Grab latest Amazon ANS-C01 Dumps as PDF Updated on 2024
Newly Released ANS-C01 Dumps for AWS Certified Specialty Certified
NEW QUESTION # 59
A company has a hybrid IT architecture with two AWS Direct Connect connections to provide high availability. The services hosted on-premises are accessible using public IPs, and are also on the
172.16.0.0/16 range. The AWS resources are on the 192.168.0.0/18 range. The company wants to use Amazon Elastic Load Balancing for SSL offloading, health checks, and sticky sessions.
What should be done to meet these requirements?
Response:
- A. Create a Network Load Balancer pointing to the on-premises server's private IP address.
- B. Create an Application Load Balancer pointing to the on-premises server's private IP address.
- C. Create a Network Load Balancer pointing to the on-premises server's public IP address.
- D. Create an Amazon CloudFront distribution for the on-premises service and use the public IPs of the onpremises servers as the origin.
Answer: B
NEW QUESTION # 60
Voice calls to international numbers from inside your company must go through an opensource Session Border Controller (SBC) installed on a custom Linux Amazon Machine Image (AMI) in your Virtual Private Cloud (VPC) public subnet.
The SBC handles the real-time media and voice signaling. International calls often have garbled voice, and it is difficult to understand what people are saying.
What may increase the quality of international voice calls?
Response:
- A. Place the SBC in a placement group to reduce latency
- B. Add additional network interfaces to the instance
- C. Enable enhanced networking on the instance.
- D. Use an Application Load Balancer to distribute load to multiple SBCs
Answer: C
NEW QUESTION # 61
You have just deployed a website that utilizes CloudFront, ELB, and S3 to serve content. When users access your site, they are seeing broken image links. What is most likely the problem?
Response:
- A. There is no record in Route 53 pointing cdn.yourdomain.com to the CloudFront ALIAS.
- B. You need to create Origin Access Identity for CloudFront and add it to your bucket policy.
- C. The images in S3 are saved as .png instead of .jpg.
- D. There is no rule in your bucket policy allowing public access.
Answer: B
NEW QUESTION # 62
After creating an AWS Direct Connect connection, what is the earliest point in time that you start receiving port-hour charges?
Response:
- A. When a Virtual Interface (VIF) is created
- B. 90 days from creation
- C. When the connection becomes available for the first time
- D. Once you have transferred 100 MB of data
Answer: C
NEW QUESTION # 63
An AWS CloudFormation template is being used to create a VPC peering connection between two existing operational VPCs, each belonging to a different AWS account. All necessary components in the `Remote' (receiving) account are already in place.
The template below creates the VPC peering connection in the Originating account. It contains these components:
AWSTemplateFormation Version: 2010-09-09
Parameters:
Originating VCId:
Type: String
RemoteVPCId:
Type: String
RemoteVPCAccountId:
Type: String
Resources:
newVPCPeeringConnection:
Type: `AWS::EC2::VPCPeeringConnection'
Properties:
VpcdId: !Ref OriginatingVPCId
PeerVpcId: !Ref RemoteVPCId
PeerOwnerId: !Ref RemoteVPCAccountId
Which additional AWS CloudFormation components are necessary in the Originating account to create an operational cross-account VPC peering connection with AWS CloudFormation? (Select two.)
- A. Resources:NetworkInterfaceToRemoteVPC:Type: "AWS::EC2NetworkInterface"
- B. Resources:NewEC2SecurityGroup:Type: AWS::EC2::SecurityGroup
- C. Resources:newVPCPeeringConnection:Type:
`AWS::EC2VPCPeeringConnection'PeerRoleArn: !Ref PeerRoleArn - D. Resources:newEC2Route:Type: AWS::EC2::Route
- E. Resources:VPCGatewayToRemoteVPC:Type: "AWS::EC2::VPCGatewayAttachment"
Answer: C,D
Explanation:
To create a VPC peering, you will need to create a peer connection, and update you routing table with peering VPC CIDR or subset of peering VPC CIDR as the destination and peer connection id as the target in the routing table.
https://aws.amazon.com/premiumsupport/knowledge-center/cloudformation-vpc-peering-error/
NEW QUESTION # 64
What is the scope of an AWS Subnet?
