Question 1

DNS name resolution must be provided for services in the following four zones:

company.private.

emea.company.private.

apac.company.private.

amer.company.private.

The contents of these zones is not considered sensitive, however, the zones only need to be used by services hosted in these VPCs, one per geographic region. Each VPC should resolve the names in all zones.

How can you use Amazon route 53 to meet these requirements?

ACreate a Route 53 Private Hosted Zone for each of the four zones and associate them with the three VPCs.

BCreate a single Route 53 Private Hosted Zone for the zone company.private and associate it with the three VPCs.

CCreate a Route Public Hosted Zone for each of the four zones and configure the VPS DNS Resolver to forward

DCreate a single Route 53 Public Hosted Zone for the zone company.private and configure the VPS DNS Resolver to forward

Answer : A

Question 2

An organization has ordered a new AWS Direct Connect connection. The AWS Management Console reports that the connection is available and BGP status is up. However, the networking team is not able to reach instances in the VPC using ping on the organization's private IP address

What could cause this connectivity issue? (Choose two.)

AThe VGW is not advertising the correct CIDR range back on-premises.

BThe instance security group does not allow ICMP traffic.

CA public virtual interface must be configured for Amazon EC2 connectivity.

DThe on-premises router is not advertising the correct CIDR range to AWS.

EThere is a misconfiguration of the bi-directional forwarding detection.

Answer : B, D

Question 3

A company has a hybrid IT architecture with two AWS Direct Connect connections to provide high availability. The services hosted on-premises are accessible using public IPs, and are also on the 172.16.0.0/16 range. The AWS resources are on the 192.168.0.0/18 range. The company wants to use Amazon Elastic Load Balancing for SSL offloading, health checks, and sticky sessions.

What should be done to meet these requirements?

ACreate a Network Load Balancer pointing to the on-premises server's private IP address.

BCreate an Amazon CloudFront distribution for the on-premises service and use the public IPs of the on-premises servers as the origin.

CCreate a Network Load Balancer pointing to the on-premises server's public IP address.

DCreate an Application Load Balancer pointing to the on-premises server's private IP address.

Answer : D

Question 4

A company provisions an AWS Direct Connect connection to permit access to Amazon EC2 resources in several Amazon VPCs and to data stored in private Amazon S3 buckets. The Network Engineer needs to configure the company's on-premises router for this Direct Connect connection.

Which of the following actions will require the LEAST amount of configuration overhead on the customer router?

AConfigure private virtual interfaces for the VPC resources and for Amazon S3.

BConfigure private virtual interfaces for the VPC resources and a public virtual interface for Amazon S3.

CConfigure a private virtual interface to a Direct Connect gateway for the VPC resources and for Amazon S3.

DConfigure a private virtual interface to a Direct Connect gateway for the VPC resources and a public virtual interface for Amazon S3.

Answer : A

Question 5

A company has two redundant AWS Direct Connect connections to a VPC. The VPC is configured using BGP metrics so that one Direct Connect connection is used as the primary traffic path. The company wants the primary Direct Connect connection to fail to the secondary in less than one second.

What should be done to meet this requirement?

AConfigure BGP on the company's router with a keep-alive to 300 ms and the BGP hold timer to 900 ms.

BEnable Bidirectional Forwarding Detection (BFD) on the company's router with a detection minimum interval of 300 ms and a BFD liveness detection multiplier of 3.

CEnable Dead Peer Detection (DPD) on the company's router with a detection minimum interval of 300 ms and a DPD liveliness detection multiplier of 3.

DEnable Bidirectional Forwarding Detection (BFD) echo mode on the company's router and disable sending the Internet Control Message Protocol (ICMP) IP packet requests.

Answer : B

Free ANS-C00 Questions for Amazon ANS-C00 Exam as PDF & Practice Test Software

Question 1

Question 2

Question 3

Question 4

Question 5