ANS-C00 Sample Questions & Answers
Free AWS Certified Advanced Networking - Specialty practice questions with worked answers and explanations. See how the ExamJungle simulator prepares you — then jump into the full test.
Launch the full ANS-C00 simulator →Showing 10 of 20 free samples.
- Question 1Select 2
What are two services that help mitigate a DDoS? (Choose two.)
Show answer & explanation
Correct answers: B, D
B,D--Explanation:
AWS Shield and CloudFront can help mitigate the effects of a DDoSB,D--Explanation:
AWS Shield and CloudFront can help mitigate the effects of a DDoS - Question 2Select 2
You are managing a VPC with 4 AZs. There is a load balancer managing the public accessibility to your servers. You have a secondary ENI with a private IPv4 address on an instance that is serving public web traffic. Your server communicates over private addresses to a database in another subnet. Security is a major concern for your company and whitelisting is in effect.
You have to bring the web server down for maintenance, what two things should you do? (Choose two.)
Show answer & explanation
Correct answers: B, D
B,D--Explanation:
You must configure a secondary ENI on the standby instance with an IP address that can access the data subnet. This may require modification of the security group for the database.B,D--Explanation:
You must configure a secondary ENI on the standby instance with an IP address that can access the data subnet. This may require modification of the security group for the database. - Question 3Select 3
You have two autoscaling groups in your VPC. One deploys servers that host the index of your website and another that deploys servers that host the images for your website.
What three steps would you take to ensure the right servers are used for the right purpose? (Choose three.)
Show answer & explanation
Correct answers: A, B, C
A,B,C--Explanation:
A Classic Load Balancer does not support path-based routing rulesA,B,C--Explanation:
A Classic Load Balancer does not support path-based routing rulesA,B,C--Explanation:
A Classic Load Balancer does not support path-based routing rules - Question 4
A user is collecting 1000 records per second. The user wants to send the data to CloudWatch using a custom namespace.
Which of the below mentioned options is recommended for this activity?
Show answer & explanation
Correct answer: C
C--Explanation:
AWS CloudWatch supports the custom metrics. The user can always capture the custom data and upload the data to CloudWatch using CLI or APIs. The user can publish data to CloudWatch as single data points or as an aggregated set of data points called a statistic set using the command put-metric-data. It is recommended that when the user is having multiple data points per minute, he should aggregate the data so that it will minimize the number of calls to put-metric-data. In this case it will be single call to CloudWatch instead of 1000 calls if the data is aggregated.--
Reference: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/publishingMetrics.html - Question 5
You are the AWS cloud architect and have been tasked with designing an appropriate subnetting design for your production VPC. Your production VPC requires secure communications back to the corporate private network. Quality of Service (QoS) is very important 24 x 7 for this particular connection, as real-time data is passed continually backwards and forwards between your on-prem bioinformatics enterprise application, and the number crunching servers deployed in the cloud. Any potential latency incurred on this connection will have a direct impact on the company's ability to attract investors and expansion into new markets.
Select the correct network configuration that best facilitates your company's continued growth plans.
Show answer & explanation
Correct answer: C
C--Explanation:
Answers A, B, and C all rely on an Internet connection. An Internet connection cannot guarantee QoS and will be subject to performance fluctuations - therefore they are all incorrect options. The only difference between these options is whether a Virtual Private Gateway is required - the answer is yes and therefore the correct answer is D.--
Reference: https://aws.amazon.com/directconnect/faqs/ - Question 6
What is NOT a benefit of CloudFront?
Show answer & explanation
Correct answer: A
A--Explanation:
Elastic Load balancers distribute traffic to EC2 instances. - Question 7
Your company needs to directly update an S3 bucket that serves as a CloudFront origin with the most reliability possible. Your company also has a set of private EC2 servers that it needs to access with the same reliability. Which combination will provide the best solution?
Show answer & explanation
Correct answer: A
A--Explanation:
The Public VIF will allow access to the S3 bucket, and the Private VIF will allow access to the EC2 instances. - Question 8
You need to create a subnet in a VPC that supports 1000 hosts. You need to be as accurate as possible since you run a very large company.
What CIDR should you use?
Show answer & explanation
Correct answer: B
B--Explanation:
/22 supports 1019 hosts since AWS reserves 5 addresses. - Question 9
When an AWS Config rule is triggered a JSON object known as an AWS Config Event is created. This object contains another JSON string in its parameter, which describes the event that triggered the rule.
Show answer & explanation
Correct answer: D
D--Explanation:
The JSON object for an AWS Config event contains an invoking Event attribute, which describes the event that triggers the evaluation for a rule. If the event is published in response to a resource configuration change, the value for this attribute is a string that contains a JSON configuration Item or a configuration Item Summary (for oversized configuration items). The configuration item represents the state of the resource at the moment that AWS Config detected the change. If the event is published for a periodic evaluation, the value is a string that contains a JSON object. The object includes information about the evaluation that was triggered. For each type of event, a function must parse the string with a JSON parser to be able to evaluate its contents.--
Reference: http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config develop-rules exa mple-events.html - Question 10
You can turn on the AWS Config service from the AWS CLI by running the subscribe command and passing as parameters a valid 1AM role, SNS topic, a n d .
Show answer & explanation
Correct answer: A
A--Explanation:
You can use the AWS CLI to turn on AWS Config. All it takes is the subscribe command and a few additional parameters. The parameters are -s3-bucket, which specifies the S3 bucket to which AWS Config data will be saved, -sns-topic, which specifies to which SNS topic messages from AWS Config will be sent, and -iam-role, which is an 1AM role containing appropriate permissions for AWS Config to access the resources it monitors.--
Reference: http://docs.aws.amazon.com/config/latest/developerguide/gs-cli-subscribe.html
Ready for the real thing?
The full ANS-C00 simulator has every exam-style question, timed mode, and instant scoring.