Question 1

You are using the CLI to assign multiple IP addresses to interfaces. The operation fails. What is the most likely reason?

Accepted Answer

A)  You cannot assign IP addresses in the CLI. 
B)  You can only assign 5 IP addresses at a time through the CLI. 
C)  One or more of the IP addresses could not be assigned. 
D)  All of the IP addresses could not be assigned. 
A)  You cannot assign IP addresses in the CLI. 
B)  You can only assign 5 IP addresses at a time through the CLI. 
C)  One or more of the IP addresses could not be assigned. 
D)  All of the IP addresses could not be assigned.

Question 2

You have a hybrid infrastructure, and you need AWS resources to be able to resolve your on-premises DNS names. You have configured a DNS server on an EC2 instance in your 10.1.3.0/24 subnet. This subnet resides on the VPC 10.1.0.0/16. What step should you take to accomplish this?

Accepted Answer

A)  Configure your DNS server to forward queries for the private hosted zone to 10.1.3.2. 
B)  Configure the DHCP option set in the VPC to point to the EC2 DNS server. 
C)  Configure your DNS server to forward queries for the private hosted zone to 10.1.0.2. 
D)  Disable the source/destination check flag for the DNS instance. 
A)  Configure your DNS server to forward queries for the private hosted zone to 10.1.3.2. 
B)  Configure the DHCP option set in the VPC to point to the EC2 DNS server. 
C)  Configure your DNS server to forward queries for the private hosted zone to 10.1.0.2. 
D)  Disable the source/destination check flag for the DNS instance.

Question 3

In AWS, which tool records API calls for a specific AWS account and also delivers the log files for that account?

Accepted Answer

A)  CloudTrail 
B)  Redshift 
C)  Beanstalk 
D)  Cognito 
A)  CloudTrail 
B)  Redshift 
C)  Beanstalk 
D)  Cognito

Question 4

What statement about LAGs is incorrect?

Accepted Answer

A)  If you create a new connection, you will have to fill out another LOA-CFA. 
B)  You can pool connections with multiple speeds to create one faster speed. 
C)  You will receive 1 LOA-CFA with a page for each connection. 
D)  All connections in the LAG must terminate at the same DX endpoint. 
A)  If you create a new connection, you will have to fill out another LOA-CFA. 
B)  You can pool connections with multiple speeds to create one faster speed. 
C)  You will receive 1 LOA-CFA with a page for each connection. 
D)  All connections in the LAG must terminate at the same DX endpoint.

Question 5

Which of these is not specified on an ENI?

Accepted Answer

A)  A primary private IPv4 address 
B)  A source/destination check flag 
C)  A MAC address 
D)  An A record 
A)  A primary private IPv4 address 
B)  A source/destination check flag 
C)  A MAC address 
D)  An A record

Question 6

An organization launched an IPv6-only web portal to support IPv6-native mobile clients. Front-end instances launch in an Amazon VPC associated with an appropriate IPv6 CIDR. The VPC IPv4 CIDR is fully utilized. A single subnet exists in each of two Availability Zones with appropriately configured IPv6 CIDR associations. Auto Scaling is properly configured, and no Elastic Load Balancing is used. Customers say the service is unavailable during peak load times. The network engineer attempts to launch an instance manually and receives the following message: "There are not enough free addresses in subnet 'subnet-12345678' to satisfy the requested number of instances." What action will resolve the availability problem?

Accepted Answer

A)  Create a new subnet using a VPC secondary IPv6 CIDR, and associate an IPv6 CIDR. Include the new subnet in the Auto Scaling group. 
B)  Create a new subnet using a VPC secondary IPv4 CIDR, and associate an IPv6 CIDR. Include the new subnet in the Auto Scaling group. 
C)  Resize the IPv6 CIDR on each of the existing subnets. Modify the Auto Scaling group maximum number of instances. 
D)  Add a secondary IPv4 CIDR to the Amazon VPC. Assign secondary IPv4 address space to each of the existing subnets. 
A)  Create a new subnet using a VPC secondary IPv6 CIDR, and associate an IPv6 CIDR. Include the new subnet in the Auto Scaling group. 
B)  Create a new subnet using a VPC secondary IPv4 CIDR, and associate an IPv6 CIDR. Include the new subnet in the Auto Scaling group. 
C)  Resize the IPv6 CIDR on each of the existing subnets. Modify the Auto Scaling group maximum number of instances. 
D)  Add a secondary IPv4 CIDR to the Amazon VPC. Assign secondary IPv4 address space to each of the existing subnets.

Question 7

Due to security requirements, all traffic must be encrypted between your VPC and your on-premises data center. You also want to maintain reliability. What two options will allow you to achieve this? (Choose two.)

Accepted Answer

A)  A Direct Connect connection with a Private VIF 
B)  A VPN connection 
C)  A Direct Connect connection with a Hosted VIF 
D)  A Direct Connect connection with a Public VIF 
A)  A Direct Connect connection with a Private VIF 
B)  A VPN connection 
C)  A Direct Connect connection with a Hosted VIF 
D)  A Direct Connect connection with a Public VIF

Question 8

You have multiple Amazon Elastic Compute Cloud (EC2) instances running a web server in a VPC configured with security groups and NACL. You need to ensure layer 7 protocol level logging of all network traffic (ACCEPT/REJECT) on the instances. What should be enabled to complete this task?

