Question 1

Your company just purchased a domain using another registrar and wants to use the same nameservers as your current domain hosted with AWS. How would this be achieved?

Accepted Answer

A Reusable Delegation Set allows you to use the same nameservers for multiple domains in AWS Route 53.

Question 2

Your company is building a new data center. You currently have an on-premises data center that accesses your single VPC via VPN. You need to provide access to your single VPC to your new data center. Since your new data center build is already over budget, you need to keep costs low. How should you accomplish this?

Accepted Answer

Creating a new Customer Gateway and adding it to your VPN using a CloudHub infrastructure model allows you to connect multiple data centers to a single VPC over VPN, which is cost-effective compared to Direct Connect options.

Question 3

Your company has placement groups in two different availability zones. There is a large project coming up and, although resilience is important, cost and speed are the most important factors. The servers in each placement group need to be able to achieve the highest speed possible. How can this be achieved?

Accepted Answer

Creating AMIs from all of the instances, terminating them, and deploying them all into one placement group will allow the servers to achieve the highest speed possible, as they will all be in the same placement group and will be able to take advantage of the fastest possible network connectivity.

Question 4

Your company needs an inexpensive solution to host their AD data in the cloud. They do not need all of the features of AD but do need to be able to use it with WorkSpaces. What is the best solution?

Accepted Answer

Simple AD is a cost-effective, managed directory service that provides basic Active Directory features and is compatible with Amazon WorkSpaces, making it suitable for companies that do not require the full feature set of Microsoft AD.

Question 5

Your website is under attack and a malicious party is stealing large amounts of data. You have default NACL rules. Stopping the attack is the ONLY priority in this case. Which two commands should you use? (Choose two.)

Accepted Answer

The answer of Your website is under attack and a...

Question 6

You have a DX connection and a VPN connection as backup for your 10.0.0.0/16 network. You just received a letter indicating that the colocation provider hosting the DX connection will be undergoing maintenance soon. It is critical that you do not experience any downtime or latency during this period. What is the best course of action?

Accepted Answer

The answer of You have a DX connection and a...

Question 7

You are auditing an AWS infrastructure after you noticed some abnormal charges on the bill. You use AWS Config to monitor your changes. What else is required to find out who made the change?

Accepted Answer

AWS CloudTrail logs API calls and changes made to your AWS resources, allowing you to trace back who made specific changes by using the eventId from AWS Config.

Question 8

Your company currently has a LAG to AWS with two 1Gbps connections. What is the best way to increase throughput on this LAG?

Accepted Answer

The answer of Your company currently has a LAG to...

Question 9

You wish to have a sub-1G connection to AWS to save on costs. How can you achieve this?

Accepted Answer

AWS Direct Connect does not offer sub-1G connections directly. However, you can work with an AWS partner who can provide a sub-1G connection by aggregating bandwidth or using a hosted connection.

Question 10

Your organization has placed a project on hold and has stopped 30 public EC2 instances. These instances use instance store volumes and do not have custom AMIs associated. You are still being charged every month. What is the charge probably for?

Accepted Answer

Elastic IPs associated with stopped instances incur charges, as they are not being used but still reserved.

Question 11

You need to create a subnet in a VPC that supports 14 hosts. You need to be as accurate as possible since you run a very large company. What CIDR should you use?

Accepted Answer

The answer of You need to create a subnet in...

Question 12

You have two VPCs that you need to connect to an on-premises datacenter using VPNs. When you create the tunnels, you find that both tunnels use the same addresses. What two things can you do to overcome this? (Choose two.)

Accepted Answer

A) Deleting the VPN, creating a "dummy VPN", recreating the VPN, then deleting the "dummy" VPN will force the creation of new tunnel addresses.D) Creating a VRF within your router for each network will allow you to use the same tunnel addresses for both VPNs.

Question 13

You are a holdings company that buys many businesses and must integrate their VPCs into your network. You are constantly encountering networks with similar or overlapping subnets. What is the best way to manage this.

Accepted Answer

Using VRF (Virtual Routing and Forwarding) allows multiple instances of a routing table to coexist within the same router at the same time, which helps manage overlapping subnets by isolating them into separate routing domains.

Question 14

You have just deployed a website that utilizes CloudFront, ELB, and S3 to serve content. When users access your site, they are seeing broken image links. You know you configured CloudFront to use cdn.yourdomain.com. What is the most likely reason why your users not seeing the images?

Accepted Answer

The answer of You have just deployed a website that...

Question 15

Your AWS WorkSpaces users are unable to authenticate. What could be one reason for this?

Accepted Answer

Port 389 is used for LDAP, which is necessary for authentication with Active Directory. If this port is not open, users may be unable to authenticate.

Question 16

You have a static VPN connecting your data center and your VPC. You currently have 50 routes added to your route table. You want to add more; how should you do this?

Accepted Answer

Converting to a dynamic VPN using BGP allows for more routes to be advertised and managed dynamically, overcoming the static route limitations.

Question 17

You have two enhanced networking capable instances in a placement group. One with an Intel network interface and one with an ENA. What network speed will be achieved between the two?

Accepted Answer

The network speed between instances in a placement group with enhanced networking is typically up to 10Gbps, even if they have different network interfaces like Intel and ENA.

Question 18

You are responsible for several EC2 instances deployed from Amazon AMIs that are required to upload information to an S3 bucket. This information must not traverse the public internet. You must also be able to update the instances. Which option is your best solution?

Accepted Answer

The answer of You are responsible for several EC2 instances...

Question 19

You have two Direct Connect connections and two VPN connections to your network. Site A is VPN 10.1.0.0/24 AS 65000 65000, Site B is VPN 10.1.0.252/30 AS 65000, Site C is DX 10.0.0.0/8 AS 65000 and Site D is DX 10.0.0.0/16 AS 65000 65000 65000. Which site will AWS choose to reach your network?

Accepted Answer

The answer of You have two Direct Connect connections and...

Question 20

You need to quickly view inbound traffic to an instance to determine why it isn't reaching the instance properly. What is the best tool for this?

Accepted Answer

Flow Logs are used to capture information about the IP traffic going to and from network interfaces in your VPC, which can help diagnose why traffic isn't reaching an instance properly.

Exam 1: AWS Certified Advanced Networking - Specialty (ANS-C00)