Amazon AWS-Certified-Advanced-Networking-Specialty AWS Certified Advanced Networking - Specialty Exam Practice Test Questions

• Question 1

  An application runs on a fleet of Amazon EC2 instances in a VPC. All instances can reach one another using private IP addresses. The application owner has a new requirement that the domain name received via DHCP should be different for a particular set of instances that are currently in one particular subnet.What changes should be made to meet this requirement while continuing to support the existing application requirements?

  • Modify the existing DHCP option set and specify the different domain name for the specified subnet.
  • Create a new DHCP option set with the different domain name, associate it with the specified subnet, and re-launch the Amazon EC2 instances.
  • Create a new subnet, configure the DHCP option set with the different domain name, and re-launch the required instances there.
  • Create a new peered VPC, configure the DHCP option set with the different domain name, and re-launch the required instances there.

  Show Answer Answer: 4 Next

• Question 2

  You use a VPN to extend your corporate network into a VPC. Instances in the VPC are able to resolve resource records in an Amazon Route 53 private hosted zone. Your on-premises DNS server is configured with a forwarder to the VPC DNS server IP address. On-premises users are unable to resolve names in the private hosted zone, although instances in a peered VPC can.What should you do to provide on-premises users with access to the private hosted zone?

  • Create a proxy resolver within the VPC. Point the on-premises forwarder to the proxy resolver.
  • Modify the network access control list on the VPC to allow DNS queries from on-premises systems.
  • Configure the on-premises server as a secondary DNS for the private zone. Update the NS records.
  • Update the on-premises forwarders with the four name servers assigned to the private hosted zone. References: https://aws.amazon.com/blogs/security/how-to-set-up-dns-resolution-between-on-premises-networks-and-aws-by-using-unbound/

  Show Answer Answer: 1 Next

• Question 3

  A company has deployed a production environment in the AWS Cloud The environment is contained in a VPC and includes a virtual private gateway The company has established an AWS Direct Connect connection which includes a private virtual interface (VIF) and a VPN connection to the on-premises data centerFor traffic originating in the VPC what is the order of BGP path selection from MOST preferred to LEAST preferred?

  • Direct Connect BGP routes static routes longest prefix match, VPN BGP routes
  • Static routes longest prefix match Direct Connect BGP routes. VPN BGP routes
  • Longest prefix match static routes Direct Connect BGP routes VPN BGP routes
  • Longest prefix match VPN BGP routes, static routes. Direct Connect BGP routes

  Show Answer Answer: 2 Next

• Question 4

  A company uses multiple AWS accounts within AWS Organizations and has services deployed in a single AWS Region. The instances in a private subnet occasionally download patches from the internet through a NAT gateway The company recently migrated from VPC peering to AWS Transit Gateway The cumulative traffic through deployed NAT gateways Is less than 1Gbps The NAT gateway hourly charge contributes to most of the NAT gateway costs across all linked accounts.What should the company do to reduce NAT gateway hourly costs?

  • Deploy and use NAT gateways in the same Availability Zone as the heavy-traffic resources.
  • Move to a centralized NAT gateway architecture with NAT gateways deployed in an egress VPC Use VPC peering to send traffic through the centralized NAT gateways.
  • Use VPC endpoints to send traffic to AWS services in the same Region.
  • Move to a centralized NAT gateway architecture with NAT gateways deployed in an egress VPC Use AWS Transit Gateway to send traffic through the centralized NAT gateways.

  Show Answer Answer: 2 Next

• Question 5

  A company has an application running in an Amazon VPC that must be able to communicate with on-premises resources in a data center. Network traffic between AWS and the data center will initially be minimal, but will increase to more than 10 Gbps over the nextfew months. The company's goal is to launch the application as quickly as possible.The Network Engineer has been asked to design a hybrid IT connectivity solution.What should be done to meet these requirements?

  • Submit a 1 Gbps AWS Direct Connect connection request, then increase the number of Direct Connect connections, as needed.
  • Allocate elastic IPs to Amazon EC2 instances for temporary access to on-premises resources, then provision AWS VPN connections between an Amazon VPC and the data center.
  • Provision an AWS VPN connection between an Amazon VPC and the data center, then submit an AWS Direct Connect connection request. Later, cut over from the VPN connection to one or more Direct Connect connections, as needed.
  • Provision a 100 Mbps AWS Direct Connect connection between an Amazon VPC and the data center, then submit a Direct Connect connection request. Later, cut over from the hosted connection to one or more Direct Connect connections, as needed.

  Show Answer Answer: 3 Next