Accepted Answer

A)  CloudWatch Logs at the VPC level 
B)  Packet sniffing at the instance level 
C)  VPC flow logs at the subnet level 
D)  Packet sniffing at the VPC level 
A)  CloudWatch Logs at the VPC level 
B)  Packet sniffing at the instance level 
C)  VPC flow logs at the subnet level 
D)  Packet sniffing at the VPC level

Question 9

You deploy an Amazon EC2 instance that runs a web server into a subnet in a VPC. An Internet gateway is attached, and the main route table has a default route (0.0.0.0/0) configured with a target of the Internet gateway. The instance has a security group configured to allow as follows: Protocol: TCP Port: 80 inbound and nothing outbound The Network ACL for the subnet is configured to allow as follows: When you try to browse to the web server, you receive no response. Which additional step should you take to receive a successful response?

Accepted Answer

A)  Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 80 
B)  Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 1024-65535 
C)  Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 80 
D)  Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 1024-65535 
A)  Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 80 
B)  Add an entry to the security group outbound rules for Protocol: TCP, Port Range: 1024-65535 
C)  Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 80 
D)  Add an entry to the Network ACL outbound rules for Protocol: TCP, Port Range: 1024-65535

Question 10

In AWS Direct Connect, to provide for failover, AWS recommends that you request and configure two dedicated connections to AWS. These connections can terminate on one or two routers in your network. You can do this while __________________ with AWS Direct Connect step.

Accepted Answer

A)  creating a Virtual Interface 
B)  configuring redundant connections 
C)  completing the cross-connect 
D)  verifying your Virtual Interface 
A)  creating a Virtual Interface 
B)  configuring redundant connections 
C)  completing the cross-connect 
D)  verifying your Virtual Interface

Question 11

You have several VPCs that are peered. Each VPC has several routes to different subnets. Over the years, your company has acquired many companies. You find that traffic destined for one VPC ends up going to another. What is the best way to remedy this?

Accepted Answer

A)  Move the route table entry for the proper VPC higher in the list. 
B)  Adjust your routes so the proper VPC has a higher CIDR. 
C)  Move the route table entry for the proper VPC lower in the list. 
D)  Adjust your routes so the proper VPC has a lower CIDR. 
A)  Move the route table entry for the proper VPC higher in the list. 
B)  Adjust your routes so the proper VPC has a higher CIDR. 
C)  Move the route table entry for the proper VPC lower in the list. 
D)  Adjust your routes so the proper VPC has a lower CIDR.

Question 12

You need to find the public IP address of an instance that you're logged in to. What command would you use?

Accepted Answer

A)  curl ftp://169.254.169.254/latest/meta-data/public-ipv4 
B)  scp localhost/latest/meta-data/public-ipv4 
C)  curl http://127.0.0.1/latest/meta-data/public-ipv4 
D)  curl http://169.254.169.254/latest/meta-data/public-ipv4 
A)  curl ftp://169.254.169.254/latest/meta-data/public-ipv4 
B)  scp localhost/latest/meta-data/public-ipv4 
C)  curl http://127.0.0.1/latest/meta-data/public-ipv4 
D)  curl http://169.254.169.254/latest/meta-data/public-ipv4

Question 13

By default, all AWS accounts are limited to ____ EIPs, because public (IPv4) Internet addresses are a scarce public resource.

Accepted Answer

A)  5 
B)  8 
C)  6 
D)  2 
A)  5 
B)  8 
C)  6 
D)  2

Question 14

Fill in the blanks: One of the basic characteristics of security groups for your VPC is that you ______ .

Accepted Answer

A)  can specify allow rules, but not deny rules 
B)  can specify deny rules, but not allow rules 
C)  can specify allow rules as well as deny rules 
D)  can neither specify allow rules nor deny rules 
A)  can specify allow rules, but not deny rules 
B)  can specify deny rules, but not allow rules 
C)  can specify allow rules as well as deny rules 
D)  can neither specify allow rules nor deny rules

Question 15

You wish to host a mailserver on an EC2 instance. What two steps must you take to ensure utmost reliability?

Accepted Answer

A)  Create an EIP for the instance. 
B)  Configure the mail service to serve as an open relay. 
C)  Contact AWS to have a Reverse DNS record configured and to help keep your domain from SPAM blacklists. 
D)  Provide open security group access to your instance on ports 25, 3389 and 22. 
A)  Create an EIP for the instance. 
B)  Configure the mail service to serve as an open relay. 
C)  Contact AWS to have a Reverse DNS record configured and to help keep your domain from SPAM blacklists. 
D)  Provide open security group access to your instance on ports 25, 3389 and 22.

Question 16

Which of these is not required when setting up a VIF?

