Exams > Amazon > ANS-C00: AWS Certified Advanced Networking - Specialty
ANS-C00: AWS Certified Advanced Networking - Specialty
Page 10 out of 37 pages Questions 91-100 out of 367 questions
Question#91

Which of the following does not configure Amazon CloudFront cache behaviors to forward cookies to an origin for web distributions?

  • A. Origin server
  • B. AWS CLI
  • C. Amazon EMR
  • D. Amazon S3
Discover Answer Hide Answer

D
Amazon S3 and some HTTP servers do not process cookies. Do not configure Amazon CloudFront cache behaviors to forward cookies to an origin that doesn't process cookies or you'll adversely affect cache ability and consequently performance.
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html

Question#92

You received reports from clients in another time zone that they experienced an outage of your website several hours before you arrived at work. What two AWS services could prove crucial in figuring out what happened? (Choose two.)

  • A. AWS Support
  • B. CloudTrail
  • C. CloudWatch
  • D. Flow Logs
Discover Answer Hide Answer

CD
CloudTrail is for finding out who made a change. This could be a reason for the outage, but you need to see the metrics first. CloudWatch and Flow Logs are the best for this.

Question#93

You wish to access all European regions using your Direct Connect connection. How should you accomplish this?

  • A. Peer VPCs in the different regions and connect DX to one of the regions to communicate with the other.
  • B. Use a DX Gateway.
  • C. Find the prefix list for the other region and add it to your route table.
  • D. One DX connection will connect you to all regions.
Discover Answer Hide Answer

B
The DX Gateway will allow access to multiple regions.

Question#94

You are using the CLI to assign multiple IP addresses to interfaces. The operation fails. What is the most likely reason?

  • A. You cannot assign IP addresses in the CLI.
  • B. You can only assign 5 IP addresses at a time through the CLI.
  • C. One or more of the IP addresses could not be assigned.
  • D. All of the IP addresses could not be assigned.
Discover Answer Hide Answer

C
One more of the IP addresses could not be assigned. It only takes one failed assignment for the entire operation to fail.

Question#95

You are a network admin of a US company called Webby Widgets that is expanding to Europe. The company has a website that serves dynamic and static content.
You have been instructed to ensure the European clients receive the least latency possible, no matter where in Europe they live, while still allowing the US clients to receive the same user experience and performance they have been accustomed to. You have also been instructed to ensure both countries use the same URL to access the site and keep costs low.
What two things should you do? (Choose two.)

  • A. Deploy three VPCs; one for the US, one for the EU, and one as a central VPC that hosts an Elastic Load Balancer that will distribute traffic between the US and EU VPCs.
  • B. Create two A records: eu.webbywidgets.com that points to the EU resources and us.webbywidgets.com that points to the US resources.
  • C. Use the Traffic Flow policy creator to create the perfect routing policy.
  • D. Create a CloudFront distribution to serve the static content from an S3 bucket.
Discover Answer Hide Answer

CD
The Traffic Flow policy creator costs $50/mo. per policy and Elastic Load Balancers cannot distribute traffic between VPCs.

Question#96

You are configuring a CloudFront distribution, and when you try to attach an SSL, you do not see your SSL listed. What is the most likely reason for this?

  • A. You must configure an https record in Route 53 first.
  • B. Sometimes, it won't show, and you need to retrieve the ARN for the SSL and enter it manually.
  • C. You requested an SSL for the wrong region.
  • D. You didn't wait 48 hours after approving the SSL.
Discover Answer Hide Answer

C

Question#97

Your company has decided to use AWS WorkSpaces for its hosted desktop solution. Your company has an existing AD of about 57,000 users, and you want to minimize authentication traffic from AWS to your datacenter. Your company has a lot of personnel changes, and it is crucial that these changes are reflected reliably.
What two steps should you take? (Choose two.)

  • A. Deploy Hosted AD in AWS.
  • B. Deploy an AD Connector in AWS.
  • C. Create a DX connection between the datacenter and AWS.
  • D. Create a VPN between the datacenter AWS.
Discover Answer Hide Answer

AC
A VPN is not reliable enough, and an AD connector will cause too much authentication traffic.

Question#98

You are configuring multiple Direct Connect links for your organization and need them to be in an HA Active/Passive configuration with extreme sensitivity to outages in order to encourage very quick failover times. You also need to be able to control which link is active.
What two configuration changes should you implement? (Choose two.)

  • A. MPLS
  • B. BFD
  • C. AS_PATH Prepending
  • D. BGP
Discover Answer Hide Answer

BC
Bidirectional-Forwarding Detection will allow for faster failover times. AS_PATH Prepending will allow you to choose the default path. BGP is already implemented and MPLS does not matter.

Question#99

What number does the binary number 10101000 correspond to?

  • A. 168
  • B. 128
  • C. 192
  • D. 160
Discover Answer Hide Answer

A
128 + 0 + 32 + 0 + 8 + 0 + 0 + 0 = 168

Question#100

What number does the binary number 11000000 correspond to?

  • A. 128
  • B. 192
  • C. 64
  • D. 117
Discover Answer Hide Answer

B
128 + 64 + 0 + 0 + 0 + 0 + 0 + 0 = 192

chevron rightPrevious Nextchevron right