Tested AWS-Certified-Advanced-Networking-Specialty Free Demo 2021

NEW QUESTION 1
You can use the _____ command of the AWS Config service CLI to see the compliance state of each resource that AWS Config evaluates for a specific rule.

• A. describe-compliance-by-resource
• B. describe-compliance-by-config-rule
• C. get-compliance-details-by-config-rule
• D. get-compliance-details-by-config-rule

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

NEW QUESTION 2
Which of the following types of contents cannot serve over HTTP or HTTPS in Amazon CloudFront?

• A. Apple HTTP Live Streaming
• B. Static and dynamic download content
• C. Adobe Flash multimedia content
• D. CloudFront RTMP distribution

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-overview.html

NEW QUESTION 3
A user is having data generated randomly based on a certain event. The user wants to upload that data to CloudWatch. It may happen that event may not have data generated for some period due to randomness. Which of the below mentioned options is a recommended option for this case?

• A. For the period when there is no data, the user should not send the data at all
• B. The user must upload the data to CloudWatch as having no data for some period will cause an error at CloudWatch monitoring
• C. For the period when there is no data the user should send the value as 0
• D. For the period when there is no data the user should send a blank value

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/publishingMetrics.html

NEW QUESTION 4
Fill in the blanks: One of the basic characteristics of security groups for your VPC is that you ______ .

• A. can specify allow rules, but not deny rules
• B. can specify deny rules, but not allow rules
• C. can specify allow rules as well as deny rules
• D. can neither specify allow rules nor deny rules

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_SecurityGroups.html

NEW QUESTION 5
In AWS Direct Connect, to provide for failover, AWS recommends that you request and configure two dedicated connections to AWS.
These connections can terminate on one or two routers in your network. You can do this while _____ with AWS Direct Connect step.

• A. creating a Virtual Interface
• B. configuring redundant connections
• C. completing the cross-connect
• D. verifying your Virtual Interface

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#RedundantConnectio ns

NEW QUESTION 6
You can use the _____ command of the AWS Config service CLI to see the compliance state of each of your rules.

• A. get-compliance-details-by-resource
• B. describe-compliance-by-config-rule
• C. get-compliance-details-by-config-rule
• D. describe-compliance-by-resource

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

NEW QUESTION 7
You would like to automate the monitoring of changes in the configurations of your AWS resources and respond programmatically to configurations of only a certain type. To do this, you could use Amazon ______ as the endpoint for the Amazon SNS topics that generate messages from AWS Config.

• A. Kinesis
• B. Simple Email Service (SES)
• C. Simple Storage Service (S3)
• D. Simple Queue Service (SQS)

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/monitor-resource-changes.html

NEW QUESTION 8
Which of the following statements is true of AWS Elastic Beanstalk?

• A. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, meaning CloudWatch costs are applied to your AWS account for any alarms that you use.
• B. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, and both are free of charge.
• C. AWS Elastic Beanstalk doesn't use CloudWatch for monitoring and alarms, but you pay extra for any AWS Elastic Beanstalk Alarm you set in the monitoring tool.
• D. AWS Elastic Beanstalk has its own free-of-charge monitoring tool, and you are not charged for the alarm you set.

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.alarms.html

NEW QUESTION 9
In Amazon CloudFront, you cannot configure CloudFront to process cookies for _____.

• A. HTTPS web distributions
• B. Web and RTMP distributions
• C. RTMP distributions
• D. HTTP web distributions

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html

NEW QUESTION 10
After setting an AWS Direct Connect, which of the following cannot be done with an AWS Direct Connect Virtual Interface?

• A. You can delete a virtual interface; if its connection has no other virtual interfaces, you can delete the connection.
• B. You can change the region of your virtual interface.
• C. You can create a hosted virtual interface.
• D. You can exchange traffic between the two ports in the same region connecting to different Virtual Private Gateways (VGWs) if you have more than one virtual interface.

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/WorkingWithVirtualInterfaces.html

NEW QUESTION 11
Which of the following statements does not describe Jumbo Frames in an AWS VPC environment?

• A. For instances that are collocated inside a placement group, jumbo frames help to achieve the maximum network throughput possible
• B. Jumbo Frames are not supported for traffic that exits the Virtual Private Gateway
• C. Jumbo Frames are not supported for traffic that exits the Internet Gateway
• D. T2.micro instances do not support Jumbo Frames

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/network_mtu.html

NEW QUESTION 12
What service is used to store the log files generated by CloudTrail?

