Review Flashcards

1
Q

RDS Read Replicas

A

asynchronous

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How would you restore an EBS snapshot to an EC2 instance?

A

Create a new volume from the snapshot, attach the volume to the EC2 instance, pre-warm the volume and mount it to the device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Your infrastructure does not have an Internet Gateway attached to any of the subnets. What might you do in order to SSH into your EC2 instances? All other configurations are correct.

A

Create a VPN connection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

You support a website with a large user base concentrated on the east coast, but very few users outside of that region. Traffic load is much heavier on the site during business hours so you are planning to implement Auto Scaling to optimize the number of running EC2 instances to meet the traffic load throughout the day. You are also looking for a solution to distribute traffic evenly among those instances. Which of the following solutions will distribute traffic most evenly among the EC2 instances hosting this website in the US-East-1 region?
Incorrect

A

Place the instances behind an Elastic Load Balancer with stickiness disabled.
Explanation
Elastic Load Balancers with sticky sessions configured may not distribute traffic equally between EC2 instances. Latency-based routing won’t evenly distribute the load among all instances, since the users are not evenly distributed and all the instances are in the same region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

You manage a technology blog website on EC2 instances in an Auto Scaling group behind an Elastic Load Balancer. Traffic volume to the site is consistently low, except during several weeks of the year when major technology conferences are occurring, when traffic increases 300 percent. What is the least advisable way to manage this environment?

A

Upgrade the reserved instances that handle the typical load for the website to larger reserved instances during technology conference weeks.
Explanation
Upgrading the size of reserved instances means you incur a cost to reserve resources for the entire period of the reservation, which at a minimum of one year, is much more commitment than is needed for a few week-long conferences. It’s better to keep the reserved instances sized properly to handle the typical load and use on-demand instances to handle the spikes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Your company’s compliance department mandates that within your multi-national organization, all data for customers in the UK must never leave UK servers and networks. Similarly, US data must never leave US servers and networks without explicit authorization first. What do we have to do to comply with this requirement in our web-based applications running on AWS in EC2? The user has already set up a user profile that states their geographic location.

A

We can run EC2 instances in multiple regions, and leverage a third-party data provider to determine whether a user should be redirected to the appropriate region based on that user’s profiles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the result of the following bucket policy? { “Statement”: [ { “Sid”: “Sid1”, “Action”: “s3:”, “Effect”: “Allow”, “Resource”: “arn:aws:s3:::mybucket/.”, “Principal”: { {“AWS”: [“arn:aws:iam::5555555555:user/jeff”]} } }, { “Sid”: “Sid2”, “Action”: “s3:”, “Effect”: “Deny”, “Resource”: “arn:aws:s3:::mybucket/”, “Principal”: { “AWS”: [ “*” ] } } ] }

A

It will deny all access to the bucket mybucket
Explanation
Explicit denies override allows

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Your company is ready to start migrating its application over to the cloud, but you cannot afford any downtime. Your manager asks you to come up with a plan of action. She also wants a solution that offers the flexibility to test the application on AWS with only a subset of users, but with the ability to increase the number of users over time. Which of these options are you most likely to recommend?

A

Implement a Route53 weighted routing policy that distribute the traffic between your on-premises application and the AWS application depending on weight.
Explanation
This option works great because we can modify the weight of one record set over the other to increase or decrease the amount of traffic. If the application on AWS is behaving properly, we can slowly increase the number of users that get routed to that application and slowly phase out the on-premises application. Otherwise, we can revert back to the on-premises application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Rule 100 in a NACL associated with subnets A and B denies HTTP traffic from 0.0.0.0/0. Rule 105 in the same NACL allows HTTP traffic from 0.0.0.0/0. EC2 Instances in subnet A are associated with a security group that allows HTTP traffic from 192.168.0.0/24. EC2 Instances in subnet B are associated with a security group that denies HTTP traffic from 128.168.0.0/24. Which of the following statements are true?

A

HTTP traffic from the internet will be denied to EC2 instances in both subnets due to the NACL rules.
Explanation
Rule 105 is the higher number rule and will not be evaluated. NACL rules are evaluated in order from lowest to highest so HTTP traffic from the internet will be denied to instances in subnet B.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

When working with Amazon RDS, by default, AWS is responsible for implementing which two management-related activities?

