Amazon-Web-Services ANS-C00 Free Practice Questions

NEW QUESTION 1
True or false: A VPC contains multiple subnets, where each subnet can span multiple Availability Zones.

• A. This is true only for US regions.
• B. This is false.
• C. This is true.
• D. This is true only if requested during the set-up of VP

Answer: B

Explanation:
Reference:
https://aws.amazon.com/vpc/faqs/

NEW QUESTION 2
AWS Config flags a resource as ______ if a resource violates any conditions of an AWS Config rule that it evaluates on the resource in question.

• A. corrupted
• B. noncompliant
• C. invalid
• D. misconfigured

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html

NEW QUESTION 3
A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services does not provide detailed monitoring with CloudWatch?

• A. AWS Route53
• B. AWS EMR
• C. AWS ELB
• D. AWS RDS

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

NEW QUESTION 4
For web distributions in Amazon CloudFront, your origin can be either an Amazon S3 bucket or _____ .

• A. a DNS server
• B. a proxy server
• C. an FTP server
• D. an HTTP server

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-overview.html

NEW QUESTION 5
Which of the following characters is not allowed while creating a Namespace for a CloudWatch metric?

• A. /
• B. :
• C. #
• D. @

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.ht ml

NEW QUESTION 6
In Amazon CloudFront, to link to your objects, if your domain name is d111111abcdef8.cloudfront.net and your object is image.jpg, then the URL for the link in your webpage will be ______.

• A. http://d111111abcdef8.cloudfront.net/images/image.jpg
• B. http://d111111abcdef8.dns/images/image.jpg
• C. http://d111111abcdef8.dns/image.jpg
• D. http://d111111abcdef8.cloudfront.net/image.jpg

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/GettingStarted.html

NEW QUESTION 7
After setting an AWS Direct Connect, which of the following cannot be done with an AWS Direct Connect Virtual Interface?

• A. You can delete a virtual interface; if its connection has no other virtual interfaces, you can delete the connection.
• B. You can change the region of your virtual interface.
• C. You can create a hosted virtual interface.
• D. You can exchange traffic between the two ports in the same region connecting to different Virtual Private Gateways (VGWs) if you have more than one virtual interface.

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/WorkingWithVirtualInterfaces.html

NEW QUESTION 8
Which service is used by default to store the CloudTrail log files?

• A. Elastic Block Store (EBS)
• B. Redshift
• C. Simple Storage Service (S3)
• D. Glacier

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-working-with-log-files.html

NEW QUESTION 9
You can use the _____ command of the AWS Config service CLI to see the compliance state of each resource that AWS Config evaluates for a specific rule.

• A. describe-compliance-by-resource
• B. describe-compliance-by-config-rule
• C. get-compliance-details-by-config-rule
• D. get-compliance-details-by-config-rule

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

NEW QUESTION 10
AWS CloudTrail can be configured to _____ log files across multiple accounts and regions so that log
files are delivered to a single bucket.

• A. aggregate
• B. disperse
• C. replicate
• D. encrypt

Answer: A

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/

NEW QUESTION 11
In Amazon CloudFront, if you need to quickly remove objects from a distribution, you can:

• A. delete the objects from cache.
• B. invalidate the objects.
• C. remove your Amazon S3 bucket.
• D. delete your distribution and recreate i

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AddRemoveReplaceObject s.html

NEW QUESTION 12
A user is collecting 1000 records per second. The user wants to send the data to CloudWatch using a custom namespace, Which of the below mentioned options is recommended for this activity?

• A. Aggregate the data with statistics, such as Min, max, Average, Sum and Sample data and send the data to CloudWatch
• B. Send all the data values to CloudWatch in a single command by separating them with a comm
• C. CloudWatch will parse automatically
• D. It is not possible to send all the data in one cal
• E. Thus, it should be sent one by on
• F. CloudWatch will aggregate the data automatically
• G. Create one csv file of all the data and send a single file to CloudWatch

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/publishingMetrics.html

NEW QUESTION 13
Non-compliant resources identified through the use of AWS Config Rules are automatically removed from operational service.

