Your company operates a single AWS account. A common services VPC is deployed to provide shared services, such as network scanning and compliance tools. Each AWS workload uses its own VPC, and each VPC must peer with the common services VPC. You must choose the most efficient and cost effective approach. Which approach should be used to automate the required VPC peering?

AWS CloudTrail integration with Amazon CloudWatch Logs to trigger a Lambda function.

An OpsWorks Chef recipe to execute a command-line peering request.

Cfn-init with AWS CloudFormation to execute a command-line peering request.

An AWS CloudFormation template that includes a peering request.

You manage a web service that is used by client applications deployed in 300 offices worldwide. The web service architecture is an Elastic Load Balancer (ELB) distributing traffic across four application servers deployed in an Auto Scaling group across two Availability Zones.The ELB is configured to use round robin, and sticky sessions are disabled. You have configured the NACLs and security groups to allow port 22 from your bastion host, and port 80 from 0.0.0.0/0. The client configuration is managed by each regional IT team.Upon inspection you find that a large amount of requests from incorrectly configured sites are causing a single application server to degrade. The remainder of the requests are equally distributed across all servers with no negative effects. What should you do to remedy the situation and prevent future occurrences?

Terminate the affected instance and allow Auto Scaling to create a new instance.

Mark the affected instance as degraded in the ELB and raise it with the client application team.

Update the NACL to only allow port 80 to the application servers from the ELB servers.

Update the Security Groups to only allow port 80 to the application servers from the ELB.

Terminate the affected instance and allow Auto Scaling to create a new instance.

You have two autoscaling groups in your VPC. One deploys servers that host the index of your website and another that deploys servers that host the images for your website. What three steps would you take to ensure the right servers are used for the right purpose? (Choose three.)

Create a path-based routing rule to route traffic destined for "/" to target group 1 and "/*.jpg" to target group 2.

Create two target groups and associate them with each autoscaling group.

Configure an Application Load Balancer

Create a path-based routing rule to route traffic destined for "/" to target group 1 and "/*.jpg" to target group 2.

Create two target groups and associate them with each autoscaling group.

Configure a Classic Load Balancer

Configure an Application Load Balancer

A company's developers wrote an AWS Lambda function to modify existing private route tables in response to a security appliance's auto scaling events. The Lambda function will be invoked on lifecycle hooks for an Auto Scaling group and Is configured to run in a VPC The developers are unsure if the following 1AM policy provides sufficient permissions to be used as an execution role for this Lambda function. The developers ask a network engineer to review the permissions.Which set of permissions should the network engineer add lo the policy?

ec2:CreateNetworklntertace ec2 DeleteNetworklnterface, and ec2 ReplaceRoute

lambda. ListFunctions, lambda:GetPolicy, and ec2 Delete RouteTable

ec2:AssociateAddress, ec2 ModifylnstanceAttribute. and ec2 AssociateRouteTable

ec2:CreateNetworklntertace ec2 DeleteNetworklnterface, and ec2 ReplaceRoute

ec2:Describei.ifecydoHooks, ec2 DescribeScalingActivities, and ec2 DescribePolicies

A company hosts several applications in the AWS Cloud across multiple VPCs that are connected to a transit gateway Redundant AWS Direct Connect connections and a Direct Connect gateway provide private network connectivity lo the company's on-premises environment During a maintenance window, the networking team adds eight VPCs The application management team notices that there is no reachability between the newly created VPCs and the on-premises environment Connectivity between all VPCs through the transit gateway is working as expected. Which of the following are possible causes of the connectivity issues? (Choose TWO)

The route tables for the newly created A. VPCs do not have the routes to the on-premises environment that point to the transit gateway attachment

The prefixes that are advertised from the Direct Connect gateway to the on-premises router do not contain the CIDR blocks of the newly created VPCs

The prefixes that are advertised from the Direct Connect gateway to the on-premises router are shorter than the CIDR blocks of the newly created VPCs

The route tables for the newly created A. VPCs do not have the routes to the on-premises environment that point to the transit gateway attachment

The on-premises route tables do not contain the exact CIDR blocks of the newly created VPCs

The route tables (or the newly created VPCs have only summary routes for (he on-premises environment (fiat point to the transit gateway attachment.

