Free 2021 AWS-Advanced-Networking-Specialty Dumps 100 Pass Guarantee With Latest Demo
Prepare AWS-Advanced-Networking-Specialty Question Answers Free Update With 100% Exam Passing Guarantee [2021]
For more info about AWS Certified Advanced Networking - Specialty
AWS Certified Advanced Networking - Specialty
Understanding functional and technical aspects of AWS Certified Advanced Networking - Specialty Design and Implement AWS Networks
The following will be discussed in AMAZON ADVANCED-NETWORKING-SPECIALITY dumps:
- Propose optimized designs based on the evaluation of an existing implementation
- Determine network requirements for a specialized workload
- Derive an appropriate architecture based on customer and application requirements
- Evaluate and optimize cost allocations given a network design and application data flow
- Given customer requirements, define network architectures on AWS
- Apply AWS networking concepts
NEW QUESTION 16
A company with several VPCs in the us-east-1 Region wants to reduce the cost of its workloads A network engineer has identified that all traffic bound to Amazon services is flowing through a NAT gateway. Additionally, all the VPCs are peered to a hub VPC for access to common services.
- A. Disable the private DNS name for the SOS endpoint. Create an Amazon Route 53 private hosted zone for the domain sqs.us-east-1 .amazonaws.com. Create an alias record to the DNS name of the SOS endpoint. Share the private hosted zone with all other VPCs
- B. Enable the private DNS name for the SOS endpoint Create an Amazon Route 53 private hosted zone for the domain SQS.us-east-t.amazonaws.com. Create a CNAME record to the DNS name of the SQS endpoint. Share the private hosted zone with all other VPCs.
- C. Enable the private DNS name for the SQS endpoint. Create an Amazon Route 53 private hosted zone for the domain us-east-1 .sqs.amazonaws.com. Create an alias record to the DNS name of the SQS endpoint. Share the private hosted zone with all other VPCs.
- D. Disable the private DNS name for the SQS endpoint. Create an Amazon Route 53 private hosted zone for the domain us-east-1.sqs.amazonaws.com. Create a CNAME record to the DNS name of the SQS endpoint Share the private hosted zone with ail other VPCs
Answer: D
NEW QUESTION 17
You have two placement groups in a VPC. What communication speed can be expected between the two placement groups?
Choose the correct answer:
- A. 20Gbps
- B. 10Gbps
- C. You cannot communicate between two placement groups.
- D. 5Gbps
Answer: D
Explanation:
5Gbps is the maximum speed for traffic outside of a placement group.
NEW QUESTION 18
You have several Amazon Glacier vaults you would like to monitor. How might you monitor those vaults?
- A. Use an AWS master Config rule.
- B. Create a custom AWS Config rule.
- C. Create a KMS policy and attach it to your Amazon Glacier vault.
- D. Use an AWS managed Config rule.
Answer: B
Explanation:
AWS Config does not currently record Amazon Glacier resources; you must create a custom rule if you wish to monitor such a resource.
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules_nod ejs.html#creating-custom-rules-for-additional-resource-types
NEW QUESTION 19
Your organization requires strict adherence to a change control process for its Amazon Elastic Compute Cloud (EC2) and VPC environments. The organization uses AWS CloudFormation as the AWS service to control and implement changes. Which combination of three services provides an alert for changes made outside of AWS CloudFormation? (Select three.)
- A. AWS Identify and Access Management
- B. AWS Lambda
- C. AWS CloudWatch metrics
- D. AWS Simple Notification Service
- E. AWS CloudFormation
- F. AWS Config
Answer: B,C,D
NEW QUESTION 20
Which statement is NOT true about accessing remote AWS region in the US by your AWS Direct Connect which is located in the US?
- A. Any data transfer out of a remote region is billed at the location of your AWS Direct Connect data transfer rate.
- B. To connect to a VPC in a remote region, you can use a virtual private network (VPN) connection over your public virtual interface.
- C. If you have a public virtual interface and established a BGP session to it, your router learns the routes of the other AWS regions in the US.
- D. To access public resources in a remote region, you must set up a public virtual interface and establish a border gateway protocol (BGP) session.
Answer: A
Explanation:
AWS Direct Connect locations in the United States can access public resources in any US region.
You can use a single AWS Direct Connect connection to build multi-region services. To connect to a VPC in a remote region, you can use a virtual private network (VPN) connection over your public virtual interface.
To access public resources in a remote region, you must set up a public virtual interface and establish a border gateway protocol (BGP) session. Then your router learns the routes of the other AWS regions in the US. You can then also establish a VPN connection to your VPC in the remote region.