Response:
- A. DataCenter
- B. Region
- C. AZ
Answer: C
NEW QUESTION # 65
Your organization needs to resolve DNS entries stored in an Amazon Route 53 private zone
"awscloud:internal" from the corporate network. An AWS Direct Connect connection with a private virtual interface is configured to provide access to a VPC with the CIDR block 192.168.0.0/16.
A DNS Resolver (BIND) is configured on an Amazon Elastic Compute Cloud (EC2) instance with the IP address 192.168.10.5 within the VPC. The DNS Resolver has standard root server hints configured and conditional forwarding for "awscloud.internal" to the IP address 192.168.0.2.
From your PC on the corporate network, you query the DNS server at 192.168.10.5 for www.amazon.com. The query is successful and returns the appropriate response. When you query for
"server.awscloud.internal", the query times out. You receive no response.
How should you enable successful queries for "server.awscloud.internal"?
Response:
- A. Attach an internet gateway to the VPC and create a default route.
- B. Configure the VPC settings for enableDnsHostnames and enableDnsSupport as True
- C. Relocate the BIND DNS Resolver to the corporate network.
- D. Update the security group for the EC2 instance at 192.168.10.5 to allow UDP Port 53 outbound.
Answer: B
NEW QUESTION # 66
You manage a website that uses a load balancer. You are noticing one of the servers is receiving more traffic than the other. What is probably the cause of this?
Response:
- A. An Elastic Load Balancer sends traffic based on server load. One server must be a larger instance.
- B. You have sticky sessions configured and there are several power users that happen to be on the other server.
- C. You have DNS latency routing set, so it is diverting traffic to a different instance.
- D. The server has more connections available.
Answer: B
NEW QUESTION # 67
A company is establishing connectivity between its on-premises site and an existing VPC on AWS to meet a new security requirement. According to the new requirement, all public DNS queries must use an on-premises DNS security solution. The company's security team has allowed an exception for the AWS service endpoints because the company is using VPC endpoints to access AWS services.
Which combination of steps should a network engineer take to configure the architecture to meet these requirements? (Choose three.)
- A. Create a system rule for the domain name amazonaws.com.
- B. Create an Amazon Route 53 Resolver inbound endpoint. Associate this endpoint with the VPC.
- C. Create a forwarding rule for the domain name "." (dot) with a target IP address of the on-premises DNS security solution.
- D. Create an Amazon Route 53 Resolver outbound endpoint. Associate this endpoint with the VPC.
- E. Create a new DHCP options set that provides the IP address of the on-premises DNS security solution. Update the VPC to use this new DHCP options set.
- F. Create a system rule for the domain name "." (dot) with a target IP address of the on-premises DNS security solution.
Answer: A,C,D
Explanation:
Creating this system rule improves performance, reduces the number of queries that are forwarded to your network and is recommended when you create a conditional forwarding rule for
"." (dot) or "com".
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-overview-DSN-queries-to- vpc.html
NEW QUESTION # 68
Your website utilizes EC2, S3, ELB-Classic, and CloudFront. Your manager has shifted focus to security and wants you to ensure the site is as secure as possible. What two items could you recommend?
(Choose two.)
Note: Answers to this question are not verified by our experts, please study yourself and select the appropriate answers.
Contribute: Please send the correct answers with reference text/link on [email protected] to get up to 50% cashback.
Response:
- A. An NACL that blocks all ports to your subnets.
- B. A WAF on the load balancer.
- C. A restricted bucket policy.
- D. A WAF on your CloudFront distribution.
Answer: A
NEW QUESTION # 69
A company has deployed an application in a VPC that uses a NAT gateway for outbound traffic to the internet. A network engineer notices a large quantity of suspicious network traffic that is traveling from the VPC over the internet to IP addresses that are included on a deny list. The network engineer must implement a solution to determine which AWS resources are generating the suspicious traffic. The solution must minimize cost and administrative overhead.
Which solution will meet these requirements?
- A. Use VPC flow logs. Launch a security information and event management (SIEM) solution in the VPC. Configure the SIEM solution to ingest the VPC flow logs. Run queries on the SIEM solution to identify the AWS resources that are generating the suspicious traffic.
- B. Use VPC flow logs. Publish the flow logs to a log group in Amazon CloudWatch Logs. Use CloudWatch Logs Insights to query the flow logs to identify the AWS resources that are generating the suspicious traffic.
