ANS-C00 Free Practice Test

An AWS CloudTrail log file provides the identity and source IP address of the API caller, and a time of the API call, request parameters, and _____ .

1. A. response elements
2. B. event selectors
3. C. port alarms
4. D. destination buckets

Correct Answer: A
Reference:
https://aws.amazon.com/cloudtrail/

In AWS, which tool records API calls for a specific AWS account and also delivers the log files for that account?

1. A. CloudTrail
2. B. Redshift
3. C. Beanstalk
4. D. Cognito

Correct Answer: A
Reference:
https://aws.amazon.com/cloudtrail/

An unfortunate situation has just come to your attention. A business critical application with
sensitive data running on-prem will run out of storage disk space in 24hrs. This business critical application is dependent a very large set of routes - required for integration with other system. You make a quick but well informed decision to migrate this application quickly to AWS. You are able to quickly launch a new VPC and within it equivalent infrastructure to re-home the application. In order to complete the replication of application data and ensure the application remains operational
beyond the next 24hrs, select the best implementation.

1. A. Within the new VPC - establish a Direct Connect connection with max 10Gbps port speed for data replicatio
2. B. Establish a 802.1Q VLAN and configure a Virtual Private Gateway and Private Virtual Interface, and ensure Jumbo Frames is enabled.
3. C. Within the new VPC - deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with BGP dynamic routing
4. D. Within the new VPC - deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with static routing, and ensure Jumbo Frames is enabled.
5. E. Within the new VPC - deploy a software based virtual router (for example a Cisco CSR). Configure with dual ENIs (external and internal), create and attach an EIP to the external ENI, Configure and setup IPsec VPN tunnels, and ensure Jumbo Frames is enabled.

Correct Answer: B
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/NetworkAdminGuide/GenericConfig.html

Which service is used by default to store the CloudTrail log files?

1. A. Elastic Block Store (EBS)
2. B. Redshift
3. C. Simple Storage Service (S3)
4. D. Glacier

Correct Answer: C
Reference:
http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-working-with-log-files.html

Which endpoint is considered to be best practise when analysing data within a Configuration Stream of AWS Config?

1. A. SNS
2. B. E-Mail
3. C. SQS
4. D. Kinesis

Correct Answer: C
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/monitor-resource-changes.html