A

Installing and periodically patching the database software, If automated backups are enabled, creating and maintaining automated database backups with a point-in-time recovery of up to five minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

If Multi-AZ is enabled and automated backups occur on your instance, your application will experience performance issues due to the increased I/O operations caused by the automated backup.

A

False
Explanation
Automated backups are performed on the backup instance instead of the source database instance in order to avoid this performance degradation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are some steps you can take to optimize costs on AWS? (Choose three)

A

Purchase reserved instances, Detach underutilized EBS volumes and take a snapshot of the EBS volume and then delete the EBS volume, For RDS DB instances that consistently have 0 connections, take a snapshot of the instance and terminate the instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Your company is being audited by a third party IT auditing service; they have asked you for details about the physical network and virtualization infrastructure. What do you tell them?

A

You go to your AWS rep and AWS will give that information to the third party in charge of doing your audit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Multi-AZ RDS replications use asynchronous data replication.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

You have an Elastic Load Balancer with an Auto Scaling group for your application. You also have 4 running instances and you have Auto Scaling enabled. Some of those instances are running in one Availability Zone, and others are in a different Availability Zone. Some instances within one of the zones are not available to the ELB. What could be the cause?

A

The ELB isn’t configured for that Availability Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

A colleague noticed that CloudWatch was reporting that there has not been any connections to one of your MySQL databases for several months. You decided to terminate the database. Two months after the database was terminated, you get a phone call from a very upset user who needs information from that database to run end-of-year reports. What can you do?

A

If you took a manual snapshot of the database, you can restore the database from that snapshot.
Explanation
Manual snapshots persist even after a database is terminated. There is not an expiration period for manual snapshots. While automated backups do have a maximum retention period of 35 days, they are deleted at the time a database is terminated.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

We have terminated an instance which had a root EBS volume attached to it. What do we do now if we need to access the important data that was on this volume if we created this instance with the default storage options?

A

If we did not first take a snapshot of the EBS volume we will not be able to access the data after an instance termination because the volume was deleted
Explanation
By default, EBS root volumes are configured to terminate upon instance termination; however, when creating an EC2 instance we have the option to un-select the volume deletion option. We must also create snapshots of the EBS volume which we can restore the data from.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

You are uploading 3 gigabytes of data every night to S3 from your on-premises data center. It takes 3 hours to upload and you are uploading it to Amazon S3. You are only using half of your available bandwidth through your internet provider. How might you decrease the amount of time to back up that 3GB of data from your on-premises data center to S3?

A

You can use multipart upload to speed up the upload process, You could establish a Direct Connect connection between your on-premises data center and AWS VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

In order for reserved instances to reduce the cost of running instances, those instances must match the exact specifications of the reserved instance including: Region, Availability Zone, and instance type.

A

AWS announced late in 2016 that you could now apply a reserved instance to a region in order to get cost benefits across all AZs. Before this announcement, that was not the case. Because they do not update certification exams with every new feature announcement, and the SysOps course is training for the exam, we need to keep the question the way it is until they update it. With that being said, this is no longer true for “Availability Zone.”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

In your infrastructure, you are running a corporate application using a T2.Small instance. You are also using a NAT instance so that your private instances can reach out to the internet without being publicly available. What is one thing that we should do to speed up bandwidth and performance?

A

Increase your T2.Small instance to a M3.Small or M3.Medium
Explanation
Instance size has a direct influence on the amount of data your instance can send and receive. If your AWS environment has many instances using NAT availability, a network bottleneck could occur. Increasing the instance size will increase the available network throughput.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

If we want to be able to monitor billing and cost metrics, what AWS configuration do we need to enable and use?
Incorrect

A

Billing Alerts in Account Preferences
Explanation
CloudWatch is used to monitor billing and cost metrics, BUT we are required to enable Billing Alerts in our Account Preferences before being able to create billing alerts with CloudWatch.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What might be the cause of an EC2 instance not launching in an auto-scaling group?

