Home / Amazon / ANS-C00

Amazon ANS-C00 Practice Test - Questions Answers, Page 21

Question list

List of questions

Question 201

(0)

You are responsible for several EC2 instances deployed from Amazon AMIs that are required to upload information to an S3 bucket. This information must not traverse the public internet. You must also

Question 202

(0)

Does Amazon VPC support multicast or broadcast?

Question 203

(0)

You manage a website that uses a load balancer. You are noticing one of the servers is receiving more traffic than the other. What is probably the cause of this?

Question 204

(0)

Your company just deployed a WAF to protect its resources. You need to create a baseline before you start blocking traffic. How will you achieve this?

Question 205

(0)

A logistics company has deployed a hybrid environment that has multiple VPCs in both the us-east-1 Region and the afsouth- 1 Region. The on-premises data center is connected to us-east-1 through an

Question 206

(0)

A company is building a hybrid PCI-DSS compliant application that runs in the us-west-2 Region and on-premises. The application sends access logs from all locations to a single Amazon S3 bucket in u

Question 207

(0)

A company hosts an application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company recently experienced a network security breach. A network engineer must collect and anal

Question 208

(0)

A Systems Administrator is designing a hybrid DNS solution with spilt-view. The apex-domain "example.com" should be served through name servers across multiple top-level domains (TLDs). The name ser

Question 209

(0)

In AWS Direct Connect, to provide for failover, AWS recommends that you request and configure two dedicated connections to AWS. These connections can terminate on one or two routers in your network.

Question 210

(0)

In Amazon CloudFront, you cannot configure CloudFront to process cookies for_________.

Related questions

You have deployed a website that utilizes CloudFront, Elastic Loadbalancer, and S3 to serve content. When users access your site, they receive a "mixed content" security warning. What is most likely the problem?

An organization has multiple applications running in VPCs across multiple AWS accounts. The network engineer has deployed a central VPC with a pair of software VPN instances that run IPSec tunnels with dynamic routing to VGWs of all application VPCs. This central VPC is connected to on-premises resources via a Direct Connect connection using a private VIF. What additional configuration is required to enable the applications in VPCs to communicate with each other and access onpremises resources?

A company is building a hybrid PCI-DSS compliant application that runs in the us-west-2 Region and on-premises. The application sends access logs from all locations to a single Amazon S3 bucket in uswest-2. To protect this sensitive data, the bucket policy is configured to deny access from public IP addresses. How should an engineer configure the network to meet these requirements?

In Amazon CloudFront, to link to your objects, if your domain name is d111111abcdef8.cloudfront.net and your object is image.jpg, then the URL for the link in your webpage will be _____.

You have two VPCs that you've peered. You created a route for VPC A to get to an instance in VPC. You are unable to ping the instance. You have double checked your security groups and NACLs. Why might this be?

You are deploying an EC2 instance in a private subnet that requires access to the Internet. One of the requirements for this solution is to restrict access to only particular URLs on a whitelist. In addition to the whitelisted URLs, the instances should be able to access any Amazon S3 bucket in the same region via any URL. Which of the following solutions should you deploy? (Choose two.)

Your website is under attack and a malicious party is stealing large amounts of data. You have default NACL rules. Stopping the attack is the ONLY priority in this case. Which two commands should you use? (Choose two.)

Which element of AWS Config can be used to help maintain internal and external compliance controls?

A bank built a new version of its banking application in AWS using containers that connect to an on-premises database over a VPN connection. This application version requires users to also update their client application. The bank plans to deprecate the earlier client version. However, the company wants to keep supporting earlier clients through their onpremises version of the application to serve a small portion of the customers who haven't yet upgraded. What design will allow the company to serve both newer and earlier clients in the MOST efficient way?

You are configuring multiple Direct Connect links for your organization and need them to be in an HA Active/Passive configuration with extreme sensitivity to outages in order to encourage very quick failover times. You also need to be able to control which link is active. What two configuration changes should you implement? (Choose two.)

Question 201

You are responsible for several EC2 instances deployed from Amazon AMIs that are required to upload information to an S3 bucket. This information must not traverse the public internet. You must also be able to update the instances. Which option is your best solution?

An S3 endpoint and a NAT

An S3 endpoint

A VPN to the IP addresses specified in the AWS official S3 prefix list

A NACL with the AWS prefix list added to it and a VPN.

Show Answer Comment (0)

Question 202

Does Amazon VPC support multicast or broadcast?

Yes, both.

It doesn't support any of them.

Multicast yes, Broadcast no.

Both, but only outside Amazon VPC.

