(Mar-2024) Latest ANS-C01 Dumps for Success in Actual Amazon Certified [Q50-Q70]

(Mar-2024) Latest ANS-C01 Dumps for Success in Actual Amazon Certified

Changing the Concept of ANS-C01 Exam Preparation 2024

Amazon ANS-C01 certification is a valuable credential for networking professionals who work with AWS and wish to demonstrate their advanced skills and knowledge in this area. It is a challenging exam that requires a deep understanding of complex networking concepts and technologies, but those who earn this certification will be well-positioned for success in their careers.

 

NEW QUESTION # 50
Which routing protocol is supported by AWS Direct Connect Virtual Interfaces (VIFs)?
Response:

• A. Border Gateway Protocol (BGP)
• B. Intermediate System to Intermediate System (IS-IS)
• C. Open Shortest Path First (OSPF)
• D. Routing Information Protocol (RIP)

Answer: A

NEW QUESTION # 51
An organization has three AWS accounts with each containing VPCs in Virginia, Canada and the Sydney regions. The organization wants to determine whether all available Elastic IP addresses (EIPs) in these accounts are attached to Amazon EC2 instances or in use elastic network interfaces (ENIs) in all of the specified regions for compliance and cost-optimization purposes.
Which of the following meets the requirements with the LEAST management overhead?
Response:

• A. Use a CloudWatch event bus to schedule Lambda functions in each account in all three regions to find the unattached and unused EIPs.
• B. Use AWS CloudFormation StackSets to deploy an AWS Config EIP-attached rule in all accounts and regions to find the unattached and unused EIPs.
• C. Add an AWS managed, EIP-attached AWS Config rule in each region in all three accounts to find unattached and unused EIPs.
• D. use an Amazon CloudWatch Events rule to schedule an AWS Lambda function in each account in all three regions to find the unattached and unused EIPs.

Answer: B

NEW QUESTION # 52
After creating an AWS Direct Connect connection, what is the earliest point in time that you start receiving port-hour charges?
Response:

• A. When the connection becomes available for the first time
• B. Once you have transferred 100 MB of data
• C. When a Virtual Interface (VIF) is created
• D. 90 days from creation

Answer: A

NEW QUESTION # 53
A real estate company is building an internal application so that real estate agents can upload photos and videos of various properties. The application will store these photos and videos in an Amazon S3 bucket as objects and will use Amazon DynamoDB to store corresponding metadat a. The S3 bucket will be configured to publish all PUT events for new object uploads to an Amazon Simple Queue Service (Amazon SQS) queue.
A compute cluster of Amazon EC2 instances will poll the SQS queue to find out about newly uploaded objects. The cluster will retrieve new objects, perform proprietary image and video recognition and classification update metadata in DynamoDB and replace the objects with new watermarked objects. The company does not want public IP addresses on the EC2 instances.
Which networking design solution will meet these requirements MOST cost-effectively as application usage increases?

• A. Place the EC2 instances in a public subnet. Disable the Auto-assign Public IP option while launching the EC2 instances. Create an internet gateway. Attach the internet gateway to the VPC. In the public subnet's route table, add a default route that points to the internet gateway.
• B. Place the EC2 instances in a private subnet. Create an interface VPC endpoint for Amazon SQS. Create gateway VPC endpoints for Amazon S3 and DynamoDB.
• C. Place the EC2 instances in a private subnet. Create a gateway VPC endpoint for Amazon SQS. Create interface VPC endpoints for Amazon S3 and DynamoDB.
• D. Place the EC2 instances in a private subnet. Create a NAT gateway in a public subnet in the same Availability Zone. Create an internet gateway. Attach the internet gateway to the VPC. In the public subnet's route table, add a default route that points to the internet gateway

Answer: B

NEW QUESTION # 54
What port and protocol is used by DNS?
Response:

• A. 53/TCP and UDP
• B. 80/TCP and UDP
• C. 80/TCP
• D. 22/TCP

Answer: A

NEW QUESTION # 55
Your boss decides to assign an Elastic IP to a production instance. Once he does this, access to the URL for that website fails. What happened?
Response:

• A. Your boss should have turned off the server before assigning the IP address.
• B. Your boss needs to restart the server.
• C. The original IP address was released back to AWS when the Elastic IP was assigned.
• D. Your boss only needs to restart the Apache service.