A

The Availability zone is no longer supported, Invalid EBS device mapping, The key pair associated with EC2 instance does not exist

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Best practice is to pre-warm:

A

EBS volumes newly created from snapshots. Pre-warm by accessing each block once.
Explanation
The read and write back method is used to pre-warm EBS volumes created from a snapshot. Fresh EBS volumes do require read or write back during pre-warming. Elastic load balancers should be pre-warmed prior to an anticipated large spike in traffic, but this is done by contacting AWS to provision additional back-end resources, not by a read and write back command.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

You notice that several of your AWS environment’s CloudWatch metrics are hovering near a value of 100. Which of these are you least concerned about?

A

ElastiCache CurrConnections
Explanation
A high number of connections is not necessarily a bad thing, if there are adequate resources to service those connections. 100% usage of resources for the other options typically means they are strained under a heavy load. A high SpilloverCount for an Elastic Load Balancer is also bad, as you do not want requests to be rejected.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Which of the following could be a procedure for disaster recovery as it relates to RDS?

A

Create a read replica in a different region. In the event of a failover, promote the read replica as the primary and change the DNS for your application to point to the new primary and then enable Multi AZ.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Your RDS instance is consistently maxed out on its resource utilization. What are multiple ways to solve this issue? (Choose three)

A

Fire up an ElastiCache cluster in front of your RDS instance., Increase RDS instance size., Offload read-only activity to a read replica if the application is read-intensive.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Which of the following can be overridden at the EC2 instance level?

A

The choice to not use dedicated tenancy at the VPC level., An IAM policy explicitly allowing a user the right to terminate all EC2 instances.
Explanation
The default option for a VPC is to not use dedicated tenancy, but that can be overridden at the instance level. If the option to use dedicated tenancy is explicitly set at the VPC level, however, it cannot be overridden at the instance level. Explicit denies in IAM policies always trump explicit allows, so a user who is allowed to terminate all EC2 instances in an account can be denied the permission to terminate a particular instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

You manage a social media website on EC2 instances in an Auto Scaling group. You have configured your Auto Scaling group to deploy one new EC2 instance when CPU utilization is greater than 90% for 3 consecutive periods of 10 minutes. You notice that between 6:00 pm and 10:00 pm every night, you see a gradual increase in traffic to your website. Although Auto Scaling launches several new instances every night, some users complain they are seeing timeouts when trying to load the index page during those hours. What is the least cost-effective way to resolve this problem?

A

Increase the minimum number of instances in the AutoScaling group
Explanation
Increasing the minimum number of instances in the AutoScaling group will keep more instances running around the clock, thus making it a very inefficient way to manage cost. The other options all increase the AutoScaling group’s sensitivity to an increase in load and enable it to respond quicker to increased load by spinning up instances as soon as they become necessary.

29
Q

Which one of the below setups would need a custom CloudWatch metric in order to be able to monitor it?

A

Disk usage percentage of an Elastic Block Store volume

30
Q

You have multiple AWS users with access to an Amazon S3 bucket. These users have permission to add and delete objects. If you wanted to prevent accidental deletions, what might you do to prevent these users from performing accidental deletions of an object?

A

?You can use MFA to prevent accidental deletions of an object

31
Q

Instance A and instance B are running in two different subnets, A and B, of a VPC. Instance A is not able to ping instance B. What are two possible reasons for this?
Incorrect

A

The security group attached to instance B does not allow inbound ICMP traffic, The NACL on subnet B does not allow outbound ICMP traffic
Explanation
Every route table contains a local route that enables communication within a VPC. This route cannot be modified or deleted, so that eliminates the routing issue. “The NACL on subnet B does not allow outbound ICMP traffic” is one of the correct answers because NACL is stateless - return traffic has to be explicitly allowed by rules. Because we are not allowing outbound ICMP traffic, the ping from instance A never gets a response.

32
Q

Your applications in AWS need to authenticate against LDAP credentials that are in your on-premises data center. You need low latency between the AWS app authenticating and your credentials. How can you achieve this?
Incorrect

A

If you don’t already have a secure tunnel, create a VPN between your on-premises data center and AWS. You can then spin up a secondary LDAP server that replicates from the on-premises LDAP server.

33
Q

For which of the following reasons would you not contact AWS?

A

Request consolidated billing for multiple AWS accounts owned by your company

34
Q

When working with Amazon RDS, by default, AWS is responsible for implementing which two management-related activities?

