NEW QUESTION 1
Over which of the following Ethernet standards does AWS Direct Connect link your internal network to an AWS Direct Connect location?

• A. Copper backplane cable
• B. Twisted pair cable
• C. Single mode fiber-optic cable
• D. Shielded balanced copper cable

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html

NEW QUESTION 2
In the context of Amazon CloudFront Actions, you use the ______ when specifying APIs in IAM policies.

• A. object names
• B. class names
• C. entity names
• D. action names

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/UsingWithIAM.html

NEW QUESTION 3
Select the answer/s that correctly state how Jumbo Frames work

• A. Jumbo Frames assist with application disk storage
• B. Jumbo Frames can assist with application performance
• C. Jumbo Frames are supported across Virtual Private Gateway connections
• D. Jumbo Frames are enabled by increasing the MTU size to 9000 kilobytes

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/network_mtu.html

NEW QUESTION 4
In AWS Direct Connect, to provide for failover, AWS recommends that you request and configure two dedicated connections to AWS.
These connections can terminate on one or two routers in your network. You can do this while _____ with AWS Direct Connect step.

• A. creating a Virtual Interface
• B. configuring redundant connections
• C. completing the cross-connect
• D. verifying your Virtual Interface

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#RedundantConnectio ns

NEW QUESTION 5
Which service is used by default to store the CloudTrail log files?

• A. Elastic Block Store (EBS)
• B. Redshift
• C. Simple Storage Service (S3)
• D. Glacier

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-working-with-log-files.html

NEW QUESTION 6
What is the maximum number of CloudTrails that you can create per AWS region?

• A. 10
• B. 2
• C. 16
• D. 5

Answer: D

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/faqs/

NEW QUESTION 7
A user has enabled detailed CloudWatch monitoring with the AWS Simple Notification Service. Which of the below mentioned statements helps the user understand detailed monitoring better?

• A. SNS cannot provide data every minute
• B. There is no need to enable since SNS provides data every minute
• C. SNS will send data every minute after configuration
• D. AWS CloudWatch does not support monitoring for SNS

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

NEW QUESTION 8
A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services does not provide detailed monitoring with CloudWatch?

• A. AWS Route53
• B. AWS EMR
• C. AWS ELB
• D. AWS RDS

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

NEW QUESTION 9
In AWS, which tool records API calls for a specific AWS account and also delivers the log files for that account?

• A. CloudTrail
• B. Redshift
• C. Beanstalk
• D. Cognito

Answer: A

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/

NEW QUESTION 10
Each custom AWS Config rule you create must be associated with a(n) AWS _____ , which contains the logic that evaluates whether your AWS resources comply with the rule.

• A. Lambda function
• B. Configuration trigger
• C. EC2 instance
• D. S3 bucket

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html

NEW QUESTION 11
With AWS CloudTrail, creating multiple trails in one region allows ______ to focus on one aspect of AWS operation.

• A. callers
• B. events
• C. buckets
• D. stakeholders

Answer: D

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/faqs/

NEW QUESTION 12
You can use the _____ command of the AWS Config service CLI to see the compliance state of each of your rules.

• A. get-compliance-details-by-resource
• B. describe-compliance-by-config-rule
• C. get-compliance-details-by-config-rule
• D. describe-compliance-by-resource

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

NEW QUESTION 13
To get started using AWS Direct Connect, in which of the following steps do you configure Border Gateway Protocol (BGP)?

• A. Complete the Cross Connect
• B. Verify your Virtual Interface
• C. Create a Virtual Interface
• D. Submit AWS Direct Connect Connection Request

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#createvirtualinterfac

NEW QUESTION 14
Which CloudWatch attributes are used for the statistics generation?

• A. All the options are used
• B. Dimension
• C. Data point unit
• D. NameSpace

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html

NEW QUESTION 15
For ____ distributions, CloudFront does not cache cookies in edge caches.

• A. AMI
• B. Web
• C. RTMP
• D. Web and RTMP

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html

NEW QUESTION 16
The IPsec protocol suite is made up of various components covering aspects such as confidentiality, encryption, and integrity. Select the correct statement below regarding the correct configuration options for ensure IPsec confidentiality:

• A. The following protocols may be used to configure IPsec confidentiality, DES, 3DES, MD5
• B. The following protocols may be used to configure IPsec confidentiality, DES, 3DES, AES
• C. The following protocols may be used to configure IPsec confidentiality, PSK, RSA
• D. The following protocols may be used to configure IPsec confidentiality, PSK, MD5
• E. The following protocols may be used to configure IPsec confidentiality, PSK, RSA

Answer: B

Explanation:
Reference:
https://en.wikipedia.org/wiki/IPsec

NEW QUESTION 17
Which of the following types of contents cannot serve over HTTP or HTTPS in Amazon CloudFront?