Any data transfer out of a remote region is billed at the remote region data transfer rate.
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/remote_regions.html
NEW QUESTION 21
You have just configured an Elastic Load Balancer. Assuming all settings are configured properly, about how long will it take an instance to become healthy with a 6 second HealthCheck Interval, an unhealthy threshold of 5 and a healthy threshold of 10? Choose the correct answer:
- A. 30 seconds
- B. 60 seconds
- C. 6 seconds
- D. 120 seconds
Answer: B
Explanation:
60 seconds. 10 healthcheck successes with 6 second intervals.
NEW QUESTION 22
An organization delivers high-resolution, dynamic web content. Internet users access the content from a variety of platforms, including mobile, tablet and desktop. Each platform receives a customized experience to account for the differences in viewing modes. A dedicated, automatic-scaling fleet of Amazon EC2 instances is used for each platform to server content based on path-based headers.
Which combination of services will MINIMIZE cost and MAXIMIZE performance? (Select two.)
- A. Amazon CloudFront with Lambda@Edge
- B. Network Load Balancer
- C. Application Load Balancer
- D. Amazon Route 53 with traffic flow policies
- E. Amazon S3 static websites
Answer: A,C
Explanation:
References: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-at-the-edge.html
NEW QUESTION 23
You are moving a two-tier application into an Amazon VPC. An Elastic Load Balancing (ELB) load balancer is configured in front of the application tier. The application tier is driven through RESTful interfaces. The data tier uses relational database service (RDS) MySQL. Company policy requires end-to-end encryption of all data in transit. in front What ELB configuration complies with the corporate encryption policy?
- A. Configure the ELB load balancer protocol as HTTPS. Offload application instance encryption to the load balancer. Install your SSL certificate on Amazon RDS, and configure SSL.
- B. Configure the ELB protocols in TCP mode. Configure the application instances for SSL termination.
Configure Amazon RDS for SSL, and use REQUIRE SSL grants. - C. Configure the ELB load balancer protocol as HTTP. Configure the application instances for SSL termination. Configure Amazon RDS for SSL, and use REQUIRE SSL grants.
- D. Configure the ELB protocols in SSL mode. Offload application instance encryption to the load balancer.
Install your SSL/TLS certificate on Amazon RDS, and configure SSL.
Answer: B
Explanation:
Explanation
Refer: https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-listener-config.html
NEW QUESTION 24
What are two reasons to have multiple IP addresses or interfaces on one server? Choose the 2 correct answers:
- A. Teaming multiple NICs for more throughput
- B. Create management networks
- C. You can host multiple SSLs
- D. Direct Connect connections
Answer: B,C
Explanation:
You cannot bind multiple interfaces for faster speeds on AWS
NEW QUESTION 25
Your company operates a single AWS account. A common services VPC is deployed to provide shared services, such as network scanning and compliance tools. Each AWS workload uses its own VPC, and each VPC must peer with the common services VPC. You must choose the most efficient and cost effective approach.
Which approach should be used to automate the required VPC peering?
- A. Cfn-init with AWS CloudFormation to execute a command-line peering request.
- B. An OpsWorks Chef recipe to execute a command-line peering request.
- C. An AWS CloudFormation template that includes a peering request.
- D. AWS CloudTrail integration with Amazon CloudWatch Logs to trigger a Lambda function.
Answer: C
Explanation:
Explanation
https://cloakable.irdeto.com/2017/10/11/how-to-implement-vpc-peering-between-2-vpcs-in-the-same-aws-accou
NEW QUESTION 26
Your company was recently acquired and a Direct Connection connection was extended from your new parent corporation to your AWS VPC using a hosted VIF. What data charges are billed to your account for that connection?
Choose the correct answer:
- A. You are not charged anything.
- B. You are responsible for all data transfer out.
- C. You are only responsible for the port hours of the VIF.
- D. You are responsible for all data transfer in.
Answer: B
Explanation:
You are only responsible for the data transfer out. The port hours are the responsibility of the owner of the connection.
NEW QUESTION 27
You use a VPN to extend your corporate network into a VPC. Instances in the VPC are able to resolve resource records in an Amazon Route 53 private hosted zone. Your on-premises DNS server is configured with a forwarder to the VPC DNS server IP address. On-premises users are unable to resolve names in the private hosted zone, although instances in a peered VPC can.
What should you do to provide on-premises users with access to the private hosted zone?
- A. Update the on-premises forwarders with the four name servers assigned to the private hosted zone.
