Amazon ANS-C00 Online Practice Questions and Exam Preparation

Amazon ANS-C00 Online Questions & Answers

• Question 111:

  With respect to Amazon CloudFront, which one of the following statements is correct?

  A. For HTTPS web distributions, you cannot forward cookies to your origin.
  B. For both HTTP and HTTPS web distributions, you can choose to forward cookies to your origin.
  C. For HTTP web distributions, you cannot forward cookies to your origin.
  D. For Real Time Messaging Protocol (RTMP) distributions, you can configure CloudFront to process cookies.
  B. For both HTTP and HTTPS web distributions, you can choose to forward cookies to your origin.

• Question 112:

  Your AWS WorkSpaces users are unable to authenticate. What could be one reason for this?

  A. Your AD server is running Windows Server 2016
  B. Port 3389 is not open to your AD server.
  C. Port 389 is not open to your AD server.
  D. Your AD server is running Windows Server 2012 Core Edition.
  C. Port 389 is not open to your AD server.

• Question 113:

  Your on-premises network has an IP address range of 11.11.0.0/16. Only IPs within this network range can be used for inter-server communication. The IP address range 11.11.253.0/24 has been allocated for the cloud.

  You need to design a VPC in AWS. The servers within the VPC should be able to communicate with hosts both on the Internet and on-premises through a VPN connection.

  What combination of configuration steps meets your needs? (Choose two)

  A. Set up the VPC with an IP address range of 11.11.253.0/24.
  B. Set up the VPC with an RFC 1918 private IP address range (e.g., 10.10.10.0/24), and set up a NAT gateway to do translation between 10.10.10.0/24 and 11.11.253.0/24 for all outbound traffic.
  C. Set up a VPN connection between a VGW and an on-premises router, set the VGW as the default gateway for all traffic, and configure the on-premises router to forward traffic to the Internet.
  D. Set up a VPN connection between a VGW and an on-premises router, set the VGW as the default gateway for traffic destined to 11.11.0.0/24, and add a VPC subnet route to point the default gateway to an Internet gateway for Internet traffic.
  E. Set up the VPC with an RFC 1918 private IP address range (e.g., 10.10.10.0/24), and set the VGW to do a source IP translation of all outbound packets to 11.11.0.0/16.
  A. Set up the VPC with an IP address range of 11.11.253.0/24.
  C. Set up a VPN connection between a VGW and an on-premises router, set the VGW as the default gateway for all traffic, and configure the on-premises router to forward traffic to the Internet.

• Question 114:

  An organization delivers high-resolution, dynamic web content. Internet users access the content from a variety of platforms, including mobile, tablet and desktop. Each platform receives a customized experience to account for the differences in viewing modes. A dedicated, automatic-scaling fleet of Amazon EC2 instances is used for each platform to server content based on path-based headers.

  Which combination of services will MINIMIZE cost and MAXIMIZE performance? (Choose two.)

  A. Amazon CloudFront with Lambda@Edge
  B. Network Load Balancer
  C. Amazon S3 static websites
  D. Amazon Route 53 with traffic flow policies
  E. Application Load Balancer
  A. Amazon CloudFront with Lambda@Edge
  E. Application Load Balancer

• Question 115:

  Which of the following does not configure Amazon CloudFront cache behaviors to forward cookies to an origin for web distributions?

  A. Origin server
  B. AWS CLI
  C. Amazon EMR
  D. Amazon S3
  D. Amazon S3

• Question 116:

  You want to send a broadcast message to your 10.0.0.0/24 subnet, which one of these addresses should you use?

  A. 10.0.0.255
  B. 10.0.0.1
  C. 10.0.0.2
  D. You cannot send a broadcast in an AWS VPC.
  D. You cannot send a broadcast in an AWS VPC.

• Question 117:

  Your company has placement groups in two different availability zones. There is a large project coming up and, although resilience is important, cost and speed are the most important factors. The servers in each placement group need to be able to achieve the highest speed possible.

  How can this be achieved?

  A. Create AMIs from all of the instances, terminate them, and deploy them all into one placement group.
  B. In the CLI, run the command "aws ec2 set-placement-group 1 " for all of the instances.
  C. Duplicate the VPC, peer the new VPC, create AMIs of the instances, terminate them, and redeploy them in two separate placement groups between the two VPCs.
  D. Peer the two placement groups using AWS PG Peering.
  A. Create AMIs from all of the instances, terminate them, and deploy them all into one placement group.

• Question 118:

  A company is building a hybrid PCI-DSS compliant application that runs in the us-west-2 Region and on-premises. The application sends access logs from all locations to a single Amazon S3 bucket in us-west-2. To protect this sensitive data, the bucket policy is configured to deny access from public IP addresses.

  How should an engineer configure the network to meet these requirements?

  A. Configure an AWS Direct Connect private virtual interface to the company's AWS VPC in us-west-2. Create a VPC endpoint and configure the on-premises systems to leverage an HTTPS proxy in the VPC to access Amazon S3.
  B. Configure a VPN connection to the company's AWS VPC in us-west-2 and use BGP to advertise routes for Amazon S3.
  C. Configure a Direct Connect connection public virtual interface to us-west-2. Leverage an on-premises HTTPS proxy to send traffic to Amazon S3 over a Direct Connect connection.
  D. Configure a VPN connection to the company's AWS VPC in us-west-2. Create a NAT gateway and configure the on-premises systems to leverage an HTTPS proxy in the VPC to access Amazon S3.
  C. Configure a Direct Connect connection public virtual interface to us-west-2. Leverage an on-premises HTTPS proxy to send traffic to Amazon S3 over a Direct Connect connection.

• Question 119:

  Over which of the following Ethernet standards does AWS Direct Connect link your internal network to an AWS Direct Connect location?

  A. Copper backplane cable
  B. Twisted pair cable
  C. Single mode fiber-optic cable
  D. Shielded balanced copper cable
  C. Single mode fiber-optic cable

• Question 120:

  You would like to automate the monitoring of changes in the configurations of your AWS resources and respond programmatically to configurations of only a certain type. To do this, you could use Amazon ____ as the endpoint for the Amazon SNS topics that generate messages from AWS Config.

  A. Kinesis
  B. Simple Email Service (SES)
  C. Simple Storage Service (S3)
  D. Simple Queue Service (SQS)
  D. Simple Queue Service (SQS)