Amazon Amazon Certifications ANS-C00 Questions & Answers

• Question 91:

  In Amazon CloudFront, which of the following is true of Smooth Streaming?

  A. It is a Microsoft format for streaming of media files.

  B. It is a CloudFront format for streaming of media files in RTMP distribution.

  C. It is the Adobe format for streaming of media files.

  D. It is a CloudFront format for streaming of media files in web distribution.

  Correct Answer: A

  Explanation: In the context of Amazon CloudFront, you can use CloudFront for on-demand streaming of media files that you've transcoded into the Microsoft Smooth Streaming format. To distribute Smooth Streaming content on demand, you have two options: As the origin for your distribution, specify a web server that can stream files that have been transcoded into Microsoft Smooth Streaming format. Enable Smooth Streaming in a CloudFront distribution. Smooth Streaming is a property of cache behaviors, which means that you can use one distribution to distribute Smooth Streaming media files as well as other content.

  Reference: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/on-demandstreaming-smooth.html

• Question 92:

  You need to ensure the files served by your CloudFront distribution are only accessible to authorized users. You hope to serve thousands of users. What two steps should you take? (Choose two.)

  A. Configure signed cookies.

  B. Configure a WAF.

  C. Configure a bucket policy restricting the bucket to only CloudFront OAI.

  D. Configure an SSL on the distribution.

  Correct Answer: AC

  Explanation:

  A WAF can block users from accessing the site and CloudFront, but that's not the best option since you

  have so many users. An SSL will encrypt, but not prevent a user from viewing the content.

• Question 93:

  Your company wishes to improve the performance of its EC2 instances. They require low latency and high throughput. They are currently deployed on T2.medium. It is imperative that you experience as little downtime as possible, but cost and performance are most important. How should you accomplish this?

  A. Create AMIs from the instances, create new instances on t2.medium, and start those instances in a placement group.

  B. Create AMIs from the instances, deploy the instances as i3.large, and start those instances in a placement group.

  C. Stop the instances and restart them in a placement group.

  D. Add an extra ENI to the instances and team them to provide greater throughput.

  Correct Answer: B

  Explanation:

  T2. medium is not compatible with placement groups. You cannot team ENIs to add more throughput on

  AWS.

• Question 94:

  You work for a company that has several instances running with automatically assigned public IPs. You performed an upgrade that required you to restart the instances from the console and your DNS records don't work anymore. What happened?

  A. Your network interfaces need to be reinitialized

  B. You need to restart Route 53

  C. Restarting too many instances at once overloads the system

  D. The instances changed their public IP addresses on restart

  Correct Answer: D

  Explanation:

  Automatically assigned public IPs change on stop or termination of an instance.

• Question 95:

  Your company has decided to deploy AWS WorkSpaces for its hosted desktop solution. Your manager is very concerned with security and cost, as well as reliability.

  What two things should be deployed? (Choose two.)

  A. VPN

  B. AWS Hosted AD

  C. Direct Connect

  D. AD Connector

  Correct Answer: CD

  Explanation:

  A VPN should be deployed over Direct Connect to ensure the traffic is encrypted. You would use an AD

  Connector here since it doesn't cache any credentials in the cloud. AWS Hosted AD is more expensive

  and caches credentials.

• Question 96:

  You are configuring a VPN to AWS for your company. You have configured the VGW and CGW. You have created the VPN. You have also run the necessary commands on your router. You allowed all TCP and UDP traffic between your datacenter and your VPC. The tunnel still doesn't come up. What is the most likely reason?

  A. You forgot to turn on route propagation in the route table.

  B. You do not have a public ASN.

  C. Your advertised subnet is too large.

  D. You haven't added protocol 50 to your firewall.

  Correct Answer: D

  Explanation:

  You haven't allowed protocol 50 through the firewall. Protocol 50 is different from UDP (17) and TCP (6)

  and requires a rule in your firewall for your VPN tunnel to come up.

• Question 97:

  How many tunnels do you get with each VPN connection hosted by AWS?

  A. 4

  B. 1

  C. 2

  D. 8

  Correct Answer: C

  Explanation:

  All AWS VPNs come with 2 tunnels for resiliency.

• Question 98:

  What is the maximum size of a response body that Amazon CloudFront will return to the viewer?

  A. Unlimited

  B. 5 GB

  C. 100 MB

  D. 20 GB

  Correct Answer: D

  Explanation:

  The maximum size of a response body that CloudFront will return to the viewer is 20 GB.

  Reference: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/

  RequestAndResponseBehaviorS3Origin.html#ResponseBehaviorS3Origin

• Question 99:

  Which of the following is true when you don't configure Amazon CloudFront to forward cookies to your origin?

  A. CloudFront removes the Cookie header from requests that it forwards to your origin.

  B. CloudFront disables viewer requests to your origin, including all cookies.

  C. CloudFront caches your objects based on cookie values.

  D. CloudFront automates code deployments to any instance.

  Correct Answer: A

  Explanation:

  If you don't configure CloudFront to forward cookies to your origin, CloudFront removes the Cookie header

  from requests that it forwards to your origin and removes the Set-Cookie header from responses that it

  returns to your clients.

  Reference: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html

• Question 100:

  In the context of Amazon CloudFront, when you configure the media player, the path you specify to the media file must contain the characters _____________.

  A. flv/std just before the domain name

  B. flv/std immediately after the domain name

  C. cfx/st just before the domain name D. cfx/st immediately after the domain name

  Correct Answer: D

  Explanation:

  In Amazon CloudFront, when you configure the media player, the path you specify to the media file must

  contain the characters cfx/st immediately after the domain name. For example:

  rtmp://s5c39gqb8ow64r.cloudfront.net/cfx/st/mediafile.flv

  Reference: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Streaming_URLs.html