Ace the ANS-C01 AWS Certified Advanced Networking Specialty Exam with our comprehensive study guide. Boost your career a

1. CertsChief Guaranteed Success with Accurate & Updated Questions. Amazon ANS-C01 AWS Certified Advanced Networking Specialty Exam Questions & Answers PDF For More Information - Visit: https://www.certschief.com/ ProductFull Version Features:  90 Days Free Updates  30 Days Money Back Guarantee  Instant Download Once Purchased  24/7 Online Chat Support Visit us athttps://www.certschief.com/ans-c01/

2. Latest Version: 6.0 Question: 1 A developer has configured a private hosted zone using Route 53. The developer needs to configure health checks for record sets within the private hosted zone that are associated with EC2 instances. How can the developer build a solution to address the given use-case? Response: A. Set up a CloudWatch metric that checks the status of the EC2 StatusCheckFailed metric, add an alarm to the metric, and then configure a health check that monitors the state of the alarm B. Set up a Route 53 health check to a private IP associated with the instances inside the VPC to be checked C. Set up a Route 53 health check that monitors an SNS topic which in turn notifies a CloudWatch alarm when the EC2 StatusCheckFailed metric fails D. Set up a CloudWatch metric that checks the status of the EC2 StatusCheckFailed metric and then configure a health check that monitors the status of the metric Answer: A Question: 2 A network engineer is deploying an application on an Amazon EC2 instance. The instance is reachable within the VPC through its private IP address and from the internet using an elastic IP address. Clients are connecting to the instance over the Internet and within the VPC, and the application needs to be identified by a single custom Fully Qualified Domain Name that is publicly resolvable- ‘app.example.com’. Instances within the VPC should always connect to the private IP to minimize data transfer costs. How should the engineer configure DNS to support these requirements? Response: A. Use Amazon Route 53 to create a geo-based routing entry for the hostname 'app' in the DNS zone 'example.com'. B. Create two A record entries for'app' in the DNS zone 'example.com'-one for the public IP and one for the private IP. C. Use Route 53 to create an ALIAS record to the public DNS name for the instance. D. Create a CNAME for 'app' in the DNS zone 'example.com' to the public DNS name for the Amazon EC2 instance. Answer: D Visit us athttps://www.certschief.com/ans-c01/

3. Question: 3 Your organization leverages an IP Address Management (IPAM) product to manage IP address distribution. The IPAM exposes an API. Development teams use CloudFormation to provision approved reference architectures. At deployment time, IP addresses must be allocated to the VPC. When the VPC is deleted, the IPAM must reclaim the VPC’s IP allocation. Which method allows for efficient, automated integration of the IPAM with CloudFormation? Response: A. AWS CloudFormation parameters using the "Ref::" intrinsic function B. AWS CloudFormation custom resource using an AWS Lambda invocation. C. CloudFormation::OpsWorks::Stack with custom Chef configuration. D. AWS CloudFormation parameters using the "Fn::FindlnMap" intrinsic function. Answer: B Question: 4 You have a transit VPC set up with the hub VPC in us-east-1 and the spoke VPCs spread across multiple AWS Regions. Servers in the VPCs in Mumbai and Singapore are suffering huge latencies when connecting with each other. How do you rearchitect your VPCs to maintain the transit VPC architecture and reduce the latencies in the overall architecture? Response: A. Set up a local transit hub VPC in the Mumbai region. Connect the VPCs in Mumbai and Singapore to this hub. Set up an IP Security (IPsec) Virtual Private Network (VPN) over cross-region VPC peering between the two hubs. B. Set up a local transit hub in the Singapore region. Connect the VPCs in Mumbai and Singapore to this hub VPC. Set up a Generic Routing Encapsulation (GRE) VPN over cross-region VPC peering between the two hubs. C. Add transit Amazon Elastic Compute Cloud (Amazon EC2) instances in the us-east-1 hub VPC dedicated to the traffic coming from the Mumbai and Singapore regions D. Add a transit VPC hub in us-east-1. Connect the VPCs in Mumbai and Singapore to this new hub and then connect the two hubs using VPC peering. Answer: B Question: 5 Visit us athttps://www.certschief.com/ans-c01/

