How Many Questions Of AWS-Certified-Advanced-Networking-Specialty Free Dumps

NEW QUESTION 1
In Amazon CloudFront, which of the following is true of Smooth Streaming?

• A. It is a Microsoft format for streaming of media files.
• B. It is a CloudFront format for streaming of media files in RTMP distribution.
• C. It is the Adobe format for streaming of media files.
• D. It is a CloudFront format for streaming of media files in web distributio

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/on-demand-streamingsmooth. html

NEW QUESTION 2
A user is trying to send custom metrics to CloudWatch using the PutMetricData APIs. Which of the below mentioned points should the user needs to take care while sending the data to CloudWatch?

• A. The size of a request is limited to 128KB for HTTP GET requests and 64KB for HTTP POST requests
• B. The size of a request is limited to 40KB for HTTP GET requests and 8KB for HTTP POST requests
• C. The size of a request is limited to 16KB for HTTP GET requests and 80KB for HTTP POST requests
• D. The size of a request is limited to 8KB for HTTP GET requests and 40KB for HTTP POST requests

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.ht ml

NEW QUESTION 3
For ____ distributions, CloudFront does not cache cookies in edge caches.

• A. AMI
• B. Web
• C. RTMP
• D. Web and RTMP

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html

NEW QUESTION 4
Fill in the blanks: One of the basic characteristics of security groups for your VPC is that you ______ .

• A. can specify allow rules, but not deny rules
• B. can specify deny rules, but not allow rules
• C. can specify allow rules as well as deny rules
• D. can neither specify allow rules nor deny rules

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_SecurityGroups.html

NEW QUESTION 5
In the context of Amazon CloudFront, when you configure the media player, the path you specify to the media file must contain the characters _____ .

• A. flv/std just before the domain name
• B. flv/std immediately after the domain name
• C. cfx/st just before the domain name
• D. cfx/st immediately after the domain name

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Streaming_URLs.html

NEW QUESTION 6
Considering the rules of IPv4 subnetting, how many subnets and hosts per subnet are possible given the following network 192.168.130.130/28? (in this question ignore the fact that AWS reserves 5 IP addresses)

• A. 8 subnets and 30 hosts per subnet
• B. 16 subnets and 14 hosts per subnet
• C. 32 subnets and 30 hosts per subnet
• D. 8 subnets and 14 hosts per subnet

Answer: B

Explanation:
Reference:
https://en.wikipedia.org/wiki/IPv4_subnetting_reference

NEW QUESTION 7
When using AWS Config, which two items are stored on S3 as a part of its operation?

• A. Configuration Items and Configuration History
• B. Configuration Recorder and Configuration Snapshots
• C. Configuration History and Configuration Snapshots
• D. Configuration Snapshots and Configuration Streams

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/config-concepts.html#config-items

NEW QUESTION 8
Which of the following statements does not describe Jumbo Frames in an AWS VPC environment?

• A. For instances that are collocated inside a placement group, jumbo frames help to achieve the maximum network throughput possible
• B. Jumbo Frames are not supported for traffic that exits the Virtual Private Gateway
• C. Jumbo Frames are not supported for traffic that exits the Internet Gateway
• D. T2.micro instances do not support Jumbo Frames

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/network_mtu.html

NEW QUESTION 9
From the following options, select the answer that correctly describes the implementation of the HTTP protocol

• A. By definition, HTTP is a connection-less oriented protocol and therefore utilises TCP
• B. By definition, HTTP is a connection orientated protocol and therefore utilises TCP
• C. By definition, HTTP is a connection-less oriented protocol and therefore utilises UDP
• D. By definition, HTTP can be configured to be either connection or connection-less oriented - by specifying the appropriate HTTP header.

Answer: B

Explanation:
Reference:
https://en.wikipedia.org/wiki/Hypertext_Transfer_Protocol

NEW QUESTION 10
When an AWS Config rule is triggered a JSON object known as an AWS Config Event is created. This object contains another JSON string in its _____ parameter, which describes the event that
triggered the rule.

• A. resultToken
• B. eventLeftScope
• C. invokingEvent
• D. configRuleName

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ example-events.html

NEW QUESTION 11
AWS CloudTrail can be configured to _____ log files across multiple accounts and regions so that log
files are delivered to a single bucket.

• A. aggregate
• B. disperse
• C. replicate
• D. encrypt

Answer: A

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/

NEW QUESTION 12
You have just provisioned a new VPC a with a CIDR block of 172.16.12.0/24. The entire CIDR block is fully utilised by subdividing it into 6 subnets, we will refer to these as Subnet1 through to Subnet6.
The first 2 subnets (Subnet1 and Subnet2) are the same size. The last 4 subnets (Subnet3, Subnet4, Subnet5, Subnet6) are also the same size. Subnet5 is half the size of Subnet2. The address space as occupied by the first two subnets is contiguous, as is the address space occupied by the last 4 subnets. Within Subnet3 AWS reserves the address 172.16.12.129 for the VPC router. Select the correct IP address reserved by AWS for DNS in the Subnet2.

• A. 172.16.64.1
• B. 172.16.64.65
• C. 172.16.12.66
• D. 172.16.12.64

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

NEW QUESTION 13
An unfortunate situation has just come to your attention. A business critical application with
sensitive data running on-prem will run out of storage disk space in 24hrs. This business critical application is dependent a very large set of routes - required for integration with other system. You make a quick but well informed decision to migrate this application quickly to AWS. You are able to quickly launch a new VPC and within it equivalent infrastructure to re-home the application. In order to complete the replication of application data and ensure the application remains operational
beyond the next 24hrs, select the best implementation.

