NEW QUESTION 1
In Amazon CloudFront, you cannot configure CloudFront to process cookies for _____.

• A. HTTPS web distributions
• B. Web and RTMP distributions
• C. RTMP distributions
• D. HTTP web distributions

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html

NEW QUESTION 2
Does Amazon VPC support multicast or broadcast?

• A. Yes, both.
• B. It doesn't support any of them.
• C. Multicast yes, Broadcast no.
• D. Both, but only outside Amazon VP

Answer: B

Explanation:
Reference:
https://aws.amazon.com/vpc/faqs/

NEW QUESTION 3
In Amazon CloudFront, to link to your objects, if your domain name is d111111abcdef8.cloudfront.net and your object is image.jpg, then the URL for the link in your webpage will be ______.

• A. http://d111111abcdef8.cloudfront.net/images/image.jpg
• B. http://d111111abcdef8.dns/images/image.jpg
• C. http://d111111abcdef8.dns/image.jpg
• D. http://d111111abcdef8.cloudfront.net/image.jpg

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/GettingStarted.html

NEW QUESTION 4
You are your company’s AWS cloud architect. You have created a VPC topology that consists of 3
VPCs. You have a centralised VPC (VPC-Shared) that provides shared services to the remaining 2 departmental dedicated VPCs (VPC-Dept1 and VPC-Dept2). The centralised VPC is VPC peered to both of the departmental VPCs, that is a VPC peering connection exists between VPC-Shared and VPC-Dept1, and a VPC peering connection exists between VPC-Shared and VPC-Dept2. Select the correct option from the list below.

• A. Network traffic is possible between VPC-Shared instances and VPC-Dept1 and VPC-Dept2 instances as long as the appropriate routes and security groups are in place, but only for communication that is initiated from VPC1-Shared instances as the default peering bi-directional communication flag has been disabled.
• B. Instances within VPC-Dept1 can communicate directly with instances in VPC-Shared, as long as the appropriate routes and security groups are in place, and vice versa regardless of who initiates communication
• C. All network communication remains blocked between all VPCs until the respective peering bidirectional communication flags are set to the appropriate setting that allows traffic to flow.
• D. Network traffic is possible between VPC-Shared instances and VPC-Dept1 and VPC-Dept2 instances as long as the appropriate routes and security groups are in place, but only for communication that is initiated from VPC1-Shared instances as the default peering bi-directional communication flag has been enabled.

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/PeeringGuide/peering-configurations-partialaccess. html#one-to-two-vpcs-instances

NEW QUESTION 5
In Amazon CloudFront, if you need to quickly remove objects from a distribution, you can:

• A. delete the objects from cache.
• B. invalidate the objects.
• C. remove your Amazon S3 bucket.
• D. delete your distribution and recreate i

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AddRemoveReplaceObject s.html

NEW QUESTION 6
When an AWS Config rule is triggered a JSON object known as an AWS Config Event is created. This object contains a(n) _____ attribute, which is a JSON-formatted set of key/value pairs the receiving AWS Lambda function processes as part of its evaluation logic.

• A. invokingEvent
• B. mappingTemplate
• C. ruleConfiguration
• D. inputParameters

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_developrules_ example-events.html

NEW QUESTION 7
In the "start using the AWS Direct Connect steps," when can you complete the Cross Connect step?

• A. After verifying your virtual interface
• B. After you have received your Letter of Authorization and Connecting Facility Assignment (LOA-CFA) from AWS
• C. 72 hours after submitting your request for AWS Direct Connect Connection
• D. Immediately after submitting your request for AWS Direct Connect Connection

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Colocation.html

NEW QUESTION 8
An AWS Config rule can be set to be evaluated if a certain set of resources undergoes a configuration change. The set of resources to which the rule applies can be restricted by the rule's ______ , which can include a combination of a resource type and a resource ID, for example.

• A. trigger
• B. domain
• C. manifest
• D. scope

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html

NEW QUESTION 9
An unfortunate situation has just come to your attention. A business critical application with
sensitive data running on-prem will run out of storage disk space in 24hrs. This business critical application is dependent a very large set of routes - required for integration with other system. You make a quick but well informed decision to migrate this application quickly to AWS. You are able to quickly launch a new VPC and within it equivalent infrastructure to re-home the application. In order to complete the replication of application data and ensure the application remains operational
beyond the next 24hrs, select the best implementation.

• A. Within the new VPC - establish a Direct Connect connection with max 10Gbps port speed for data replicatio
• B. Establish a 802.1Q VLAN and configure a Virtual Private Gateway and Private Virtual Interface, and ensure Jumbo Frames is enabled.
• C. Within the new VPC - deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with BGP dynamic routing
• D. Within the new VPC - deploy a Virtual Private Gateway, Customer Gateway, and establish a new IPsec VPN Connection with static routing, and ensure Jumbo Frames is enabled.
• E. Within the new VPC - deploy a software based virtual router (for example a Cisco CSR). Configure with dual ENIs (external and internal), create and attach an EIP to the external ENI, Configure and setup IPsec VPN tunnels, and ensure Jumbo Frames is enabled.

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/NetworkAdminGuide/GenericConfig.html

NEW QUESTION 10
For web distributions in Amazon CloudFront, your origin can be either an Amazon S3 bucket or _____ .

• A. a DNS server
• B. a proxy server
• C. an FTP server
• D. an HTTP server

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-overview.html

NEW QUESTION 11
You would like to automate the monitoring of changes in the configurations of your AWS resources and respond programmatically to configurations of only a certain type. To do this, you could use Amazon ______ as the endpoint for the Amazon SNS topics that generate messages from AWS Config.

