ANS-C00 Free Practice Test

A user has enabled detailed CloudWatch monitoring with the AWS Simple Notification Service. Which of the below mentioned statements helps the user understand detailed monitoring better?

1. A. SNS cannot provide data every minute
2. B. There is no need to enable since SNS provides data every minute
3. C. SNS will send data every minute after configuration
4. D. AWS CloudWatch does not support monitoring for SNS

Correct Answer: A
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

In your current role as the corporate network architect - you have decided to replace your existing hardware firewall appliances with a pair of Juniper SRX-Series Services Gateways. You have chosen these as AWS lists these as supportable devices for establishing IPsec connections. With this in mind, select the minimum set of options to ensure that you can establish IPsec connectivity between your on premise private corporate network and your AWS hosted VPC. Select which option is NOT required

1. A. Initiate network connections from somewhere within your corporate network, this is required to bring the tunnels UP
2. B. Deploy a Customer Gateway within your corporate network
3. C. Deploy a Customer Gateway within your VPC
4. D. Deploy a Virtual Private Gateway within your VPC

Correct Answer: B
Reference:
https://aws.amazon.com/vpc/faqs/

A user is trying to send custom metrics to CloudWatch using the PutMetricData APIs. Which of the below mentioned points should the user needs to take care while sending the data to CloudWatch?

1. A. The size of a request is limited to 128KB for HTTP GET requests and 64KB for HTTP POST requests
2. B. The size of a request is limited to 40KB for HTTP GET requests and 8KB for HTTP POST requests
3. C. The size of a request is limited to 16KB for HTTP GET requests and 80KB for HTTP POST requests
4. D. The size of a request is limited to 8KB for HTTP GET requests and 40KB for HTTP POST requests

Correct Answer: D
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.ht ml

You have many IAM users with the ability to create EC2 volumes. Most of the data your team works with is sensitive, so you would like to make sure all volumes are encrypted. How might you facilitate this requirement?

1. A. Create an AWS KMS policy and attach it to all IAM users that can create EC2 volumes
2. B. Use AWS Config and create a rule that requires all volumes, upon creation, be encrypted.
3. C. Use AWS Config to send out reminders to IAM users every time they create an EC2 volume.
4. D. Set EC2 to notify creators to encrypt their EC2 volume

Correct Answer: B
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html

You are the AWS cloud architect and have been tasked with designing an appropriate subnetting design for your production VPC. Your production VPC requires secure communications back to the corporate private network. Quality of Service (QoS) is very important 24x7 for this particular connection, as real-time data is passed continually backwards and forwards between your on-prem bioinformatics enterprise application, and the number crunching servers deployed in the cloud. Any potential latency incurred on this connection will have a direct impact on the company's ability to attract investors and expansion into new markets. Select the correct network configuration that best facilitates your company's continued growth plans.

1. A. Provision a Direct Connect connection - between your service provider\'s data center and the AWS region that your cloud compute resources exist in . Configure just a Private VirtualInterfac
2. B. As this is a Direct Connection, a Virtual Private Gateway is not required
3. C. Configure a site-to-site layer 2 software router using OpenVPN within your VPC and ensure that QoS enabled - this is a secure and cheap option
4. D. Configure a site-to-site layer 3 software router using OpenVPN within your VPC and ensure that QoS enabled - this is a secure and cheap option
5. E. Provision a Direct Connect connection - between your existing service provider\'s data center and the AWS region that your cloud compute resources exist i
6. F. Configure a Virtual Private Gateway and Private Virtual Interface

Correct Answer: D
Reference:
https://aws.amazon.com/directconnect/faqs/