Show Answer Comment (0)

Question 203

You manage a website that uses a load balancer. You are noticing one of the servers is receiving more traffic than the other. What is probably the cause of this?

An Elastic Load Balancer sends traffic based on server load. One server must be a larger instance.

You have DNS latency routing set, so it is diverting traffic to a different instance.

You have sticky sessions configured and there are several power users that happen to be on the other server.

The server has more connections available.

Show Answer Comment (0)

Question 204

Your company just deployed a WAF to protect its resources. You need to create a baseline before you start blocking traffic. How will you achieve this?

Set the WAF to Monitor mode.

Set the WAF to its defaults and let it do its job.

Setup a Lambda function to monitor Flow Logs and analyze the traffic using Elasticsearch.

A WAF is default deny and does not allow this. You need to use an IDS instead.

Show Answer Comment (0)

Question 205

A logistics company has deployed a hybrid environment that has multiple VPCs in both the us-east-1 Region and the afsouth- 1 Region. The on-premises data center is connected to us-east-1 through an AWS Direct Connect connection. The Direct Connect connection is connected to a Direct Connect gateway that is associated with a transit gateway. The transit gateway is attached to all the VPCs in useast-1. An application that is deployed in af-south-1 requires access to a database in the data center. The application also requires access to file storage in a VPC in us-east-1. Which solution will meet these requirements with the LOWEST latency?

Create a transit gateway in af-south-1, and attach the VPCs. Create a transit gateway peering connection between the transit gateways.

Create a Direct Connect connection in af-south-1, and attach the VPCs with a Direct Connect gateway and a transit gateway. Create an AWS Site-to-Site VPN connection over the internet between the Direct Connect connections.

Create a transit gateway in af-south-1, and attach the VPCs. Associate the transit gateway in af-south-1 with the Direct Connect gateway in us-east-1.

Create inter-Region VPC peering connections between the VPCs in each Region. Use the transit gateway attachments in us-east-1 to access the database in the data center.

Show Answer Comment (0)

Question 206

Configure an AWS Direct Connect private virtual interface to the company's AWS VPC in us-west-2. Create a VPC endpoint and configure the on-premises systems to leverage an HTTPS proxy in the VPC to access Amazon S3.

Configure a VPN connection to the company's AWS VPC in us-west-2 and use BGP to advertise routes for Amazon S3.

Configure a Direct Connect connection public virtual interface to us-west-2. Leverage an on-premises HTTPS proxy tosend traffic to Amazon S3 over a Direct Connect connection.

Configure a VPN connection to the company's AWS VPC in us-west-2. Create a NAT gateway and configure the onpremises systems to leverage an HTTPS proxy in the VPC to access Amazon S3.

Show Answer Comment (0)

Question 207

A company hosts an application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company recently experienced a network security breach. A network engineer must collect and analyze logs that include the client IP address, target IP address, target port, and user agent of each user that accesses the application. What is the MOST operationally efficient solution that meets these requirements?

Configure the ALB to store logs in an Amazon S3 bucket. Download the files from Amazon S3, and use a spreadsheet application to analyze the logs.

Configure the ALB to push logs to Amazon Kinesis Data Streams. Use Amazon Kinesis Data Analytics to analyze the logs.

Configure Amazon Kinesis Data Streams to stream data from the ALB to Amazon Elasticsearch Service (Amazon ES).Use search operations in Amazon ES to analyze the data.

Configure the ALB to store logs in an Amazon S3 bucket. Use Amazon Athena to analyze the logs in Amazon S3.

Show Answer Comment (0)

Question 208

A Systems Administrator is designing a hybrid DNS solution with spilt-view. The apex-domain "example.com" should be served through name servers across multiple top-level domains (TLDs). The name server for subdomain "dev.example.com" should reside on-premises. The administrator has decided to use Amazon Route 53 to achieve this scenario. What procedurals steps must be taken to implement the solution?

Use a Route 53 public hosted zone for example.com and a private hosted zone for dev.example.com

Use a Route 53 public and private hosted zone for example.com, and perform subdomain delegation for dev.example.com

Use a Route 53 public hosted zone for example.com, and perform subdomain delegation for dev.example.com

Use a Route 53 private hosted zone for example.com, and perform subdomain delegation for dev.example.com

Show Answer Comment (0)

Question 209

In AWS Direct Connect, to provide for failover, AWS recommends that you request and configure two dedicated connections to AWS. These connections can terminate on one or two routers in your network. You can do this while __________________ with AWS Direct Connect step.

creating a Virtual Interface

configuring redundant connections

completing the cross-connect

verifying your Virtual Interface

Show Answer Comment (0)