1. Your server less architecture using AWS(Amazon Web Service) API Gateway, AWS(Amazon Web Service) Lambda, and AWS(Amazon Web Service) Dynamo DB experienced a large increase in traffic to a sustained 2000 requests per second, and dramatically increased in failure rates. Your requests, during normal operation, last 500 milliseconds on average. Your Dynamo DB table did not exceed 50% of provisioned throughput, and Table primary keys are designed correctly. What is the most likely issue?
A) You did not request a limit increase on concurrent Lambda function executions.
B) Your API Gateway deployment Is throttling your requests.
C) You used Consistent Read requests on Dynamo DB and are experiencing semaphore lock.
D) Your AWS(Amazon Web Service) API Gateway Deployment is bottlenecking on request .
2. Which of the following tools does not directly support AWS(Amazon Web Service) Ops Works, for monitoring your stacks?
A) AWS Config
B) Amazon Cloud Watch Metrics
C) AWS CloudTrail
D) Amazon CloudWatch Logs
3. You have a code repository that uses Amazon 53 as a data store. During a recent audit of your security controls, some concerns were raised about maintaining the integrity of the data in the Amazon S3 bucket. Another concern was raised around securely deploying code from Amazon S3 to applications running on Amazon EC2 in a virtual private cloud. What are some measures that you can implement to mitigate these concerns? Choose two answers from the options given below?(Select 2answers)
A) Use AWS(Amazon Web Service) Data Pipeline to lifecycle the data in your Amazon 53 bucket to Amazon Glacier on a weekly basis.
B) Add an Amazon S3 bucket policy with a condition statement that requires multi-factor authentication in order to delete objects and enable bucket version ing.
C) Use AWS(Amazon Web Service) Data Pipeline with multi-factor authentication to securely deploy code from the Amazon S3 bucket to your Amazon EC2 instances.
D) Use a configuration management service to deploy AWS(Amazon Web Service) Identity and Access Management user credentials to the Amazon EC2 instances. Use these credentials to securely access the Amazon S3 bucket when deploying code.
E) Create an Amazon Identity and Access Management role with authorization to access the Amazon 53 bucket, and launch all of your application?s Amazon EC2 instances with this role.
F) Add an Amazon S3 bucket policy with a condition statement to allow access only from Amazon EC2 instances with RFC 1918 P addresses and enable bucket versioning.
4. You have an application running on Amazon EC2 in an Auto Scaling group. Instances are being bootstrapped dynamically, and the bootstrapping takes over 15 minutes to complete. You find that instances are reported by Auto Scaling as being In Service before bootstrapping has completed. You are receiving application alarms related to new instances before they have completed bootstrapping, which is causing confusion. You find the cause: your application monitoring tool is polling the Auto Scaling Service API for instances that are In Service, and creating alarms for new previously unknown instances. Which of the following will ensure that new instances are not added to your application monitoring tool before bootstrapping is completed?
A) Tag all instances on launch to identify that they are In a pending state. Change your application monitoring tool to look for this tag before adding new instances, and the use the Amazon API to set the instance state to pending until bootstrapping is complete.
B) Increase the desired number of instances in your Auto Scaling group configuration to reduce the time it takes to bootstrap future instances.
C) Create an Auto Scaling group lifecycle hook to hold the instance In a pending: wait state until your bootstrapping is complete. Once bootstrapping is complete, notify Auto Scaling to complete the lifecycle hook and move the instance into a pending: proceed state.
D) Use the default Amazon Cloud Watch application metrics to monitor your application?s health. Configure an Amazon SNS topic to send these Cloud Watch alarms to the correct recipients.
5. When an Auto Scaling group is running in Amazon Elastic Compute Cloud (EC2), your application rapidly scales up and down in response to load within a 1 0-minute window; however, after the load peaks, you begin to see problems in your configuration management system where previously terminated Amazon EC2 resources are still showing as active. What would be a reliable and efficient way to handle the cleanup of Amazon EC2 resources within your configuration management system? Choose two answers from the options given below(Select 2answers)
A) Configure an Amazon Simple Queue Service (SQS) queue for Auto Scaling actions that has a script that listens for new messages and removes terminated instances from the configuration management system.
B) Write a small script that is run during Amazon EC2 instance shutdown to de-register the resource from the configuration management system.
C) Use your existing configuration management system to control the launching and bootstrapping of instances to reduce the number of moving parts in the automation.
D) Write a script that is run by a daily cron job on an Amazon EC2 instance and that executes API Describe c of the EC2 Auto Scaling group and removes terminated instances from the configuration management system.
Leave a comment