AWS-Certified-Advanced-Networking-Specialty Exam - Amazon AWS Certified Advanced Networking - Specialty

NEW QUESTION 1
In AWS, which service provides a reliable and inexpensive way to backup and archive CloudTrail log files?

• A. Amazon Archiver
• B. Amazon Glacier
• C. AWS Storage Gateway
• D. Amazon Elastic Block Store

Answer: B

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/faqs/

NEW QUESTION 2
AWS Config flags a resource as ______ if a resource violates any conditions of an AWS Config rule that it evaluates on the resource in question.

• A. corrupted
• B. noncompliant
• C. invalid
• D. misconfigured

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html

NEW QUESTION 3
Convert the following IPv4 address in presented in binary form, into dotted decimal form 10101100.01111011.00001101.10011101

• A. 172.123.13.157
• B. 173.13.13.157
• C. 172.122.13.15
• D. 172.124.13.57

Answer: A

Explanation:
Reference:
https://en.wikipedia.org/wiki/IPv4

NEW QUESTION 4
You can use the _____ command of the AWS Config service CLI to see the compliance state of each of your rules.

• A. get-compliance-details-by-resource
• B. describe-compliance-by-config-rule
• C. get-compliance-details-by-config-rule
• D. describe-compliance-by-resource

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

NEW QUESTION 5
What is the maximum size of a response body that Amazon CloudFront will return to the viewer?

• A. Unlimited
• B. 5 GB
• C. 100 MB
• D. 20 GB

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/RequestAndResponseBeha viorS3Origin.html#ResponseBehaviorS3Origin

NEW QUESTION 6
Select the VPC Peering statement below that is NOT true

• A. VPC peering supports transitive peering relationships for IPv6 traffic but not IPv4
• B. VPC peering can be performed between VPCs in different AWS accounts in the same region
• C. TCP connections can be performed between peered VPCs
• D. UDP connections can be performed between peered VPCs

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/PeeringGuide/vpc-peering-basics.html#vpcpeering- limitations

NEW QUESTION 7
Which CloudWatch attributes are used for the statistics generation?

• A. All the options are used
• B. Dimension
• C. Data point unit
• D. NameSpace

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html

NEW QUESTION 8
A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services does not provide detailed monitoring with CloudWatch?

• A. AWS Route53
• B. AWS EMR
• C. AWS ELB
• D. AWS RDS

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

NEW QUESTION 9
You have just provisioned a new VPC a with a CIDR block of 172.16.12.0/24. The entire CIDR block is fully utilised by subdividing it into 6 subnets, we will refer to these as Subnet1 through to Subnet6.
The first 2 subnets (Subnet1 and Subnet2) are the same size. The last 4 subnets (Subnet3, Subnet4, Subnet5, Subnet6) are also the same size. Subnet5 is half the size of Subnet2. The address space as occupied by the first two subnets is contiguous, as is the address space occupied by the last 4 subnets. Within Subnet3 AWS reserves the address 172.16.12.129 for the VPC router. Select the correct IP address reserved by AWS for DNS in the Subnet2.

• A. 172.16.64.1
• B. 172.16.64.65
• C. 172.16.12.66
• D. 172.16.12.64

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

NEW QUESTION 10
Which statement is NOT true about accessing remote AWS region in the US by your AWS Direct Connect which is located in the US?

• A. To connect to a VPC in a remote region, you can use a virtual private network (VPN) connection over your public virtual interface.
• B. To access public resources in a remote region, you must set up a public virtual interface and establish a border gateway protocol (BGP) session.
• C. If you have a public virtual interface and established a BGP session to it, your router learns the routes of the other AWS regions in the US.
• D. Any data transfer out of a remote region is billed at the location of your AWS Direct Connect data transfer rate.

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/remote_regions.html

NEW QUESTION 11
When an AWS Config rule is triggered a JSON object known as an AWS Config Event is created. This object contains another JSON string in its _____ parameter, which describes the event that
triggered the rule.

• A. resultToken
• B. eventLeftScope
• C. invokingEvent
• D. configRuleName

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ example-events.html

NEW QUESTION 12
What does the term "statistics" mean with respect to CloudWatch metrics?

• A. Time of a metric collection
• B. Data aggregation over a specific period of time
• C. Status of a metric
• D. Unit of a metric

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.ht ml#Statistic

NEW QUESTION 13
Over which of the following Ethernet standards does AWS Direct Connect link your internal network to an AWS Direct Connect location?

• A. Copper backplane cable
• B. Twisted pair cable
• C. Single mode fiber-optic cable
• D. Shielded balanced copper cable

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html

NEW QUESTION 14
In the context of Amazon CloudFront Actions, you use the ______ when specifying APIs in IAM policies.

• A. object names
• B. class names
• C. entity names
• D. action names

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/UsingWithIAM.html

NEW QUESTION 15
When an AWS Config rule is triggered a JSON object known as an AWS Config Event is created. This object contains a(n) _____ attribute, which is a JSON-formatted set of key/value pairs the receiving AWS Lambda function processes as part of its evaluation logic.

• A. invokingEvent
• B. mappingTemplate
• C. ruleConfiguration
• D. inputParameters

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ example-events.html

NEW QUESTION 16
Fill in the blanks: One of the basic characteristics of security groups for your VPC is that you ______ .

• A. can specify allow rules, but not deny rules
• B. can specify deny rules, but not allow rules
• C. can specify allow rules as well as deny rules
• D. can neither specify allow rules nor deny rules

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_SecurityGroups.html

NEW QUESTION 17
A user is running a batch process on EBS backed EC2 instances. The batch process launches few EC2 instances to process hadoop Map reduce jobs which can run between 50 – 600 minutes or
sometimes for even more time. The user wants a configuration that can terminate the instance only when the process is completed. How can the user configure this with CloudWatch?

• A. Configure a job which terminates all instances after 600 minutes
• B. It is not possible to terminate instances automatically
• C. Set up the CloudWatch with Auto Scaling to terminate all the instances
• D. Configure the CloudWatch action to terminate the instance when the CPU utilization falls below 5%

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/UsingAlarmActions.html

NEW QUESTION 18
In AWS Direct Connect, which of the following is true of configuring your router to connect to the AWS Direct Connect router?

• A. After creating a virtual interface for your AWS Direct Connect connection, you can download the router configuration file from the available link
• B. After Completing the Cross Connect step, the download link for router configuration will be available
• C. After submitting your AWS Direct Connect connection request, you will receive the router configuration details by email within 72 hours
• D. In Create a Virtual Interface step, the general configuration of your router would be available for downloading.

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#routerconfig

NEW QUESTION 19
Which of the following services is used to send an alert from CloudWatch?

• A. AWS SNS
• B. AWS EBS
• C. AWS SES
• D. AWS SQS

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/related_services.html

NEW QUESTION 20
Which of the following characters is not allowed while creating a Namespace for a CloudWatch metric?

• A. /
• B. :
• C. #
• D. @

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.ht ml

NEW QUESTION 21
......