The Regenerate Guide To ANS-C00 Exam Topics

NEW QUESTION 1
Which element of AWS Config can be used to help maintain internal and external compliance controls?

• A. Configuration Item
• B. Configuration Recorder
• C. Configuration Streams
• D. Config Rules

Answer: D

Explanation:
Reference:
https://aws.amazon.com/config/

NEW QUESTION 2
When an AWS Config rule is triggered a JSON object known as an AWS Config Event is created. This object contains another JSON string in its _____ parameter, which describes the event that
triggered the rule.

• A. resultToken
• B. eventLeftScope
• C. invokingEvent
• D. configRuleName

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ example-events.html

NEW QUESTION 3
Which AWS service is used within an AWS Config Rule to perform the logic evaluation of that rule?

• A. Inspector
• B. WAF
• C. Lambda
• D. SWF

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules_nodejssample. html

NEW QUESTION 4
An unfortunate situation has just come to your attention. A business critical application with
sensitive data running on-prem will run out of storage disk space in 24hrs. This business critical application is dependent a very large set of routes - required for integration with other system. You make a quick but well informed decision to migrate this application quickly to AWS. You are able to quickly launch a new VPC and within it equivalent infrastructure to re-home the application. In order to complete the replication of application data and ensure the application remains operational
beyond the next 24hrs, select the best implementation.

• A. Within the new VPC - establish a Direct Connect connection with max 10Gbps port speed for data replicatio
• B. Establish a 802.1Q VLAN and configure a Virtual Private Gateway and Private Virtual Interface, and ensure Jumbo Frames is enabled.
• C. Within the new VPC - deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with BGP dynamic routing
• D. Within the new VPC - deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with static routing, and ensure Jumbo Frames is enabled.
• E. Within the new VPC - deploy a software based virtual router (for example a Cisco CSR). Configure with dual ENIs (external and internal), create and attach an EIP to the external ENI, Configure and setup IPsec VPN tunnels, and ensure Jumbo Frames is enabled.

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/NetworkAdminGuide/GenericConfig.html

NEW QUESTION 5
Which endpoint is considered to be best practise when analysing data within a Configuration Stream of AWS Config?

• A. SNS
• B. E-Mail
• C. SQS
• D. Kinesis

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/monitor-resource-changes.html

NEW QUESTION 6
You can turn on the AWS Config service from the AWS CLI by running the subscribe command and passing as parameters a valid IAM role, SNS topic, and ______.

• A. EBS volume
• B. EC2 instance
• C. S3 bucket
• D. Kinesis stream

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/gs-cli-subscribe.html

NEW QUESTION 7
Which of the following statements is true of AWS Elastic Beanstalk?

• A. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, meaning CloudWatch costs are applied to your AWS account for any alarms that you use.
• B. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, and both are free of charge.
• C. AWS Elastic Beanstalk doesn't use CloudWatch for monitoring and alarms, but you pay extra for any AWS Elastic Beanstalk Alarm you set in the monitoring tool.
• D. AWS Elastic Beanstalk has its own free-of-charge monitoring tool, and you are not charged for the alarm you set.

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.alarms.html

NEW QUESTION 8
In AWS Direct Connect, which of the following is true of configuring your router to connect to the AWS Direct Connect router?

• A. After creating a virtual interface for your AWS Direct Connect connection, you can download the router configuration file from the available link
• B. After Completing the Cross Connect step, the download link for router configuration will be available
• C. After submitting your AWS Direct Connect connection request, you will receive the router configuration details by email within 72 hours
• D. In Create a Virtual Interface step, the general configuration of your router would be available for downloading.

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#routerconfig

NEW QUESTION 9
An AWS account owner has setup multiple IAM users. One of these IAM users, named John, has CloudWatch access, but no access to EC2 services. John has setup an alarm action which stops EC2 instances when their CPU utilization is below the threshold limit. When an EC2 instance's CPU Utilization rate drops below the threshold John has set, what will happen and why?

• A. Nothing will happe
• B. John cannot set an alarm on EC2 since he does not have the permission.
• C. CloudWatch will stop the instance when the action is executed
• D. Nothing will happen because it is not possible to stop the instance using the CloudWatch alarm
• E. Nothing will happe
• F. John can setup the action, but it will not be executed because he does not have EC2 access through IAM policies.

