Amazon Amazon Certifications ANS-C00 Questions & Answers

• Question 81:

  A user is having data generated randomly based on a certain event. The user wants to upload that data to CloudWatch. It may happen that event may not have data generated for some period due to randomness.

  Which of the below mentioned options is a recommended option for this case?

  A. For the period when there is no data, the user should not send the data at all

  B. The user must upload the data to CloudWatch as having no data for some period will cause an error at CloudWatch monitoring

  C. For the period when there is no data the user should send the value as 0

  D. For the period when there is no data the user should send a blank value

  Correct Answer: C

  Explanation: AWS CloudWatch supports the custom metrics. The user can always capture the custom data and upload the data to CloudWatch using CLI or APIs. When the user data is more random and not generated at regular intervals, there can be a period which has no associated data. The user can either publish the zero

  (0) value for that period or not publish the data at all. It is recommended that the user should publish zero instead of no value to monitor the health of the application. This is helpful in an alarm as well as in the generation of the sample data count.

  Reference: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/ publishingMetrics.html

• Question 82:

  A user is collecting 1000 records per second. The user wants to send the data to CloudWatch using a custom namespace. Which of the below mentioned options is recommended for this activity?

  A. Aggregate the data with statistics, such as Min, max, Average, Sum and Sample data and send the data to CloudWatch

  B. Send all the data values to CloudWatch in a single command by separating them with a comma. CloudWatch will parse automatically

  C. It is not possible to send all the data in one call. Thus, it should be sent one by one. CloudWatch will aggregate the data automatically

  D. Create one csv file of all the data and send a single file to CloudWatch

  Correct Answer: A

  Explanation: AWS CloudWatch supports the custom metrics. The user can always capture the custom data and upload the data to CloudWatch using CLI or APIs. The user can publish data to CloudWatch as single data points or as an aggregated set of data points called a statistic set using the command put-metric-data. It is recommended that when the user is having multiple data points per minute, he should aggregate the data so that it will minimize the number of calls to put-metric-data. In this case it will be single call to CloudWatch instead of 1000 calls if the data is aggregated.

  Reference: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/ publishingMetrics.html

• Question 83:

  You have a web application (app.mycompany.com) running on an EC2 instance with a single elastic network interface in a subnet in a VPC. Because of a network redesign, you need to move the web application to a different subnet in the same Availability Zone.

  Which of the following migration strategies meets the requirements?

  A. Create an elastic network interface in the new subnet. Attach this interface to the instance, and detach the old interface.

  B. Launch a new instance in the subnet via an AMI created from the instance, and redirect new connections to this new instance using DNS. Decommission the old instance.

  C. Make an API call to change the subnet association of the elastic network interface.

  D. Change the IP addresses manually to another subnet within the server operating system.

  Correct Answer: B

  Explanation:

  Instances cannot change subnets, so a new instance must be created (Response B). A is wrong because

  you cannot remove the original elastic network interface. C is not possible. D is wrong because the OS has

  no ability to affect the AWS assigned IP addresses.

• Question 84:

  Your Amazon Kinesis application receives data streams from thousands of devices. The data is then stored in an on-premises Hadoop cluster. You are concerned about historical data that shows periods of sustained traffic between 1 Gbps and 2 Gbps during peaks. You must ensure that you have secure, fault-tolerant connectivity between Amazon Kinesis and your data center.

  What should you implement to address these needs?

  A. Deploy a single 1-Gbps Direct Connect connection with a VPN backup.

  B. Deploy three 1-Gbps Direct Connect connections.

  C. Deploy two 1-Gbps Direct Connect connections.

  D. Set up an IPsec VPN connection over Direct Connect with two tunnels.

  Correct Answer: B

  Explanation:

  Three connections are required to provide fault tolerance. All of the other options would be unable to

  handle the peak loads over 1 Gbps without exceeding the available bandwidth.

• Question 85:

  Your company has installed an AWS Direct Connect connection in an ap-southeast-1 Direct Connect location. A public virtual interface is configured through a router to a dedicated firewall. You advertise your company's public /24 CIDR block to AWS with AS 65500. The company maintains a separate, corporate Internet firewall to map all outbound traffic to a single IP. This firewall maintains a BGP relationship with an upstream Internet provider that has delegated the public IP block your company uses. When the BGP session for the public virtual interface is up, corporate network users cannot access Amazon S3 resources in the ap-southeast-1 region.