• A. It depends on the Rule configuration
• B. Only if it remains non-compliant for more than 6 hours
• C. True
• D. False

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

NEW QUESTION 14
To get started using AWS Direct Connect, in which of the following steps do you configure Border Gateway Protocol (BGP)?

• A. Complete the Cross Connect
• B. Verify your Virtual Interface
• C. Create a Virtual Interface
• D. Submit AWS Direct Connect Connection Request

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#createvirtualinterfac

NEW QUESTION 15
You have several Amazon Glacier vaults you would like to monitor. How might you monitor those vaults?

• A. Create a custom AWS Config rule.
• B. Use an AWS master Config rule.
• C. Use an AWS managed Config rule.
• D. Create a KMS policy and attach it to your Amazon Glacier vaul

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ nodejs.html#creating-custom-rules-for-additional-resource-types

NEW QUESTION 16
When an AWS Config rule is triggered a JSON object known as an AWS Config Event is created. This object contains a(n) ______ attribute, which is a JSON-formatted set of key/value pairs the receiving AWS Lambda function processes as part of its evaluation logic.

• A. inputParameters
• B. invokingEvent
• C. ruleConfiguration
• D. mappingTemplate

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ example-events.html

NEW QUESTION 17
Which other AWS service is used to track ‘Related Events’ within the Configuration Item?

• A. AWS WAF
• B. SQS
• C. AWS CloudTrail
• D. S3

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#configitem- table

NEW QUESTION 18
Over which of the following Ethernet standards does AWS Direct Connect link your internal network to an AWS Direct Connect location?

• A. Copper backplane cable
• B. Twisted pair cable
• C. Single mode fiber-optic cable
• D. Shielded balanced copper cable

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html

NEW QUESTION 19
You can use the _____ command of the AWS Config service CLI to see the compliance state of each of your rules.

• A. get-compliance-details-by-resource
• B. describe-compliance-by-config-rule
• C. get-compliance-details-by-config-rule
• D. describe-compliance-by-resource

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

NEW QUESTION 20
Which element of AWS Config can be used to help maintain internal and external compliance controls?

• A. Configuration Item
• B. Configuration Recorder
• C. Configuration Streams
• D. Config Rules

Answer: D

Explanation:
Reference:
https://aws.amazon.com/config/

NEW QUESTION 21
You have been tasked with migrating your company’s proprietary massively large dataset sorting application to AWS. The application currently runs on 4 highly spec’d servers that are in a cluster arrangement and runs 24x7, with the average CPU utilisation across any 24hr period being approx 85% - the migration of this cluster once up and running on AWS is expected to run similarly. The servers shuffile data internally and between themselves. Your company’s financial performance is entirely dependent on the speed at which it can sort your customers datasets, that is the faster a sorted result can be returned the better your company’s bottom line. Of the choices presented below, select the optimal network configuration that will ensure the best financial results for your company.

• A. Disable Jumbo Frames to ensure better data throughput between instances
• B. Enable Jumbo Frames to ensure better data throughput between instances
• C. Create an autoscaled group of c4.8xlarge instances - with min 1 and max 4 - this will ensure your operational costs a minimal
• D. Configure a CloudWatch Alarm to add more CPUs to the instances when average cluster CPU utilisation breaches 85%

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/network_mtu.html

NEW QUESTION 22
Each custom AWS Config rule you create must be associated with a(n) AWS _____ , which contains the logic that evaluates whether your AWS resources comply with the rule.

• A. Lambda function
• B. Configuration trigger
• C. EC2 instance
• D. S3 bucket

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html

NEW QUESTION 23
Which endpoint is considered to be best practise when analysing data within a Configuration Stream of AWS Config?

• A. SNS
• B. E-Mail
• C. SQS
• D. Kinesis

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/monitor-resource-changes.html

NEW QUESTION 24
Which AWS service is used within an AWS Config Rule to perform the logic evaluation of that rule?

• A. Inspector
• B. WAF
• C. Lambda
• D. SWF

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules_nodejssample. html

NEW QUESTION 25
......