4. Which of the following services provides private connectivity between AWS and your data center, office, or colocation environment? Response: A. Amazon Route 53 B. AWS Direct Connect C. AWS WAF D. Amazon Outpost Answer: B Question: 6 Your company has just completed a transition to IPv6 and has deployed a website on a server. You were able to download software on the instance without an issue. This website is deployed using IPv6, but the public is not able to access it. What should you do to fix this problem? Response: A. Add an internet gateway for the instance. B. Add an egress-only internet gateway. C. Add an inbound rule to your security group that allows inbound traffic on port 80 for ::/0. D. Add an inbound rule to your security group that allows inbound traffic on port 80 for 0.0.0.0/0. Answer: C Question: 7 A customer has set up multiple VPCs for Dev, Test, Prod, and Management. You need to set up AWS Direct Connect to enable data flow from on-premises to each VPC. The customer has monitoring software running in the Management VPC that collects metrics from the instances in all the other VPCs. Due to budget requirements, data transfer charges should be kept at minimum. Which design should be recommended? Response: A. Create a total of four private VIFs, one for each VPC owned by the customer, and route traffic between VPCs using the Direct Connect link. B. Create a private VIF to the Management VPC, and peer this VPC to all other VPCs. C. Create a private VIF to the Management VPC, and peer this VPC to all other VPCs, enable source/destination NAT in the Management VPC. Create a total of four private VIFs, and enable VPC peering between all VPCs. Visit us athttps://www.certschief.com/ans-c01/

5. Answer: D Question: 8 A Network Engineer is designing a system on AWS that will leverage Amazon CloudFront for content caching and for protecting the underlying origin. The security team has flagged a concern of a probable attack on the origin server IP addresses, despite it being served by CloudFront. Suggest a solution that provides the strongest level of protection to the origin server? Response: A. Configure Origin Access Identity(OAI) on the origin server, which will only allow requests originating from CloudFront B. Configure CloudFront to use a custom header and configure an AWS WAF rule on the origin’s Application Load Balancer to accept only traffic that contains that header C. Configure an AWS Lambda@Edge function to validate that the traffic to the Application Load Balancer originates from CloudFront D. Configure private access to content by using special CloudFront signed URLs or signed cookies Answer: B Question: 9 Which Amazon Virtual Private Cloud (Amazon VPC) feature allows you to create a dual homed instance? Response: A. Customer gateways B. Multiple security groups C. Elastic network interface D. Elastic IP address Answer: C Question: 10 Your big data team is trying to determine why their proof of concept is running slowly. For the demo, they are trying to ingest 1 TB of data from Amazon Simple Storage Service (Amazon S3) on their c4.8xl instance. They have already enabled enhanced networking. What should they do to increase Amazon S3 ingest rates? Response: A. Run the demo on-premises and access Amazon S3 from AWS Direct Connect to reduce latency. B. Split the data ingest on more than one instance, such as two c4.4xl instances. Visit us athttps://www.certschief.com/ans-c01/

6. C. Place the instance in a placement group and use an Amazon S3 endpoint. D. Place a Network Load Balancer between the instance and Amazon S3 for more efficient load balancing and better performance. Answer: B Question: 11 You work for an international corporation that uses AWS. Due to regulations, you are now required to route the US and China to two different websites. You set up the records and now no other countries can access your site. Why is this? Response: A. You forgot to set a default geolocation record. B. You probably broke your DNS. C. You must have a geolocation in place for every country. D. Geolocation features are only available in CloudFront. Answer: A Question: 12 Which of the following is true about Smooth Streaming on Amazon CloudFront? Response: It is a Microsoft format for streaming of media files It is a CloudFront format for streaming of media files in RTMP distribution It is the Adobe format for streaming of media files It is a CloudFront format for streaming of media files in web distribution Answer: A Question: 13 Your company has an application that it would like to share with a business partner, but the performance of the application is business-critical. The network architects are discussing using AWS Direct Connect to increase performance. Which of the following are performance advantages of AWS Direct Connect compared to a Virtual Private Network (VPN) or Internet connectivity? (Choose two.) Response: A. Lower egress costs B. Ability to use MACSec encryption Visit us athttps://www.certschief.com/ans-c01/

7. C. Lower latency D. Consistent and Dedicated bandwidth Answer: C,D Question: 14 Non-compliant resources identified through the use of AWS Config Rules are automatically removed from operational service. Response: A. It depends on the Rule configuration B. Only if it remains non-compliant for more than 6 hours C. True D. False Answer: A Question: 15 The following VPC Flow Logs show traffic bound for an EC2 instance with the IP Address 10.1.1.17. What is happening? Response: A. Traffic is being blocked by an outbound Security Group B. Traffic is being blocked by an outbound network ACL C. Traffic is being blocked by an inbound network ACL D. Traffic is being blocked by an inbound Security Group Answer: B Visit us athttps://www.certschief.com/ans-c01/

8. For More Information - Visit: http://www.certschief.com/ Disc ount Coupon Code: Page | 1 http://www.certschief.com/exam/0B0-104/ CERT S CHIEF10 Visit us athttps://www.certschief.com/ans-c01/ Powered by TCPDF (www.tcpdf.org)