- B. Modify the network access control list on the VPC to allow DNS queries from on-premises systems.
- C. Create a proxy resolver within the VPC. Point the on-premises forwarder to the proxy resolver.
- D. Configure the on-premises server as a secondary DNS for the private zone. Update the NS records.
Answer: A
Explanation:
Explanation
References:
https://aws.amazon.com/blogs/security/how-to-set-up-dns-resolution-between-on-premises-networks-and-aws-by
NEW QUESTION 28
Your company is building a new data center. You currently have an on-premises data center that accesses your single VPC via VPN. You need to provide access to your single VPC to your new data center. Since your new data center build is already over budget, you need to keep costs low.
How should you accomplish this?
Choose the correct answer:
- A. Create a new Customer Gateway and add it to your VPN using a CloudHub infrastructure model.
- B. Add a Private VIF and create a Direct Connect connection.
- C. Create a new Virtual Gateway and add it to your VPN using a CloudHub infrastructure model.
- D. Add a Public VIF and create a Direct Connect connection.
Answer: A
Explanation:
Create a new Customer Gateway. A Private VIF would work, but you want to keep costs low. A Public VIF is only for AWS specific resources, such as S3. A Virtual Gateway would be created if you were creating a new VPN connection in a new VPC. A Customer Gateway would allow you to add the new datacenter to your VPN.
NEW QUESTION 29
You have a web application (app.mycompany.com) running on an EC2 instance with a single elastic network interface in a subnet in a VPC. Because of a network redesign, you need to move the web application to a different subnet in the same Availability Zone.
Which of the following migration strategies meets the requirements?
- A. Make an API call to change the subnet association of the elastic network interface.
- B. Launch a new instance in the subnet via an AMI created from the instance, and redirect new connections to this new instance using DNS. Decommission the old instance.
- C. Create an elastic network interface in the new subnet. Attach this interface to the instance, and detach the old interface.
- D. Change the IP addresses manually to another subnet within the server operating system.
Answer: B
Explanation:
Instances cannot change subnets, so a new instance must be created (Response B). A is wrong because you cannot remove the original elastic network interface. C is not possible. D is wrong because the OS has no ability to affect the AWS assigned IP addresses.
NEW QUESTION 30
Your company decides to use Amazon S3 to augment its on-premises data store. Instead of using the company's highly controlled, on-premises Internet gateway, a Direct Connect connection is ordered to provide high bandwidth, low latency access to S3. Since the company does not own a publically routable IPv4 address block, a request was made to AWS for an AWS-owned address for a Public Virtual Interface (VIF).
The security team is calling this new connection a "backdoor", and you have been asked to clarify the risk to the company.
Which concern from the security team is valid and should be addressed?
- A. Direct Connect customers with a Public VIF in the same region could directly reach the router.
- B. AWS advertises its aggregate routes to the Internet allowing anyone on the Internet to reach the router.
- C. EC2 instances in the same region with access to the Internet could directly reach the router.
- D. The S3 service could reach the router through a pre-configured VPC Endpoint.
Answer: B
NEW QUESTION 31
A company has an application running in an Amazon VPC that must be able to communicate with on-premises resources in a data center. Network traffic between AWS and the data center will initially be minimal, but will increase to more than 10 Gbps over the next few months. The company's goal is to launch the application as quickly as possible.
The Network Engineer has been asked to design a hybrid IT connectivity solution.
What should be done to meet these requirements?
- A. Provision an AWS VPN connection between an Amazon VPC and the data center, then submit an AWS Direct Connect connection request. Later, cut over from the VPN connection to one or more Direct Connect connections, as needed.
- B. Submit a 1 Gbps AWS Direct Connect connection request, then increase the number of Direct Connect connections, as needed.
- C. Allocate elastic IPs to Amazon EC2 instances for temporary access to on-premises resources, then provision AWS VPN connections between an Amazon VPC and the data center.
- D. Provision a 100 Mbps AWS Direct Connect connection between an Amazon VPC and the data center, then submit a Direct Connect connection request. Later, cut over from the hosted connection to one or more Direct Connect connections, as needed.
Answer: A
NEW QUESTION 32
......
Dumps Real Amazon AWS-Advanced-Networking-Specialty Exam Questions [Updated 2021]: https://www.test4sure.com/AWS-Advanced-Networking-Specialty-pass4sure-vce.html
Free AWS-Advanced-Networking-Specialty Exam Dumps to Pass Exam Easily: https://drive.google.com/open?id=1VniaQJrc2A0MM8KWet74EJOL3kV2Usa_