Amazon ANS-C00 Online Practice Questions and Exam Preparation

Amazon ANS-C00 Online Questions & Answers

• Question 321:

  You currently use a single security group assigned to all nodes in a clustered NoSQL database. Only your cluster members in one region must be able to connect to each other. This security group uses a self-referencing rule using the cluster security group's group-id to make it easier to add or remove nodes from the cluster. You need to make this database comply with out-of-region disaster recovery requirements and ensure that the network traffic between the nodes is encrypted when travelling between regions. How should you enable secure cluster communication while deploying additional cluster members in another AWS region?

  A. Create an IPsec VPN between AWS regions, use private IP addresses to route traffic, and create cluster security group rules that reference each other's security group-id in each region.
  B. Create an IPsec VPN between AWS regions, use private IP addresses to route traffic, and create cluster security group CIDR-based rules that correspond with the VPC CIDR in the other region.
  C. Use public IP addresses and TLS to securely communicate between cluster nodes in each AWS region, and create cluster security group CIDR-based rules that correspond with the VPC CIDR in the other region.
  D. Use public IP addresses and TLS to securely communicate between cluster nodes in each AWS region, and create cluster security group rules that reference each other's security group-id in each region.
  D. Use public IP addresses and TLS to securely communicate between cluster nodes in each AWS region, and create cluster security group rules that reference each other's security group-id in each region.

• Question 322:

  To determine whether a log file was modified, deleted, or unchanged after CloudTrail delivered it, you can use ____.

  A. trusted signers
  B. optimistic locking
  C. integrity validation
  D. root credentialing
  C. integrity validation

• Question 323:

  A Lambda function needs to access the private address of an Amazon ElastiCache cluster in a VPC. The Lambda function also needs to write messages to Amazon SQS. The Lambda function has been configured to run in a subnet in the VPC.

  Which of the following actions meet the requirements? (Choose two.)

  A. The Lambda function needs an IAM role to access Amazon SQS
  B. The Lambda function must route through a NAT gateway or NAT instance in another subnet to access the public SQS API.
  C. The Lambda function must be assigned a public IP address to access the public Amazon SQS API.
  D. The ElastiCache server outbound security group rules must be configured to permit the Lambda function's security group.
  E. The Lambda function must consume auto-assigned public IP addresses but not elastic IP addresses.
  A. The Lambda function needs an IAM role to access Amazon SQS
  C. The Lambda function must be assigned a public IP address to access the public Amazon SQS API.

• Question 324:

  A company wants to use thin clients running virtual desktops to replace 500 desktop computers used by its call center employees. The company is evaluating Amazon WorkSpaces as a solution.

  A network engineer who is testing with a thin client is unable to connect to Amazon WorkSpaces. After entering credentials, the network engineer receives the following error:

  "An error occurred while launching your WorkSpace. Please try again."

  What should the network engineer do to resolve this issue?

  A. Update the inbound rules on the network ACL on the subnets used for Amazon WorkSpaces to allow UDP on port 4172 and TCP on port 4172.
  B. Update the company's corporate firewall to allow outbound access to UDP on port 4172 and TCP on port 4172. Open inbound ephemeral ports explicitly to allow return communication.
  C. Update the inbound rules on the security group assigned to Amazon WorkSpaces to allow UDP on port 4172 and TCP on port 4172.
  D. Update the company's corporate firewall to allow inbound access to UDP on port 4172 and TCP on port 4172. Open outbound ephemeral ports explicitly to allow return communication.
  C. Update the inbound rules on the security group assigned to Amazon WorkSpaces to allow UDP on port 4172 and TCP on port 4172.

• Question 325:

  Your company is expanding its cloud infrastructure and moving many of its flat files and static assets to S3. You currently use a VPN to access your compute infrastructure, but you require more reliability for your static files as you are offloading all of your important data to AWS. What is your best course of action while keeping costs low?

  A. Create a Direct Connect connection using a Private VIF to access both compute and S3 resources.
  B. Create an S3 endpoint and create a route to the endpoint prefix list for your VPN to allow access to your S3 resources.
  C. Create two Direct Connect connections. Each connected to a Private VIF to ensure maximum resiliency.
  D. Create a Direct Connect connection using a Public VIF and route your VPN over the DX connection to your VPN endpoint.
  D. Create a Direct Connect connection using a Public VIF and route your VPN over the DX connection to your VPN endpoint.

• Question 326:

  Within the TCP/IP model what is the name of the Packet Data Unit (PDU) used between Transport Layers for communication between sender and receiver

  A. Frames
  B. Packets
  C. Data
  D. Segments
  D. Segments

• Question 327:

  You have a data center with a 2 connection LAG. You wish to add 2 more connections, how many LOAs must you complete?

  A. 2
  B. 1
  C. 4
  A. 2

• Question 328:

  Your company currently has a LAG to AWS with two 1Gbps connections. What is the best way to increase throughput on this LAG?

  A. Add three 1Gbps connections to the LAG.
  B. Add one 10Gbps connections to the LAG.
  C. Configure your router to use "jumbo frames" with an MTU of 9001.
  D. Add two 1Gbps connections to the LAG.
  D. Add two 1Gbps connections to the LAG.

• Question 329:

  How many tunnels do you get with each VPN connection hosted by AWS?

  A. 4
  B. 1
  C. 2
  D. 8
  C. 2

• Question 330:

  In AWS Direct Connect, to provide for failover, AWS recommends that you request and configure two dedicated connections to AWS. These connections can terminate on one or two routers in your network. You can do this while __________________ with AWS Direct Connect step.

  A. creating a Virtual Interface
  B. configuring redundant connections
  C. completing the cross-connect
  D. verifying your Virtual Interface
  B. configuring redundant connections