ExamGecko
Home Home / Amazon / ANS-C00

Amazon ANS-C00 Practice Test - Questions Answers, Page 40

Question list
Search
Search

List of questions

Search

Related questions











Your organization leverages an IP Address Management (IPAM) product to manage IP address distribution. The IPAM exposes an API. Development teams use CloudFormation to provision approved reference architectures. At deployment time, IP addresses must be allocated to the VPC. When the VPC is deleted, the IPAM must reclaim the VPC's IP allocation. Which method allows for efficient, automated integration of the IPAM with CloudFormation?

A.
AWS CloudFormation parameters using the "Ref::" intrinsic function
A.
AWS CloudFormation parameters using the "Ref::" intrinsic function
Answers
B.
AWS CloudFormation custom resource using an AWS Lambda invocation.
B.
AWS CloudFormation custom resource using an AWS Lambda invocation.
Answers
C.
CloudFormation::OpsWorks::Stack with custom Chef configuration.
C.
CloudFormation::OpsWorks::Stack with custom Chef configuration.
Answers
D.
AWS CloudFormation parameters using the "Fn::FindInMap" intrinsic function.
D.
AWS CloudFormation parameters using the "Fn::FindInMap" intrinsic function.
Answers
Suggested answer: A

You need to quickly view inbound traffic to an instance to determine why it isn't reaching the instance properly. What is the best tool for this?

A.
Wireshark
A.
Wireshark
Answers
B.
CloudWatch
B.
CloudWatch
Answers
C.
CloudTrail
C.
CloudTrail
Answers
D.
Flow Logs
D.
Flow Logs
Answers
Suggested answer: D

Explanation:

Explanation:

CloudWatch only shows the amount of data in. Wireshark cannot see anything inside AWS infrastructure. You can only use it to view instance traffic.

You have two enhanced networking capable instances in a placement group. One with an Intel network interface and one with an ENA. What network speed will be achieved between the two?

A.
10Gbps
A.
10Gbps
Answers
B.
20Gbps
B.
20Gbps
Answers
C.
5Gbps
C.
5Gbps
Answers
D.
You cannot have different network interfaces in a placement group.
D.
You cannot have different network interfaces in a placement group.
Answers
Suggested answer: A

Explanation:

Explanation:

10Gbps. The Intel interface has a max speed of 10 and the ENA is 20. The speed will be the lesser of the two.

You have just provisioned a new VPC a with a CIDR block of 172.16.12.0/24. The entire CIDR block is fully utilized by subdividing it into 6 subnets, we will refer to these as Subnet1 through to Subnet6. The first 2 subnets (Subnet1 and Subnet2) are the same size. The last 4 subnets (Subnet3, Subnet4, Subnet5, Subnet6) are also the same size. Subnet5 is half the size of Subnet2. The address space as occupied by the first two subnets is contiguous, as is the address space occupied by the last 4 subnets. Within Subnet3 AWS reserves the address 172.16.12.129 for the VPC router. Select the correct IP address reserved by AWS for DNS in the Subnet2.

A.
172.16.64.1
A.
172.16.64.1
Answers
B.
172.16.64.65
B.
172.16.64.65
Answers
C.
172.16.12.66
C.
172.16.12.66
Answers
D.
172.16.12.64
D.
172.16.12.64
Answers
Suggested answer: C

Explanation:

Explanation:

From the documentation above - we know AWS reserves the address x.x.x.1 for the VPC router, and x.x.x.2 for DNS from within each subnet. This question states that Subnet 3 reserves 172.16.12.130 for the VPC router. Given that we now know that the Subnet 3 (the 1st of the last 4 Subnets) starts at 172.16.12.128 - then it must follow that Subnet2 ends at 172.16.12.127. From here we know we have 128 addresses that are halved evenly between Subnet1 and Subnet2 128/2 = 64 or /26 in CIDR form. Therefore it follows that the address reserved by AWS for DNS in the Subnet2 must be 172.16.12.66

Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

In AWS Direct Connect, which of the following is true of configuring your router to connect to the AWS Direct Connect router?

A.
After creating a virtual interface for your AWS Direct Connect connection, you can download the router configuration file from the available link
A.
After creating a virtual interface for your AWS Direct Connect connection, you can download the router configuration file from the available link
Answers
B.
After Completing the Cross Connect step, the download link for router configuration will be available
B.
After Completing the Cross Connect step, the download link for router configuration will be available
Answers
C.
After submitting your AWS Direct Connect connection request, you will receive the router configuration details by email within 72 hours
C.
After submitting your AWS Direct Connect connection request, you will receive the router configuration details by email within 72 hours
Answers
D.
In Create a Virtual Interface step, the general configuration of your router would be available for downloading.
D.
In Create a Virtual Interface step, the general configuration of your router would be available for downloading.
Answers
Suggested answer: A

Explanation:

Explanation:

To use the AWS Direct Connect, after you have created a virtual interface for your AWS Direct Connect connection, you can download the router configuration file. This configuration helps your router connect to AWS Direct Connect router.

