Top Tips Of Improve AWS-Certified-Advanced-Networking-Specialty Exam Prep

NEW QUESTION 1
In order to change the name of the AWS Config _____ , you must stop the configuration recorder, delete the current one, and create a new one with a new name, since there can only be one of these per AWS account.

• A. SNS topic
• B. configuration history
• C. delivery channel
• D. S3 bucket path

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/update-dc.html

NEW QUESTION 2
Convert the following IPv4 address in presented in binary form, into dotted decimal form 10101100.01111011.00001101.10011101

• A. 172.123.13.157
• B. 173.13.13.157
• C. 172.122.13.15
• D. 172.124.13.57

Answer: A

Explanation:
Reference:
https://en.wikipedia.org/wiki/IPv4

NEW QUESTION 3
Which AWS service is used within an AWS Config Rule to perform the logic evaluation of that rule?

• A. Inspector
• B. WAF
• C. Lambda
• D. SWF

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules_nodejssample. html

NEW QUESTION 4
Imagine you are using AWS Direct Connect with just one connection from your router to the AWS Direct Connect router. If your connection becomes unavailable, the communication with AWS cloud is lost. What is the best method to prevent this from happening?

• A. AWS Direct Connect neither provides BGP nor provides the failover.
• B. AWS Direct Connect recommends to have the same configuration set up in a multi AZ zone to prevent such loss in connections.
• C. AWS Direct Connect recommends that you request and configure two dedicated connections to AWS either using BGP Multipath (Active/Active) connection or the failover (Active/Passive) connection.
• D. AWS Direct connect does not have a provision to prevent the situation but when you design the system, it is recommended to request a back-up instance to which the traffic can be re-routed.

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#RedundantConnectio ns

NEW QUESTION 5
Which of the following statements is true of AWS Elastic Beanstalk?

• A. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, meaning CloudWatch costs are applied to your AWS account for any alarms that you use.
• B. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, and both are free of charge.
• C. AWS Elastic Beanstalk doesn't use CloudWatch for monitoring and alarms, but you pay extra for any AWS Elastic Beanstalk Alarm you set in the monitoring tool.
• D. AWS Elastic Beanstalk has its own free-of-charge monitoring tool, and you are not charged for the alarm you set.

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.alarms.html

NEW QUESTION 6
A user is having data generated randomly based on a certain event. The user wants to upload that data to CloudWatch. It may happen that event may not have data generated for some period due to randomness. Which of the below mentioned options is a recommended option for this case?

• A. For the period when there is no data, the user should not send the data at all
• B. The user must upload the data to CloudWatch as having no data for some period will cause an error at CloudWatch monitoring
• C. For the period when there is no data the user should send the value as 0
• D. For the period when there is no data the user should send a blank value

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/publishingMetrics.html

NEW QUESTION 7
In the context of Amazon CloudFront Actions, you use the ______ when specifying APIs in IAM policies.

• A. object names
• B. class names
• C. entity names
• D. action names

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/UsingWithIAM.html

NEW QUESTION 8
You have just provisioned a new VPC a with a CIDR block of 172.16.12.0/24. The entire CIDR block is fully utilised by subdividing it into 6 subnets, we will refer to these as Subnet1 through to Subnet6.
The first 2 subnets (Subnet1 and Subnet2) are the same size. The last 4 subnets (Subnet3, Subnet4, Subnet5, Subnet6) are also the same size. Subnet5 is half the size of Subnet2. The address space as occupied by the first two subnets is contiguous, as is the address space occupied by the last 4 subnets. Within Subnet3 AWS reserves the address 172.16.12.129 for the VPC router. Select the correct IP address reserved by AWS for DNS in the Subnet2.

• A. 172.16.64.1
• B. 172.16.64.65
• C. 172.16.12.66
• D. 172.16.12.64

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

NEW QUESTION 9
An AWS account owner has setup multiple IAM users. One of these IAM users, named John, has CloudWatch access, but no access to EC2 services. John has setup an alarm action which stops EC2 instances when their CPU utilization is below the threshold limit. When an EC2 instance's CPU Utilization rate drops below the threshold John has set, what will happen and why?

• A. Nothing will happe
• B. John cannot set an alarm on EC2 since he does not have the permission.
• C. CloudWatch will stop the instance when the action is executed
• D. Nothing will happen because it is not possible to stop the instance using the CloudWatch alarm
• E. Nothing will happe
• F. John can setup the action, but it will not be executed because he does not have EC2 access through IAM policies.