• A. Within the new VPC - establish a Direct Connect connection with max 10Gbps port speed for data replicatio
• B. Establish a 802.1Q VLAN and configure a Virtual Private Gateway and Private Virtual Interface, and ensure Jumbo Frames is enabled.
• C. Within the new VPC - deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with BGP dynamic routing
• D. Within the new VPC - deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with static routing, and ensure Jumbo Frames is enabled.
• E. Within the new VPC - deploy a software based virtual router (for example a Cisco CSR). Configure with dual ENIs (external and internal), create and attach an EIP to the external ENI, Configure and setup IPsec VPN tunnels, and ensure Jumbo Frames is enabled.

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/NetworkAdminGuide/GenericConfig.html

NEW QUESTION 14
In your current role as the corporate network architect - you have decided to replace your existing hardware firewall appliances with a pair of Juniper SRX-Series Services Gateways. You have chosen these as AWS lists these as supportable devices for establishing IPsec connections. With this in mind, select the minimum set of options to ensure that you can establish IPsec connectivity between your on premise private corporate network and your AWS hosted VPC. Select which option is NOT required

• A. Initiate network connections from somewhere within your corporate network, this is required to bring the tunnels UP
• B. Deploy a Customer Gateway within your corporate network
• C. Deploy a Customer Gateway within your VPC
• D. Deploy a Virtual Private Gateway within your VPC

Answer: B

Explanation:
Reference:
https://aws.amazon.com/vpc/faqs/

NEW QUESTION 15
In the "start using the AWS Direct Connect steps," when can you complete the Cross Connect step?

• A. After verifying your virtual interface
• B. After you have received your Letter of Authorization and Connecting Facility Assignment (LOA-CFA) from AWS
• C. 72 hours after submitting your request for AWS Direct Connect Connection
• D. Immediately after submitting your request for AWS Direct Connect Connection

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Colocation.html

NEW QUESTION 16
You would like to automate the monitoring of changes in the configurations of your AWS resources and respond programmatically to configurations of only a certain type. To do this, you could use Amazon ______ as the endpoint for the Amazon SNS topics that generate messages from AWS Config.

• A. Kinesis
• B. Simple Email Service (SES)
• C. Simple Storage Service (S3)
• D. Simple Queue Service (SQS)

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/monitor-resource-changes.html

NEW QUESTION 17
Use _____ to get more visibility into the health of your AWS Elastic Beanstalk application and take appropriate actions in case of hardware failure or performance degradation.

• A. Amazon Elastic Beanstalk command line
• B. Amazon EC2 log files
• C. Amazon CloudWatch
• D. Amazon Load balancing

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.concepts.design.html

NEW QUESTION 18
You are your company’s AWS cloud architect. You have created a VPC topology that consists of 3
VPCs. You have a centralised VPC (VPC-Shared) that provides shared services to the remaining 2 departmental dedicated VPCs (VPC-Dept1 and VPC-Dept2). The centralised VPC is VPC peered to both of the departmental VPCs, that is a VPC peering connection exists between VPC-Shared and VPC-Dept1, and a VPC peering connection exists between VPC-Shared and VPC-Dept2. Select the correct option from the list below.

• A. Network traffic is possible between VPC-Shared instances and VPC-Dept1 and VPC-Dept2 instances as long as the appropriate routes and security groups are in place, but only for communication that is initiated from VPC1-Shared instances as the default peering bi-directional communication flag has been disabled.
• B. Instances within VPC-Dept1 can communicate directly with instances in VPC-Shared, as long as the appropriate routes and security groups are in place, and vice versa regardless of who initiates communication
• C. All network communication remains blocked between all VPCs until the respective peering bidirectional communication flags are set to the appropriate setting that allows traffic to flow.
• D. Network traffic is possible between VPC-Shared instances and VPC-Dept1 and VPC-Dept2 instances as long as the appropriate routes and security groups are in place, but only for communication that is initiated from VPC1-Shared instances as the default peering bi-directional communication flag has been enabled.

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/PeeringGuide/peering-configurations-partialaccess. html#one-to-two-vpcs-instances

NEW QUESTION 19
When an AWS Config rule is triggered a JSON object known as an AWS Config Event is created. This object contains a(n) ______ attribute, which is a JSON-formatted set of key/value pairs the receiving AWS Lambda function processes as part of its evaluation logic.

• A. inputParameters
• B. invokingEvent
• C. ruleConfiguration
• D. mappingTemplate

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ example-events.html

NEW QUESTION 20
To directly manage your CloudTrail security layer, you can use ______ for your CloudTrail log files.

• A. SSE-S3
• B. SCE-KMS
• C. SCE-S3
• D. SSE-KMS

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/awscloudtrail/latest/userguide/encrypting-cloudtrail-log-files-withaws- kms.html

NEW QUESTION 21
True or false: A VPC contains multiple subnets, where each subnet can span multiple Availability Zones.

• A. This is true only for US regions.
• B. This is false.
• C. This is true.
• D. This is true only if requested during the set-up of VP

Answer: B

Explanation:
Reference:
https://aws.amazon.com/vpc/faqs/

NEW QUESTION 22
With respect to Amazon CloudFront, which one of the following statements is correct?

• A. For HTTPS web distributions, you cannot forward cookies to your origin.
• B. For both HTTP and HTTPS web distributions, you can choose to forward cookies to your origin.
• C. For HTTP web distributions, you cannot forward cookies to your origin.
• D. For Real Time Messaging Protocol (RTMP) distributions, you can configure CloudFront to process cookies.

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html

NEW QUESTION 23
......