front end backed by Elastic load Balancing and an autoscaling fleet of Amazon
Elastic Compute Cloud (EC2) instances that scale upon average of bytes received (NetworkIn). After a file
has been uploaded, it is copied to Amazon Simple Storage Service (S3). Amazon EC2 instances use an
AWS Identity and Access Management (IAM) role that allows Amazon S3 uploads. Over the last six
months, your user base and scale have increased significantly, forcing you to increase the Auto Scaling
group's Max parameter a few times. Your CFO is concerned about rising costs and has asked you to
adjust the architecture where needed to better optimize costs.
Which architecture change could you introduce to reduce costs and still keep your web application secure
and scalable?

Question72: Auto Scaling requests are signed with a _________ signature calculated from the request and the user's
private key.

Question73: An enterprise wants to use a third-party SaaS application. The SaaS application needs to have access to
issue several API commands to discover Amazon EC2 resources running within the enterprise's account
The enterprise has internal security policies that require any outside access to their environment must
conform to the principles of least privilege and there must be controls in place to ensure that the
credentials used by the SaaS vendor cannot be used by any other third party. Which of the following
would meet all of these conditions?

Question74: Company B is launching a new game app for mobile devices. Users will log into the game using their
existing social media account to streamline data capture. Company B would like to directly save player
data and scoring information from the mobile app to a DynamoDS table named Score Data When a user
saves their game the progress data will be stored to the Game state S3 bucket. What is the best approach
for storing data to DynamoDB and S3?

Question75: You've been hired to enhance the overall security posture for a very large e-commerce site They have a
well architected multi-tier application running in a VPC that uses ELBs in front of both the web and the app
tier with static assets served directly from S3 They are using a combination of RDS and DynamoOB for
their dynamic data and then archiving nightly into S3 for further processing with EMR They are concerned
because they found questionable log entries and suspect someone is attempting to gain unauthorized
access.
Which approach provides a cost effective scalable mitigation to this kind of attack?

Question76: You are responsible for a legacy web application whose server environment is approaching end of life
You would like to migrate this application to AWS as quickly as possible, since the application
environment currently has the following limitations:
The VM's single 10GB VMDK is almost full; Me virtual network interface still uses the 10Mbps driver,
which leaves your 100Mbps WAN connection completely underutilized;
It is currently running on a highly customized. Windows VM within a VMware environment; You do not
have me installation media;
This is a mission critical application with an RTO (Recovery Time Objective) of 8 hours. RPO (Recovery
Point Objective) of 1 hour. How could you best migrate this application to AWS while meeting your
business continuity requirements?

Question77: After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a
public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of
your private subnet. When you try and make an outbound connection to the internet from an instance in
the private subnet, you are not successful. Which of the following steps could resolve the issue?

Question78: You are looking to migrate your Development (Dev) and Test environments to AWS. You have decided to
use separate AWS accounts to host each environment. You plan to link each accounts bill to a Master
AWS account using Consolidated Billing. To make sure you Keep within budget you would like to
implement a way for administrators in the Master account to have access to stop, delete and/or terminate
resources in both the Dev and Test accounts. Identify which option will allow you to achieve this goal.

Question79: You have recently joined a startup company building sensors to measure street noise and air quality in
urban areas. The company has been running a pilot deployment of around 100 sensors for 3 months each
sensor uploads 1KB of sensor data every minute to a backend hosted on AWS.
During the pilot, you measured a peak or 10 IOPS on the database, and you stored an =average of 3GB
of sensor data per month in the database.
The current deployment consists of a load-balanced auto scaled Ingestion layer using EC2 instances and
a PostgreSQL RDS database with 500GB standard storage.
The pilot is considered a success and your CEO has managed to get the attention or some potential
investors. The business plan requires a deployment of at least 1O0K sensors which needs to be
supported by the backend. You also need to store sensor data for at least two years to be able to compare
year over year Improvements.
To secure funding, you have to make sure that the platform meets these requirements and leaves room
for further scaling. Which setup win meet the requirements?

Question80: Your company policies require encryption of sensitive data at rest. You are considering the possible
options for protecting data while storing it at rest on an EBS data volume, attached to an EC2 instance.
Which of these options would allow you to encrypt your data at rest? Choose 3 answers

Question81: A 3-tier e-commerce web application is current deployed on-premises and will be migrated to AWS for
greater scalability and elasticity The web server currently shares read-only data using a network
distributed file system The app server tier uses a clustering mechanism for discovery and shared session
state that depends on IP multicast The database tier uses shared-storage clustering to provide database
fall over capability, and uses several read slaves for scaling Data on all servers and the distributed file
system directory is backed up weekly to off-site tapes
Which AWS storage and database architecture meets the requirements of the application?

Question82: Your company plans to host a large donation website on Amazon Web Services (AWS). You anticipate a
large and undetermined amount of traffic that will create many database writes. To be certain that you do
not drop any writes to a database hosted on AWS. Which service should you use?

Question83: Your company is storing millions of sensitive transactions across thousands of 100-GB files that must be
encrypted in transit and at rest. Analysts concurrently depend on subsets of files, which can consume up
to 5 TB of space, to generate simulations that can be used to steer business decisions. You are required
to design an AWS solution that can cost effectively accommodate the long-term storage and in-flight
subsets of data.

