Free AWS-CERTIFIED-SOLUTIONS-ARCHITECT-ASSOCIATE-SAA-C03 Amazon AWS-CERTIFIED-SOLUTIONS-ARCHITECT-ASSOCIATE-SAA-C03 Practice Test Question - Page 8

Question 22 (Topic 1)

A company is launching an application on AWS. The application uses an Application Load Balancer (ALB) to direct traffic to at least two Amazon EC2 instances in a single target group. The instances are in an Auto Scaling group for each environment. The company requires a development environment and a production environment. The production environment will have periods of high traffic. Which solution will configure the development environment MOST cost-effectively?

Select an option, then click Submit answer.

○ Reconfigure the target group in the development environment to have only one EC2 instance as a target.
○ Change the ALB balancing algorithm to least outstanding requests.
○ Reduce the size of the EC2 instances in both environments.
○ Reduce the maximum number of EC2 instances in the development environment’s Auto Scaling group.

Reference / correct answer:

Reduce the maximum number of EC2 instances in the development environment’s Auto Scaling group.

Most accepted answer: D. Reduce the maximum number of EC2 instances in the development environment’s Auto Scaling group.

Community votes: A=5, D=9

Selected Answer: D D. Reduce the maximum number of EC2 instances in the development environment’s Auto Scaling group This option will configure the development environment in the most cost-effective way as it reduces the number of instances running in the development environment and therefore reduces the cost of running the application. The development environment typically requires less resources than the production environment, and it is unlikely that the development environment will have periods of high traffic that would require a large number of instances. By reducing the maximum number of instances in the development environment's Auto Scaling group, the company can save on costs while still maintaining a functional development environment. upvoted 20 times JayBee65 3 years, 6 months ago No, it will not reduce the number of instances being used, since a minimum of 2 will be used at all times. upvoted 10 times pentium75 2 years, 7 months ago But it will keep the number of instances at two, while the production environment has "AT LEAST two". upvoted 5 times ... ...

No, it will not reduce the number of instances being used, since a minimum of 2 will be used at all times. upvoted 10 times pentium75 2 years, 7 months ago But it will keep the number of instances at two, while the production environment has "AT LEAST two". upvoted 5 times ...

But it will keep the number of instances at two, while the production environment has "AT LEAST two". upvoted 5 times

Selected Answer: D A modifies only the ALB target group (= directs traffic only to one node), but does not affect the number of nodes (and the cost) B balances load between nodes but does not affect the cost C impacts the prod environment so that would be unable to handle its "periods of high traffic" D makes sure that the dev environment will not scale to more than 2 instances, as does the prod environment upvoted 10 times

Selected Answer: A you cannot get cheaper than one, and D says to reduce the maximum and does not mention the minimum. upvoted 1 times

Question 23 (Topic 1)

A company runs a web application on Amazon EC2 instances in multiple Availability Zones. The EC2 instances are in private subnets. A solutions architect implements an internet-facing Application Load Balancer (ALB) and specifies the EC2 instances as the target group. However, the internet traffic is not reaching the EC2 instances. How should the solutions architect reconfigure the architecture to resolve this issue?

Select an option, then click Submit answer.

○ Replace the ALB with a Network Load Balancer. Configure a NAT gateway in a public subnet to allow internet traffic.
○ Move the EC2 instances to public subnets. Add a rule to the EC2 instances’ security groups to allow outbound traffic to 0.0.0.0/0.
○ Update the route tables for the EC2 instances’ subnets to send 0.0.0.0/0 traffic through the internet gateway route. Add a rule to the EC2 instances’ security groups to allow outbound traffic to 0.0.0.0/0.
○ Create public subnets in each Availability Zone. Associate the public subnets with the ALB. Update the route tables for the public subnets with a route to the private subnets.

Reference / correct answer:

Create public subnets in each Availability Zone. Associate the public subnets with the ALB. Update the route tables for the public subnets with a route to the private subnets.

Most accepted answer: D. Create public subnets in each Availability Zone. Associate the public subnets with the ALB. Update the route tables for the public subnets with a route to the private subnets.

Community votes: A=1, D=11

I think either the question or the answers are not formulated correctly because of this document: https://docs.aws.amazon.com/prescriptive-guidance/latest/load-balancer-stickiness/subnets-routing.html A - Might be possible but it's quite impractical B - Not needed as the setup described should work as is provided the SGs of the EC2 instances accept traffic from the ALB C - Update the route tables for the EC2 instances’ subnets to send 0.0.0.0/0 traffic through the internet gateway route - not needed as the EC2 instances would receive the traffic from the ALB ENIs. Add a rule to the EC2 instances’ security groups to allow outbound traffic to 0.0.0.0/0 - the default behaviour of the SG is to allow outbound traffic only. D - Create public subnets in each Availability Zone. Associate the public subnets with the ALB - if it's a internet facing ALB these should already be in place. Update the route tables for the public subnets with a route to the private subnets - no need as the local prefix entry in the route tables would take care of this point I'm 110% sure the question or answers or both are wrong. Prove me wrong! :) upvoted 22 times UnluckyDucky 2 years, 10 months ago Completely agreed, I was looking for an option to allow HTTPS traffic on port 443 from the ALB to the EC2 instance's security group. Either the question or the answers are wrong. upvoted 8 times ...

Completely agreed, I was looking for an option to allow HTTPS traffic on port 443 from the ALB to the EC2 instance's security group. Either the question or the answers are wrong. upvoted 8 times

Selected Answer: D I change my answer to 'D' because of following link: https://aws.amazon.com/premiumsupport/knowledge-center/public-load-balancer-private-ec2/ upvoted 15 times

Can a EC2 in the private subnet sends traffic to the internet through ELB without using NAT gateway/instance? if it's only about responses to requests coming through the ELB then no, you don't need NAT. If on the other hand you expect that your instances will need to initiate connections as oppose to just sending responses to the requests then yes, you will have to use NAT. The key point is that response to a request is not a new connection and will be sent to where it came from, i.e. to the ELB. https://serverfault.com/questions/986447/can-a-ec2-in-the-private-subnet-sends-traffic-to-the-internet-through-elb-withou upvoted 3 times

D looks the best but still it must have a internet gateway and once it has internet gateway we must add the route table for private subnet to talk to the public subnet so by using the it should be able to access. I don't think lb can act like internet gateway upvoted 2 times

Question 24 (Topic 1)

A solutions architect needs to design a system to store client case files. The files are core company assets and are important. The number of files will grow over time. The files must be simultaneously accessible from multiple application servers that run on Amazon EC2 instances. The solution must have built-in redundancy. Which solution meets these requirements?

Select an option, then click Submit answer.

○ Amazon Elastic File System (Amazon EFS)
○ Amazon Elastic Block Store (Amazon EBS)
○ Amazon S3 Glacier Deep Archive
○ AWS Backup

Free AWS-CERTIFIED-SOLUTIONS-ARCHITECT-ASSOCIATE-SAA-C03 – Amazon AWS-CERTIFIED-SOLUTIONS-ARCHITECT-ASSOCIATE-SAA-C03 Practice Test Question