Question 1

A user is collecting 1000 records per second. The user wants to send the data to CloudWatch using a custom namespace. Which of the below mentioned options is recommended for this activity?
A) Aggregate the data with statistics, such as Min, max, Average, Sum and Sample data and send the data to CloudWatch
B) Send all the data values to CloudWatch in a single command by separating them with a comma. CloudWatch will parse automatically
C) It is not possible to send all the data in one call. Thus, it should be sent one by one. CloudWatch will aggregate the data automatically
D) Create one csv file of all the data and send a single file to CloudWatch

Accepted Answer

CloudWatch recommends aggregating data with statistics like Min, Max, Average, Sum, and Sample count before sending it to reduce the number of API calls and efficiently utilize CloudWatch's capabilities.

Question 2

To directly manage your CloudTrail security layer, you can use ____ for your CloudTrail log files
A) SSE-S3
B) SCE-KMS
C) SCE-S3
D) SSE-KMS

Accepted Answer

SSE-KMS uses KMS keys to encrypt and decrypt data stored in S3.

Question 3

A customer is using ABC Telecom as a network provider. The customer has 10 different offices connected to ABC Telecom's MPLS backbone. The customer is setting up an AWS Direct Connect connection to AWS and has provided the LOA-CFA to ABC Telecom. ABC Telecom has terminated the Direct Connect circuit into their MPLS backbone. To uniquely identify the customer's traffic over the MPLS backbone, the customer must encapsulate all traffic with VLAN tag 100. The customer wants to send traffic to multiple VPCs. Which two steps should be taken to meet the customer's requirement? (Choose two.)
A) The customer performs Q-in-Q tunneling, with the AWS-required VLAN tag in the inside and VLAN 100 as the outside tag.
B) Create a support ticket with AWS to request the removal of the outer VLAN tag 100 as the traffic reaches AWS routers.
C) Send the traffic for all VPCs with the same VLAN tag 100 and use BGP to ensure that proper routing takes place to the appropriate VPC.
D) ABC Telecom removes the other tag before sending the packet to AWS.
E) ABC Telecom creates a support ticket with AWS to exchange MPLS labels and include the AWS port as part of their MPLS network.

Accepted Answer

The answer of A customer is using ABC Telecom as...

Question 4

Your Amazon Kinesis application receives data streams from thousands of devices. The data is then stored in an on-premises Hadoop cluster. You are concerned about historical data that shows periods of sustained traffic between 1 Gbps and 2 Gbps during peaks. You must ensure that you have secure, fault- tolerant connectivity between Amazon Kinesis and your data center. What should you implement to address these needs?
A) Deploy a single 1-Gbps Direct Connect connection with a VPN backup.
B) Deploy three 1-Gbps Direct Connect connections.
C) Deploy two 1-Gbps Direct Connect connections.
D) Set up an IPsec VPN connection over Direct Connect with two tunnels.

Accepted Answer

The answer of Your Amazon Kinesis application receives data streams...

Question 5

What does the term "statistics" mean with respect to CloudWatch metrics?
A) Time of a metric collection
B) Data aggregation over a specific period of time
C) Status of a metric
D) Unit of a metric

Accepted Answer

Statistics in CloudWatch metrics refer to the aggregation of data over a specific period of time, such as average, sum, minimum, maximum, and sample count.

Question 6

In Amazon CloudFront, which of the following is true of Smooth Streaming?
A) It is a Microsoft format for streaming of media files.
B) It is a CloudFront format for streaming of media files in RTMP distribution.
C) It is the Adobe format for streaming of media files.
D) It is a CloudFront format for streaming of media files in web distribution.

Accepted Answer

Smooth Streaming is a Microsoft format for streaming media files, allowing adaptive streaming of media over HTTP.

Question 7

A user is having data generated randomly based on a certain event. The user wants to upload that data to CloudWatch. It may happen that event may not have data generated for some period due to randomness. Which of the below mentioned options is a recommended option for this case?
A) For the period when there is no data, the user should not send the data at all
B) The user must upload the data to CloudWatch as having no data for some period will cause an error at CloudWatch monitoring
C) For the period when there is no data the user should send the value as 0
D) For the period when there is no data the user should send a blank value

Accepted Answer

Sending a value of 0 for periods with no data ensures that CloudWatch can accurately represent the absence of data without causing errors or gaps in monitoring.

