1 :-

Domain: Design Secure Architectures You have instances hosted in a private subnet in a VPC. There is a need for instances to download updates from the Internet. As an architect, what change would you suggest to the IT Operations team that would also be the most efficient and secure?

2 :-

Domain: Design Resilient Architectures You are planning to launch the AWS ECS container instance. You would like to set the ECS container agent configuration during the ECS container instance initial launch. What should you perform to configure container agent information? 

3 :-

Domain: Design Secure Architectures You are a Security Consultant who wants to prevent the application from DDoS attacks. You have heard about AWS Shield and DDoS attack vectors. Which of the following classes of attacks can be detected using AWS Shield?

4 :-

Domain: Design Cost-Optimized Architectures You need to install a 150 GB volume on an EC2 Instance for a new application. While the data in the volume is used less frequently with small peaks in the morning and evening, which storage type would be the most cost-effective option for the given requirement? 

5 :-

Domain: Design High-Performing Architectures You have a requirement to get a snapshot of the current configuration of resources in your AWS Account. Which service can be used for this purpose? 

6 :-

Domain: Design Secure Architectures You have planned to host a web application on AWS. You create an EC2 Instance in a public subnet that needs to connect to an EC2 Instance that will host an Oracle database. Which steps would ensure a secure setup? (SELECT TWO)

7 :-

Domain: Design High-Performing Architectures It is expected that only certain specified customers can upload images to the S3 bucket for a certain period of time. What would you suggest as an architect to fulfill this requirement?

8 :-

Domain: Design Resilient Architectures An application needs to access resources from another AWS account of another VPC in the same region. Which of the following ensure that the resources can be accessed as required?

9 :-

Domain: Design High-Performing Architectures An application team needs to quickly provision a development environment consisting of a web and database layer. What would be the quickest and most ideal way to get this set up in place?

10 :-

Domain: Design Resilient Architectures You currently have your EC2 instances running in multiple availability zones in an AWS region. You need to create NAT gateways for your private instances to access internet. How would you set up the NAT gateways so that they are highly available?

11 :-

Design Resilient Architectures An application needs to access resources from another AWS account of another VPC in the same region. Which of the following ensure that the resources can be accessed as required? 

12 :-

Domain: Design High-Performing Architectures You have a set of IIS Servers running on EC2 Instances. You want to collect and process the log files generated from these IIS Servers. Which service would be ideal for utilizing the Big Data analytics in this scenario?

13 :-

Domain: Design High-Performing Architectures An IT company has a set of EC2 Instances hosted in a VPC. They are hosted in a private subnet. These instances now need to access resources stored in an S3 bucket. The traffic should not traverse the internet. The addition of which of the following would help to fulfill this requirement? 

14 :-

Domain: Design High-Performing Architectures Which of the following is a limitation of the Elastic Fabric Adapter (EFA)? (Select TWO) 

15 :-

Domain: Design Cost-Optimized Architectures A company is planning to use the AWS ECS service to work with containers in the "us-east-1" region. There is a need for the least amount of administrative overhead while provisioning and managing containers. How could this be achieved? 

16 :-

Domain: Design High-Performing Architectures You are planning to use Auto Scaling groups to maintain the performance of your web application. How would you ensure that the scaling activity has sufficient time to stabilize without executing another scaling action? 

17 :-

Domain: Design Resilient Architectures You need to ensure that the new objects being uploaded to an S3 bucket should be available in another region also, due to the criticality of the data hosted in the S3 bucket. How could you achieve this in the easiest way possible?

18 :-

Domain: Design Resilient Architectures You have an application running on EC2. The operation fails when the application tries to upload a 7 GB file to S3. What could be the reason for failure, and what could be the solution? 

19 :-

Domain: Design Resilient Architectures Which of the following are valid integration sources for API Gateway? (choose 3 options) 

20 :-

Domain: Design Secure Architectures The security policy of an organization requires an application to encrypt data before writing to the disk. Which solution should the organization use to meet this requirement?