A

Installing and periodically patching the database software, If automated backups are enabled, creating and maintaining automated database backups with a point-in-time recovery of up to five minutes

35
Q

Assuming you have kept the default settings and have taken manual snapshots, which of the following manual snapshots will be retained?

A

A snapshot of an EBS root volume when the EC2 instance is terminated, A snapshot of an RDS database when the RDS instance is terminated

Explanation

Manual snapshots of RDS databases and EBS volumes persist after instance termination. You cannot snapshot an EC2 instance store volume.

36
Q

What is the result of the following bucket policy? { “Statement”: [ { “Sid”: “Sid2”, “Action”: “s3:”, “Effect”: “Allow”, “Resource”: “arn:aws:s3:::mybucket/.”, “Condition”: { “ArnEquals”: { “s3:prefix”: “finance_” } }, “Principal”: { “AWS”: [ “*” ] } } ] }

A

It will allow all actions only against objects with the prefix finance_

37
Q

Best practice is to pre-warm:

A

EBS volumes newly created from snapshots. Pre-warm by accessing each block once.

Explanation

The read and write back method is used to pre-warm EBS volumes created from a snapshot. Fresh EBS volumes do require read or write back during pre-warming. Elastic load balancers should be pre-warmed prior to an anticipated large spike in traffic, but this is done by contacting AWS to provision additional back-end resources, not by a read and write back command.

38
Q

You are managing a large magazine application inside of Amazon Web Services. Your company posts an article that gets picked up internationally, causing millions of visitors to hit your application. Such a large increase in traffic causes strain on your DB server which is dynamically servicing the blog content. How might you quickly resolve this issue and make the blog post infinitely scaleable?

A

Create a static HTML page using S3 and use Route 53 to point the DNS to the static S3 bucket.

39
Q

When managing our VPC in an AWS region, we want to give other teams access to create their own instances and modify the security groups inside subnets dedicated to their teams. We have to make sure the development team can NOT do anything in their subnets that could allow their instances to impact production instances in the production subnets. What can we do to separate out our VPC so that instances that the dev team can access can never interfere or interact with the ones within our production?

A

We can create NACLs that restrict which subnets can talk to each other

40
Q

We are preparing for our regularly scheduled security assessment. What two configuration management practices should our organization have implemented?

A

Determine that our remote administrative access is performed securely, Make sure that S3 bucket policies and ACLs correctly implement our security policies

41
Q

Which of the following CloudWatch metrics require a custom monitoring script to populate the metric?

A

Swap Usage, Available Disk Space

42
Q

Which of the following could be a procedure for disaster recovery as it relates to RDS?

A

Create a read replica in a different region. In the event of a failover, promote the read replica as the primary and change the DNS for your application to point to the new primary and then enable Multi AZ.

43
Q

You want to run a web application in which application servers on EC2 instances are in an Auto Scaling group spread across two Availability Zones. After monitoring for six months, we notice that only one of our web servers is needed to handle our minimum load. During our core utilization hours (8:00am-8:00pm Monday-Friday), five to six web servers are needed to handle the minimum load. Four to five days a year, the number of web servers required can go up to 18 servers. What choice would reduce our costs the most while providing the highest availability?

A

Five Reserved Instances (heavy utilization), the rest covered by on-demand instances

Explanation

Different levels of utilization for reserved instances (heavy, medium, light) have been phased out. This might still show up on the exam, however, so it’s a good idea to be familiar with the concept.

44
Q

Your supervisor is concerned about losing read access to your RDS database in the unlikely event of an AWS regional failure. You design a plan to create a read replica of the database in another region, but your supervisor sees a problem with this plan. What problem does he see?

A

Your database is using PostgreSQL, which does not support cross-region replication.

Explanation

Note: PostgreSQL on RDS now supports cross-region read replicas since June 2016, but please keep in mind that the exam probably won’t be updated for a while. Read replicas are supported in different regions than the source RDS database, but only when using MySQL 5.6. You cannot synchronous replication between the two regions because, while latency is an important metric, read replicas use asynchronous replication, not synchronous replication. You cannot VPC peer between VPCs in different regions and because replication does not require VPC peering.

45
Q

Your supervisor sends you a list of several processes in your AWS environment that she would like you to automate via scripts. Which of the following list items should you set as the highest priority?

