A Review Of High Quality AWS-Certified-Advanced-Networking-Specialty Testing Software

NEW QUESTION 1
What is the maximum number of CloudTrails that you can create per AWS region?

• A. 10
• B. 2
• C. 16
• D. 5

Answer: D

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/faqs/

NEW QUESTION 2
Which of the following types of contents cannot serve over HTTP or HTTPS in Amazon CloudFront?

• A. Apple HTTP Live Streaming
• B. Static and dynamic download content
• C. Adobe Flash multimedia content
• D. CloudFront RTMP distribution

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-overview.html

NEW QUESTION 3
Which statement is NOT true about accessing remote AWS region in the US by your AWS Direct Connect which is located in the US?

• A. To connect to a VPC in a remote region, you can use a virtual private network (VPN) connection over your public virtual interface.
• B. To access public resources in a remote region, you must set up a public virtual interface and establish a border gateway protocol (BGP) session.
• C. If you have a public virtual interface and established a BGP session to it, your router learns the routes of the other AWS regions in the US.
• D. Any data transfer out of a remote region is billed at the location of your AWS Direct Connect data transfer rate.

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/remote_regions.html

NEW QUESTION 4
In the context of CloudFront RTMP Distribution, the Adobe Flash Media Server _____ file specifies which domains can access media files in a particular domain.

• A. accessdomain.JSON
• B. crossdomain.xml
• C. accessdomain.xml
• D. crossdomain.JSON

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Streaming_CrossDomain.h tml

NEW QUESTION 5
The IPsec protocol suite is made up of various components covering aspects such as confidentiality, encryption, and integrity. Select the correct statement below regarding the correct configuration options for ensure IPsec confidentiality:

• A. The following protocols may be used to configure IPsec confidentiality, DES, 3DES, MD5
• B. The following protocols may be used to configure IPsec confidentiality, DES, 3DES, AES
• C. The following protocols may be used to configure IPsec confidentiality, PSK, RSA
• D. The following protocols may be used to configure IPsec confidentiality, PSK, MD5
• E. The following protocols may be used to configure IPsec confidentiality, PSK, RSA

Answer: B

Explanation:
Reference:
https://en.wikipedia.org/wiki/IPsec

NEW QUESTION 6
An AWS account owner has setup multiple IAM users. One of these IAM users, named John, has CloudWatch access, but no access to EC2 services. John has setup an alarm action which stops EC2 instances when their CPU utilization is below the threshold limit. When an EC2 instance's CPU Utilization rate drops below the threshold John has set, what will happen and why?

• A. Nothing will happe
• B. John cannot set an alarm on EC2 since he does not have the permission.
• C. CloudWatch will stop the instance when the action is executed
• D. Nothing will happen because it is not possible to stop the instance using the CloudWatch alarm
• E. Nothing will happe
• F. John can setup the action, but it will not be executed because he does not have EC2 access through IAM policies.

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/UsingAlarmActions.html

NEW QUESTION 7
By default, all AWS accounts are limited to EIPs, because public (IPv4) Internet addresses are a scarce public resource.

• A. 5
• B. 8
• C. 6
• D. 2

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html

NEW QUESTION 8
In AWS, which service provides a reliable and inexpensive way to backup and archive CloudTrail log files?

• A. Amazon Archiver
• B. Amazon Glacier
• C. AWS Storage Gateway
• D. Amazon Elastic Block Store

Answer: B

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/faqs/

NEW QUESTION 9
You have just provisioned a new VPC a with a CIDR block of 172.16.12.0/24. The entire CIDR block is fully utilised by subdividing it into 6 subnets, we will refer to these as Subnet1 through to Subnet6.
The first 2 subnets (Subnet1 and Subnet2) are the same size. The last 4 subnets (Subnet3, Subnet4, Subnet5, Subnet6) are also the same size. Subnet5 is half the size of Subnet2. The address space as occupied by the first two subnets is contiguous, as is the address space occupied by the last 4 subnets. Within Subnet3 AWS reserves the address 172.16.12.129 for the VPC router. Select the correct IP address reserved by AWS for DNS in the Subnet2.

• A. 172.16.64.1
• B. 172.16.64.65
• C. 172.16.12.66
• D. 172.16.12.64

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

NEW QUESTION 10
You have been tasked with migrating your company’s proprietary massively large dataset sorting application to AWS. The application currently runs on 4 highly spec’d servers that are in a cluster arrangement and runs 24x7, with the average CPU utilisation across any 24hr period being approx 85% - the migration of this cluster once up and running on AWS is expected to run similarly. The servers shuffile data internally and between themselves. Your company’s financial performance is entirely dependent on the speed at which it can sort your customers datasets, that is the faster a sorted result can be returned the better your company’s bottom line. Of the choices presented below, select the optimal network configuration that will ensure the best financial results for your company.

• A. Disable Jumbo Frames to ensure better data throughput between instances
• B. Enable Jumbo Frames to ensure better data throughput between instances
• C. Create an autoscaled group of c4.8xlarge instances - with min 1 and max 4 - this will ensure your operational costs a minimal
• D. Configure a CloudWatch Alarm to add more CPUs to the instances when average cluster CPU utilisation breaches 85%

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/network_mtu.html

NEW QUESTION 11
Which other AWS service is used to track ‘Related Events’ within the Configuration Item?

