Amazon ANS-C00 Online Practice Questions and Exam Preparation

Amazon ANS-C00 Online Questions & Answers

• Question 281:

  You deploy your Internet-facing application is the us-west-2(Oregon) region. To manage this application and upload content from your corporate network, you have a 1-Gbps AWS Direct Connect connection with a private virtual interface via one of the associated Direct Connect locations. In normal operation, you use approximately 300 Mbps of the available bandwidth, which is more than your Internet connection from the corporate network. You need to deploy another identical instance of the application is us-east-1(N Virginia) as soon as possible. You need to use the benefits of Direct Connect. Your design must be the most effective solution regarding cost, performance, and time to deploy.

  Which design should you choose?

  A. Use the inter-region capabilities of Direct Connect to establish a private virtual interface from us-west-2 Direct Connect location to the new VPC in us-east-1.
  B. Deploy an IPsec VPN over your corporate Internet connection to us-east-1 to provide access to the new VPC.
  C. Use the inter-region capabilities of Direct Connect to deploy an IPsec VPN over a public virtual interface to the new VPC in us-east-1.
  D. Use VPC peering to connect the existing VPC in us-west-2 to the new VPC in us-east-1, and then route traffic over Direct Connect and transit the peering connection.
  A. Use the inter-region capabilities of Direct Connect to establish a private virtual interface from us-west-2 Direct Connect location to the new VPC in us-east-1.

• Question 282:

  You have two placement groups in a VPC. What communication speed can be expected between the two placement groups?

  A. 5Gbps
  B. 10Gbps
  C. 20Gbps
  D. You cannot communicate between two placement groups.
  A. 5Gbps

• Question 283:

  A user has created a VPC with CIDR 20.0.0.0/16 with only a private subnet and VPN connection using the VPC wizard. The user wants to connect to the instance in a private subnet over SSH. How should the user define the security rule for SSH?

  A. The user can connect to a instance in a private subnet using the NAT instance
  B. The user has to create an instance in EC2 Classic with an elastic IP and configure the security group of a private subnet to allow SSH from that elastic IP
  C. Allow Inbound traffic on port 22 from the user's network
  D. Allow Inbound traffic on port 80 and 22 to allow the user to connect to a private subnet over the internet
  C. Allow Inbound traffic on port 22 from the user's network

• Question 284:

  How many BGP advertised routes can you have per route table?

  A. 50
  B. 200
  C. 100
  D. As many as you want as long as you contact AWS first.
  C. 100

• Question 285:

  Which CloudWatch attributes are used for the statistics generation?

  A. All the options are used
  B. Dimension
  C. Data point unit
  D. NameSpace
  A. All the options are used

• Question 286:

  Your organization uses a VPN to connect to your VPC but must upgrade to a 1-G AWS Direct Connect connection for stability and performance. Your telecommunications provider has provisioned the circuit from your data center to an AWS Direct Connect facility and needs information on how to cross-connect (e.g., which rack/port to connect).

  What is the AWS-recommended procedure for providing this information?

  A. Create a support ticket. Provide your AWS account number and telecommunications company's name and where you need the Direct Connect connection to terminate.
  B. Create a new connection through your AWS Management Console and wait for an email from AWS with information.
  C. Ask your telecommunications provider to contact AWS through an AWS Partner Channel. Provide your AWS account number.
  D. Contact an AWS Account Manager and provide your AWS account number, telecommunications company's name, and where you need the Direct Connect connection to terminate.
  A. Create a support ticket. Provide your AWS account number and telecommunications company's name and where you need the Direct Connect connection to terminate.

• Question 287:

  You operate a production VPC with both a public and a private subnet. Your organization maintains a restricted Amazon S3 bucket to support this production workload. Only Amazon EC2 instances in the private subnet should access the bucket. You implement VPC endpoints(VPC-E) for Amazon S3 and remove the NAT that previously provided a network path to Amazon S3. The default VPC-E policy is applied. Neither EC2 instances in the public or private subnets are able to access the S3 bucket.

  What should you do to enable Amazon S3 access from EC2 instances in the private subnet?

  A. Add the CIDR address range of the private subnet to the S3 bucket policy.
  B. Add the VPC-E identified to the S3 bucket policy.
  C. Add the VPC identifier for the production VPC to the S3 bucket policy.
  D. Add the VPC-E identifier for the production VPC to endpoint policy.
  A. Add the CIDR address range of the private subnet to the S3 bucket policy.

• Question 288:

  True or false: A VPC contains multiple subnets, where each subnet can span multiple Availability Zones.

  A. This is true only for US regions.
  B. This is false.
  C. This is true.
  D. This is true only if requested during the set-up of VPC.
  B. This is false.

• Question 289:

  You are building an application that provides real-time audio and video services to customers on the Internet. The application requires high throughput. To ensure proper audio and video transmission, minimal latency is required. Which of the following will improve transmission quality?

  A. Enable enhanced networking
  B. Select G2 instance types
  C. Enable jumbo frames
  D. Use multiple elastic network interfaces
  D. Use multiple elastic network interfaces

• Question 290:

  Which service is used by default to store the CloudTrail log files?

  A. Elastic Block Store (EBS)
  B. Redshift
  C. Simple Storage Service (S3)
  D. Glacier
  C. Simple Storage Service (S3)