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/UsingAlarmActions.html

NEW QUESTION 10
In AWS Direct Connect, to provide for failover, AWS recommends that you request and configure two dedicated connections to AWS.
These connections can terminate on one or two routers in your network. You can do this while _____ with AWS Direct Connect step.

• A. creating a Virtual Interface
• B. configuring redundant connections
• C. completing the cross-connect
• D. verifying your Virtual Interface

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#RedundantConnectio ns

NEW QUESTION 11
When an AWS Config rule is triggered a JSON object known as an AWS Config Event is created. This object contains a(n) ______ attribute, which is a JSON-formatted set of key/value pairs the receiving AWS Lambda function processes as part of its evaluation logic.

• A. inputParameters
• B. invokingEvent
• C. ruleConfiguration
• D. mappingTemplate

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ example-events.html

NEW QUESTION 12
Considering the rules of IPv4 subnetting, how many subnets and hosts per subnet are possible given the following network 192.168.130.130/28? (in this question ignore the fact that AWS reserves 5 IP addresses)

• A. 8 subnets and 30 hosts per subnet
• B. 16 subnets and 14 hosts per subnet
• C. 32 subnets and 30 hosts per subnet
• D. 8 subnets and 14 hosts per subnet

Answer: B

Explanation:
Reference:
https://en.wikipedia.org/wiki/IPv4_subnetting_reference

NEW QUESTION 13
Fill in the blanks: One of the basic characteristics of security groups for your VPC is that you ______ .

• A. can specify allow rules, but not deny rules
• B. can specify deny rules, but not allow rules
• C. can specify allow rules as well as deny rules
• D. can neither specify allow rules nor deny rules

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_SecurityGroups.html

NEW QUESTION 14
Which of the following does not configure Amazon CloudFront cache behaviors to forward cookies to an origin for web distributions?

• A. Origin server
• B. AWS CLI
• C. Amazon EMR
• D. Amazon S3

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html

NEW QUESTION 15
Which of the following statements does not describe Jumbo Frames in an AWS VPC environment?

• A. For instances that are collocated inside a placement group, jumbo frames help to achieve the maximum network throughput possible
• B. Jumbo Frames are not supported for traffic that exits the Virtual Private Gateway
• C. Jumbo Frames are not supported for traffic that exits the Internet Gateway
• D. T2.micro instances do not support Jumbo Frames

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/network_mtu.html

NEW QUESTION 16
In the context of Amazon CloudFront, when you configure the media player, the path you specify to the media file must contain the characters _____ .

• A. flv/std just before the domain name
• B. flv/std immediately after the domain name
• C. cfx/st just before the domain name
• D. cfx/st immediately after the domain name

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Streaming_URLs.html

NEW QUESTION 17
When an AWS Config rule is triggered a JSON object known as an AWS Config Event is created. This object contains a(n) _____ attribute, which is a JSON-formatted set of key/value pairs the receiving AWS Lambda function processes as part of its evaluation logic.

• A. invokingEvent
• B. mappingTemplate
• C. ruleConfiguration
• D. inputParameters

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ example-events.html

NEW QUESTION 18
A user is running a batch process on EBS backed EC2 instances. The batch process launches few EC2 instances to process hadoop Map reduce jobs which can run between 50 – 600 minutes or
sometimes for even more time. The user wants a configuration that can terminate the instance only when the process is completed. How can the user configure this with CloudWatch?

• A. Configure a job which terminates all instances after 600 minutes
• B. It is not possible to terminate instances automatically
• C. Set up the CloudWatch with Auto Scaling to terminate all the instances
• D. Configure the CloudWatch action to terminate the instance when the CPU utilization falls below 5%

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/UsingAlarmActions.html

NEW QUESTION 19
What does the term "statistics" mean with respect to CloudWatch metrics?

• A. Time of a metric collection
• B. Data aggregation over a specific period of time
• C. Status of a metric
• D. Unit of a metric

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.ht ml#Statistic

NEW QUESTION 20
A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services does not provide detailed monitoring with CloudWatch?

• A. AWS Route53
• B. AWS EMR
• C. AWS ELB
• D. AWS RDS

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

NEW QUESTION 21
......