ExamGecko
Home Home / Amazon / ANS-C00

Amazon ANS-C00 Practice Test - Questions Answers, Page 41

Question list
Search
Search

List of questions

Search

Related questions











You need to create a subnet in a VPC that supports 14 hosts. You need to be as accurate as possible since you run a very large company. What CIDR should you use?

A.
/28
A.
/28
Answers
B.
/24
B.
/24
Answers
C.
/25
C.
/25
Answers
D.
/27
D.
/27
Answers
Suggested answer: D

Explanation:

Explanation:

/27 supports 27 hosts since AWS reserves 5 addresses. /25 supports 123 hosts, /28 supports 11, /24 supports 251.

Which of the following characters is not allowed while creating a Namespace for a CloudWatch metric?

A.
/
A.
/
Answers
B.
:
B.
:
Answers
C.
#
C.
#
Answers
D.
@
D.
@
Answers
Suggested answer: D

Explanation:

Explanation:

Namespace is a grouping or a container for a CloudWatch metric. The names must be valid XML characters, typically containing the alphanumeric characters "0-9A-Za-z" plus "."(period), "-" (hyphen), "_" (underscore), "/" (slash), "#" (hash), and ":" (colon). All AWS namespaces follow the convention AWS/, such as AWS/EC2 and AWS/ELB.

Reference: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.html

Your company operates a single AWS account. A common services VPC is deployed to provide shared services, such as network scanning and compliance tools. Each AWS workload uses its own VPC, and each VPC must peer with the common services VPC. You must choose the most efficient and cost effective approach. Which approach should be used to automate the required VPC peering?

A.
AWS CloudTrail integration with Amazon CloudWatch Logs to trigger a Lambda function.
A.
AWS CloudTrail integration with Amazon CloudWatch Logs to trigger a Lambda function.
Answers
B.
An OpsWorks Chef recipe to execute a command-line peering request.
B.
An OpsWorks Chef recipe to execute a command-line peering request.
Answers
C.
Cfn-init with AWS CloudFormation to execute a command-line peering request.
C.
Cfn-init with AWS CloudFormation to execute a command-line peering request.
Answers
D.
An AWS CloudFormation template that includes a peering request.
D.
An AWS CloudFormation template that includes a peering request.
Answers
Suggested answer: A

You manage a web service that is used by client applications deployed in 300 offices worldwide. The web service architecture is an Elastic Load Balancer (ELB) distributing traffic across four application servers deployed in an Auto Scaling group across two Availability Zones.

The ELB is configured to use round robin, and sticky sessions are disabled. You have configured the NACLs and security groups to allow port 22 from your bastion host, and port 80 from 0.0.0.0/0. The client configuration is managed by each regional IT team.

Upon inspection you find that a large amount of requests from incorrectly configured sites are causing a single application server to degrade. The remainder of the requests are equally distributed across all servers with no negative effects. What should you do to remedy the situation and prevent future occurrences?

A.
Mark the affected instance as degraded in the ELB and raise it with the client application team.
A.
Mark the affected instance as degraded in the ELB and raise it with the client application team.
Answers
B.
Update the NACL to only allow port 80 to the application servers from the ELB servers.
B.
Update the NACL to only allow port 80 to the application servers from the ELB servers.
Answers
C.
Update the Security Groups to only allow port 80 to the application servers from the ELB.
C.
Update the Security Groups to only allow port 80 to the application servers from the ELB.
Answers
D.
Terminate the affected instance and allow Auto Scaling to create a new instance.
D.
Terminate the affected instance and allow Auto Scaling to create a new instance.
Answers
Suggested answer: D

Over which of the following Ethernet standards does AWS Direct Connect link your internal network to an AWS Direct Connect location?

A.
Copper backplane cable
A.
Copper backplane cable
Answers
B.
Twisted pair cable
B.
Twisted pair cable
Answers
C.
Single mode fiber-optic cable
C.
Single mode fiber-optic cable
Answers
D.
Shielded balanced copper cable
D.
Shielded balanced copper cable
Answers
Suggested answer: C

Explanation:

Explanation:

AWS Direct Connect links your internal network to an AWS Direct Connect location over a standard 1 gigabit or 10 gigabit Ethernet single mode fiber-optic cable. Reference: http://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html

You have two autoscaling groups in your VPC. One deploys servers that host the index of your website and another that deploys servers that host the images for your website. What three steps would you take to ensure the right servers are used for the right purpose? (Choose three.)