This configuration is related to your created virtual interface details and vendor, platform, and software of your router. Reference: http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#routerconfig

A gaming company is running an online multiplayer game in multiple AWS Regions. The company needs traffic from its end users to be routed to the Region that is closest to the end users geographically. When maintenance occurs in a Region, traffic must be routed to the next closest Region with no changes to the IP addresses being used as connections by the end users. Which solution will meet these requirements?

A.
Create an Amazon CloudFront distribution in front of all the Regions.
A.
Create an Amazon CloudFront distribution in front of all the Regions.
Answers
B.
Use an Amazon Route 53 geoproximity routing policy to navigate traffic to the closest Region.
B.
Use an Amazon Route 53 geoproximity routing policy to navigate traffic to the closest Region.
Answers
C.
Use an Amazon Route 53 geolocation routing policy to navigate traffic to the closest Region.
C.
Use an Amazon Route 53 geolocation routing policy to navigate traffic to the closest Region.
Answers
D.
Configure AWS Global Accelerator in front of all the Regions.
D.
Configure AWS Global Accelerator in front of all the Regions.
Answers
Suggested answer: C

Your company has a DX connection and you just added a new VPC and Private VIF to which you have connected to your DX link. You copied the settings from the other VPC to ensure it's the same. Once you connected the new VIF, you began seeing problems with connectivity to both VPCs.

You checked to make sure you didn't use the same CIDR with each VPC, so what could be the problem?

A.
You used the same VLAN ID for both connections.
A.
You used the same VLAN ID for both connections.
Answers
B.
You overloaded your DX circuit.
B.
You overloaded your DX circuit.
Answers
C.
Your MPLS provider does not allow traffic to two VPCs.
C.
Your MPLS provider does not allow traffic to two VPCs.
Answers
D.
You can only connect one VIF to a DX circuit.
D.
You can only connect one VIF to a DX circuit.
Answers
Suggested answer: A

Explanation:

Explanation:

You can only have 1 instance of any VLAN ID.

An organization delivers high-resolution, dynamic web content. Internet users access the content from a variety of platforms, including mobile, tablet and desktop. Each platform receives a customized experience to account for the differences in viewing modes. A dedicated, automatic-scaling fleet of Amazon EC2 instances is used for each platform to server content based on path-based headers. Which combination of services will MINIMIZE cost and MAXIMIZE performance? (Choose two.)

A.
Amazon CloudFront with Lambda@Edge
A.
Amazon CloudFront with Lambda@Edge
Answers
B.
Network Load Balancer
B.
Network Load Balancer
Answers
C.
Amazon S3 static websites
C.
Amazon S3 static websites
Answers
D.
Amazon Route 53 with traffic flow policies
D.
Amazon Route 53 with traffic flow policies
Answers
E.
Application Load Balancer
E.
Application Load Balancer
Answers
Suggested answer: A, E

Explanation:

Explanation:

References: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-at-the-edge.html

When using AWS Config, which two items are stored on S3 as a part of its operation?

A.
Configuration Items and Configuration History
A.
Configuration Items and Configuration History
Answers
B.
Configuration Recorder and Configuration Snapshots
B.
Configuration Recorder and Configuration Snapshots
Answers
C.
Configuration History and Configuration Snapshots
C.
Configuration History and Configuration Snapshots
Answers
D.
Configuration Snapshots and Configuration Streams
D.
Configuration Snapshots and Configuration Streams
Answers
Suggested answer: C

Explanation:

Explanation:

S3 is used to store the Configuration History files and any Configuration Snapshots of your data within a single bucket, which is defined within the Configuration Recorder. You can get AWS Config to create a new bucket for you and select an existing bucket. If you have multiple AWS accounts you may want to aggregate your Configuration History and Snapshot files into the same S3 Bucket for your primary account, just be aware that this can be achieved. However, you will need to grant write access for the service principal (config.amazonaws.com) in your other accounts write access to the S3 bucket. Reference: http://docs.aws.amazon.com/config/latest/developerguide/config-concepts.html#config-items

You have a Simple AD deployment, and you wish to use it for your Microsoft Exchange email server. You are having issues finding the AD server, why might this be?

A.
You need to contact AWS to receive a PTR record for your email server.
A.
You need to contact AWS to receive a PTR record for your email server.
Answers
B.
Your firewall is blocking it.
B.
Your firewall is blocking it.
Answers
C.
Simple AD is not a full Active Directory server and will not work with many MS products.
C.
Simple AD is not a full Active Directory server and will not work with many MS products.
Answers
D.
SSL is not implemented.
D.
SSL is not implemented.
Answers
Suggested answer: C

Explanation:

Explanation:

Simple AD is Samba based and does not support full Microsoft AD integration.

Total 414 questions
Go to page: of 42