Ask Question
Amazon ANS-C00 Practice Test - Questions Answers
Question list
List of questions
Related questions
Question 1
You have deployed a website that utilizes CloudFront, Elastic Loadbalancer, and S3 to serve content. When users access your site, they receive a "mixed content" security warning. What is most likely the problem?
Explanation:
Explanation:
You must apply the SSL to your Elastic Loadblanacer and your CDN to encrypt all aspects of your site.
Question 2
An application runs on a fleet of Amazon EC2 instances in a VPC. All instances can reach one another using private IP addresses. The application owner has a new requirement that the domain name received via DHCP should be different for a particular set of instances that are currently in one particular subnet.
What changes should be made to meet this requirement while continuing to support the existing application requirements?
Question 3
Your company has signed up to trial AWS WorkSpaces. You aren't sure you're going to keep it, but you want to try it out to see if it works for your organization of 112 users. You need to deploy it with as little work and up-front expense as possible while still allowing access to your Active Directory for authentication. What two things should you do? (Choose two.)
Explanation:
Explanation:
A VPN connection and an AD connector will allow you to get up and running without having to migrate users, setup expensive equipment or pay for another directory service.
Question 4
Which AWS service is used within an AWS Config Rule to perform the logic evaluation of that rule?
Explanation:
Explanation:
AWS Config Rules are a great way to help you enforce specific compliance controls and checks across your resources and allows for you to adopt an `ideal' deployment specification for each of your resource types. Each Rule is simply a Lambda function that when called upon evaluates the resource and carries out some simply logic to determine the compliance result with the rule. Reference: http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules_nodejs-sample.html
Question 5
What is the minimum number of subnets for an RDS subnet group?
Explanation:
Explanation:
This allows for high availability and failover in case an RDS instance goes down.
Question 6
Which two statements about placement groups are correct? (Choose two.)
Explanation:
Explanation:
A placement group can span multiple VPCs but may not experience the full performance benefit. The only way to add instances from one placement group to another is to create AMIs out of the instances and spin them all up into one placement group.
Question 7
You are configuring multiple Direct Connect links for your organization and need them to be in an HA Active/Passive configuration with extreme sensitivity to outages in order to encourage very quick failover times. You also need to be able to control which link is active.
What two configuration changes should you implement? (Choose two.)
Explanation:
Explanation:
Bidirectional-Forwarding Detection will allow for faster failover times. AS_PATH Prepending will allow you to choose the default path. BGP is already implemented and MPLS does not matter.
Question 8
How many BGP advertised routes can you have per route table?
Explanation:
Explanation:
You can only have 100 advertised routes from BGP. This cannot be changed.
Question 9
When configuring Active/Passive HA on VPN tunnels, choose the two best ways to configure this. (Choose two.)
Explanation:
Explanation:
AWS prefers AS_PATH prepending and for a tunnel to provide true failover, it must always be on.
Question 10
Your company is building a new data center. You currently have an on-premises data center that accesses your single VPC via VPN. You need to provide access to your single VPC to your new data center. Since your new data center build is already over budget, you need to keep costs low. How should you accomplish this?
Explanation:
Explanation:
Create a new Customer Gateway. A Private VIF would work, but you want to keep costs low. A Public VIF is only for AWS specific resources, such as S3. A Virtual Gateway would be created if you were creating a new VPN connection in a new VPC. A Customer Gateway would allow you to add the new datacenter to your VPN.
Question