Exams > Amazon > ANS-C00: AWS Certified Advanced Networking - Specialty
ANS-C00: AWS Certified Advanced Networking - Specialty
Page 12 out of 37 pages Questions 111-120 out of 367 questions
Question#111

What value in a packet dictates the priority of the packet in a QoS enabled network?

  • A. BFD
  • B. IPv6
  • C. NAT
  • D. DSCP
Discover Answer Hide Answer

D
The Differentiated Services Code Point value, or DSCP, is used to label packets on QoS enabled networks for prioritization.

Question#112

What is the IPv6 subnet CIDR used by a VPC?

  • A. /128
  • B. /56
  • C. /48
  • D. /16
Discover Answer Hide Answer

B
A VPC will always use /56 as its CIDR

Question#113

What is the name of the label applied to packets to allow routers to know where to forward in an MPLS network?

  • A. BFD
  • B. BGP
  • C. FEC
  • D. ABC
Discover Answer Hide Answer

C
Forward Equivalency Class is how routers know where to send packets.

Question#114

What port and protocol is used by DNS?

  • A. 80/TCP
  • B. 22/TCP
  • C. 80/TCP and UDP
  • D. 53/TCP and UDP
Discover Answer Hide Answer

D
DNS uses port 53 and either TCP or UDP depending on what type of DNS message is being sent.

Question#115

Which port range must be allowed through a NACL to ensure all return traffic is successful?

  • A. 1024 גˆ’ 65,535
  • B. 22
  • C. 65,000 גˆ’ 65,535
  • D. 80 גˆ’ 443
Discover Answer Hide Answer

A
1024 גˆ’ 65,535 is the full "ephemeral port" range.

Question#116

To allow all traffic to access an instance in "Subnet 1" that uses "Security Group 1", what two options need to be configured? (Choose two.)

  • A. NACL rule allowing 0.0.0.0/0 to access "Subnet 1"
  • B. Security Group rule in "Security Group 1" that allows 0.0.0.0/0 inbound
  • C. Security Group rule in "Security Group 1" that allows outbound traffic to 0.0.0.0/0
  • D. NACL rule allowing 0.0.0.0/0 to access "Security Group 1"
Discover Answer Hide Answer

AB
You must allow traffic through the NACL and through the Security Group to access the instance. If there is not an Outbound allow setup in the NACL, you may need to set that, but an outbound rule for Security Group 1 is not necessary as security groups are stateful.

Question#117

You have created a custom VPC. What are two things you may need to do in order to SSH directly into your instance? (Choose two.)

  • A. Enable SSH on the instance
  • B. Attach a NAT Gateway
  • C. Enable Public IP addresses
  • D. Attach an Internet Gateway
Discover Answer Hide Answer

CD
Public IP addresses are not enabled by default in a custom VPC. An Internet Gateway is also required.

Question#118

Which of these addresses cannot be given to an EC2 instance in your VPC?

  • A. 10.0.0.157
  • B. 10.0.0.3
  • C. 10.0.0.4
  • D. 10.0.0.253
Discover Answer Hide Answer

B
10.0.0.3 is reserved by AWS for future use.

Question#119

Which ports must you allow for HTTP and HTTPS traffic?

  • A. 25/465
  • B. 21/22
  • C. 3389/3306
  • D. 80/443
Discover Answer Hide Answer

D
80 and 443 are the ports for HTTP and HTTPS, respectively.

Question#120

If you have one VPC peered with two VPCs with overlapping CIDRs, which route will be more preferred?

  • A. 10.1.0.0/16
  • B. 10.0.0.0/8
  • C. 10.1.1.5/32
  • D. 10.1.1.0/24
Discover Answer Hide Answer

C
10.1.1.5/32. The most specific route is preferred.

chevron rightPrevious Nextchevron right