AWS Solutions Architect Associate(SAA-C02)- Quiz 3

Q1.
A solutions architect is creating a document submission application for a school. The application will use an Amazon S3 bucket for storage. The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available. Users must be able to upload and modify the documents.

Which combination of actions should be taken to meet these requirements? (Select TWO.)

Set read-only permissions on the bucket.

Enable versioning on the bucket.

Enable MFA Delete on the bucket

Encrypt the bucket using AWS SSE-S3

WHY A IS False?	CONCEPT: Read-only permissions on S3	This will also prevent any writing to the bucket which is not desired.
WHY B IS True?	CONCEPT: S3 Versioning	S3 Versioning will retain a copy of each version of the document
WHY C IS True?	CONCEPT: MFA delete	Multi-factor authentication delete (MFA delete) will prevent any accidental deletion as you need to supply a second factor when attempting a delete.
WHY D IS False?	CONCEPT: Encryption	Encryption doesn’t stop you from deleting an object
Short Trick	1."prevent accidental deletion" - indicates towards MFA delete 2." ensure that all versions of the document are available" - clearly indicates S3 versioning
References:	REFERNCED DOCS

Create a VPC peering connection between the VPC and DynamoDB

Create an ENI for the endpoint in each of the subnets of the VPC

Create a gateway endpoint for DynamoDB

Create a route table entry for the endpoint

WHY A IS False?	CONCEPT: VPC Peering	VPC Peering is used to connect two VPC privately using AWS network and Make them behave as if they were in the same network. You cannot create a VPC peering connection between a VPC and a public AWS service as public services are outside of VPCs.
WHY B IS False?	CONCEPT: ENI & Interface Endpoint	ENI is used by an interface endpoint, not a gateway endpoint.
WHY C IS True?	CONCEPT: Gateway endpoint	Amazon DynamoDB and Amazon S3 support gateway endpoints, not interface endpoints. With a gateway endpoint, you create the endpoint in the VPC, attach a policy allowing access to the service
WHY D IS True?	CONCEPT: Route table	Route table is used to define access to the internet and between subnets. You have to specify the route table, to create a route table entry in.
Short Trick	1."API calls do not traverse the internet." - Thing to remember here is if you want API calls to not traverse through the internet, then you have to use VPC EndPoints (Interface endpoint & Gateway endpoints) 2. "API calls to Amazon DynamoDB" - & remember For Amazon S3 and DynamoDB, we use gateway endpoints & we have to configure our route table to point to the endpoint
References:	REFERNCED DOCS

Add an Amazon CloudFront distribution in front of the ALB

Add Amazon Aurora Replicas

Add an AWS Transit Gateway to the Availability Zones

Add an AWS Global Accelerator endpoint

WHY A IS True?	CONCEPT: Amazon CloudFront	On the frontend an Amazon CloudFront distribution can be placed in front of the ALB and this will cache content for better performance and also offloads requests from the backend.
WHY B IS True?	CONCEPT: Amazon Aurora Replicas	The architecture is already highly resilient but the may be subject to performance degradation if there are sudden increases in request rates. To resolve this situation Amazon Aurora Read Replicas can be used to serve read traffic which offloads requests from the main database.
WHY C IS False?	CONCEPT: AWS Transit Gateway	AWS Transit Gateway is used to connect on-premises networks to VPCs.
WHY D IS False?	CONCEPT: AWS Global Accelerator endpoint	AWS Global Accelerator endpointis used for directing users to different instances of the application in different regions based on latency.
Short Trick	1." more resilient to sporadic increases in request rates" - As here DB is Aurora, so we can use Amazon Aurora Read Replicas which is built for same purpose, to serve read traffic which offloads requests from the main database. & On front end, an Amazon CloudFront distribution can be placed in front of the ALB and this will cache content for better performance and also offloads requests from the backend.
References:	REFERNCED DOCS