Answer: C

NEW QUESTION # 56
An organization runs a consumer-facing website on AWS. The Amazon EC2-based web fleet is load balanced using the AWS Application Load Balancer, Amazon Route 53 is used to provide the public DNS services.
The following URLs need to server content to end users:
test.example.com
web.example.com
example.com
Based on this information, what combination of services must be used to meet the requirement?
(Select two.)
Response:

• A. Host condition a ALB listener to route example.com to appropriate target groups.
• B. Host condition in ALB listener to route $$$$.example.com to appropriate target groups.
• C. Path condition in ALB listener to route *.example.com to appropriate target groups.
• D. Path condition in ALB listener to route example.com to appropriate target groups.
• E. Host condition in ALB listener to route*.example.com to appropriate target groups.

Answer: C,D

NEW QUESTION # 57
A company has a global network and is using transit gateways to connect AWS Regions together. The company finds that two Amazon EC2 instances in different Regions are unable to communicate with each other. A network engineer needs to troubleshoot this connectivity issue.
What should the network engineer do to meet this requirement?

• A. Use VPC Reachability Analyzer to analyze routes in the transit gateway route tables. Verify that the VPC route tables are correct. Use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.
• B. Use AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables. Verify that the VPC route tables are correct. Use AWS Firewall Manager to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.
• C. Use AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables. Verify that the VPC route tables are correct. Use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.
• D. Use AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables and in the VPC route tables. Use VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC.

Answer: C

Explanation:
Using AWS Network Manager Route Analyzer to analyze routes in the transit gateway route tables would enable identification of routing issues between VPCs and transit gateways1. Verifying that the VPC route tables are correct would enable identification of routing issues within a VPC. Using VPC flow logs to analyze the IP traffic that security group rules and network ACL rules accept or reject in the VPC would enable identification of traffic filtering issues within a VPC2. Additionally, using VPC Reachability Analyzer to analyze routes in the transit gateway route tables would enable identification of routing issues between transit gateways in different Regions. VPC Reachability Analyzer is a configuration analysis tool that enables connectivity testing between a source resource and a destination resource in your VPCs.

NEW QUESTION # 58
What service is used to store the log files generated by CloudTrail?
Response:

• A. EC2
• B. VPC
• C. EBS
• D. S3

Answer: D

NEW QUESTION # 59
A network engineer needs to standardize a company's approach to centralizing and managing interface VPC endpoints for private communication with AWS services. The company uses AWS Transit Gateway for inter-VPC connectivity between AWS accounts through a hub-and-spoke model. The company's network services team must manage all Amazon Route 53 zones and interface endpoints within a shared services AWS account. The company wants to use this centralized model to provide AWS resources with access to AWS Key Management Service (AWS KMS) without sending traffic over the public internet.
What should the network engineer do to meet these requirements?

• A. In each spoke AWS account, create an interface endpoint for AWS KMS. Modify each interface endpoint by disabling the private DNS name. Create a private hosted zone in the shared services account with an alias record that points to each interface endpoint. Associate the private hosted zone with the spoke VPCs in each AWS account.
• B. In the shared services account, create an interface endpoint for AWS KMS. Modify the interface endpoint by disabling the private DNS name. Create a private hosted zone in each spoke AWS account with an alias record that points to the interface endpoint. Associate each private hosted zone with the shared services AWS account.
• C. In the shared services account, create an interface endpoint for AWS KMS. Modify the interface endpoint by disabling the private DNS name. Create a private hosted zone in the shared services account with an alias record that points to the interface endpoint. Associate the private hosted zone with the spoke VPCs in each AWS account.
• D. In each spoke AWS account, create an interface endpoint for AWS KMS. Modify each interface endpoint by disabling the private DNS name. Create a private hosted zone in each spoke AWS account with an alias record that points to each interface endpoint. Associate each private hosted zone with the shared services AWS account.

Answer: C

NEW QUESTION # 60
Your security team implements a host-based firewall on all of your Amazon Elastic Compute Cloud (EC2) instances to block all outgoing traffic. Exceptions must be requested for each specific requirement. Until you request a new rule, you cannot access the instance metadata service.
Which firewall rule should you request to be added to your instances to allow instance metadata access?
Response:

• A. Inbound; Protocol tcp; Source [Instance's EIP]; Destination 169.254.169.254
• B. Inbound; Protocol tcp; Destination 169.254.169.254; Destination port 80
• C. Outbound; Protocol tcp; Destination 169.254.169.254; Destination port 80
• D. Outbound; Protocol tcp; Destination 169 .254.169.254; Destination port 443

Answer: C

NEW QUESTION # 61
You want to ensure you have the absolute best transmission rates inside and outside your VPC. You are concerned about the MTU settings. What is the best way to configure your T2 instances to ensure the best compatibility?
Response:

• A. Configure two ENIs, one for internal traffic and one for external traffic. Configure the external ENI with an MTU of 1500 and the internal ENI with an MTU of 9001.
• B. Leave everything as is.
• C. Set all MTU to 1500 as that is the best way to ensure compatibility.
• D. Set all MTU to 9001 as that is the best way to ensure the best speed. The packets will be fragmented if they have to be.