A

Implement CloudWatch alerts for EC2 instances’ memory usage

46
Q

You patch the operating system on an EC2 instance and issue a reboot command from inside the instance’s OS. After disconnecting from the instance and waiting several minutes, you notice that you still cannot successfully ping the instance’s public IP address. What is the most likely reason for this?

A

Changes made during OS patching caused a problem with the instance’s NIC driver.

47
Q

We have a two-tiered application with the following components. We have an ELB, three web and application servers on EC2, and one MySQL RDS database. When our load grows, the database queries take longer and slow down the overall response time for the user request. Which three options would we choose to speed up performance?

A

We can shard the database and distribute the load between shards, We can create an RDS read-replica and redirect half of the database read requests to it, We can cache our database queries with ElastiCache

48
Q

Assuming you have kept the default settings and are using the automated backup services provided by AWS, which of the following will retain automated backups?

A

None of these

Explanation

Automated backups of RDS databases are deleted when an RDS instance is terminated. Only manual snapshots of an RDS database remain after the RDS instance is terminated. The same goes for EBS volumes, but on top of that, AWS does not offer an automated backup solution for volumes attached to EC2 instances.

49
Q

A colleague noticed that CloudWatch was reporting that there has not been any connections to one of your MySQL databases for several months. You decided to terminate the database. Two months after the database was terminated, you get a phone call from a very upset user who needs information from that database to run end-of-year reports. You are hopeful that you can restore the database to full functionality from a snapshot, but your database administrator is not quite as confident. Why?

A

The MySQL database was not using a transactional database engine such as InnoDB and may not restore properly.

50
Q

Your applications in AWS need to authenticate against LDAP credentials that are in your on-premises data center. You need low latency between the AWS app authenticating and your credentials. How can you achieve this?

A

If you don’t already have a secure tunnel, create a VPN between your on-premises data center and AWS. You can then spin up a secondary LDAP server that replicates from the on-premises LDAP server.

51
Q

You can configure an internal elastic load balancer to load balance internal traffic.

A

true

52
Q

You run a stateless web application with the following components: an Elastic Load Balancer, three Web/Application servers on EC2, and a MySQL RDS database with 5000 Provisioned IOPS. Average response time for users is increasing. Looking at CloudWatch, you observe 95% CPU usage on the Web/Application servers and 20% CPU usage on the database. The average number of database disk operations varies between 2000 and 2500. How would you improve performance? (Choose Two)

A

X Increase the number of open TCP connections allowed per web/application EC2 instance
– Use Auto Scaling to add additional Web/Application servers based on CPU load threshold
X Use Auto Scaling to add additional Web/Application servers based on a memory usage threshold
– Choose a different EC2 instance type for the Web/Application servers with a more appropriate CPU/Memory ratio

53
Q

You have enabled a CloudWatch metric on your Memcached ElastiCache cluster. Your alarm is triggered due to an increased amount of evictions. How might you go about solving the increased eviction errors from the ElastiCache cluster? (Choose Two)

A

X Reboot your MemCache cluster
– Add a node to the cluster
– Increase the node size
X Increase the provisioned IOPS on the ElastiCache Node

54
Q

You have decided to extend your on-site data center to Amazon Web Services by creating a VPC. You already have multiple DNS servers on-premises. You are using these DNS servers to host DNS records for your internal applications. You have a corporate security network policy that says that a DNS name for an internal application can only be resolved internally and never publicly over the internet. Your existing on-premises data center is already connected to your VPC using IPSec VPN.
You are deploying new applications within your AWS service that need to resolve these new applications by name. How might you set up the scalable DNS architecture?

A

X Created a new Route 53 hosted zone and forward your internal DNS queries out to the internet.
X Using Route 53 hosted zones, you can use all internal domain names’ A record sets.
X Create secondary DNS servers on a Linux server and replicate from primary DNS servers on your on-premises

Create a DHCP option set, add your on-prem DNS servers to it, and replace the option set on your VPC with the newly-created option set.

55
Q

Which one of the below setups would need a custom CloudWatch metric in order to be able to monitor it?

A

X Our disk usage activity of an ELB volume attached to our EC2 instance
Disk usage percentage of an Elastic Block Store volume
X Our CPU utilization of an EC2 instance
X The disk full percentage of our ELB volume

56
Q

You have enabled a CloudWatch metric on your Redis ElastiCache cluster. Your alarm is triggered due to an increased amount of evictions. How might you go about solving the increased eviction errors from the ElastiCache cluster?

