AWS Certified Advanced Networking Practice Test 2 – (50 questions)

Hosted Virtual Interfaces (VIFs) on AWS Direct Connect describe which of the following scenarios?

What does the Amazon CloudFront invalidation feature do?

What aspect of an Amazon Virtual Private Cloud (Amazon VPC) is stateful?

All billing for AWS Direct Connect ceases when which of the following occurs?

What does an Amazon CloudFront cache behavior do?

Which AWS Cloud service will help you identify sensitive account data, like access and secret keys, stored in an Amazon Simple Storage Service (Amazon S3) bucket?

What are the two types of Amazon Route 53 hosted zones? (Choose two.)

What does Amazon CloudFront do when it uses HTTP Live Streaming (HLS), HTTP Dynamic Streaming (HDS), Smooth Streaming, and MPEG DASH formats for streaming video?

You are tasked with identifying unused security groups and ports in a Virtual Private Cloud (VPC). Which AWS capabilities should you use?

Amazon Route 53 cannot route queries to which AWS resources?

When adding an alternate domain to your Amazon CloudFront distribution, the wildcard * can be used to do what?

To protect its website, the organization directs you to implement known-attacker protection for the website. The website resides behind an Application Load Balancer. You have subscribed to a threat intelligence service that posts hourly IP reputation lists. What combination of AWS Cloud services will allow you to block traffic based on this threat intelligence?

To stop sending traffic to resources with weighted routing for Amazon Route 53, you must do which one of the following?

When using AWS Certification Manager (ACM) and Amazon CloudFront, you configured your certificate within ACM. When you try to enable Amazon CloudFront, however, you do not see the certificate available for use. What could be the problem?

In order to decrease the number of instances that have inbound web access, your team has recently placed a Network Address Translation (NAT) instance on Amazon Linux in the public subnet. The private subnet has a 0.0.0.0/0 route to the elastic network interface of the NAT instance. Users are complaining that web responses are slower than normal. What are practical steps to fix this issue? (Choose two.)

If you do not associate a health check with an Amazon Route 53 multivalue answer record, which of the following occurs?

How can you use the wildcard * when invalidating objects with Amazon CloudFront?

Voice calls to international numbers from inside your company must go through an opensource Session Border Controller (SBC) installed on a custom Linux Amazon Machine Image (AMI) in your Virtual Private Cloud (VPC) public subnet. The SBC handles the realtime media and voice signaling. International calls often have garbled voice, and it is difficult to understand what people are saying. What may increase the quality of international voice calls?

How do you access traffic flow for Amazon Route 53?

What do Amazon CloudFront access logs do?

Your big data team is trying to determine why their proof of concept is running slowly. For the demo, they are trying to ingest 1 TB of data from Amazon Simple Storage Service (Amazon S3) on their c4.8xl instance. They have already enabled enhanced networking. What should they do to increase Amazon S3 ingest rates?

What should you use if you want Amazon Route 53 to respond to Domain Name System (DNS) queries with up to eight healthy records selected at random?

Which of the following allows you to create new AWS accounts programmatically?

Your database instance running on an r4.large instance seems to be dropping Transmission Control Protocol (TCP) packets based on a packet capture from a host with which it was communicating. During initial performance baseline tests, the instance was able to handle peak load twice as high as its current load. What could be the issue? (Choose two.)

Why is referencing the Application Load Balancer or Classic Load Balancer by its DNS CNAME recommended?

AWS CloudFormation allows you to define your infrastructure as code in what artifact?

Your development team is testing the performance of a new application using enhanced networking. They have updated the kernel to the latest version that supports the Elastic Network Adapter (ENA) driver. What are the other two requirements for support? (Choose two.)

With the enableDnsHostname attribute set to true, Amazon will do which of the following?

Which of the following is a security benefit of services such as AWS Service Catalog? (Choose two.)

The new architecture for your application involves replicating your stateful application data from your Virtual Private Cloud (VPC) in US East (Ohio) to Asia Pacific (Tokyo). The replication instances are in public subnets in each region and communicate with public addresses over Transport Layer Security (TLS). Your team is seeing much lower replication throughput than they see within a single VPC. Which steps can you take to improve throughput?

What is the minimum number of connections supported in a Link Aggregation Group (LAG)?

You have the enableDnsHostname attribute set to true for your VPC. Your Amazon Elastic Compute Cloud (Amazon EC2) instances are not receiving DNS hostnames, however. What could be the potential cause?

Amazon Route 53 uses several methods to deliver a 100 percent availability Service Level Agreement (SLA). Which method guards against failures of Top Level Domain (TLD) servers?

Which networking feature will provide the most benefits to support a clustered computing application that requires very low latency and high network throughput?

Which of the following is a type of Virtual Interface (VIF) that is supported on AWS Direct Connect?

You are assessing load balancer options for your AWS deployment. You want support for static IP addresses for the load balancer. What would be the best choice of Elastic Load Balancing load balancer for this purpose?

Which of the following allows you to restrict access to your Amazon Simple Storage Service (Amazon S3) bucket to Amazon CloudFront distributions that you control?

A resilient AWS Direct Connect connection requires you to connect at what number of AWS Direct Connect locations?

What is a Content Delivery Network (CDN)?

Private keys in AWS Certificate Manager are protected using which one of the following?

How many prefixes can be announced from a customer to AWS over an AWS Direct Connect Private Virtual Interface (VIF)?

You are using Amazon CloudFront for your website. A user requests content, which is routed to a local edge location. What happens before the requested content is available at that edge location?

AWS WAF integrates with which one of the following AWS resources?

When using a Link Aggregation Group (LAG) composed of two AWS Direct Connect connections, how many IPv4 Border Gateway Protocol (BGP) sessions are required per Virtual Interface (VIF)?

Amazon CloudFront can work with which of the following origin servers? (Choose three.)

AWS Shield Standard provides protection at which layers of the Open Systems Interconnection (OSI) model? (Choose two.)

Which of the following has the highest route priority in the Border Gateway Protocol (BGP) path selection algorithm used by AWS?

What is the default expiry time for an Amazon CloudFront cache?

Which Amazon Virtual Private Cloud (Amazon VPC) feature allows you to access AWS Cloud services without the use of an Internet gateway?

What would you recommend to make a scalable architecture for performing very high throughput data transfers?