Answer: A

NEW QUESTION # 62
A company needs to set up a VPN between AWS VPC and its on-premises network. A team creates a VPN connection in the AWS Management Console, downloads the configuration file, and installs it on the on-premises router. The tunnel is not coming up because of firewall restrictions on the router.
Which two network traffic options should you allow through the firewall?
(Choose two.)
Response:

• A. IP protocol 5
• B. TCP port 500
• C. UDP port 500
• D. IP protocol 50
• E. TCP port 50

Answer: C,D

NEW QUESTION # 63
Which statement about Elastic IP addresses is incorrect?
Response:

• A. Once you associate an EIP with an instance, the original public IP is released.
• B. Additional EIPs associated with one instance incur a charge.
• C. Disassociated EIPs incur a charge.
• D. Once an EIP is associated with an instance, you must manually change the hostname if you want it to match.

Answer: D

NEW QUESTION # 64
A media company that is based in Los Angeles, California, closed all of its on-premises data centers due to rising costs and inconsistent utilization. The company has deployed its video editing applications on Amazon EC2 instances in the AWS Cloud.
The company has deployed to the us-west-1 Region and uses the internet for delivery of the applications. Users are reporting high latency from Los Angeles to us-west-1.
The company needs to reduce the latency to the EC2 instances while continuing to use the internet for delivery. Which solution meets these requirements?
Response:

• A. Enable a Los Angeles-based AWS Local Zone. Redeploy the EC2 instances in the Local Zone.
• B. Enable a Los Angeles-based AWS Local Zone. Continue to run the EC2 instances in us-west-1.
• C. Order and deploy an AWS Direct Connect public VIF to us-west-2.
• D. Order and deploy an AWS Direct Connect private VIF to us-west-1

Answer: D

NEW QUESTION # 65
An insurance company is planning the migration of workloads from its on-premises data center to the AWS Cloud. The company requires end-to-end domain name resolution. Bi-directional DNS resolution between AWS and the existing on-premises environments must be established. The workloads will be migrated into multiple VPCs. The workloads also have dependencies on each other, and not all the workloads will be migrated at the same time.
Which solution meets these requirements?

• A. Configure a private hosted zone for each application VPC, and create the requisite records. Create a set of Amazon Route 53 Resolver inbound and outbound endpoints in an egress VPDefine Route 53 Resolver rules to forward requests for the on-premises domains to the on-premises DNS resolver. Associate the application VPC private hosted zones with the egress VPand s
• B. Configure a public hosted zone for each application VPC, and create the requisite records. Create a set of Amazon Route 53 Resolver inbound and outbound endpoints in an egress VPC. Define Route 53 Resolver rules to forward requests for the on-premises domains to the on-premises DNS resolver. Associate the application VPC private hosted zones with the egress VPC. and share the Route 53 Resolver rules with the application accounts by using AWS Resource Access Manager. Configure the on-premises DNS servers to forward the cloud domains to the Route 53 inbound endpoints.
• C. Configure a private hosted zone for each application VPC, and create the requisite records. Create a set of Amazon Route 53 Resolver inbound and outbound endpoints in an egress VPC. Define Route 53 Resolver rules to forward requests for the on-premises domains to the on-premises DNS resolver. Associate the application VPC private hosted zones with the egress VPC, and share the Route 53 Resolver rules with the application accounts by using AWS Resource Access Manager. Configure the on-premises DNS servers to forward the cloud domains to the Route 53 inbound endpoints.

Answer: C

Explanation:
Creating a private hosted zone for each application VPC and creating the requisite records would enable end-to-end domain name resolution for the resources. Creating a set of Amazon Route 53 Resolver inbound and outbound endpoints in an egress VPC would enable bi-directional DNS resolution between AWS and the existing on-premises environments. Defining Route 53 Resolver rules to forward requests for the on-premises domains to the on-premises DNS resolver would enable DNS queries from AWS resources to on-premises resources. Associating the application VPC private hosted zones with the egress VPC and sharing the Route 53 Resolver rules with the application accounts by using AWS Resource Access Manager would enable DNS queries among different VPCs and accounts. Configuring the on-premises DNS servers to forward the cloud domains to the Route 53 inbound endpoints would enable DNS queries from on-premises resources to AWS resources1.