• A. EC2
• B. EBS
• C. S3
• D. VPC

Answer: C

Explanation:
Reference: https://aws.amazon.com/cloudtrail/

NEW QUESTION 13
Over which of the following Ethernet standards does AWS Direct Connect link your internal network to an AWS Direct Connect location?

• A. Copper backplane cable
• B. Twisted pair cable
• C. Single mode fiber-optic cable
• D. Shielded balanced copper cable

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html

NEW QUESTION 14
True or false: A VPC contains multiple subnets, where each subnet can span multiple Availability Zones.

• A. This is true only for US regions.
• B. This is false.
• C. This is true.
• D. This is true only if requested during the set-up of VP

Answer: B

Explanation:
Reference:
https://aws.amazon.com/vpc/faqs/

NEW QUESTION 15
In order to change the name of the AWS Config _____ , you must stop the configuration recorder, delete the current one, and create a new one with a new name, since there can only be one of these per AWS account.

• A. SNS topic
• B. configuration history
• C. delivery channel
• D. S3 bucket path

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/update-dc.html

NEW QUESTION 16
You are the AWS cloud architect and have been tasked with designing an appropriate subnetting design for your production VPC. Your production VPC requires secure communications back to the corporate private network. Quality of Service (QoS) is very important 24x7 for this particular connection, as real-time data is passed continually backwards and forwards between your on-prem bioinformatics enterprise application, and the number crunching servers deployed in the cloud. Any potential latency incurred on this connection will have a direct impact on the company's ability to attract investors and expansion into new markets. Select the correct network configuration that best facilitates your company's continued growth plans.

• A. Provision a Direct Connect connection - between your service provider's data center and the AWS region that your cloud compute resources exist in . Configure just a Private VirtualInterfac
• B. As this is a Direct Connection, a Virtual Private Gateway is not required
• C. Configure a site-to-site layer 2 software router using OpenVPN within your VPC and ensure that QoS enabled - this is a secure and cheap option
• D. Configure a site-to-site layer 3 software router using OpenVPN within your VPC and ensure that QoS enabled - this is a secure and cheap option
• E. Provision a Direct Connect connection - between your existing service provider's data center and the AWS region that your cloud compute resources exist i
• F. Configure a Virtual Private Gateway and Private Virtual Interface

Answer: D

Explanation:
Reference:
https://aws.amazon.com/directconnect/faqs/

NEW QUESTION 17
You can turn on the AWS Config service from the AWS CLI by running the subscribe command and passing as parameters a valid IAM role, SNS topic, and ______.

• A. EBS volume
• B. EC2 instance
• C. S3 bucket
• D. Kinesis stream

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/gs-cli-subscribe.html

NEW QUESTION 18
For web distributions in Amazon CloudFront, your origin can be either an Amazon S3 bucket or _____ .

• A. a DNS server
• B. a proxy server
• C. an FTP server
• D. an HTTP server

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-overview.html

NEW QUESTION 19
AWS CloudTrail can be configured to _____ log files across multiple accounts and regions so that log
files are delivered to a single bucket.

• A. aggregate
• B. disperse
• C. replicate
• D. encrypt

Answer: A

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/

NEW QUESTION 20
You can use the ______ command of the AWS Config service CLI to see the compliance state for each AWS resource of a specific type.

• A. describe-compliance-by-resource
• B. get-compliance-details-by-config-rule
• C. describe-compliance-by-config-rule
• D. get-compliance-details-by-config-rule

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

NEW QUESTION 21
Use _____ to get more visibility into the health of your AWS Elastic Beanstalk application and take appropriate actions in case of hardware failure or performance degradation.

• A. Amazon Elastic Beanstalk command line
• B. Amazon EC2 log files
• C. Amazon CloudWatch
• D. Amazon Load balancing

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.concepts.design.html

NEW QUESTION 22
In the context of Amazon CloudFront Actions, you use the ______ when specifying APIs in IAM policies.

• A. object names
• B. class names
• C. entity names
• D. action names

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/UsingWithIAM.html

NEW QUESTION 23
......