Your manager has just given you acce

单选题 Your manager has just given you access to multiple VPN connections that someone else has recently set up
Between all your company’s offices. She needs you to make sure that the communication between the VPNs is secure.
Which of the following services would be best for providing a low-cost hub-and-spoke model for primary or backup
Connectivity between these remote offices?

A、 Amazon CloudFront

B、 AWS Direct Connect

C、 AWS CloudHSM

D、 AWS VPN CloudHiub

查看答案

下载APP答题

由4l***jv提供分享举报纠错

相关试题

单选题 A company's legacy application is currently relying on a single-instance Amazon RDS MySQL database without
Encryption. Due to new compliance requirements, all existing and new data in this database must be encrypted.
How should this be accomplished?

A、 Create an Amazon S3 bucket with server-side encryption enabled Move all the data to Amazon S3. Delete the RDS
Instance

B、 Enable RDS Multi-AZ mode with encryption at rest enabled. Perform a failover to the standby instance to delete the
Original Instance

C、 Take a snapshot of the RDS instance. Create an encrypted copy of the snapshot Restore the RDS instance from the
Encrypted snapshot

D、 Create an RDS read replica with encryption at rest enabled. Promote the read replica to master and switch the
Application over to the new master Delete the old RDS instance

查看答案

单选题 A company has an application that calls AWS Lambda functions. A recent code review found database credentials
Stored in the source code. The database credentials need to be removed from the Lambda source code. The credentials
Must then be securely stored and rotated on an ongoing basis to meet security policy requirements
What should a solutions architect recommend to meet these requirements?

A、 Store the password in AWS CloudHSM. Associate the Lambda function with a role that can retrieve the password from
CloudHSM given its key ID

B、 Store the password in AWS Secrets Manager. Associate the Lambda function with a role that can retrieve the
Password from Secrets Manager given its secret ID

C、 Move the database password to an environment variable associated with the Lambda function. Retrieve the password
From the environment variable upon execution

D、 Store the password in AWS Key Management Service(AWS KMS). Associate the Lambda function with a role that can
Retrieve the password from AWS KMS given its key ID

查看答案

单选题 A product team is creating a new application that will store a large amount of data. The data will be analyzed hourly
And modified by multiple Amazon EC2 Linux instances. The application team believes the amount of space needed will
Continue to grow for the next 6 months.
Which set of actions should a solutions architect take to support these needs?

A、 Store the data in an Amazon EBS volume Mount the EBS volume on the application instances

B、 Store the data in an Amazon EFS file system. Mount the file system on the application instances

C、 Store the data in Amazon S3 Glacier. Update the vault policy to allow access to the application instances

D、 Store the data in Amazon S3 Standard-Infrequent Access(S3 Standard-IA) Update the bucket policy to allow access
To the application Instances

查看答案

单选题 A company currently operates a web application backed by an Amazon RDS MySQL database. It has automatedbackups that are run daily and are not encrypted. A security audit requires future backups to be encrypted and theunencrypted backups to be destroyed. The company will make at least one encrypted backup before destroying the oldbackups.What should be done to enable encryption for future backups?

A、 Enable default encryption for the Amazon S3 bucket where backups are stored.

B、 Modify the backup section of the database configuration to toggle the Enable encryption check box

C、 Create a snapshot of the database. Copy it to an encrypted snapshot. Restore the database from the encryptedsnapshot

D、 Enable an encrypted read replica on RDS for MySQL. Promote the encrypted read replica to primary. Remove theoriginal database instance

查看答案

单选题 An application running on AWS uses an Amazon Aurora Multi-AZ deployment for its database. When evaluating
Performance metrics, a solutions architect discovered that the database reads are causing high l/O and adding latency
To the write requests against the database.
What should the solutions architect do to separate the read requests from the write requests?

A、 Enable read-through caching on the Amazon Aurora database.

B、 Update the application to read from the Multi-AZ standby instance

C、 Create a read replica and modify the application to use the appropriate endpoint

D、 Create a second Amazon Aurora database and link it to the primary database as a read replica

查看答案

单选题 1一家公司目前正运行着一个由Amazon RDS MySQL数据库支持的网络应用程序。它有每天运行但未被加密的自动备份。安全审计要求未来的备份要加密,而未加密的备份必须被销毁。公司将会在销毁旧的备份之前创建至少一个加密备份。为了为未来备份加密应该怎么做?

A、允许对存储备份的Amazon S3存储桶进行默认加密

B、修改数据库设置的备份区切换Enab1e加密复选框

C、创建一个数据库快照。将其复制到一个加密快照中。从加密快照中还原数据库

D、在RDS for MySQL上启用加密只读副本。将加密只读副本作为主要内容。移除原始数据库实例

查看答案

单选题 A company serves content to its subscribers across the world using an application running on AWS. The application
Has several Amazon EC2 instances in a private subnet behind an Application Load Balancer(ALB). Due to a recent
Change in copyright restrictions, the chief information officer(CIO)wants to block access for certain countries
Which action will meet these requirements?

A、 Modify the ALB security group to deny incoming traffic from blocked countries

B、 Modify the security group for EC2 instances to deny incoming traffic from blocked countries

C、 Use Amazon CloudFront to serve the application and deny access to blocked countries

D、 Use ALB listener rules to return access denied responses to incoming traffic from blocked countries

查看答案

单选题 A company is planning to use Amazon S3 to store images uploaded by its users. The images must be encrypted atrest in Amazon S3. The company does not want to spend time managing and rotating the keys, but it does want tocontrol who can access those keys.What should a solutions architect use to accomplish this?

A、 Server-Side Encryption with keys stored in an S3 bucket

B、 Server-Side Encryption with Customer-Provided Keys(SSE-C)

C、 Server-Side Encryption with Amazon S3-Managed Keys(SSE-S3)

D、 Server-Side Encryption with AWS KMS-Managed Keys(SSE-KMS)

查看答案