Amazon Web Services Updated SOA-C02 Exam Questions and Answers by aria-rose

To prioritize alarm notifications over information notifications in an Amazon SQS environment, creating separate queues for each type of notification is the best approach. This allows the application processing the queues to prioritize fetching messages from the alarm notifications queue first. Option D directly addresses the need for prioritization without complicating the existing infrastructure. This setup is supported by best practices for using Amazon SQS, where using multiple queues to segregate message types is a recommended strategy Amazon SQS Best Practices.

To allow the EC2 instance in the private subnet to establish a secure connection to an external web server, follow these steps:

Modify Security Group:

Add an outbound rule to the security group of the EC2 instance with the following parameters:

Type: HTTPS

Destination: 0.0.0.0/0

This allows outbound HTTPS traffic to the internet.

Step-by-Step Explanation:

Understand the Problem:

There are two applications, one in an on-premises data center and the other on an Amazon EC2 instance.

DNS resolution fails when the on-premises application tries to connect to the EC2 instance.

The goal is to implement DNS resolution between on-premises and AWS resources.

Analyze the Requirements:

Need to resolve the hostname of the EC2 instance from the on-premises network.

Utilize the existing AWS Site-to-Site VPN connection for DNS queries.

Evaluate the Options:

Option A: Set up an Amazon Route 53 inbound resolver endpoint with a forwarding rule for the onprem.private hosted zone.

This allows DNS queries from on-premises to be forwarded to Route 53 for resolution.

The resolver endpoint is associated with the VPC, enabling resolution of AWS resources.

Option B: Set up an Amazon Route 53 inbound resolver endpoint without specifying the forwarding rule.

This option does not address the specific need to resolve onprem.private DNS queries.

Option C: Set up an Amazon Route 53 outbound resolver endpoint.

Outbound resolver endpoints are used for forwarding DNS queries from AWS to on-premises, not vice versa.

Option D: Set up an Amazon Route 53 outbound resolver endpoint without specifying the forwarding rule.

Similar to Option C, this does not meet the requirement of resolving on-premises queries in AWS.

Select the Best Solution:

Option A: Setting up an inbound resolver endpoint with a forwarding rule for onprem.private and associating it with the VPC ensures that DNS queries from on-premises can resolve AWS resources effectively.

References:

Amazon Route 53 Resolver

Integrating AWS and On-Premises Networks with Route 53

Using an Amazon Route 53 inbound resolver endpoint with a forwarding rule ensures that on-premises applications can resolve EC2 instance hostnames effectively.

https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.rolling-version-deploy.html

To maintain full capacity during new deployments in AWS Elastic Beanstalk, you can use the "Immutable" or "Rolling with additional batch" deployment policies.

Immutable Deployment:

This policy ensures that a new set of instances is launched with the new version of the application. The new instances are only promoted to serve traffic if the deployment succeeds. This ensures zero downtime and maintains full capacity during deployment.

Rolling with Additional Batch:

This policy launches a new batch of instances to handle the traffic while the old instances are being updated. This maintains the full capacity during the deployment process, ensuring that the application remains fully operational.

How to Configure Deployment Policies:

Open Elastic Beanstalk Console:

Navigate to the AWS Elastic Beanstalk console at AWS Elastic Beanstalk Console.

Update Environment Configuration:

Select the environment you want to configure.

Go to Configuration and then Rolling updates and deployments.

Choose either Immutable or Rolling with additional batch as the deployment policy.

References:

AWS Elastic Beanstalk Deployment Policies

Managing and Configuring Environments