Question 8

In the context of Amazon CloudFront Actions, you use the _____ when specifying APIs in IAM policies.
A) object names
B) class names
C) entity names
D) action names

Accepted Answer

In IAM policies, you specify the actions that are allowed or denied using action names. These action names correspond to the operations that can be performed on AWS services, such as Amazon CloudFront.

Question 9

You have an application that is processing confidential data. The data is currently stored in your data center. You are moving workloads to AWS, and you need to ensure confidentiality and integrity of the data in transit to your VPC. Your company has an existing AWS Direct Connect connection. What combination of steps should you perform to set up the most cost-effective connection between your on-premises data center and AWS? (Choose three.)
A) Set up a VPC with a virtual private gateway.
B) Set up a VPC with an Internet gateway.
C) Configure a public virtual interface on your Direct Connect connection.
D) Configure a private virtual interface to the virtual private gateway.
E) Set up an IPsec tunnel between your customer gateway and a software VPN on Amazon EC2 in the VPC.
F) Set up an IPsec tunnel between your customer gateway appliance and the virtual private gateway.

Accepted Answer

The answer of You have an application that is processing...

Question 10

Which service is used by default to store the CloudTrail log files?
A) Elastic Block Store (EBS)
B) Redshift
C) Simple Storage Service (S3)
D) Glacier

Accepted Answer

CloudTrail log files are stored by default in Amazon S3, which is designed for scalable storage and retrieval of data.

Question 11

You are deploying an EC2 instance in a private subnet that requires access to the Internet. One of the requirements for this solution is to restrict access to only particular URLs on a whitelist. In addition to the whitelisted URL, the instances should be able to access any Amazon S3 bucket in the same region via any URL. Which of the following solutions should you deploy? (Choose two.)
A) Include s3.amazonaws.com in the whitelist.
B) Create a VPC endpoint for S3.
C) Run Squid proxy on a NAT instance.
D) Deploy a NAT gateway into your VPC.
E) Utilize a security group to restrict access.

Accepted Answer

The answer of You are deploying an EC2 instance in...

Question 12

You are configuring a VPN to AWS for your company. You have configured the VGW and CGW. You have created the VPN. You have also run the necessary commands on your router. You allowed all TCP and UDP traffic between your datacenter and your VPC. The tunnel still doesn't come up. What is the most likely reason?
A) You forgot to turn on route propagation in the route table.
B) You do not have a public ASN.
C) Your advertised subnet is too large.
D) You haven't added protocol 50 to your firewall.

Accepted Answer

Protocol 50 (ESP) is required for IPsec VPNs, and if it's not allowed in the firewall, the VPN tunnel will not establish.

Question 13

With AWS CloudTrail, creating multiple trails in one region allows ____ to focus on one aspect of AWS operation.
A) callers
B) events
C) buckets
D) stakeholders

Accepted Answer

The answer of With AWS CloudTrail, creating multiple trails in...

Question 14

Use ___________ to get more visibility into the health of your AWS Elastic Beanstalk application and take appropriate actions in case of hardware failure or performance degradation.
A) Amazon Elastic Beanstalk command line
B) Amazon EC2 log files
C) Amazon CloudWatch
D) Amazon Load balancing

Accepted Answer

Amazon CloudWatch provides monitoring for AWS cloud resources and applications, offering visibility into performance and operational health, which is essential for managing AWS Elastic Beanstalk applications.

Question 15

An organization processes consumer information submitted through its website. The organization's security policy requires that personally identifiable information (PII) elements are specifically encrypted at all times and as soon as feasible when received. The front-end Amazon EC2 instances should not have access to decrypted PII. A single service within the production VPC must decrypt the PII by leveraging an IAM role. Which combination of services will support these requirement? (Choose two.)
A) Amazon Aurora in a private subnet
B) Amazon CloudFront using AWS Lambda@Edge
C) Customer-managed MySQL with Transparent Data Encryption
D) Application Load Balancer using HTTPS listeners and targets
E) AWS Key Management Services

Accepted Answer

The answer of An organization processes consumer information submitted through...