NEW QUESTION # 66
A network engineer needs to design a solution for an application running on an Amazon EC2 instance to connect to a publicly accessible Amazon RDS Multi-AZ DB instance in a different VPC and Region.
Security requirements mandate that the traffic not traverse the internet.
Which configuration will ensure that the instances communicate privately without routing traffic over the internet?
Response:

• A. Configure a transit VPC to route traffic between the VPCs privately. Configure the application to connect to the DNS endpoint of the DB instance.
• B. Create a gateway endpoint to the DB instance. Update the routing tables in the application VPC to route traffic to the gateway endpoint.
• C. Create a peering connection between the VPCs and update the routing tables to route traffic between the VPCs. Enable DNS resolution support for the VPC peering connection. Configure the application to connect to the DNS endpoint of the DB instance.
• D. Create a NAT gateway in the same subnet as the EC2 instances. Update the routing tables in the application VPC to route traffic through the NAT gateway to the DNS endpoint of the DB instance.

Answer: C

NEW QUESTION # 67
A company is deploying an application. The application is implemented in a series of containers in an Amazon Elastic Container Service (Amazon ECS) cluster. The company will use the Fargate launch type for its tasks. The containers will run workloads that require connectivity initiated over an SSL connection. Traffic must be able to flow to the application from other AWS accounts over private connectivity. The application must scale in a manageable way as more consumers use the application.
Which solution will meet these requirements?

• A. Choose an Application Load Balancer (ALB) as the type of load balancer for the ECS service. Create path-based routing rules to allow the application to target the containers that are registered in the target group. Specify the ALB in the service definition. Create a VPC endpoint service for the ALB Share the VPC endpoint service with other AWS accounts.
• B. Choose a Gateway Load Balancer (GLB) as the type of load balancer for the ECS service. Create a lifecycle hook to add new tasks to the target group from Amazon ECS as required to handle scaling. Specify the GLB in the service definition. Create a VPC peer for external AWS accounts. Update the route tables so that the AWS accounts can reach the GLB.
• C. Choose an Application Load Balancer (ALB) as the type of load balancer for the ECS service. Create path-based routing rules to allow the application to target the containers that are registered in the target group. Specify the ALB in the service definition. Create a VPC peer for the external AWS accounts. Update the route tables so that the AWS accounts can reach the ALB.
• D. Choose a Network Load Balancer (NLB) as the type of load balancer for the ECS service. Specify the NLB in the service definition. Create a VPC endpoint service for the NLB. Share the VPC endpoint service with other AWS accounts.

Answer: D

NEW QUESTION # 68
You discover that the default VPC has been deleted from region us-east-1 by a coworker in the morning.
You will be deploying a lot of new services during the afternoon. What should you do?
Response:

• A. Create an AWS Support ticket to have your VPC re-created.
• B. It's not important, so no action is required.
• C. Designate a VPC that you create as the default VPC.
• D. Perform an Application Programming Interface (API) call or go through the AWS Management Console to create a new default VPC.

Answer: D

NEW QUESTION # 69
A networking team working in a test environment has noticed inbound traffic in the VPC Flow Logs for a NAT Gateway. The team has connected with you to understand why the NAT gateway is accepting inbound traffic from the internet?
How will you troubleshoot/fix this issue?
Response:

• A. NAT gateways managed by AWS don't accept traffic initiated from the internet. However, if inbound internet traffic is permitted by your security group or Network ACLs then it appears as accepted
• B. If you dissociate the Elastic IP address of the NAT Gateway after it is created, the NAT Gateway malfunctions with random errors. Re-Create the NAT Gateway to fix this issue
• C. NAT Gateways do not accept traffic from the internet. But, if the security group on the NAT Gateway is configured to permit traffic from the internet, then it is possible to accept internet traffic
• D. NAT gateways managed by AWS don't accept traffic initiated from the internet. However, if the traffic to NAT Gateway is being routed through a VPC peering connection, VPC Flow Logs will have these entries

Answer: A

NEW QUESTION # 70
......

ANS-C01 Exam Crack Test Engine Dumps Training With 101 Questions: https://www.topexamcollection.com/ANS-C01-vce-collection.html

Getting ANS-C01 Certification Made Easy: https://drive.google.com/open?id=19OAa7qQyQatWLggeNtU4rhL5ORkzomNf