The prefixes that are advertised from the Direct Connect gateway to the on-premises router do not contain the CIDR blocks of the newly created VPCs

A company has established an AWS Direct Connect connection between its customer gateway at its on-premises data center and a virtual private gateway m the AWS Cloud The BGP routing protocol configuration includes the Autonomous System Number {ASN) of 7224 on the AWS end of the connection and the BGP ASN of 65004 on the company end of the connection The company's IT administrators report that servers that run at the on-premises data center are not able to communicate with the company's web application that runs on a fleet of Amazon EC2Instances A network engineer performs initial troubleshooting The network engineer finds that the private VIF is operational and that there is a fully established BGP peering session However, the company still cannot route traffic over the private VIFWhich of the following is a possible cause of this connectivity issue?

VPC route tables am lacking prefixes that point to the virtual private gateway to which the private VIF is connected

Firewall or ACL rules are blocking TCP pod 179 or are blocking high-numbered ephemeral TCP pons

The provider is advertising 50 prefixes for private VIFs

VPC route tables am lacking prefixes that point to the virtual private gateway to which the private VIF is connected

Peer IP addresses for both sides of the BGP peering session are not configured correctly.

A company has two on-premises data center locations. There is a company-managed router at earn data center. Each data center has a dedicated AWS Direct Connect connection to a Direct Connect gateway through a private virtual interface The router for the first location is advertising 110 routes to the Direct Connect gateway by using BGP and the router tor the second location is advertising 60 routes to the Direct Connect gateway by using BGP The Direct Connect gateway is attached to a company VPC through a virtual private gateway.A network engineer receives reports that resources In the VPC are not reachable from various locations in either data center. The network engineer checks the VPC route table and sees that the routes from the first data center. location are not being populated into the route table The network engineer must resolve this issue in the most operationally efficient manner. What should the network engineer do to meet these requirements'

Create an AWS Transit Gateway Attach the transit gateway to the VPC and connect the Direct Connect gateway to the transit gateway

Remove the Direct Connect gateway, and create a new private virtual interface from each company router to the virtual private gateway of the VPC

Change the router configurations to summarize the advertised routes

Open a support ticket to increase the quota on advertised routes to the VPC route table

Create an AWS Transit Gateway Attach the transit gateway to the VPC and connect the Direct Connect gateway to the transit gateway

A manufacturing company has a hybrid environment that includes an AWS Direct Connect gateway that is associated with an AWS Transit Gateway The company wants to extend a third-party application that is hosted in its on-premises data center into one of its VPCs.The application vendor has stated that It must use an overlay IP address to meet the company's requirement for high availability. The DHCP administrator has assigned a non-overlapping RFC1918 private address for use as the overlay IP address The security team requires connectivity to remain private.Which solution meets these requirements with the LEAST management overhead''

Create a transit VIF Then create static routes in the transit gateway route table to point to the VPC that contains the overlay IP address Create static routes in the VPC route table that point to the transit gateway Update the route tableson premises as needed.

Create a layer 2 VPN across a public VIF by using a software-based VPN on a pair of Amazon EC2 instances Use BGP to advertise the routes over the VPN

Create a transit VIF with automatically propagated routes in the transit gateway route table Create a new subnet in the VPC for the overlay IP address, and propagate the route to the VPC route table.Update the route tables on premises as needed.

Create an external Network Load Balancer by using Amazon Route 53 to create records that point to the target application's overlay IP address. Create static entries in the VPC route table.

Create a transit VIF Then create static routes in the transit gateway route table to point to the VPC that contains the overlay IP address Create static routes in the VPC route table that point to the transit gateway Update the route tableson premises as needed.

An IT company wants to securely perform an on-off migration of its on-premises VMs to the AWS Cloud by using AWS Server Migration Service {AWS SMS) For the first phase of the migration, the company must migrate 50 development VMs m batches during non-peak times over the next 7 days.The VMs are between 2 GB and 5 GB in size The company has 1 Gbps of available bandwidth over the internet Which network connectivity option meets these requirements MOST cost-effectively?

Use the existing internet connection

Contact an AWS partner to order a hosted VIF

Use the existing internet connection

Order an AWS Direct Connect connection Provision a public VIF

Create a VPN connection to AWS.

Amazon ANS-C00 Practice Test 11 - Free Online Exam Prep & Questions

You need to create a subnet in a VPC that supports 14 hosts. You need to be as accurate as possible since you run a very large company. What CIDR should you use?

Become a Premium Member for full access

Unlock Premium Member

Amazon ANS-C00 Practice Test 11

Question

Amazon ANS-C00 Practice Tests

Practice Tests