ANS-C01 Exam: Absolutely Free Online Practice

Question 1
- An IoT company sells hardware sensor modules that periodically send out temperature, humidity, pressure, and location data through the MQTT messaging protocol. The hardware sensor modules send this data to the company's on-premises MQTT brokers that run on Linux servers behind a load balancer. The hardware sensor modules have been hardcoded with public IP addresses to reach the brokers. The company is growing and is acquiring customers across the world. The existing solution can no longer scale and is introducing additional latency because of the company's global presence. As a result, the company decides to migrate its entire infrastructure from on premises to the AWS Cloud. The company needs to migrate without reconfiguring the hardware sensor modules that are already deployed across the world. The solution also must minimize latency. The company migrates the MQTT brokers to run on Amazon EC2 instances. What should the company do next to meet these requirements?
  
  A :
  Place the EC2 instances behind a Network Load Balancer (NLB). Configure TCP listeners. Use Bring Your Own IP (BYOIP) from the on-premises network with the NLB.
  
  B :
  Place the EC2 instances behind a Network Load Balancer (NLB). Configure TCP listeners. Create an AWS Global Accelerator accelerator in front of the NLUse Bring Your Own IP (BYOIP) from the onpremises network with Global Accelerator.
  
  C :
  Place the EC2 instances behind an Application Load Balancer (ALB). Configure TCP listeners. Create an AWS Global Accelerator accelerator in front of the ALB. Use Bring Your Own IP (BYOIP) from the on-premises network with Global Accelerator
  
  D :
  Place the EC2 instances behind an Amazon CloudFront distribution. Use Bring Your Own IP (BYOIP) from the on-premises network with CloudFront.
  
  Answer: B
Question 2
- A company wants to implement a distributed architecture on AWS that uses a Gateway Load Balancer (GWLB) and GWLB endpoints. The company has chosen a hub-and-spoke model. The model includes a GWLB and virtual appliances that are deployed into a centralized appliance VPC and GWLB endpoints. The model also includes internet gateways that are configured in spoke VPCs. Which sequence of traffic flow to the internet from the spoke VPC is correct?
  
  A : 1.An application in a spoke VPC sends traffic to the GWLB endpoint based on the VPC route table configuration.
  2. Traffic is delivered securely and privately to the GWLB.
  3. The GWLB sends the traffic to a virtual appliance for inspection.
  4. Return traffic flows back to the GWLB endpoint and out to the internet through the internet gateway.
  
  B : 1. An application in a spoke VPC sends traffic to the GWLB endpoint based on the VPC route table configuration.
  2. Traffic is delivered securely and privately to the GWLB endpoint.
  3. The GWLB sets the X-Forwarded-For request header and sends the traffic to a virtual appliance for inspection.
  4. Return traffic flows back to the GWLB and out to the internet through an internet gateway.
  
  C :
  1. An application in a spoke VPC sends traffic to the GWLB endpoint.
  2. Traffic is delivered securely and privately to the GWLB.
  3. The GWLB sets the X-Forwarded-For request header and sends the traffic to a virtual appliance for inspection.
  4. Return traffic flows back to the GWLB endpoint and out to the internet through the internet gateway.
  
  D : 1. An application in a spoke VPC sends traffic to the GWLB.
  2. Traffic is delivered securely and privately to the GWLB endpoint.
  3. The GWLB sends the traffic to a virtual appliance for inspection.
  4. Return traffic flows back to the GWLB and out to the internet through an internet gateway.
  
  Answer: A
Question 3
- A retail company has set up an AWS Direct Connect connection which includes a private Virtual Interface (VIF) and a VPN connection to the on-premises data center. On the AWS side, the application environment is contained in a VPC and includes a virtual private gateway. For traffic originating in the VPC, what is the order of BGP path selection from the MOST preferred to the LEAST preferred?
  
  A : Longest prefix match, Direct-Connect BGP routes, Static routes, VPN BGP routes
  
  B : Direct-Connect BGP routes, VPN BGP routes, Longest prefix match, Static routes
  
  C : Static routes, Longest prefix match, Direct-Connect BGP routes, VPN BGP routes
  
  D : Longest prefix match, Static routes, Direct-Connect BGP routes, VPN BGP routes
  
  Answer: D
Question 4
- A network engineer needs to build an encrypted connection between an on-premises data center and a VPC. The network engineer attaches the VPC to a virtual private gateway and sets up an AWS Site-to-Site VPN connection. The VPN tunnel is UP after configuration and is working. However, during rekey for phase 2 of the VPN negotiation, the customer gateway device is receiving different parameters than the parameters that the device is configured to support. The network engineer checks the IPsec configuration of the VPN tunnel. The network engineer notices that the customer gateway device is configured with the most secure encryption algorithms that the AWS Site-to-Site VPN configuration file provides. What should the network engineer do to troubleshoot and correct the issue?
  
  A :
  Check the native virtual private gateway logs. Restrict the VPN tunnel options to the specific VPN parameters that the virtual private gateway requires.
  
  B :
  Check the native customer gateway logs. Restrict the VPN tunnel options to the specific VPN parameters that the customer gateway requires.
  
  C :
  Check Amazon CloudWatch logs of the virtual private gateway. Restrict the VPN tunnel options to the specific VPN parameters that the virtual private gateway requires.
  
  D :
  Check Amazon CloudWatch logs of the customer gateway. Restrict the VPN tunnel options to the specific VPN parameters that the customer gateway requires.
  
  Answer: B
Question 5
- A company's AWS infrastructure is spread across more than 50 accounts and across five AWS Regions. The company needs to manage its security posture with simplified administration and maintenance for all the AWS accounts. The company wants to use AWS Firewall Manager to manage the firewall rules and requirements. The company creates an organization with all features enabled in AWS Organizations. Which combination of steps should the company take next to meet the requirements? (Select THREE.)
  
  A : Configure only the Firewall Manager administrator account to join the organization.
  
  B : Configure all the accounts to join the organization.
  
  C : Set an account as the Firewall Manager administrator account.
  
  D : Set an account as the Firewall Manager child account.
  
  E : Set up AWS Config for all the accounts and all the Regions where the company has resources.
  
  F : Set up AWS Config for only the organization-s management account.
  
  Answer: B,C,E

Free Amazon ANS-C01 Exam Questions

Absolute Free ANS-C01 Exam Practice for Comprehensive Preparation