A

Add a node to the cluster
–Increase the size of your node
If you exceed your chosen threshold, scale your cache cluster out and add read replicas
Reboot your node

57
Q

You are running an EC2 instance serving a website with an SSL certificate. Your CPU utilization is constantly high. How might you resolve this issue?

A

Offload the SSL cert to AWS ElastiCache
Switch from Apache web server to Nginx for better SSL performance
Increase the instance size to have more CPU power
– Offload the SSL cert from the EC2 instance and configure it on the Elastic Load Balancer

58
Q

For which of the following reasons would you not contact AWS?

A

Request consolidated billing for multiple AWS accounts owned by your company

59
Q

Your RDS instance is consistently maxed out on its resource utilization. What are multiple ways to solve this issue?

A

Fire up an ElastiCache cluster in front of your RDS instance., Increase RDS instance size., Offload read-only activity to a read replica if the application is read-intensive.

60
Q

What sort of host might you set up in your AWS environment that can be used as a way to “hop” into your environment to gain access to secure servers within a private subnet?

A

Bastion host

61
Q

If you configure a VPC with an Internet gateway that has a private and a public subnet, with each subnet in a different Availability Zone. The VPC also has a dual-tunnel VPN between the Virtual Private Gateway and the router in the private data center. You want to make sure that you do not have a potential single point of failure in this design. What could you do to make sure we achieve this above environment?

A

You set up a secondary router in your private data center to establish another dual-tunnel VPN connection with your Virtual Private Gateway.
You create and then attach a second Virtual Private Gateway, providing redundant VPN connectivity .
You create another Internet Gateway to provide redundant Internet connectivity.
There is no single point of failure with this architecture. Don’t change it.

62
Q

If you configure a VPC with an Internet gateway that has a private and a public subnet, with each subnet in a different Availability Zone. The VPC also has a dual-tunnel VPN between the Virtual Private Gateway and the router in the private data center. You want to make sure that you do not have a potential single point of failure in this design. What could you do to make sure we achieve this above environment?

A

–You set up a secondary router in your private data center to establish another dual-tunnel VPN connection with your Virtual Private Gateway.
You create and then attach a second Virtual Private Gateway, providing redundant VPN connectivity .
You create another Internet Gateway to provide redundant Internet connectivity.
There is no single point of failure with this architecture. Don’t change it.

63
Q

You maintain an application on AWS to provide development and test platforms for your developers. Currently, both environments consist of an m1.small EC2 instance. Your developers notice performance degradation as they increase network load in the test environment. How would you mitigate these performance issues in the test environment?

A

Upgrade the m1.small to a larger instance type

64
Q

Which of the below mentioned command helps the system admin to add new zones to the existing ELB?

A

elb enable-availability-zones-for-load-balancer

65
Q

An organization has setup Auto Scaling with ELB. Due to some manual error, one of the instances got rebooted. Thus, it failed the Auto Scaling health check. Auto Scaling has marked it for replacement. How can the system admin ensure that the instance does not get terminated?

A

Change the health of the instance to healthy using the Auto Scaling commands
The command used here would be set-instance-health

66
Q

When an EC2 instance is backed by an S3-based AMI is terminated, what happens to the data on the root volume?

A

The root volume will always be deleted. Always remember to create additional EBS volumes , store your data and created snapshots regularly for backup.

67
Q

A user has received a message from the support team that an issue occurred 1 week back between 3 AM to 4 AM and the EC2 server was not reachable. The user is checking the CloudWatch metrics of that instance. How can the user find the data easily using the CloudWatch console?

A

The user can find the data by giving the exact values in the Absolute tab under CloudWatch metrics

68
Q

CloudWatch metrics are regional.
we can’t add SNMP traps to DynamoDB since it is a managed service.
we can’t add agents to DynamoDB since it is a managed service.

A

CloudWatch allows publishing custom metrics with put-metric-data CLI command

Data can also be aggregated before being published to CloudWatch
Aggregating data minimizes the number of calls reducing it to a single call per minute with the statistic set of data
Statistics include Sum, Average, Minimum, Maximum, Data Sample