-
Dear All,
Good morning, I am Joseph John, I am student and trying to study for the proffesional exam, so this forum post and replying, not sure my ansers are correct, I am posting it here, correct me If I am wrong
thanks
Joseph John
QUESTION 1:
I short listed
• Modify the RDS Instance’s storage type to Provisioned IOPS (io1) and provision maximum IOPS
• Modify the DB instance to be a multi-AZ deployment
out of which the correct answer which I can select will be
“• Modify the RDS Instance’s storage type to Provisioned IOPS (io1) and provision maximum IOPS”
Because in time of peak usage it shows spike, that is read problem, so I am selecting to Modify the storage type
——
QUESTION 2:
At first glance I short listed
” • Create a flow log for this VPC and publish it to an Amazon S3 bucket. Create an external table in Amazon Athena to query the log files and connect the database from Amazon QuickSight to visualize the data.
• Use Amazon Kinesis Data Streams to capture the log files from Amazon CloudWatch. Use Kinesis Data Firehose to push the log files to Amazon S3. Create an external table in Amazon Athena to query the log files, and connect to Amazon Athena from Amazon QuickSight to visualize the data.
“
my answer choice is “Create a flow log for this VPC and publish it to an Amazon S3 bucket. Create an external table in Amazon Athena to query the log files and connect the database from Amazon QuickSight to visualize the data.”
Reason is “Athena” can do SQL query and “QuickSight” can visulize the data
Why Kinesis data streams option is not a answer, my thought are No need to use Kinesis Data Streams to capture the logs from Amazon cloudwatch to S3, cloudwatch logs data to S3, do not need Kinessis data stream to do the jon
———-
QUESTION3
• Create an Amazon CloudFront distribution and set the Elastic Load Balancer as the origin. Enable AWS Shield Standard to mitigate the attacks.
The above option would be the quickest way to mitigate the attacks
———–
Question 4
Here I am not sure about my choice of answer, I am selecting
“• In each development account, create a budget using AWS Budgets. When the forecasted budget reaches 100% of the monthly budget, publish to an SNS topic. Subscribe an AWS Lambda function to the topic that creates a new SCP that denies launching any new infrastructure.
“
