Advance Networking in AWS Online Test

ChickTok is a dating app that runs on EC2 behind an ALB. The EC2 instances run in an EC2 Auto Scaling group across multiple AZ. On every Saturday night, the app becomes atleast 5 times slower. Upon investigation, it is found that the CPU utilization reaches 100% within a matter of seconds instead of being a gradual increment. This is happening due to a batch core dating algorithm update that happens on every Saturday 9PM. 

ChickTok wants a solution that

- Tackles the extra workload
- Avoids downtime

Which of the following would you recommend?

You work as a Solutions Architect for a data analysis firm. The company stores large datasets on Amazon S3, and you've been tasked with setting up an Amazon EC2 instance to process this data. The EC2 instance will fetch data from S3, process it, and then write the results back to a different S3 bucket.

To ensure security, the EC2 instance should not have direct internet access, and it should only be able to communicate with the S3 buckets. You've decided to place the EC2 instance in a VPC private subnet with a CIDR block of 10.0.1.0/24. The associated security group is set to deny all inbound traffic and allow all outbound traffic.

Which additional configuration should you make to enable the EC2 instance to access the S3 buckets while complying with the security requirements?

A: Modify the Network ACL of the subnet to allow outbound connections to the IP range of the S3 service.
B: Assign a Public IP to the EC2 instance and update the security group to allow inbound and outbound traffic to S3.
C: Add a NAT Gateway in the private subnet and update the route tables to direct S3 traffic to the NAT Gateway.
D: Create an S3 VPC Gateway Endpoint and update the route tables for the private subnet to direct S3 traffic to the VPC Endpoint.
E: Create a VPN connection from the VPC to the S3 buckets.

You work as a database manager for a fintech company that uses an AWS RDS PostgreSQL instance. The company abides by stringent data security standards, which require minimal data loss in the event of database failures or accidental data modifications.

Unexpectedly, an operation that updates a significant number of records in a crucial transaction table is mistakenly run. You discover that this operation occurred at 12:45 PM. Your RDS PostgreSQL instance is configured to perform automated backups every day at 1:00 AM, with transaction logs being backed up every 5 minutes. Furthermore, there is a manual DB snapshot taken at 11:00 AM on the same day. 

To restore the database with minimal data loss, considering the sequence and order of log application, which of the following steps should you execute?

A: Restore from the manual DB snapshot at 11:00 AM, then perform a point-in-time recovery to 12:45 PM.
B: Perform a point-in-time recovery to 12:45 PM.
C: Restore from the last automated backup at 1:00 AM, then apply all transaction logs until 12:45 PM.
D: Restore from the manual DB snapshot at 11:00 AM, then apply transaction logs from 11:00 AM to 12:45 PM.
E: Perform a point-in-time recovery to 11:00 AM, then apply transaction logs from 11:00 AM to 12:45 PM.

Flowlife is a tips iOS app that is running on AWS with ~10 million users in the US. Users can post tips about a particular place (restaurants, businesses etc) and other users can search for the tips in the app. Flowlife wants to implement location based alerts on their iOS app. Users will receive relevant tips in proximity to their location. For maximum user engagement and relevant tips, the tips must be in the low minute count. Which of the following solutions is cost effective?

As an AWS Cloud Engineer for a financial institution, you're setting up an EC2 instance in a VPC to host a web application that handles sensitive financial data. The EC2 instance is placed in a private subnet and associated with a security group that only allows inbound HTTPS (port 443) traffic from the internet. You have an Application Load Balancer (ALB) in a public subnet, which forwards incoming traffic to the EC2 instance.

However, during the testing phase, you find that the web application on the EC2 instance is not reachable from the internet, but works fine from within the VPC. 

What could be the reason for this?

A: The security group should allow inbound traffic from the ALB's security group, not the internet.
B: The ALB should be in the private subnet, not the public subnet.
C: EC2 instances hosting sensitive data cannot be reached through an ALB.
D: The ALB and EC2 instance must be in the same subnet.