Amazon ANS-C00 Online Practice Questions and Exam Preparation

Amazon ANS-C00 Online Questions & Answers

• Question 91:

  What are 2 possible ALIAS records? (Choose two.)

  A. DynamoDB
  B. Elastic Beanstalk
  C. CloudFront
  D. EC2 Instance
  B. Elastic Beanstalk
  C. CloudFront

• Question 92:

  A media company that is based in Los Angeles, California, closed all of its on-premises data centers due to rising costs and inconsistent utilization. The company has deployed its video editing applications on Amazon EC2 instances in the

  AWS Cloud. The company has deployed to the us-west-1 Region and uses the internet for delivery of the applications.

  Users are reporting high latency from Los Angeles to us-west-1. The company needs to reduce the latency to the EC2 instances while continuing to use the internet for delivery.

  Which solution meets these requirements?

  A. Order and deploy an AWS Direct Connect private VIF to us-west-1.
  B. Enable a Los Angeles-based AWS Local Zone. Continue to run the EC2 instances in us-west-1.
  C. Order and deploy an AWS Direct Connect public VIF to us-west-2.
  D. Enable a Los Angeles-based AWS Local Zone. Redeploy the EC2 instances in the Local Zone.
  A. Order and deploy an AWS Direct Connect private VIF to us-west-1.

• Question 93:

  Your security team implements a host-based firewall on all of your Amazon Elastic Compute Cloud (EC2) instances to block all outgoing traffic. Exceptions must be requested for each specific requirement. Until you request a new rule, you cannot access the instance metadata service. Which firewall rule should you request to be added to your instances to allow instance metadata access?

  A. Inbound; Protocol tcp; Source [Instance's EIP]; Destination 169.254.169.254
  B. Inbound; Protocol tcp; Destination 169.254.169.254; Destination port 80
  C. Outbound; Protocol tcp; Destination 169.254.169.254; Destination port 80
  D. Outbound; Protocol tcp; Destination 169 .254.169.254; Destination port 443
  C. Outbound; Protocol tcp; Destination 169.254.169.254; Destination port 80

• Question 94:

  Your website utilizes EC2, S3, ELB-Classic, and CloudFront. Your manager has shifted focus to security and wants you to ensure the site is as secure as possible. What two items could you recommend? (Choose two.)

  A. An NACL that blocks all ports to your subnets.
  B. A restricted bucket policy.
  C. A WAF on the load balancer.
  D. A WAF on your CloudFront distribution.
  B. A restricted bucket policy.
  D. A WAF on your CloudFront distribution.

• Question 95:

  You have two enhanced networking capable instances in a placement group. One with an Intel network interface and one with an ENA. What network speed will be achieved between the two?

  A. 10Gbps
  B. 20Gbps
  C. 5Gbps
  D. You cannot have different network interfaces in a placement group.
  A. 10Gbps

• Question 96:

  Which of the following statements is true of AWS Elastic Beanstalk?

  A. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, meaning CloudWatch costs are applied to your AWS account for any alarms that you use.
  B. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, and both are free of charge.
  C. AWS Elastic Beanstalk doesn't use CloudWatch for monitoring and alarms, but you pay extra for any AWS Elastic Beanstalk Alarm you set in the monitoring tool.
  D. AWS Elastic Beanstalk has its own free-of-charge monitoring tool, and you are not charged for the alarm you set.
  A. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, meaning CloudWatch costs are applied to your AWS account for any alarms that you use.

• Question 97:

  Select the VPC Peering statement below that is NOT true

  A. VPC peering supports transitive peering relationships for IPv6 traffic but not IPv4
  B. VPC peering can be performed between VPCs in different AWS accounts in the same region
  C. TCP connections can be performed between peered VPCs
  D. UDP connections can be performed between peered VPCs
  A. VPC peering supports transitive peering relationships for IPv6 traffic but not IPv4

• Question 98:

  What are two routing methods used by Route 53? (Choose two.)

  A. RIP
  B. Failover
  C. Latency
  D. AS_PATH
  B. Failover
  C. Latency

• Question 99:

  Your company needs to directly update an S3 bucket that serves as a CloudFront origin with the most reliability possible. Your company also has a set of private EC2 servers that it needs to access with the same reliability. Which combination will provide the best solution?

  A. A Virtual Gateway and a Public VIF
  B. A Private VIF is all you need to access all AWS resources.
  C. A Hosted VIF and a Private VIF
  D. A Public VIF and a Private VIF
  D. A Public VIF and a Private VIF

• Question 100:

  What is the IPv6 subnet CIDR used by a VPC?

  A. /128
  B. /56
  C. /48
  D. /16
  B. /56