Amazon ANS-C00 Online Practice Questions and Exam Preparation

Amazon ANS-C00 Online Questions & Answers

• Question 1:

  You have a hybrid infrastructure, and you need AWS resources to be able to resolve your on-premises DNS names. You have configured a DNS server on an EC2 instance in your 10.1.3.0/24 subnet. This subnet resides on the VPC 10.1.0.0/16. What step should you take to accomplish this?

  A. Configure your DNS server to forward queries for the private hosted zone to 10.1.3.2.
  B. Configure the DHCP option set in the VPC to point to the EC2 DNS server.
  C. Configure your DNS server to forward queries for the private hosted zone to 10.1.0.2.
  D. Disable the source/destination check flag for the DNS instance.
  B. Configure the DHCP option set in the VPC to point to the EC2 DNS server.

• Question 2:

  You can turn on the AWS Config service from the AWS CLI by running the subscribe command and passing as parameters a valid IAM role, SNS topic, and ____.

  A. EBS volume
  B. EC2 instance
  C. S3 bucket
  D. Kinesis stream
  C. S3 bucket

• Question 3:

  A company installed an AWS Site-to-Site VPN and configured it to use two tunnels. The company has learned that the VPN connectivity is unstable. During a ping test from the on-premises data center to AWS, a network engineer notices that the first few ICMP replies time out but that subsequent requests are successful. The AWS Management Console shows that the status for both tunnels last changed at the same time the ping responses were successfully received.

  Which steps should the network engineer take to resolve the instability? (Choose two.)

  A. Enable dead peer detection (DPD) on the customer gateway device.
  B. Change the tunnel configuration to active/standby on the virtual private gateway.
  C. Use AS PATH prepending on one path to cause all traffic to prefer that tunnel.
  D. Send ICMP requests to an instance in the VPC every 5 seconds from the on-premises network.
  E. Use a higher multi-exit discriminator (MED) value on the preferred path to prefer that tunnel.
  C. Use AS PATH prepending on one path to cause all traffic to prefer that tunnel.
  E. Use a higher multi-exit discriminator (MED) value on the preferred path to prefer that tunnel.

• Question 4:

  Which statement about placement groups is incorrect?

  A. A placement group is a logical grouping of instances in a single AZ.
  B. If you stop an instance and restart it, it will always return to the same placement group.
  C. To help ensure capacity in a placement group, deploy all instances at once.
  D. There is no charge for creating a placement group.
  B. If you stop an instance and restart it, it will always return to the same placement group.

• Question 5:

  You have set up an S3 endpoint, and you want to restrict some instances from being able to access it. These instances are all in the same subnet, so you cannot simply remove the prefix list from the route table. What two approaches can you take to solve this? (Choose two.)

  A. Remove any access to the PL in the security group attached to the instances.
  B. Add A rule in the NACL to block the prefix list ID outbound.
  C. This is not possible.
  D. Modify the endpoint policy.
  A. Remove any access to the PL in the security group attached to the instances.
  D. Modify the endpoint policy.

• Question 6:

  Which statement about VPC endpoints is incorrect?

  A. Endpoints are transitive for Direct Connect connections.
  B. Endpoints cannot be extended out of a VPC.
  C. Endpoints cannot be tagged.
  D. An S3 endpoint allows Amazon AMIs to install some software.
  A. Endpoints are transitive for Direct Connect connections.

• Question 7:

  In Amazon CloudFront, to link to your objects, if your domain name is d111111abcdef8.cloudfront.net and your object is image.jpg, then the URL for the link in your webpage will be _____.

  A. http://d111111abcdef8.cloudfront.net/images/image.jpg
  B. http://d111111abcdef8.dns/images/image.jpg
  C. http://d111111abcdef8.dns/image.jpg
  D. http://d111111abcdef8.cloudfront.net/image.jpg
  D. http://d111111abcdef8.cloudfront.net/image.jpg

• Question 8:

  Does Amazon VPC support multicast or broadcast?

  A. Yes, both.
  B. It doesn't support any of them.
  C. Multicast yes, Broadcast no.
  D. Both, but only outside Amazon VPC.
  B. It doesn't support any of them.

• Question 9:

  You work for an international corporation that uses AWS. Due to regulations, you are now required to route the US and China to two different websites. You set up the records and now no other countries can access your site. Why is this?

  A. You forgot to set a default geolocation record.
  B. You probably broke your DNS.
  C. You must have a geolocation in place for every country.
  D. Geolocation features are only available in CloudFront.
  A. You forgot to set a default geolocation record.

• Question 10:

  Which one of these healthcheck reason codes is not a valid reason code?

  A. Elb.InitialHealthChecking
  B. Target.UnHealthy
  C. Target.NotInUse
  D. Target.InvalidState
  B. Target.UnHealthy