ExamGecko
Login
Home / Amazon / ANS-C00 / List of questions
Ask Question

Amazon ANS-C00 Practice Test - Questions Answers, Page 4

List of questions

Question 31

Report
Export
Collapse

A Network Engineer is provisioning a subnet for a load balancer that will sit in front of a fleet of application servers in a private subnet. There is limited IP space left in the VPC CIDR. The application has few users now but is expected to grow quickly to millions of users.

What design will use the LEAST amount of IP space, while allowing for this growth?

Use two /29 subnets for an Application Load Balancer in different Availability Zones.
Use two /29 subnets for an Application Load Balancer in different Availability Zones.
Use one /29 subnet for the Network Load Balancer. Add another VPC CIDR to the VPC to allow for future growth.
Use one /29 subnet for the Network Load Balancer. Add another VPC CIDR to the VPC to allow for future growth.
Use two /28 subnets for a Network Load Balancer in different Availability Zones.
Use two /28 subnets for a Network Load Balancer in different Availability Zones.
Use one /28 subnet for an Application Load Balancer. Add another VPC CIDR to the VPC to allow for future growth.
Use one /28 subnet for an Application Load Balancer. Add another VPC CIDR to the VPC to allow for future growth.
Suggested answer: D
asked 16/09/2024
Maria Lockhart
27 questions

Question 32

Report
Export
Collapse

In Amazon CloudFront, if you need to quickly remove objects from a distribution, you can:

delete the objects from cache.
delete the objects from cache.
invalidate the objects.
invalidate the objects.
remove your Amazon S3 bucket.
remove your Amazon S3 bucket.
delete your distribution and recreate it.
delete your distribution and recreate it.
Suggested answer: B

Explanation:

Explanation:

In Amazon CloudFront, if you need to quickly remove objects from a distribution, you can invalidate them.

Reference: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AddRemoveReplaceObjects.html

asked 16/09/2024
Fahim Thanawala
43 questions

Question 33

Report
Export
Collapse

A company has a hybrid architecture with dual AWS Direct Connect connections and applications running in the AWS Cloud and on premises. The company uses its on-premises DNS servers to provide name resolution for is internal domain company.com. The company uses an Amazon Route 53 private hosted zone, aws.company.com, for resolution of AWS resource records.

A new application that runs on Amazon EC2 in the company's VPC needs to resolve records in the company.com domain and on other AWS resources. What should the company do to meet these requirements?

Create a new DHCP options set. Configure the DHCP options set name servers to be the on-premises DNS servers, and configure the domain name to be company.com. Assign the DHCP options set to the VPC with the EC2 instances.
Create a new DHCP options set. Configure the DHCP options set name servers to be the on-premises DNS servers, and configure the domain name to be company.com. Assign the DHCP options set to the VPC with the EC2 instances.
Create Route 53 Resolver outbound endpoints in each subnet in the VP
Create Route 53 Resolver outbound endpoints in each subnet in the VP
Configure a Route 53 forwarding rule with a rule type of Forward for company.com that points to the on-premises DNS servers. Configure a Route 53 forwarding rule with a rule type of System for aws.company.com.
Configure a Route 53 forwarding rule with a rule type of Forward for company.com that points to the on-premises DNS servers. Configure a Route 53 forwarding rule with a rule type of System for aws.company.com.
Create Route 53 Resolver outbound endpoints in each subnet in the VPConfigure conditional forwarding rules on the onpremises DNS servers to forward queries for the domain aws.company.com to the Route 53 Resolver endpoints.Modify the DHCP options set to configure instances to resolve hostnames using the on-premises DNS servers.
Create Route 53 Resolver outbound endpoints in each subnet in the VPConfigure conditional forwarding rules on the onpremises DNS servers to forward queries for the domain aws.company.com to the Route 53 Resolver endpoints.Modify the DHCP options set to configure instances to resolve hostnames using the on-premises DNS servers.
Create a private hosted zone for company.com within the AWS account. Create Route 53 Resolver inbound endpoints in each subnet in the VPC. Configure the on-premises DNS servers to send outbound zone transfers forcompany.com to the Route 53 Resolver endpoints.
Create a private hosted zone for company.com within the AWS account. Create Route 53 Resolver inbound endpoints in each subnet in the VPC. Configure the on-premises DNS servers to send outbound zone transfers forcompany.com to the Route 53 Resolver endpoints.
Suggested answer: D
asked 16/09/2024
Bartosz Szewczyk
37 questions

Question 34

Report
Export
Collapse

Which of these addresses cannot be given to an EC2 instance in your VPC?

10.0.0.157
10.0.0.157
10.0.0.3
10.0.0.3
10.0.0.4
10.0.0.4
10.0.0.253
10.0.0.253
Suggested answer: B

Explanation:

Explanation:

10.0.0.3 is reserved by AWS for future use.

asked 16/09/2024
Christian Andrew TANAP
41 questions

Question 35

Report
Export
Collapse

Which of the following statements does not describe Jumbo Frames in an AWS VPC environment?

For instances that are collocated inside a placement group, jumbo frames help to achieve the maximum network throughput possible
For instances that are collocated inside a placement group, jumbo frames help to achieve the maximum network throughput possible
Jumbo Frames are not supported for traffic that exits the Virtual Private Gateway
Jumbo Frames are not supported for traffic that exits the Virtual Private Gateway
Jumbo Frames are not supported for traffic that exits the Internet Gateway
Jumbo Frames are not supported for traffic that exits the Internet Gateway
T2.micro instances do not support Jumbo Frames
T2.micro instances do not support Jumbo Frames
Suggested answer: D

Explanation:

Explanation:

All answers except for Answer D are correct. Answer D is incorrect in that AWS does indeed support Jumbo Frames on all instance types within the T2 family class - including the T2.micro instance type.

Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/network_mtu.html

asked 16/09/2024
Jermaine Wells
41 questions

Question 36

Report
Export
Collapse

A computing team is evaluating whether to place a high performance computing (HPC) application in AWS. The team is concerned about application performance and wants to know what options are available to increase networking performance.

Which of the following changes would increase performance for this application? (Choose two.)

Place the application across many smaller instances to achieve higher total throughput.
Place the application across many smaller instances to achieve higher total throughput.
Increase the MTU of the VPC to 9001.
Increase the MTU of the VPC to 9001.
Enable an MTU of 9001 in the application's operating system.
Enable an MTU of 9001 in the application's operating system.
Enable enhanced networking on the instances.
Enable enhanced networking on the instances.
Deploy the application in two Availability Zones and insert them in one placement group.
Deploy the application in two Availability Zones and insert them in one placement group.
Suggested answer: B, D
asked 16/09/2024
Osman Rana
36 questions

Question 37

Report
Export
Collapse

Which is not a valid Route 53 record?

SPF
SPF
NAPTR
NAPTR
AAAA
AAAA
BFD
BFD
Suggested answer: D

Explanation:

Explanation:

BFD stands for Bi-directional Forwarding Detection and has nothing to do with Route 53.

asked 16/09/2024
Madhankumar Rathinakumar
35 questions

Question 38

Report
Export
Collapse

A company uses a newly provisioned 1-Gbps AWS Direct Connect connection to configure a virtual interface for access to Amazon S3.

Which configuration values is the network engineer required to provide? (Choose two.)

Connection speed
Connection speed
VLAN ID
VLAN ID
IP prefixes to advertise
IP prefixes to advertise
Direct Connect location
Direct Connect location
Virtual private gateway
Virtual private gateway
Suggested answer: B, E
asked 16/09/2024
Alpesh Panchal
20 questions

Question 39

Report
Export
Collapse

What are two ways to influence the direction of Dynamic VPN traffic over multiple links? (Choose two.)

AS_PATH Prepending
AS_PATH Prepending
BFD
BFD
MED
MED
Shouting at it
Shouting at it
Suggested answer: A, C

Explanation:

Explanation:

BFD detects failed links but does not create them. Shouting at it just isn't nice.

asked 16/09/2024
Karanshah Gulati
44 questions

Question 40

Report
Export
Collapse

Your company has placement groups in two different availability zones. There is a large project coming up and, although resilience is important, cost and speed are the most important factors. The servers in each placement group need to be able to achieve the highest speed possible. How can this be achieved?

Create AMIs from all of the instances, terminate them, and deploy them all into one placement group.
Create AMIs from all of the instances, terminate them, and deploy them all into one placement group.
In the CLI, run the command "aws ec2 set-placement-group 1 " for all of the instances.
In the CLI, run the command "aws ec2 set-placement-group 1 " for all of the instances.
Duplicate the VPC, peer the new VPC, create AMIs of the instances, terminate them, and redeploy them in two separate placement groups between the two VPCs.
Duplicate the VPC, peer the new VPC, create AMIs of the instances, terminate them, and redeploy them in two separate placement groups between the two VPCs.
Peer the two placement groups using AWS PG Peering.
Peer the two placement groups using AWS PG Peering.
Suggested answer: A

Explanation:

Explanation:

There is no AWS PG Peering option, Duplicating the VPC does not align with the cost concern, there is no "aws ec2 setplacement- group" command.

asked 16/09/2024
Avinash Kumar
32 questions
Total 414 questions
Go to page: of 42
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

You have two VPCs that you've peered. You created a route for VPC A to get to an instance in VPC. You are unable to ping the instance. You have double checked your security groups and NACLs. Why might this be?
In Amazon CloudFront, to link to your objects, if your domain name is d111111abcdef8.cloudfront.net and your object is image.jpg, then the URL for the link in your webpage will be _____.
Which of these modes is not a configuration mode for a WAF?
Your organization runs a popular e-commerce application deployed on AWS that uses auto scaling in conjunction with an Elastic Load balancing (ELB) service with an HTTPS listener. Your security team reports that an exploitable vulnerability has been discovered in the encryption protocol and cipher that your site uses. Which step should you take to fix this problem?
You are configuring multiple Direct Connect links for your organization and need them to be in an HA Active/Passive configuration with extreme sensitivity to outages in order to encourage very quick failover times. You also need to be able to control which link is active. What two configuration changes should you implement? (Choose two.)
You have deployed a website that utilizes CloudFront, Elastic Loadbalancer, and S3 to serve content. When users access your site, they receive a "mixed content" security warning. What is most likely the problem?
Which service would you use to see who changed your infrastructure?
A company is building a hybrid PCI-DSS compliant application that runs in the us-west-2 Region and on-premises. The application sends access logs from all locations to a single Amazon S3 bucket in uswest-2. To protect this sensitive data, the bucket policy is configured to deny access from public IP addresses. How should an engineer configure the network to meet these requirements?
An organization has multiple applications running in VPCs across multiple AWS accounts. The network engineer has deployed a central VPC with a pair of software VPN instances that run IPSec tunnels with dynamic routing to VGWs of all application VPCs. This central VPC is connected to on-premises resources via a Direct Connect connection using a private VIF. What additional configuration is required to enable the applications in VPCs to communicate with each other and access onpremises resources?
Under increased cybersecurity concerns, a company is deploying a near real-time intrusion detection system (IDS) solution. A system must be put in place as soon as possible. The architecture consists of many AWS accounts, and all results must be delivered to a central location. Which solution will meet this requirement, while minimizing downtime and costs?