A.
Create a path-based routing rule to route traffic destined for "/" to target group 1 and "/*.jpg" to target group 2.
A.
Create a path-based routing rule to route traffic destined for "/" to target group 1 and "/*.jpg" to target group 2.
Answers
B.
Create two target groups and associate them with each autoscaling group.
B.
Create two target groups and associate them with each autoscaling group.
Answers
C.
Configure a Classic Load Balancer
C.
Configure a Classic Load Balancer
Answers
D.
Configure an Application Load Balancer
D.
Configure an Application Load Balancer
Answers
Suggested answer: A, B, D

Explanation:

Explanation:

A Classic Load Balancer does not support path-based routing rules

Which service would you use to see if your infrastructure has changed?

A.
Config
A.
Config
Answers
B.
Elastic Beanstalk
B.
Elastic Beanstalk
Answers
C.
CloudTrail
C.
CloudTrail
Answers
D.
CloudWatch
D.
CloudWatch
Answers
Suggested answer: C

Your business has implemented a highly available Direct Connect system that makes use of two datacenters. Each data center is equipped with one LAG with two connections and one ordinary DX connection. How many LOAs will be completed in total if your organization successfully completes an order for the addition of a new connection to each of the LAGs?

A.
1
A.
1
Answers
B.
11
B.
11
Answers
C.
2
C.
2
Answers
D.
6
D.
6
Answers
Suggested answer: D

Explanation:

Per documentation: https://docs.aws.amazon.com/directconnect/latest/UserGuide/lags.html . When you create a LAG, you can download the Letter of Authorization and Connecting Facility Assignment (LOA-CFA) for each new physical connection individually from the AWS Direct Connect console. So that'd be 2 per LAG and 1 more for the individual connection, in total 6. Now to modify these LOA you can see https://docs.aws.amazon.com/directconnect/latest/UserGuide/ create-connection.html.

If you need to change the LOA-CFA after it has been created (for example, you need to change the ports), contact AWS Support. No LOA is created.

A company's developers wrote an AWS Lambda function to modify existing private route tables in response to a security appliance's auto scaling events. The Lambda function will be invoked on lifecycle hooks for an Auto Scaling group and Is configured to run in a VPC The developers are unsure if the following 1AM policy provides sufficient permissions to be used as an execution role for this Lambda function.

The developers ask a network engineer to review the permissions.

Which set of permissions should the network engineer add lo the policy?

A.
lambda. ListFunctions, lambda:GetPolicy, and ec2 Delete RouteTable
A.
lambda. ListFunctions, lambda:GetPolicy, and ec2 Delete RouteTable
Answers
B.
ec2:AssociateAddress, ec2 ModifylnstanceAttribute. and ec2 AssociateRouteTable
B.
ec2:AssociateAddress, ec2 ModifylnstanceAttribute. and ec2 AssociateRouteTable
Answers
C.
ec2:CreateNetworklntertace ec2 DeleteNetworklnterface, and ec2 ReplaceRoute
C.
ec2:CreateNetworklntertace ec2 DeleteNetworklnterface, and ec2 ReplaceRoute
Answers
D.
ec2:Describei.ifecydoHooks, ec2 DescribeScalingActivities, and ec2 DescribePolicies
D.
ec2:Describei.ifecydoHooks, ec2 DescribeScalingActivities, and ec2 DescribePolicies
Answers
Suggested answer: C

A company hosts several applications in the AWS Cloud across multiple VPCs that are connected to a transit gateway Redundant AWS Direct Connect connections and a Direct Connect gateway provide private network connectivity lo the company's on-premises environment During a maintenance window, the networking team adds eight VPCs The application management team notices that there is no reachability between the newly created VPCs and the on-premises environment Connectivity between all VPCs through the transit gateway is working as expected. Which of the following are possible causes of the connectivity issues? (Choose TWO)

A.
The prefixes that are advertised from the Direct Connect gateway to the on-premises router are shorter than the CIDR blocks of the newly created VPCs
A.
The prefixes that are advertised from the Direct Connect gateway to the on-premises router are shorter than the CIDR blocks of the newly created VPCs
Answers
B.
The route tables for the newly created A. VPCs do not have the routes to the on-premises environment that point to the transit gateway attachment
B.
The route tables for the newly created A. VPCs do not have the routes to the on-premises environment that point to the transit gateway attachment
Answers
C.
The on-premises route tables do not contain the exact CIDR blocks of the newly created VPCs
C.
The on-premises route tables do not contain the exact CIDR blocks of the newly created VPCs
Answers
D.
The route tables (or the newly created VPCs have only summary routes for (he on-premises environment (fiat point to the transit gateway attachment.
D.
The route tables (or the newly created VPCs have only summary routes for (he on-premises environment (fiat point to the transit gateway attachment.
Answers
E.
The prefixes that are advertised from the Direct Connect gateway to the on-premises router do not contain the CIDR blocks of the newly created VPCs
E.
The prefixes that are advertised from the Direct Connect gateway to the on-premises router do not contain the CIDR blocks of the newly created VPCs
Answers
Suggested answer: B, E
Total 414 questions
Go to page: of 42