Question 16

You have a web application (app.mycompany.com) running on an EC2 instance with a single elastic network interface in a subnet in a VPC. Because of a network redesign, you need to move the web application to a different subnet in the same Availability Zone. Which of the following migration strategies meets the requirements?
A) Create an elastic network interface in the new subnet. Attach this interface to the instance, and detach the old interface.
B) Launch a new instance in the subnet via an AMI created from the instance, and redirect new connections to this new instance using DNS. Decommission the old instance.
C) Make an API call to change the subnet association of the elastic network interface.
D) Change the IP addresses manually to another subnet within the server operating system.

Accepted Answer

The answer of You have a web application (app.mycompany.com) running...

Question 17

AWS CloudTrail can be configured to ____ log files across multiple accounts and regions so that log files are delivered to a single bucket.
A) aggregate
B) disperse
C) replicate
D) encrypt

Accepted Answer

AWS CloudTrail can be configured to aggregate log files across multiple accounts and regions, allowing them to be delivered to a single S3 bucket for centralized management and analysis.

Question 18

You need to ensure the files served by your CloudFront distribution are only accessible to authorized users. You hope to serve thousands of users. What two steps should you take? (Choose two.)
A) Configure signed cookies.
B) Configure a WAF.
C) Configure a bucket policy restricting the bucket to only CloudFront OAI.
D) Configure an SSL on the distribution.

Accepted Answer

To ensure files are only accessible to authorized users, configure signed cookies (A) to control access and use a bucket policy restricting access to only CloudFront Origin Access Identity (OAI) (C) to prevent direct access to the S3 bucket.

Question 19

You are architecting your e-business application for PCI compliance. To meet the compliance requirements, you need to monitor web application logs to identify any malicious activity. You also need to monitor for remote attempts to change the network interface of web instances. Which two AWS services will be helpful to achieve this goal?
A) Amazon CloudWatch Logs and VPC Flow Logs
B) AWS CloudTrail and VPC Flow Logs
C) AWS CloudTrail and CloudWatch Logs
D) AWS CloudTrail and AWS Config

Accepted Answer

AWS CloudTrail can be used to monitor API calls and changes to AWS resources, which helps in tracking changes to network interfaces. CloudWatch Logs can be used to monitor and analyze web application logs for malicious activity.

Question 20

A user is trying to send custom metrics to CloudWatch using the PutMetricData APIs. Which of the below mentioned points should the user needs to take care while sending the data to CloudWatch?
A) The size of a request is limited to 128KB for HTTP GET requests and 64KB for HTTP POST requests
B) The size of a request is limited to 40KB for HTTP GET requests and 8KB for HTTP POST requests
C) The size of a request is limited to 16KB for HTTP GET requests and 80KB for HTTP POST requests
D) The size of a request is limited to 8KB for HTTP GET requests and 40KB for HTTP POST requests

Accepted Answer

The size of a request for sending custom metrics to CloudWatch using the PutMetricData API is limited to 8KB for HTTP GET requests and 40KB for HTTP POST requests.

Exam 1: AWS Certified Advanced Networking - Specialty (ANS-C00)

A user is collecting 1000 records per second. The user wants to send the data to CloudWatch using a custom namespace. Which of the below mentioned options is recommended for this activity?

To directly manage your CloudTrail security layer, you can use ____ for your CloudTrail log files

What does the term "statistics" mean with respect to CloudWatch metrics?

In Amazon CloudFront, which of the following is true of Smooth Streaming?

A user is having data generated randomly based on a certain event. The user wants to upload that data to CloudWatch. It may happen that event may not have data generated for some period due to randomness. Which of the below mentioned options is a recommended option for this case?

In the context of Amazon CloudFront Actions, you use the _____ when specifying APIs in IAM policies.

Which service is used by default to store the CloudTrail log files?

With AWS CloudTrail, creating multiple trails in one region allows ____ to focus on one aspect of AWS operation.

Use ___________ to get more visibility into the health of your AWS Elastic Beanstalk application and take appropriate actions in case of hardware failure or performance degradation.

AWS CloudTrail can be configured to ____ log files across multiple accounts and regions so that log files are delivered to a single bucket.

You need to ensure the files served by your CloudFront distribution are only accessible to authorized users. You hope to serve thousands of users. What two steps should you take? (Choose two.)

A user is trying to send custom metrics to CloudWatch using the PutMetricData APIs. Which of the below mentioned points should the user needs to take care while sending the data to CloudWatch?