• A. Apple HTTP Live Streaming
• B. Static and dynamic download content
• C. Adobe Flash multimedia content
• D. CloudFront RTMP distribution

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-overview.html

NEW QUESTION 18
You are the AWS cloud architect and have been tasked with designing an appropriate subnetting design for your production VPC. Your production VPC requires secure communications back to the corporate private network. Quality of Service (QoS) is very important 24x7 for this particular connection, as real-time data is passed continually backwards and forwards between your on-prem bioinformatics enterprise application, and the number crunching servers deployed in the cloud. Any potential latency incurred on this connection will have a direct impact on the company's ability to attract investors and expansion into new markets. Select the correct network configuration that best facilitates your company's continued growth plans.

• A. Provision a Direct Connect connection - between your service provider's data center and the AWS region that your cloud compute resources exist in . Configure just a Private VirtualInterfac
• B. As this is a Direct Connection, a Virtual Private Gateway is not required
• C. Configure a site-to-site layer 2 software router using OpenVPN within your VPC and ensure that QoS enabled - this is a secure and cheap option
• D. Configure a site-to-site layer 3 software router using OpenVPN within your VPC and ensure that QoS enabled - this is a secure and cheap option
• E. Provision a Direct Connect connection - between your existing service provider's data center and the AWS region that your cloud compute resources exist i
• F. Configure a Virtual Private Gateway and Private Virtual Interface

Answer: D

Explanation:
Reference:
https://aws.amazon.com/directconnect/faqs/

NEW QUESTION 19
From the following options, select the answer that correctly describes the implementation of the HTTP protocol

• A. By definition, HTTP is a connection-less oriented protocol and therefore utilises TCP
• B. By definition, HTTP is a connection orientated protocol and therefore utilises TCP
• C. By definition, HTTP is a connection-less oriented protocol and therefore utilises UDP
• D. By definition, HTTP can be configured to be either connection or connection-less oriented - by specifying the appropriate HTTP header.

Answer: B

Explanation:
Reference:
https://en.wikipedia.org/wiki/Hypertext_Transfer_Protocol

NEW QUESTION 20
Which of the following statements is true of AWS Elastic Beanstalk?

• A. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, meaning CloudWatch costs are applied to your AWS account for any alarms that you use.
• B. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, and both are free of charge.
• C. AWS Elastic Beanstalk doesn't use CloudWatch for monitoring and alarms, but you pay extra for any AWS Elastic Beanstalk Alarm you set in the monitoring tool.
• D. AWS Elastic Beanstalk has its own free-of-charge monitoring tool, and you are not charged for the alarm you set.

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.alarms.html

NEW QUESTION 21
You have several Amazon Glacier vaults you would like to monitor. How might you monitor those vaults?

• A. Create a custom AWS Config rule.
• B. Use an AWS master Config rule.
• C. Use an AWS managed Config rule.
• D. Create a KMS policy and attach it to your Amazon Glacier vaul

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ nodejs.html#creating-custom-rules-for-additional-resource-types

NEW QUESTION 22
Fill in the blanks: One of the basic characteristics of security groups for your VPC is that you ______ .

• A. can specify allow rules, but not deny rules
• B. can specify deny rules, but not allow rules
• C. can specify allow rules as well as deny rules
• D. can neither specify allow rules nor deny rules

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_SecurityGroups.html

NEW QUESTION 23
Considering the rules of IPv4 subnetting, how many subnets and hosts per subnet are possible given the following network 192.168.130.130/28? (in this question ignore the fact that AWS reserves 5 IP addresses)

• A. 8 subnets and 30 hosts per subnet
• B. 16 subnets and 14 hosts per subnet
• C. 32 subnets and 30 hosts per subnet
• D. 8 subnets and 14 hosts per subnet

Answer: B

Explanation:
Reference:
https://en.wikipedia.org/wiki/IPv4_subnetting_reference

NEW QUESTION 24
......