(Which solution is used to protect a server from Layer 7 attacks?)
AWS WAF (Web Application Firewall) is used to protect a server from Layer 7 (application layer) attacks, such as SQL injection or cross-site scripting, by filtering HTTP/HTTPS traffic based on defined rules. The WGU Cloud Deployment and Operations Study Guide (Section 6.2, AWS WAF) states, 'WAF protects web applications at Layer 7 by inspecting and blocking malicious requests, such as those involving SQL injection or XSS, when integrated with ALB or CloudFront.' Shield protects against DDoS (Layer 3/4), CloudWatch monitors metrics, and KMS key rotation manages encryption, none of which address Layer 7 attacks.
(An administrator plans to deploy a database to AWS that supports the following: multiple Availability Zones, a standby database instance that provides failover support, a database instance that allows only read-only connections. Which two database solutions should the administrator use? Choose 2 answers.)
To meet the requirements, the administrator should use an Amazon RDS Multi-AZ DB instance for multiple Availability Zones and failover support, and an Amazon Aurora DB instance with Aurora Replica for a read-only connection. The RDS Multi-AZ configuration automatically provisions a standby instance in a different AZ for failover, while Aurora Replicas provide read-only instances for scaling read traffic. The WGU Cloud Deployment and Operations Study Guide (Section 7.1, RDS and Aurora) states, 'RDS Multi-AZ deploys a standby instance across AZs for failover, and Aurora Replicas are read-only instances that enhance performance by offloading read traffic from the primary instance.' Options A and D are incorrect as multi-master replication and Multi-AZ clusters do not align with the read-only requirement.
(What is the role of a patch baseline in Patch Manager?)
A patch baseline in Patch Manager defines the patches that should and should not be installed on EC2 instances, specifying approval rules for security updates, other updates, and exclusions. This ensures controlled and compliant patching. The WGU Cloud Deployment and Operations Study Guide (Section 5.2, Patch Manager) states, 'A patch baseline specifies which patches are approved for installation and which are excluded, allowing customization of patch deployment (e.g., approving only critical security updates).' Options A, B, and D misrepresent the baseline's role, as it does not auto-install, assign IAM roles, or notify Config directly.
(An administrator deploys an EC2 instance with the public IP address 54.18.127.233 into a newly created VPC in us-west-2. The EC2 instance must be accessible via ec2-public-54.18.127.233.us-west-2.compute.amazonaws.com from the internet. Which solution should be used?)
Comprehensive and Detailed Explanation From Exact Extract:
To make the EC2 instance accessible via a public DNS hostname like ec2-public-54.18.127.233.us-west-2.compute.amazonaws.com, the administrator must set the VPC attribute enableDnsHostnames to true. This enables the automatic assignment of public DNS hostnames to instances with public IP addresses in the VPC. The WGU Cloud Deployment and Operations Study Guide (Section 3.2, VPC Configuration) states, 'Setting enableDnsHostnames to true in the VPC configuration ensures that EC2 instances with public IPs receive a public DNS hostname (e.g., ec2-public-<ip>.<region>.compute.amazonaws.com), facilitating internet accessibility.' Resource tags, disabling DNS support, and resource-based names do not enable this functionality.</region></ip>
(A company has deployed an application to AWS and a standby instance to its on-premises data center. The on-premises infrastructure is a scaled-down version of the AWS infrastructure. Which routing policy in Route 53 will allow the company to send 75% of the load to AWS and the remaining 25% to its on-premises infrastructure?)
The weighted routing policy in Amazon Route 53 allows the company to distribute traffic with specific percentages, such as 75% to AWS and 25% to the on-premises infrastructure, by assigning weights to each resource record. This enables load balancing across hybrid environments. The WGU Cloud Deployment and Operations Study Guide (Section 3.1, Route 53 Routing Policies) states, 'Weighted routing policy assigns weights to resource record sets (e.g., 75 for AWS, 25 for on-premises), controlling the percentage of traffic directed to each endpoint.' Geolocation, failover, and simple policies do not support percentage-based traffic splitting.
James Rodriguez
22 days agoDennis Harris
1 month agoJennifer Torres
2 months agoLisa Thomas
2 months agoStephanie Morris
3 months agoAngela Morgan
3 months agoEmma Anderson
4 months agoMonica Garcia
4 months agoNathan Wright
5 months agoSteven Jones
5 months agoPatricia Murphy
6 months agoEric Harris
6 months agoAmy Lewis
5 months agoDavid Williams
6 months agoMelissa Gonzalez
5 months agoSharon Robinson
5 months agoFrancene
7 months agoLaticia
7 months agoPaulina
7 months agoEstrella
7 months agoBette
7 months agoDyan
8 months agoVal
8 months agoVincenza
8 months agoDalene
9 months agoTiffiny
9 months agoOren
9 months agoMarget
9 months agoLeonardo
10 months agoShawnna
10 months agoRonnie
10 months agoTamar
10 months agoBette
11 months agoKatie
11 months agoDenny
11 months agoDorthy
11 months ago