Sample Questions
Question: 1
Your organization’s corporate website must be available on www.acme.com and acme.com.
How should you configure Amazon Route 53 to meet this requirement?
A. Configure acme.com with an ALIAS record targeting the ELB. www.acme.com with an ALIAS record targeting the ELB.
B. Configure acme.com with an A record targeting the ELB. www.acme.com with a CNAME record targeting the acme.com record.
C. Configure acme.com with a CNAME record targeting the ELB. www.acme.com with a CNAME record targeting the acme.com record.
D. Configure acme.com using a second ALIAS record with the ELB target. www.acme.com using a PTR record with the acme.com record target.
Answer: D
Question: 2
You are building an application in AWS that requires Amazon Elastic MapReduce (Amazon EMR). The application needs to resolve hostnames in your internal, on-premises Active Directory domain. You update your DHCP Options Set in the VPC to point to a pair of Active Directory integrated DNS servers running in your VPC. Which action is required to support a successful Amazon EMR cluster launch?
A. Add a conditional forwarder to the Amazon-provided DNS server.
B. Enable seamless domain join for the Amazon EMR cluster.
C. Launch an AD connector for the internal domain.
D. Configure an Amazon Route 53 private zone for the EMR cluster.
Answer: B
Explanation:
References:
https://aws.amazon.com/blogs/security/how-to-connect-your-on-premises-active-directory-toawsusingad-connector/
Question: 3
You have a three-tier web application with separate subnets for Web, Applications, and Database tiers. Your CISO suspects your application will be the target of malicious activity. You are tasked with notifying the security team in the event your application is port scanned by external systems. Which two AWS Services cloud you leverage to build an automated notification system? (Select two.)
A. Internet gateway
B. VPC Flow Logs
C. AWS CloudTrail
D. Lambda
E. AWS Inspector
Answer: C,D
Explanation:
References:
https://aws.amazon.com/blogs/security/how-to-receive-alerts-when-specific-apis-are-called-byusingaws-cloudtrail-amazon-sns-and-aws-lambda/
Question: 4
You are designing the network infrastructure for an application server in Amazon VPC. Users will access all the application instances from the Internet and from an on-premises network. The onpremises network is connected to your VPC over an AWS Direct Connect link. How should you design routing to meet these requirements?
A. Configure a single routing table with two default routes: one to the Internet via an IGW, the other
to the on-premises network via the VGW. Use this routing table across all subnets in your VPC.
B. Configure two routing tables: one that has a default route via the IGW, and another that has a
default route via the VGW. Associate both routing tables with each VPC subnet.
C. Configure a single routing table with a default route via the IGW. Propagate a default route via BGP on the AWS Direct Connect customer router. Associate the routing table with all VPC subnet.
D. Configure a single routing table with a default route via the IGW. Propagate specific routes for the
on-premises networks via BGP on the AWS Direct Connect customer router. Associate the routing
table with all VPC subnets.
Answer: D
Question: 5
Your company decides to use Amazon S3 to augment its on-premises data store. Instead of using the company’s highly controlled, on-premises Internet gateway, a Direct Connect connection is ordered to provide high bandwidth, low latency access to S3. Since the company does not own a publically routable IPv4 address block, a request was made to AWS for an AWS-owned address for a Public Virtual Interface (VIF). The security team is calling this new connection a “backdoor”, and you have been asked to clarify the risk to the company.
Which concern from the security team is valid and should be addressed?
A. AWS advertises its aggregate routes to the Internet allowing anyone on the Internet to reach the router.
B. Direct Connect customers with a Public VIF in the same region could directly reach the router.
C. EC2 instances in the same region with access to the Internet could directly reach the router.
D. The S3 service could reach the router through a pre-configured VPC Endpoint.
Answer: A
Moreover:
Amazon ANS-C00 Dumps was so simple and comprehensive that I became a savvy reader and passed my IT exam by the first attempt. Questions and answers were so expertly chosen and written that I could easily infer the concepts of each topic. Amazon ANS-C00 Dumps material brought me the definite success so I suggest the same for all IT candidates of this certification.
ReplyDeleteThis is my first time to site a Amazon ANS-C00, so you will know how nervous I was! Thanks for your help, ExamforSure! I passed. I think 95% questions are more or less the same as your guidance. Some questions with the answer are in the different sequence, and, sorry to point out that one answer of your questions is incorrect, I'll email you to let you know, you guys need to revise it. Well, I think your ExamforSure guidance is still more accurate than others. The most important thing is I got passed :) Paul Hussler
ReplyDeletehttps://www.examforsure.com/amazon/ans-c00-exam-dumps.html
Amazon ANS-C00 dumps PDF doesn’t bring me only good result but it gave me shrewd understanding of the discipline. This handy PDF description of the contents encompassed the whole subject which is very useful for me in the practical field. I commend DumpsForSure for such a useful gift to IT students. My recommendation for all candidates is to choose Amazon ANS-C00 dumps and get guarantee for their success.
ReplyDeleteI find ANS-C00 Dumps exam preparation a piece of cake when I got started with Dumpsforsure.com. They truly provide you with a great solution to the exam preparation problem. Their lessons are updated regularly with the current exam session’s syllabus. The exam prep material was easy to access. Thank you for being there and helping me out in my preparation process. Try their services I highly recommend them. Still not sure? Have a look at their free demo dump; available on their website. Thank you for providing the well-researched and authentic real exam questions to prepare for ANS-C00 exam dumps.
ReplyDeleteI had failed twice and was on third attempt when a friend Recommend me RealdumpsPedia.com as it was my last chance so I purchased ANS-C00 Dumps and During my Preparation with these study material PDF I got confident which lead me to relief when I saw my Results.
ReplyDeleteI liked the plot of Amazon Web Services Dumps which was set by experts who have really won my trust after the success in AWS Certified Associate Exam. It was out of the question for me to pass this valuable certification but I am thankful to DumpsProfessor.com for being there. Online practice test also modified my knowledge after I read ANS-C00 Dumps PDF thoroughly.
ReplyDeleteHowever, if you opt to put together the examdumps yourself, you may utilise our Latest Exam Dumps along the procedure. We believe that if you study our Latest Exam Dumps, you will pass the test with flying colours.
ReplyDeletehttps://www.examdumps.co/700-765-exam-dumps.html