AWS Certified Solutions Architect Study Guide. David Higby Clinton

are IAM roles commonly used to ensure secure resource access in relation to EC2 instances? (Choose two.)A role can assign processes running on the EC2 instance itself permission to access other AWS resources.A user can be given permission to authenticate as a role and access all associated resources.A role can be associated with individual instance‐based processes (Linux instances only), giving them permission to access other AWS resources.A role can give users and resources permission to access the EC2 instance.

      15 You have an instance running within a private subnet that needs external network access to receive software updates and patches. Which of the following can securely provide that access from a public subnet within the same VPC? (Choose two.)Internet gatewayNAT instanceVirtual private gatewayNAT gatewayVPN

      16 What do you have to do to securely authenticate to the GUI console of a Windows EC2 session?Use the private key of your key pair to initiate an SSH tunnel session.Use the public key of your key pair to initiate an SSH tunnel session.Use the public key of your key pair to retrieve the password you'll use to log in.Use the private key of your key pair to retrieve the password you'll use to log in.

      17 Your application deployment includes multiple EC2 instances that need low‐latency connections to each other. Which of the following AWS tools will allow you to locate EC2 instances closer to each other to reduce network latency?Load balancingPlacement groupsAWS Systems ManagerAWS Fargate

      18 To save configuration time and money, you want your application to run only when network events trigger it but shut down immediately after. Which of the following will do that for you?AWS LambdaAWS Elastic BeanstalkAmazon Elastic Container Service (ECS)Auto Scaling

      19 Which of the following will allow you to quickly copy a virtual machine image from your local infrastructure to your AWS VPC?AWS Simple Storage Service (S3)AWS SnowballVM Import/ExportAWS Direct Connect

      20 You've configured an EC2 Auto Scaling group to use a launch configuration to provision and install an application on several instances. You now need to reconfigure Auto Scaling to install an additional application on new instances. Which of the following should you do?Modify the launch configuration.Create a launch template and configure the Auto Scaling group to use it.Modify the launch template.Modify the CloudFormation template.

      21 You create an Auto Scaling group with a minimum group size of 3, a maximum group size of 10, and a desired capacity of 5. You then manually terminate two instances in the group. Which of the following will Auto Scaling do?Create two new instancesReduce the desired capacity to 3NothingIncrement the minimum group size to 5

      22 You're running an application that receives a spike in traffic on the first day of every month. You want to configure Auto Scaling to add more instances before the spike begins and then add additional instances in proportion to the CPU utilization of each instance. Which of the following should you implement? (Choose all that apply.)Target tracking policiesScheduled actionsStep scaling policiesSimple scaling policiesLoad balancing

      23 As part of your new data backup protocols, you need to manually take EBS snapshots of several hundred volumes. Which type of Systems Manager document enables you to do this?CommandAutomationPolicyManual