You need to set up an Amazon Elastic Compute Cloud (EC2) instance for an application that requires the lowest latency and the highest packet-per-second network performance. The application will talk to other servers in a peered VPC.
Which two of the following components should be part of the design? (Select two.)

1. A. Select an instance with support for single root I/O virtualization.
2. B. Select an instance that has support for multiple ENIs.
3. C. Ensure that the instance supports jumbo frames and set 9001 MTU.
4. D. Select an instance with Amazon Elastic Block Store (EBS)-optimization.
5. E. Ensure that proper OS drivers are installed.

Correct Answer: AE
References: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking.html

A network engineer deploys an application in a private subnet in a VPC that connects to many external video feed providers using RTMP over the internet. A NAT gateway has been deployed in a public subnet and is working as expected. From the Amazon EC2 instance, the application is able to connect to all feed providers except one, which hangs when connecting. Manually testing a
connection from an Amazon EC2 instance in the public subnet to the problem feed indicates that the feed works as expected.
What is causing this issue?

1. A. The NAT gateway does not support fragmented packets.
2. B. The internet gateway only supports an MTU of 1500 bytes.
3. C. An Amazon EC2 instance expects to communicate with an MTU of 9001.
4. D. The security group on the instances does not allow PMTUD.

Correct Answer: A

An organization runs a consumer-facing website on AWS. The Amazon EC2-based web fleet is load balanced using the AWS Application Load Balancer, Amazon Route 53 is used to provide the public DNS services.
The following URLs need to server content to end users: test.example.com
web.example.com example.com
Based on this information, what combination of services must be used to meet the requirement? (Select two.)

1. A. Path condition in ALB listener to route example.com to appropriate target groups.
2. B. Host condition in ALB listener to route *.example.com to appropriate target groups.
3. C. Host condition a ALB listener to route example.com to appropriate target groups.
4. D. Path condition in ALB listener to route *.example.com to appropriate target groups.
5. E. Host condition in ALB listener to route $$$$.example.com to appropriate target groups.

Correct Answer: BC
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-listeners.html#rule-condition https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-listeners.html

A team implements a highly available solution using Amazon AppStream 2.0. The AppStream 2.0 fleet needs to communicate with resources both in an existing VPC and on-premises. The VPC is connected to the on-premises environment using an AWS Direct Connect private virtual interface.
What implementation enables on-premises users to connect to AppStream and existing VPC resources?

1. A. Deploy two subnets into the existing VP
2. B. Add a public virtual interface to the Direct Connect connection for users to access the AppStream endpoint
3. C. Deploy two subnets into the existing VP
4. D. Add a private virtual interface on the Direct Connect connection for users to access the AppStream endpoint.
5. E. Deploy a new VPC with two subnet
6. F. Create a VPC peering connection between the two VPCs for users to access the AppStream endpoint.
7. G. Deploy one subnet into the existing VP
8. H. Add a private virtual interface on the Direct Connect connection for users to access the AppStream endpoint.

Correct Answer: B

A company wants to conduct a proof of concept for an SAP HANA application with a hey objective to automate the provisioning of infrastructure and the application. The company operates a hybrid cloud infrastructure with AWS Direct Connect between its data center and VPC. Security policy dictates that all traffic from AWS be routed through on-premises data center firewalls. Security policy also prohibits the use of a VPC internet gateway for internet access The company enforces use of a forward proxy server for all outbound network traffic All resources inside the VPC are able to reach on-premises servers.
All Amazon EC2 Linux instances require package updates over the internet. However, the updates are failing and sending errors.
What would cause these errors?

1. A. Inbound security groups are configured incorrectly on the EC2 instances running in the VPC.
2. B. The VPC route table does not have entries for the proxy server in the data center
3. C. The EC2 instances are not configured to use the proxy running in the data center for traffic on TCP port 80.
4. D. The data center firewall is blocking all traffic sent from the VPC CIDR range destined for 0.0.0.0/0.

Correct Answer: B