• A. AWS WAF
• B. SQS
• C. AWS CloudTrail
• D. S3

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#configitem- table

NEW QUESTION 12
Within the TCP/IP model what is the name of the Packet Data Unit (PDU) used between Transport Layers for communication between sender and receiver

• A. Frames
• B. Packets
• C. Data
• D. Segments

Answer: D

Explanation:
Reference:
https://en.wikipedia.org/wiki/Transmission_Control_Protocol

NEW QUESTION 13
You would like to automate the monitoring of changes in the configurations of your AWS resources and respond programmatically to configurations of only a certain type. To do this, you could use Amazon ______ as the endpoint for the Amazon SNS topics that generate messages from AWS Config.

• A. Kinesis
• B. Simple Email Service (SES)
• C. Simple Storage Service (S3)
• D. Simple Queue Service (SQS)

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/monitor-resource-changes.html

NEW QUESTION 14
Over which of the following Ethernet standards does AWS Direct Connect link your internal network to an AWS Direct Connect location?

• A. Copper backplane cable
• B. Twisted pair cable
• C. Single mode fiber-optic cable
• D. Shielded balanced copper cable

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html

NEW QUESTION 15
You have many IAM users with the ability to create EC2 volumes. Most of the data your team works with is sensitive, so you would like to make sure all volumes are encrypted. How might you facilitate this requirement?

• A. Create an AWS KMS policy and attach it to all IAM users that can create EC2 volumes
• B. Use AWS Config and create a rule that requires all volumes, upon creation, be encrypted.
• C. Use AWS Config to send out reminders to IAM users every time they create an EC2 volume.
• D. Set EC2 to notify creators to encrypt their EC2 volume

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html

NEW QUESTION 16
A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services does not provide detailed monitoring with CloudWatch?

• A. AWS Route53
• B. AWS EMR
• C. AWS ELB
• D. AWS RDS

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

NEW QUESTION 17
Use _____ to get more visibility into the health of your AWS Elastic Beanstalk application and take appropriate actions in case of hardware failure or performance degradation.

• A. Amazon Elastic Beanstalk command line
• B. Amazon EC2 log files
• C. Amazon CloudWatch
• D. Amazon Load balancing

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.concepts.design.html

NEW QUESTION 18
AWS Config flags a resource as ______ if a resource violates any conditions of an AWS Config rule that it evaluates on the resource in question.

• A. corrupted
• B. noncompliant
• C. invalid
• D. misconfigured

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html

NEW QUESTION 19
A user is collecting 1000 records per second. The user wants to send the data to CloudWatch using a custom namespace, Which of the below mentioned options is recommended for this activity?

• A. Aggregate the data with statistics, such as Min, max, Average, Sum and Sample data and send the data to CloudWatch
• B. Send all the data values to CloudWatch in a single command by separating them with a comm
• C. CloudWatch will parse automatically
• D. It is not possible to send all the data in one cal
• E. Thus, it should be sent one by on
• F. CloudWatch will aggregate the data automatically
• G. Create one csv file of all the data and send a single file to CloudWatch

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/publishingMetrics.html

NEW QUESTION 20
You are the AWS cloud architect and have been tasked with designing an appropriate subnetting design for your production VPC. Your production VPC requires secure communications back to the corporate private network. Quality of Service (QoS) is very important 24x7 for this particular connection, as real-time data is passed continually backwards and forwards between your on-prem bioinformatics enterprise application, and the number crunching servers deployed in the cloud. Any potential latency incurred on this connection will have a direct impact on the company's ability to attract investors and expansion into new markets. Select the correct network configuration that best facilitates your company's continued growth plans.

• A. Provision a Direct Connect connection - between your service provider's data center and the AWS region that your cloud compute resources exist in . Configure just a Private VirtualInterfac
• B. As this is a Direct Connection, a Virtual Private Gateway is not required
• C. Configure a site-to-site layer 2 software router using OpenVPN within your VPC and ensure that QoS enabled - this is a secure and cheap option
• D. Configure a site-to-site layer 3 software router using OpenVPN within your VPC and ensure that QoS enabled - this is a secure and cheap option
• E. Provision a Direct Connect connection - between your existing service provider's data center and the AWS region that your cloud compute resources exist i
• F. Configure a Virtual Private Gateway and Private Virtual Interface

Answer: D

Explanation:
Reference:
https://aws.amazon.com/directconnect/faqs/

NEW QUESTION 21
In order to change the name of the AWS Config _____ , you must stop the configuration recorder, delete the current one, and create a new one with a new name, since there can only be one of these per AWS account.

• A. SNS topic
• B. configuration history
• C. delivery channel
• D. S3 bucket path

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/update-dc.html

NEW QUESTION 22
You can use the ______ page of the AWS Config console to look up resources that AWS Config has discovered, including deleted resources and resources that are not currently being recorded.

• A. snapshot listing
• B. configuration history
• C. resource inventory
• D. resource database

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/looking-up-discovered-resources.html

NEW QUESTION 23
......