• A. Kinesis
• B. Simple Email Service (SES)
• C. Simple Storage Service (S3)
• D. Simple Queue Service (SQS)

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/monitor-resource-changes.html

NEW QUESTION 12
To connect to public AWS products such as Amazon EC2 and Amazon S3 through the AWS Direct Link, which step is NOT required?

• A. Provide public IP address (/31) for each Border Gateway Protocol (BGP) session.
• B. Allocate a Private IP address to your network in 172.x.x.x range.
• C. Provide the public routes that you will advertise over Border Gateway Protocol (BGP).
• D. Provide a public Autonomous System Number (ASN) that you own or a private one to identify your network on the Internet.

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html

NEW QUESTION 13
In AWS Direct Connect, which of the following is true of configuring your router to connect to the AWS Direct Connect router?

• A. After creating a virtual interface for your AWS Direct Connect connection, you can download the router configuration file from the available link
• B. After Completing the Cross Connect step, the download link for router configuration will be available
• C. After submitting your AWS Direct Connect connection request, you will receive the router configuration details by email within 72 hours
• D. In Create a Virtual Interface step, the general configuration of your router would be available for downloading.

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#routerconfig

NEW QUESTION 14
A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services does not provide detailed monitoring with CloudWatch?

• A. AWS Route53
• B. AWS EMR
• C. AWS ELB
• D. AWS RDS

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

NEW QUESTION 15
You would like to ensure that all Amazon S3 buckets going forward, current and newly created ones, have logging enabled. What type of trigger(s) should you use?

• A. only a periodic trigger
• B. only a configuration change trigger
• C. both configuration change and periodic triggers
• D. only a transitioning trigger

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html

NEW QUESTION 16
Which other AWS service is used to track ‘Related Events’ within the Configuration Item?

• A. AWS WAF
• B. SQS
• C. AWS CloudTrail
• D. S3

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#configitem- table

NEW QUESTION 17
Select the answer/s that correctly state how Jumbo Frames work

• A. Jumbo Frames assist with application disk storage
• B. Jumbo Frames can assist with application performance
• C. Jumbo Frames are supported across Virtual Private Gateway connections
• D. Jumbo Frames are enabled by increasing the MTU size to 9000 kilobytes

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/network_mtu.html

NEW QUESTION 18
An AWS account owner has setup multiple IAM users. One of these IAM users, named John, has CloudWatch access, but no access to EC2 services. John has setup an alarm action which stops EC2 instances when their CPU utilization is below the threshold limit. When an EC2 instance's CPU Utilization rate drops below the threshold John has set, what will happen and why?

• A. Nothing will happe
• B. John cannot set an alarm on EC2 since he does not have the permission.
• C. CloudWatch will stop the instance when the action is executed
• D. Nothing will happen because it is not possible to stop the instance using the CloudWatch alarm
• E. Nothing will happe
• F. John can setup the action, but it will not be executed because he does not have EC2 access through IAM policies.

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/UsingAlarmActions.html

NEW QUESTION 19
Each custom AWS Config rule you create must be associated with a(n) AWS _____ , which contains the logic that evaluates whether your AWS resources comply with the rule.

• A. Lambda function
• B. Configuration trigger
• C. EC2 instance
• D. S3 bucket

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html

NEW QUESTION 20
In order to change the name of the AWS Config _____ , you must stop the configuration recorder, delete the current one, and create a new one with a new name, since there can only be one of these per AWS account.

• A. SNS topic
• B. configuration history
• C. delivery channel
• D. S3 bucket path

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/update-dc.html

NEW QUESTION 21
What is the maximum size of a response body that Amazon CloudFront will return to the viewer?

• A. Unlimited
• B. 5 GB
• C. 100 MB
• D. 20 GB

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/RequestAndResponseBeha viorS3Origin.html#ResponseBehaviorS3Origin

NEW QUESTION 22
You can use the _____ command of the AWS Config service CLI to see the compliance state of each resource that AWS Config evaluates for a specific rule.

• A. describe-compliance-by-resource
• B. describe-compliance-by-config-rule
• C. get-compliance-details-by-config-rule
• D. get-compliance-details-by-config-rule

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

NEW QUESTION 23
Which of the following physical layer standards is required for connection to AWS Direct Connect over a standard 1 gigabit or 10 gigabit Ethernet fiber-optic cable?

• A. Single mode fiber, 1000BASE-LX for 1 gigabit Ethernet, or 10GBASE-ER for 10 gigabit Ethernet
• B. Multi mode fiber, 1000BASE-LX for 1 gigabit Ethernet, or 10GBASE-ER for 10 gigabit Ethernet
• C. Single mode fiber, 1000BASE-LX for 1 gigabit Ethernet, or 10GBASE-LR for 10 gigabit Ethernet
• D. Multi mode fiber, 1000BASE-SX for 1 gigabit Ethernet, or 10GBASE-SR for 10 gigabit Ethernet

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html

NEW QUESTION 24
What service is used to store the log files generated by CloudTrail?

• A. EC2
• B. EBS
• C. S3
• D. VPC

Answer: C

Explanation:
Reference: https://aws.amazon.com/cloudtrail/

NEW QUESTION 25
Which of the following does not configure Amazon CloudFront cache behaviors to forward cookies to an origin for web distributions?

• A. Origin server
• B. AWS CLI
• C. Amazon EMR
• D. Amazon S3

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html

NEW QUESTION 26
......