Architecting on AWS Certification Architecting on AWS Certification Networking & Content Delivery 2

Question 1

An architect is designing a multi-tier application and wants to ensure that database instances in the data tier are not directly accessible from the internet. What is the best approach?

Accepted Answer

Place database instances in a private subnet with no route to an Internet Gateway

Answer

Place database instances in a public subnet with strict Security Groups

Answer

Use NACLs to block port 3306 on the Internet Gateway

Answer

Assign database instances Elastic IP addresses and restrict access via IAM

Question 2

A company wants to accelerate the transfer of large files to Amazon S3 from users worldwide. Which feature should be enabled?

Accepted Answer

S3 Transfer Acceleration

Answer

S3 Cross-Region Replication

Answer

CloudFront with S3 origin

Answer

AWS Global Accelerator

Question 3

Which Route 53 routing policy would you use to direct a small percentage of traffic to a new application version for testing while the majority continues to the existing version?

Accepted Answer

Weighted routing

Answer

Latency-based routing

Answer

Failover routing

Answer

Geoproximity routing

Question 4

An application needs to distribute incoming TCP traffic across multiple EC2 instances and requires support for static IP addresses. Which load balancer type should be used?

Accepted Answer

Network Load Balancer (NLB)

Answer

Application Load Balancer (ALB)

Answer

Classic Load Balancer

Answer

Gateway Load Balancer

Question 5

What is the maximum number of route tables that can be associated with a single subnet in a VPC?

Accepted Answer

One

Answer

Two — one main and one custom

Answer

Unlimited

Answer

Four

Question 6

A solutions architect needs to implement DNS failover so that traffic is automatically rerouted to a healthy endpoint when the primary endpoint becomes unavailable. Which Route 53 feature enables this?

Accepted Answer

Health checks with failover routing

Answer

Alias records

Answer

Geolocation routing

Answer

Traffic flow policies

Question 7

Which VPC feature allows two VPCs to route traffic between each other using private IPv4 or IPv6 addresses, as if they were within the same network?

Accepted Answer

VPC Peering

Answer

VPC Endpoint

Answer

AWS Transit Gateway

Answer

Internet Gateway