  Which step should you take to provide concurrent AWS and Internet access?

  A. Configure AS-PATH prepending for the public virtual interface.

  B. Advertise a host route for the corporate firewall on the public virtual interface.

  C. Advertise a host route for the corporate firewall to the upstream Internet provider.

  D. NAT the traffic destined for AWS from the dedicated firewall using the public virtual interface.

  Correct Answer: D

  Explanation: When outgoing traffic is routed via the corporate firewall, its return path is via the Direct Connect public virtual interface and therefore through the dedicated firewall. This dedicated firewall does not track the original NAT session and subsequently drops the traffic. Answer A is incorrect because AWS will always prefer Direct Connect over Internet routing. Answer B is incorrect because return traffic is still processed by the dedicated firewall. Answer C is incorrect because it does not change the traffic flow.

• Question 86:

  With AWS CloudTrail, creating multiple trails in one region allows ____ to focus on one aspect of AWS operation.

  A. callers

  B. events

  C. buckets

  D. stakeholders

  Correct Answer: D

  Explanation: With multiple trails, different stakeholders such as security administrators, software developers, and IT auditors can create and manage their own trails. For example, a security administrator can create a trail that applies to all regions and configure encryption using one Key Management Service key. A developer can create a trail that applies to one region for troubleshooting operational issues.

  Reference: https://aws.amazon.com/cloudtrail/faqs/

• Question 87:

  Which service is used by default to store the CloudTrail log files?

  A. Elastic Block Store (EBS)

  B. Redshift

  C. Simple Storage Service (S3)

  D. Glacier

  Correct Answer: C

  Explanation: S3 is used by default to store the CloudTrail log files and a dedicated S3 bucket is required during the creation of a new Trail

  Reference: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-working-with-logfiles.html

• Question 88:

  In Amazon CloudFront, to link to your objects, if your domain name is d111111abcdef8.cloudfront.net and your object is image.jpg, then the URL for the link in your webpage will be _____.

  A. http://d111111abcdef8.cloudfront.net/images/image.jpg

  B. http://d111111abcdef8.dns/images/image.jpg

  C. http://d111111abcdef8.dns/image.jpg

  D. http://d111111abcdef8.cloudfront.net/image.jpg

  Correct Answer: D

  Explanation:

  In Amazon CloudFront, to link to your objects, if your domain name was d111111abcdef8.cloudfront.net

  and your object was image.jpg, the URL for the link would be: http://d111111abcdef8.cloudfront.net/

  image.jpg.

  If your object is in a folder within your bucket, include the folder in the URL. For example, if image.jpg is

  located in an images folder, then the URL would be:

  http://d111111abcdef8.cloudfront.net/images/image.jpg.

  Reference: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/GettingStarted.html

• Question 89:

  In Amazon CloudFront, while creating a web distribution, which of the following can be used as origin servers?

  A. Any combination AWS Glacier archives and Oracle server

  B. Any combination of Amazon DB intances and XML servers

  C. Any combination of Amazon S3 buckets and HTTP servers

  D. Any combination of Amazon Data Insights and PHP servers

  Correct Answer: C

  Explanation: In Amazon CloudFront, while creating a web distribution, you can create one or more Amazon S3 buckets or configure HTTP servers as your origin servers. An origin is the location where you store the original version of your web content. When CloudFront gets a request for your files, it goes to the origin to get the files that it distributes at edge locations. You can use any combination of Amazon S3 buckets and HTTP servers as your origin servers.

  Reference: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-webcreating.html

• Question 90:

  In the context of Amazon CloudFront Actions, you use the _____ when specifying APIs in IAM policies.

  A. object names

  B. class names

  C. entity names

  D. action names

  Correct Answer: D

  Explanation:

  In an AWS IAM policy, you can specify any and all API actions that Amazon CloudFront offers. The action

  name must be prefixed with the lowercase string cloudfront. For example:

  cloudfront:GetDistributionConfig

  cloudfront:ListInvalidations

  cloudfront:* (for all CloudFront actions).

  In the reference link, there are tables that list the canonical names for all CloudFront actions. Use these

  canonical names when specifying APIs in IAM policies.

  Reference: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/UsingWithIAM.html