Free AWS-Certified-Advanced-Networking-Specialty Exam Dumps

Question 11

In the "start using the AWS Direct Connect steps," when can you complete the Cross Connect step?

A. After verifying your virtual interface
B. After you have received your Letter of Authorization and Connecting Facility Assignment (LOA-CFA) from AWS
C. 72 hours after submitting your request for AWS Direct Connect Connection
D. Immediately after submitting your request for AWS Direct Connect Connection

Correct Answer:B
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Colocation.html

Question 12

You have many IAM users with the ability to create EC2 volumes. Most of the data your team works with is sensitive, so you would like to make sure all volumes are encrypted. How might you facilitate this requirement?

A. Create an AWS KMS policy and attach it to all IAM users that can create EC2 volumes
B. Use AWS Config and create a rule that requires all volumes, upon creation, be encrypted.
C. Use AWS Config to send out reminders to IAM users every time they create an EC2 volume.
D. Set EC2 to notify creators to encrypt their EC2 volume

Correct Answer:B
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html

Question 13

Convert the following IPv4 address in presented in binary form, into dotted decimal form 10101100.01111011.00001101.10011101

A. 172.123.13.157
B. 173.13.13.157
C. 172.122.13.15
D. 172.124.13.57

Correct Answer:A
Reference:
https://en.wikipedia.org/wiki/IPv4

Question 14

An unfortunate situation has just come to your attention. A business critical application with
sensitive data running on-prem will run out of storage disk space in 24hrs. This business critical application is dependent a very large set of routes - required for integration with other system. You make a quick but well informed decision to migrate this application quickly to AWS. You are able to quickly launch a new VPC and within it equivalent infrastructure to re-home the application. In order to complete the replication of application data and ensure the application remains operational
beyond the next 24hrs, select the best implementation.

A. Within the new VPC - establish a Direct Connect connection with max 10Gbps port speed for data replicatio
B. Establish a 802.1Q VLAN and configure a Virtual Private Gateway and Private Virtual Interface, and ensure Jumbo Frames is enabled.
C. Within the new VPC - deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with BGP dynamic routing
D. Within the new VPC - deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with static routing, and ensure Jumbo Frames is enabled.
E. Within the new VPC - deploy a software based virtual router (for example a Cisco CSR). Configure with dual ENIs (external and internal), create and attach an EIP to the external ENI, Configure and setup IPsec VPN tunnels, and ensure Jumbo Frames is enabled.

Correct Answer:B
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/NetworkAdminGuide/GenericConfig.html

Question 15

You have several Amazon Glacier vaults you would like to monitor. How might you monitor those vaults?

A. Create a custom AWS Config rule.
B. Use an AWS master Config rule.
C. Use an AWS managed Config rule.
D. Create a KMS policy and attach it to your Amazon Glacier vaul

Correct Answer:A
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ nodejs.html#creating-custom-rules-for-additional-resource-types