Question84: Refer to the architecture diagram above of a batch processing solution using Simple Queue Service (SQS)
to set up a message queue between EC2 instances which are used as batch processors Cloud Watch
monitors the number of Job requests (queued messages) and an Auto Scaling group adds or deletes
batch servers automatically based on parameters set in Cloud Watch alarms. You can use this
architecture to implement which of the following features in a cost effective and efficient manner?

Question85: You are developing a new mobile application and are considering storing user preferences in AWS.2w
This would provide a more uniform cross-device experience to users using multiple mobile devices to
access the application. The preference data for each user is estimated to be 50KB in size Additionally 5
million customers are expected to use the application on a regular basis. The solution needs to be
cost-effective, highly available, scalable and secure, how would you design a solution to meet the above
requirements?

Question86: A company is running a batch analysis every hour on their main transactional DB, running on an RDS
MySQL instance, to populate their central Data Warehouse running on Redshift. During the execution of
the batch, their transactional applications are very slow. When the batch completes they need to update
the top management dashboard with the new data. The dashboard is produced by another system
running on-premises that is currently started when a manually-sent email notifies that an update is
required. The on-premises system cannot be modified because is managed by another team.
How would you optimize this scenario to solve performance issues and automate the process as much as
possible?

Question87: A company is building a voting system for a popular TV show, viewers win watch the performances then
visit the show's website to vote for their favorite performer. It is expected that in a short period of time after
the show has finished the site will receive millions of visitors. The visitors will first login to the site using
their Amazon.com credentials and then submit their vote. After the voting is completed the page will
display the vote totals. The company needs to build the site such that can handle the rapid influx of traffic
while maintaining good performance but also wants to keep costs to a minimum. Which of the design
patterns below should they use?

Question88: You require the ability to analyze a customer's clickstream data on a website so they can do behavioral
analysis. Your customer needs to know what sequence of pages and ads their customer clicked on. This
data will be used in real time to modify the page layouts as customers click through the site to increase
stickiness and advertising click-through. Which option meets the requirements for captioning and
analyzing this data?

Question89: You are implementing a URL whitelisting system for a company that wants to restrict outbound HTTP'S
connections to specific domains from their EC2-hosted applications you deploy a single EC2 instance
running proxy software and configure It to accept traffic from all subnets and EC2 instances in the VPC.
You configure the proxy to only pass through traffic to domains that you define in its whitelist configuration
You have a nightly maintenance window or 10 minutes where ail instances fetch new software updates.
Each update Is about 200MB In size and there are 500 instances In the VPC that routinely fetch updates
After a few days you notice that some machines are failing to successfully download some, but not all of
their updates within the maintenance window. The download URLs used for these updates are correctly
listed in the proxy's whitelist configuration and you are able to access them manually using a web browser
on the instances. What might be happening? (Choose 2 answers)

Question90: An ERP application is deployed across multiple AZs in a single region. In the event of failure, the
Recovery Time Objective (RTO) must be less than 3 hours, and the Recovery Point Objective (RPO)
must be 15 minutes the customer realizes that data corruption occurred roughly 1.5 hours ago.
What DR strategy could be used to achieve this RTO and RPO in the event of this kind of failure?

Question91: You have an application running on an EC2 instance which will allow users to download files from a
private S3 bucket using a pre-signed URL. Before generating the URL, the application should verify the
existence of the file in S3. How should the application use AWS credentials to access the S3 bucket
securely?

Question92: Your website is serving on-demand training videos to your workforce. Videos are uploaded monthly in
high resolution MP4 format. Your workforce is distributed globally often on the move and using
company-provided tablets that require the HTTP Live Streaming (HLS) protocol to watch a video. Your
company has no video transcoding expertise and it required you may need to pay for a consultant.
How do you implement the most cost-efficient architecture without compromising high availability and
quality of video delivery'?

Question93: You have deployed a three-tier web application in a VPC with a CIDR block of 10.0.0.0/28 You initially
deploy two web servers, two application servers, two database servers and one NAT instance tor a total
of seven EC2 instances The web. Application and database servers are deployed across two availability
zones (AZs). You also deploy an ELB in front of the two web servers, and use Route53 for DNS Web
(raffle gradually increases in the first few days following the deployment, so you attempt to double the
number of instances in each tier of the application to handle the new load unfortunately some of these
new instances fail to launch.
Which of the following could be the root caused? (Choose 2 answers)

Question94: You are running a news website in the eu-west-1 region that updates every 15 minutes. The website has
a world-wide audience it uses an Auto Scaling group behind an Elastic Load Balancer and an Amazon
RDS database Static content resides on Amazon S3, and is distributed through Amazon CloudFront. Your
Auto Scaling group is set to trigger a scale up event at 60% CPU utilization, you use an Amazon
RDSextra large DB instance with 10.000 Provisioned IOPS its CPU utilization is around 80%. While
freeable memory is in the 2 GB range.
Web analytics reports show that the average load time of your web pages is around 1.5 to 2 seconds, but
your SEO consultant wants to bring down the average load time to under 0.5 seconds.
How would you improve page load times for your users? (Choose 3 answers)