Amazon ANS-C00 Practice Test - Questions Answers, Page 30
List of questions
Question 291

Your company has a high-availability hybrid solution that utilizes a two Direct Connect connections and a backup VPN connection. For some reason, traffic is preferring the VPN connection instead of the direct connection. You have prepended a longer AS_PATH on the VPN connection, but AWS still prefers it over the Direct Connect connections.
What might you be able to do to fix this issue?
Explanation:
Explanation:
The only reason a VPN would be preferred over Direct Connect is if it has a more specific prefix. This was not discussed in the question but is assumed since it is the only criteria in the path selection process that supersedes Direct Connect.
Question 292

You have set up an S3 endpoint, and you want to restrict some instances from being able to access it. These instances are all in the same subnet, so you cannot simply remove the prefix list from the route table.
What two approaches can you take to solve this? (Choose two.)
Explanation:
Explanation:
You cannot add a prefix list ID to a NACL.
Question 293

You have 99 routes in your dynamic BGP propagated route table and you wish to add 2 more: 10.1.0.0 and 10.3.0.0. You cannot modify or remove routes that have already been announced. What should you do?
Explanation:
Explanation:
You cannot add these routes. If you try to summarize them, that would create a 10.0.0.0/14, which is too low of a CIDR to advertise to AWS. AWS has a minimum of /16. You cannot have the 100 route limit modified in any way. It is a hard 100 route limit.
Question 294

A company needs to allow its remote users to access company resources in the AWS Cloud. The company has two VPCs that are connected through VPC peering. The remote users must be able to access resources in both VPCs by using secure connections from their laptop computers. The company does not want to implement an access management solution that requires additional costs or effort. Which solution meets these requirements?
Question 295

What is the name of the label applied to packets to allow routers to know where to forward in an MPLS network?
Explanation:
Explanation:
Forward Equivalency Class is how routers know where to send packets.
Question 296

What number does the binary number 10101000 correspond to?
Explanation:
Explanation:
128 + 0 + 32 + 0 + 8 + 0 + 0 + 0 = 168
Question 297

Which other AWS service is used to track `Related Events' within the Configuration Item?
Explanation:
Explanation:
`Related Events' displays the AWS CloudTrail event ID that is related to the change that triggered the creation of the CI.
There is a new CI made for every change made against a resource. As a result a different CloudTrail event IDs will be created. This allows you you to deep-dive into who or what and when made the change that triggered this CI. A great feature allowing for some great analysis to be taken, specifically when this affects security resources.
Reference: http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#config-item-table
Question 298

With respect to Amazon CloudFront, which one of the following statements is correct?
Explanation:
Explanation:
With respect to Amazon CloudFront, for HTTP and HTTPS web distributions, you can choose whether you want CloudFrontto forward cookies to your origin. For RTMP distributions, you cannot configure CloudFront to process cookies.
Reference: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html
Question 299

You have multiple Amazon Elastic Compute Cloud (EC2) instances running a web server in a VPC configured with security groups and NACL. You need to ensure layer 7 protocol level logging of all network traffic (ACCEPT/REJECT) on the instances. What should be enabled to complete this task?
Question 300

A company's network engineering team is solely responsible for deploying VPC infrastructure using AWS CloudFormation.
The company wants to give its developers the ability to launch applications using CloudFormation templates so that subnets can be created using available CIDR ranges. What should be done to meet these requirements?
Question