Accepted Answer

A)  BGP Key 
B)  VLAN ID 
C)  ASN 
D)  BGP MED 
A)  BGP Key 
B)  VLAN ID 
C)  ASN 
D)  BGP MED

Question 17

A company is using AWS to host all of its applications. Each application is isolated in its own Amazon VPC. Different environments such as Development, Test, and Production are also isolated in their own VPCs. The Network Engineer needs to automate VPC creation to enforce the company's network and security standards. Additionally, the CIDR range used in each VPC needs to be unique. Which solution meets all of these requirements?

Accepted Answer

A)  Use AWS CloudFormation to deploy the VPC infrastructure and a custom resource to request a CIDR range from an external IP address management (IPAM) service. 
B)  Use AWS OpsWorks to deploy the VPC infrastructure and a custom resource to request a CIDR range from an external IP address management (IPAM) service. 
C)  Use the VPC wizard in the AWS Management Console. Type in the CIDR blocks for the VPC and subnets. 
D)  Create the VPCs using AWS CLI and use the dry-run flag to validate if the current CIDR range is in use. 
A)  Use AWS CloudFormation to deploy the VPC infrastructure and a custom resource to request a CIDR range from an external IP address management (IPAM) service. 
B)  Use AWS OpsWorks to deploy the VPC infrastructure and a custom resource to request a CIDR range from an external IP address management (IPAM) service. 
C)  Use the VPC wizard in the AWS Management Console. Type in the CIDR blocks for the VPC and subnets. 
D)  Create the VPCs using AWS CLI and use the dry-run flag to validate if the current CIDR range is in use.

You are using the CLI to assign multiple IP addresses to interfaces. The operation fails. What is the most likely reason?

You have a hybrid infrastructure, and you need AWS resources to be able to resolve your on-premises DNS names. You have configured a DNS server on an EC2 instance in your 10.1.3.0/24 subnet. This subnet resides on the VPC 10.1.0.0/16. What step should you take to accomplish this?

In AWS, which tool records API calls for a specific AWS account and also delivers the log files for that account?

What statement about LAGs is incorrect?

Which of these is not specified on an ENI?

Due to security requirements, all traffic must be encrypted between your VPC and your on-premises data center. You also want to maintain reliability. What two options will allow you to achieve this? (Choose two.)

You have multiple Amazon Elastic Compute Cloud (EC2) instances running a web server in a VPC configured with security groups and NACL. You need to ensure layer 7 protocol level logging of all network traffic (ACCEPT/REJECT) on the instances. What should be enabled to complete this task?

In AWS Direct Connect, to provide for failover, AWS recommends that you request and configure two dedicated connections to AWS. These connections can terminate on one or two routers in your network. You can do this while __________________ with AWS Direct Connect step.

You have several VPCs that are peered. Each VPC has several routes to different subnets. Over the years, your company has acquired many companies. You find that traffic destined for one VPC ends up going to another. What is the best way to remedy this?

You need to find the public IP address of an instance that you're logged in to. What command would you use?

By default, all AWS accounts are limited to ____ EIPs, because public (IPv4) Internet addresses are a scarce public resource.

Fill in the blanks: One of the basic characteristics of security groups for your VPC is that you ______ .

You wish to host a mailserver on an EC2 instance. What two steps must you take to ensure utmost reliability?

Which of these is not required when setting up a VIF?

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

AWS Certified SysOps Administrator (SOA-C01)

Filters

Exam 1: AWS Certified Advanced Networking - Specialty (ANS-C00)

You are using the CLI to assign multiple IP addresses to interfaces. The operation fails. What is the most likely reason?

You have a hybrid infrastructure, and you need AWS resources to be able to resolve your on-premises DNS names. You have configured a DNS server on an EC2 instance in your 10.1.3.0/24 subnet. This subnet resides on the VPC 10.1.0.0/16. What step should you take to accomplish this?

In AWS, which tool records API calls for a specific AWS account and also delivers the log files for that account?

What statement about LAGs is incorrect?

Which of these is not specified on an ENI?

Due to security requirements, all traffic must be encrypted between your VPC and your on-premises data center. You also want to maintain reliability. What two options will allow you to achieve this? (Choose two.)

You have multiple Amazon Elastic Compute Cloud (EC2) instances running a web server in a VPC configured with security groups and NACL. You need to ensure layer 7 protocol level logging of all network traffic (ACCEPT/REJECT) on the instances. What should be enabled to complete this task?

In AWS Direct Connect, to provide for failover, AWS recommends that you request and configure two dedicated connections to AWS. These connections can terminate on one or two routers in your network. You can do this while __________________ with AWS Direct Connect step.

You have several VPCs that are peered. Each VPC has several routes to different subnets. Over the years, your company has acquired many companies. You find that traffic destined for one VPC ends up going to another. What is the best way to remedy this?

You need to find the public IP address of an instance that you're logged in to. What command would you use?

By default, all AWS accounts are limited to ____ EIPs, because public (IPv4) Internet addresses are a scarce public resource.

Fill in the blanks: One of the basic characteristics of security groups for your VPC is that you ______ .

You wish to host a mailserver on an EC2 instance. What two steps must you take to ensure utmost reliability?

Which of these is not required when setting up a VIF?

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

AWS Certified SysOps Administrator (SOA-C01)

Filters