SOA-C03 中文考古題練習

Q1. 一個 Amazon EC2 執行個體需要可以從網際網路連線到。該 EC2 執行個體位於具有以下路由表的子網路中。CloudOps Engineer 必須在路由表中新增哪一筆項目才能滿足這項需求？<br><img src="/qimg/soa-c03/question1.jpg" alt="題目圖表" style="max-width:100%;margin-top:8px;border-radius:6px">

An Amazon EC2 instance needs to be reachable from the internet. The EC2 instance is in a subnet with the following route table. Which entry must a CloudOps Engineer add to the route table to meet this requirement?<br><img src="/qimg/soa-c03/question1.jpg" alt="題目圖表" style="max-width:100%;margin-top:8px;border-radius:6px">

Q2. 一位 CloudOps Engineer 在 `VPC` 的私有子網路中啟動了一個 Amazon EC2 執行個體。當該 CloudOps Engineer 從 EC2 執行個體的命令列嘗試執行 `curl` 指令時，無法連線到 `https:www.example.com`。CloudOps Engineer 應該做什麼來解決這個問題？

A CloudOps Engineer launches an Amazon EC2 instance in a private subnet of a `VPC`. When the CloudOps Engineer attempts a `curl` command from the command line of the EC2 instance, the CloudOps Engineer cannot connect to `https:www.example.com`. What should the CloudOps Engineer do to resolve this issue?

Q3. 某公司的公開網站託管在 `us-east-1` 區域的 Amazon S3 儲存貯體，前方架設了 Amazon CloudFront 發佈。該公司希望確保網站受到 DDoS 攻擊的保護。CloudOps Engineer 需要部署一個解決方案，讓公司能夠掌控 DDoS 防護套用的速率限制。哪個解決方案能滿足這些需求？

A company's public website is hosted in an Amazon S3 bucket in the `us-east-1` Region behind an Amazon CloudFront distribution. The company wants to ensure that the website is protected from DDoS attacks. A CloudOps Engineer needs to deploy a solution that gives the company the ability to maintain control over the rate limit at which DDoS protections are applied. Which solution will meet these requirements?