- C. Launch an Amazon EC2 instance in the VPC. Use Traffic Mirroring by specifying the NAT gateway as the source and the EC2 instance as the destination. Analyze the captured traffic by using open-source tools to identify the AWS resources that are generating the suspicious traffic.
- D. Configure the VPC to stream the network traffic directly to an Amazon Kinesis data stream. Send the data from the Kinesis data stream to an Amazon Kinesis Data Firehose delivery stream to store the data in Amazon S3. Use Amazon Athena to query the data to identify the AWS resources that are generating the suspicious traffic.
Answer: B
NEW QUESTION # 70
You work for a company that has several instances running with automatically assigned public IPs. You performed an upgrade that required you to restart the instances from the console and your DNS records don't work anymore. What happened?
Note: Answers to this question are not verified by our experts, please study yourself and select the appropriate answers.
Contribute: Please send the correct answers with reference text/link on [email protected] to get up to 50% cashback.
Response:
- A. You need to restart Route 53
- B. Restarting too many instances at once overloads the system
- C. The instances changed their public IP addresses on restart
- D. Your network interfaces need to be reinitialized
Answer: D
NEW QUESTION # 71
The networking team at a global social gaming company has been tasked to reduce the in-game latency and jitters. The team wants traffic from its end users to be routed to the AWS Region that is closest to the end users geographically.
When maintenance occurs in an AWS Region, traffic must be routed to the next closest AWS Region with no changes to the IP addresses being used as connections by the end-users.
Which solution will you suggest to address these requirements?
Response:
- A. Set up AWS Global Accelerator in front of all the AWS Regions
- B. Set up a CloudFront distribution in front of all the AWS Regions
- C. Configure a Route 53 latency routing policy to navigate traffic to the closest AWS Region
- D. Configure a Route 53 geoproximity routing policy to navigate traffic to the closest AWS Region
Answer: A
NEW QUESTION # 72
A company has an AWS Direct Connect connection between its on-premises data center in the United States (US) and workloads in the us-east-1 Region. The connection uses a transit VIF to connect the data center to a transit gateway in us-east-1. The company is opening a new office in Europe with a new on-premises data center in England. A Direct Connect connection will connect the new data center with some workloads that are running in a single VPC in the eu-west-2 Region. The company needs to connect the US data center and us-east-1 with the Europe data center and eu-west-2. A network engineer must establish full connectivity between the data centers and Regions with the lowest possible latency. How should the network engineer design the network architecture to meet these requirements?
- A. Connect the VPC in eu-west-2 with the Europe data center by using a Direct Connect gateway and a private VIF. Associate the transit gateway in us-east-1 with the same Direct Connect gateway. Enable SiteLink for the transit VIF and the private VIF.
- B. Connect the VPC in eu-west-2 to a new transit gateway. Connect the Europe data center to the new transit gateway by using a Direct Connect gateway and a new transit VIF. Create a new Direct Connect gateway. Associate the transit gateway in us-east-1 with the new Direct Connect gateway. Enable SiteLink for both transit VIFs. Peer the two transit gateways.
- C. Connect the VPC in eu-west-2 to a new transit gateway. Connect the Europe data center to the new transit gateway by using a Direct Connect gateway and a new transit VIF. Associate the transit gateway in us-east-1 with the same Direct Connect gateway. Enable SiteLink for both transit VIFs. Peer the two transit gateways.
- D. Connect the VPC in eu-west-2 with the Europe data center by using a Direct Connect gateway and a private VIF. Create a new Direct Connect gateway. Associate the transit gateway in us- east-1 with the new Direct Connect gateway. Enable SiteLink for the transit VIF and the private VIF.
Answer: C
Explanation:
https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-direct-connect- sitelink/.
NEW QUESTION # 73
An automatically assigned public IP is associated with an EC2 instance. Is NAT performed on this IP address? And if so, where?
Response:
- A. Yes, at the NAT gateway
- B. Yes, at the Internet gateway
- C. No
Answer: B
NEW QUESTION # 74
......
Latest ANS-C01 Exam Dumps Amazon Exam from Training: https://www.freecram.com/Amazon-certification/ANS-C01-exam-dumps.html
Updated Verified ANS-C01 dumps Q&As - 100% Pass: https://drive.google.com/open?id=1cm2VqeHzcP3zLb199PVZPXwBuLD4s6EG