Course Hero Logo

A create a network load balancer with an interface in

Course Hero uses AI to attempt to automatically extract content from documents to surface to you and others so you can study better, e.g., in search results, to enrich docs, and more. This preview shows page 81 - 83 out of 97 pages.

A. Create a Network Load Balancer with an interface in each subnet, and assign a static IP address to each subnet.E. Switch thetwo existing EC2 instances for an Auto Scaling group, and register them with the Network Load Balancer.
A company is storing application data in Amazon S3 bucketsacross multiple AWS regions. Company policy requires thatencryption keys be generated at the company headquarters,but the encryption keys may be stored in AWS aftergeneration. The Solutions Architect plans to configure cross-region replication.Which solution will encrypt the data wholerequiring the LEAST amount of operational overhead?A.Configure the applications to write to an S3 bucket usingclient-side encryptionB. Configure S3 buckets to encryptusing AES-256C. Configure S3 object encryption using AWSCLI with Server-Side Encryption with AWS KMS-ManagedKeys (SSE-KMS)D. Configure S3 buckets to use Server-SideEncryption with AWS KMS-Managed Keys (SSE-KMS) withimported key material in both regionsD. Configure S3 buckets to use Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS) with imported key materialin both regionsA Solutions Architect must design a solution that encryptsdata in Amazon S3. Corporate policy mandates encryptionkeys be generated and managed on premises.Which solutionshould the Architect use to meet the security requirements?A. AWS CloudHSMB. SSE-KMS: Server-side encryption withAWS KMS managed keysC. SSE-S3: Server-side encryptionwith Amazon-managed master keyD. SSE-C: Server-sideencryption with customer-provided encryption keysD. SSE-C: Server-side encryption with customer-provided encryption keysA Solutions Architect is considering possible options forimproving the security of the data on an Amazon EBS volumeattached to an Amazon EC2 instance.Which solution willimprove the security of the data?A. Use AWS KMS to encryptthe EBS volumeB. Create an IAM policy that restricts readand write access to the volumeC. Migrate the sensitive datato an instance store volumeD. Use Amazon single sign-on tocontrol login access to the EC2 instanceA. Use AWS KMS to encrypt the EBS volumeA Solutions Architect designed a system based on AmazonKinesis Data Streams. After the workflow was put intoproduction, the company noticed it performed slowly andidentified Kinesis Data Streams as the problem. One of thestreams has a total of 10 Mb/s throughput.What should theSolutions Architect recommend to improve performance?A.Use AWS Lambda to preprocess the data and transform therecords into a simpler format, such as CSV.B. Run theMergeShard command to reduce the number of shards thatthe consumer can more easily process.C. Change theworkflow to use Amazon Kinesis Data Firehose to gain a

Upload your study docs or become a

Course Hero member to access this document

Upload your study docs or become a

Course Hero member to access this document

End of preview. Want to read all 97 pages?

Upload your study docs or become a

Course Hero member to access this document

Term
Fall
Professor
NoProfessor
Tags
Amazon Web Services, Amazon Elastic Compute Cloud

Newly uploaded documents

Show More

Newly uploaded documents

Show More

  • Left Quote Icon

    Student Picture

  • Left Quote Icon

    Student Picture

  • Left Quote Icon

    Student Picture