Exams > Amazon > ANS-C00: AWS Certified Advanced Networking - Specialty
ANS-C00: AWS Certified Advanced Networking - Specialty
Page 9 out of 37 pages Questions 81-90 out of 367 questions
Question#81

Your company currently has a LAG to AWS with two 1Gbps connections. What is the best way to increase throughput on this LAG?

  • A. Add three 1Gbps connections to the LAG.
  • B. Add one 10Gbps connections to the LAG.
  • C. Configure your router to use "jumbo frames" with an MTU of 9001.
  • D. Add two 1Gbps connections to the LAG.
Discover Answer Hide Answer

D
Add two 1Gbps connections to the LAG. DX does not support jumbo frames, a LAG only supports 4 connections, and adding a 10Gbps connection will be limited to the lowest speed of 1Gbps.

Question#82

You have 4 Direct Connect connections from your datacenter. Site A advertises 172.16.0.0/16 AS 65000, Site B advertises 172.16.0.128/25 AS 65000 65000
65000, Site C advertises 172.0.0.0/8 AS 65000 and Site D advertises 172.16.0.0/24 AS 65000. Which site will AWS choose to reach your network?

  • A. Site A: 172.16.0.0/16 AS 65000
  • B. Site B: 172.16.0.128/25 AS 65000 65000 65000
  • C. Site C: 172.0.0.0/8 AS 65000
  • D. Site D: 172.16.0.0/24 AS 65000
Discover Answer Hide Answer

B
172.16.0.128/25 AS 65000 65000 65000. The most specific prefix is always the first choice for BGP routing. Also, AWS will not accept an advertisement of a network less than /16.

Question#83

You have a server that serves www, FTP, and mail. You need to access this server using www.yourname.com, ftp.yourname.com, and mail.yourname.com. You want to ensure an IP change results in the least number of other changes.
What is the best solution?

  • A. Create PTR records and point the IP address of the server back to www, ftp, and mail.
  • B. Create an A record pointing to the server's IP address and create CNAME records for www, ftp, and mail and point those to the A record.
  • C. Create an A record for www, ftp and mail, and point it to the ALIAS of the server.
  • D. Create CNAME records for www, ftp, and mail and point those to the A record already provided to the instance by AWS.
Discover Answer Hide Answer

B
There is no ALIAS record for an EC2 instance, CNAME records pointed to the A record provided by AWS won't work because if the IP changes, the A record will change also. A PTR record is not appropriate here and cannot point to more than one record. Having three CNAME records and one A record will result in only having to change the A record if the IP changes.

Question#84

Your company has a DX connection and you just added a new VPC and Private VIF to which you have connected to your DX link. You copied the settings from the other VPC to ensure it's the same. Once you connected the new VIF, you began seeing problems with connectivity to both VPCs.
You checked to make sure you didn't use the same CIDR with each VPC, so what could be the problem?

  • A. You used the same VLAN ID for both connections.
  • B. You overloaded your DX circuit.
  • C. Your MPLS provider does not allow traffic to two VPCs.
  • D. You can only connect one VIF to a DX circuit.
Discover Answer Hide Answer

A
You can only have 1 instance of any VLAN ID.

Question#85

You need to find the public IP address of an instance that you're logged in to. What command would you use?

  • A. curl ftp://169.254.169.254/latest/meta-data/public-ipv4
  • B. scp localhost/latest/meta-data/public-ipv4
  • C. curl http://127.0.0.1/latest/meta-data/public-ipv4
  • D. curl http://169.254.169.254/latest/meta-data/public-ipv4
Discover Answer Hide Answer

D
curl http://169.254.169.254/latest/meta-data/public-ipv4

Question#86

You have a hybrid infrastructure and you have configured your own DNS server on an EC2 instance in your 10.1.3.0/24 subnet. This subnet resides on the VPC
10.1.0.0/16. You need your data center to be able to resolve Route 53 queries in your private hosted zone. What do you need to do to accomplish this?

  • A. Disable the source/destination check flag for the DNS instance.
  • B. Configure your DNS server to forward queries for the private hosted zone to 10.1.3.2.
  • C. Configure your DNS server to forward queries for the private hosted zone to 10.1.0.2.
  • D. Configure the VPC DHCP option set in the VPC to point to the EC2 DNS server.
Discover Answer Hide Answer

C
10.1.3.2 is not the DNS server. A DHCP option set is not needed since you are resolving AWS resources from on-premises not from a VPC and those instances are already configured to look to Route 53 DNS.

Question#87

Your company has signed up to trial AWS WorkSpaces. You aren't sure you're going to keep it, but you want to try it out to see if it works for your organization of
112 users. You need to deploy it with as little work and up-front expense as possible while still allowing access to your Active Directory for authentication.
What two things should you do? (Choose two.)

  • A. Create a VPN connection.
  • B. Create an AD connector
  • C. Setup AWS hosted Microsoft AD
  • D. Create a Direct Connect connection to AWS.
Discover Answer Hide Answer

AB
A VPN connection and an AD connector will allow you to get up and running without having to migrate users, setup expensive equipment or pay for another directory service.

Question#88

You have two autoscaling groups in your VPC. One deploys servers that host the index of your website and another that deploys servers that host the images for your website. What three steps would you take to ensure the right servers are used for the right purpose? (Choose three.)
[1]
B. Create two target groups and associate them with each autoscaling group.
C. Configure a Classic Load Balancer
D. Configure an Application Load Balancer

Discover Answer Hide Answer

ABD
A Classic Load Balancer does not support path-based routing rules

Question#89

You have two VPCs that you've peered. You created a route for VPC A to get to an instance in VPC. You are unable to ping the instance. You have double checked your security groups and NACLs.
Why might this be?

  • A. You forgot to add a return route.
  • B. ICMP is not supported over peering connections.
  • C. You have to enable Source/Destination check in the VPCs.
  • D. You have to configure the peering connection to allow two way traffic.
Discover Answer Hide Answer

A
Every route needs a return route for ICMP traffic.

Question#90

You want to ensure you have the absolute best transmission rates inside and outside your VPC. You are concerned about the MTU settings. What is the best way to configure your T2 instances to ensure the best compatibility?

  • A. Set all MTU to 1500 as that is the best way to ensure compatibility.
  • B. Leave everything as is.
  • C. Configure two ENIs, one for internal traffic and one for external traffic. Configure the external ENI with an MTU of 1500 and the internal ENI with an MTU of 9001.
  • D. Set all MTU to 9001 as that is the best way to ensure the best speed. The packets will be fragmented if they have to be.
Discover Answer Hide Answer

C
By using two ENIs, you ensure the right MTU goes to the proper destination.

chevron rightPrevious Nextchevron right