每天半小时搞定 AoAWS (七)

Architecting on AWS 学习笔记系列文章导航页面

---

26.While reviewing the Auto Scaling events for your application, you notice that your application is scaling up and down multiple times in the same hour.
What design choice could you make to optimize costs while preserving elasticity? Choose 2 answers from the options given below.
A. Modify the Auto Scaling group termination policy to terminate the older instance first.
B. Modify the Auto Scaling group termination policy to terminate the newest instance first.
C. Modify the Auto Scaling group cool down timers.
D. Modify the Auto Scaling group to use Scheduled Scaling actions.
E. Modify the CloudWatch alarm period that triggers your Auto Scaling scale down policy

Note:
请参见实例扩展冷却时间: https://docs.aws.amazon.com/autoscaling/ec2/userguide/Cooldown.html

---

27.A company hosts a popular web application that connects to an Amazon RDS MySQL DB instance running in a default VPC private subnet created with default ACL settings.
The web servers must be accessible only to customers on an SSL connection and the database must only be accessible to web servers in a public subnet. Which solution meets these requirements without impacting other running applications? Select 2 answers from the options given below.
A. Create a network ACL on the Web Server’s subnets, allow HTTPS port 443 inbound and specify the source as 0.0.0.0/0
B. Create a Web Server security group that allows HTTPS port 443 inbound traffic from anywhere(0.0.0.0/0) and apply it to the Web Servers.
C. Create a DB Server security group that allows MySQL port 3306 inbound and specify the source as the Web Server security group. Create a DB Server security group that allows MySQL port 3306 inbound and specify the soucre as the Web Server security group.
D. reate a network ACL on the DB subnet, allow MySQL port 3306 inbound for Web Servers and deny all outbound traffic.
E. Create a DB Server security groups that allows HTTPS port 443 inbound and specify the soucr e as a Web Server security group.

Note:
https://www.quora.com/What-is-the-difference-between-security-groups-and-the-network-access-control-list-in-AWS

---

28.An application reads and writes objects to an S3 bucket.
When the application is fully deployed, the read/write traffic is very high. How should the architect maximize the Amazon S3 performance?
A. Use as many S3 prefixes as you need in parallel to achieve the required throughput.
B. Use the STANDARD_IA storage class.
C. Prefix each object name with a hex hash key along with the current data.
D. Enable versioning on the S3 bucket.

---