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/UsingAlarmActions.html

NEW QUESTION 10
A user has created a VPC with CIDR 20.0.0.0/16 with only a private subnet and VPN connection using the VPC wizard. The user wants to connect to the instance in a private subnet over SSH. How should the user define the security rule for SSH?

• A. The user can connect to a instance in a private subnet using the NAT instance
• B. The user has to create an instance in EC2 Classic with an elastic IP and configure the security group of a private subnet to allow SSH from that elastic IP
• C. Allow Inbound traffic on port 22 from the user’s network
• D. Allow Inbound traffic on port 80 and 22 to allow the user to connect to a private subnet over the internet

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario4.html

NEW QUESTION 11
You have many IAM users with the ability to create EC2 volumes. Most of the data your team works with is sensitive, so you would like to make sure all volumes are encrypted. How might you facilitate this requirement?

• A. Create an AWS KMS policy and attach it to all IAM users that can create EC2 volumes
• B. Use AWS Config and create a rule that requires all volumes, upon creation, be encrypted.
• C. Use AWS Config to send out reminders to IAM users every time they create an EC2 volume.
• D. Set EC2 to notify creators to encrypt their EC2 volume

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html

NEW QUESTION 12
Select the answer/s that correctly state how Jumbo Frames work

• A. Jumbo Frames assist with application disk storage
• B. Jumbo Frames can assist with application performance
• C. Jumbo Frames are supported across Virtual Private Gateway connections
• D. Jumbo Frames are enabled by increasing the MTU size to 9000 kilobytes

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/network_mtu.html

NEW QUESTION 13
From the following options, select the answer that correctly describes the implementation of the HTTP protocol

• A. By definition, HTTP is a connection-less oriented protocol and therefore utilises TCP
• B. By definition, HTTP is a connection orientated protocol and therefore utilises TCP
• C. By definition, HTTP is a connection-less oriented protocol and therefore utilises UDP
• D. By definition, HTTP can be configured to be either connection or connection-less oriented - by specifying the appropriate HTTP header.

Answer: B

Explanation:
Reference:
https://en.wikipedia.org/wiki/Hypertext_Transfer_Protocol

NEW QUESTION 14
In AWS Direct Connect, to provide for failover, AWS recommends that you request and configure two dedicated connections to AWS.
These connections can terminate on one or two routers in your network. You can do this while _____ with AWS Direct Connect step.

• A. creating a Virtual Interface
• B. configuring redundant connections
• C. completing the cross-connect
• D. verifying your Virtual Interface

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#RedundantConnectio ns

NEW QUESTION 15
Which of the following statements does not describe Jumbo Frames in an AWS VPC environment?

• A. For instances that are collocated inside a placement group, jumbo frames help to achieve the maximum network throughput possible
• B. Jumbo Frames are not supported for traffic that exits the Virtual Private Gateway
• C. Jumbo Frames are not supported for traffic that exits the Internet Gateway
• D. T2.micro instances do not support Jumbo Frames

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/network_mtu.html

NEW QUESTION 16
Use _____ to get more visibility into the health of your AWS Elastic Beanstalk application and take appropriate actions in case of hardware failure or performance degradation.

• A. Amazon Elastic Beanstalk command line
• B. Amazon EC2 log files
• C. Amazon CloudWatch
• D. Amazon Load balancing

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.concepts.design.html

NEW QUESTION 17
Within the TCP/IP model what is the name of the Packet Data Unit (PDU) used between Transport Layers for communication between sender and receiver

• A. Frames
• B. Packets
• C. Data
• D. Segments

Answer: D

Explanation:
Reference:
https://en.wikipedia.org/wiki/Transmission_Control_Protocol

NEW QUESTION 18
Which CloudWatch attributes are used for the statistics generation?

• A. All the options are used
• B. Dimension
• C. Data point unit
• D. NameSpace

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html

NEW QUESTION 19
Considering your knowledge of both the OSI and TCP/IP models - select the following statement which you consider to NOT be true.

• A. The TCP/IP Application layer maps to 2 of the OSI Layers
• B. The top layer in the OSI model is named the Application layer
• C. The TCP/IP Application layer maps to 3 of the OSI Layers
• D. The top layer in the TCP/IP model is named the Application layer

Answer: A

Explanation:
Reference:
https://en.wikipedia.org/wiki/OSI_model

NEW QUESTION 20
You would like to ensure that all Amazon S3 buckets going forward, current and newly created ones, have logging enabled. What type of trigger(s) should you use?

• A. only a periodic trigger
• B. only a configuration change trigger
• C. both configuration change and periodic triggers
• D. only a transitioning trigger

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html

NEW QUESTION 21
......