Amazon ANS-C00 Exam Questions & Answers

DNS name resolution must be provided for services in the following four zones: The contents of these zones is not considered sensitive, however, the zones only need to be used by services hosted in these VPCs, one per geographic region. Each VPC should resolve the names in all zones.

How can you use Amazon route 53 to meet these requirements?

A. Create a Route 53 Private Hosted Zone for each of the four zones and associate them with the three VPCs.

B. Create a single Route 53 Private Hosted Zone for the zone company.private.and associate it with the three VPCs.

C. Create a Route Public 53 Hosted Zone for each of the four zones and configure the VPC DNS Resolver to forward

D. Create a single Route 53 Public Hosted Zone for the zone company.private. and configure the VPC DNS Resolver to forward

An AWS account owner has setup multiple IAM users. One of these IAM users, named John, has CloudWatch access, but no access to EC2 services. John has setup an alarm action which stops EC2 instances when their CPU utilization is below the threshold limit. When an EC2 instance's CPU Utilization rate drops below the threshold John has set, what will happen and why?

A. Nothing will happen. John cannot set an alarm on EC2 since he does not have the permission.

B. CloudWatch will stop the instance when the action is executed

C. Nothing will happen because it is not possible to stop the instance using the CloudWatch alarm

D. Nothing will happen. John can setup the action, but it will not be executed because he does not have EC2 access through IAM policies.

A company wants to conduct a proof of concept for an SAP HANA application with a key objective to automate the provisioning of infrastructure and the application. The company operates a hybrid cloud infrastructure with AWS Direct Connect between its data center and VPC. Security policy dictates that all traffic from AWS be routed through on-premises data center firewalls. Security policy also prohibits the use of a VPC internet gateway for internet access. The company enforces use of a forward proxy server for all outbound network traffic. All resources inside the VPC are able to reach on-premises servers.

All Amazon EC2 Linux instances require package updates over the internet. However, the updates are falling and sending errors.

What would cause these errors?

A. Inbound security groups are configured incorrectly on the EC2 instances running in the VPC.

B. The VPC route table does not have entries for the proxy server in the data center.

C. The EC2 instances are not configured to use the proxy running in the data center for traffic on TCP port

80.

D. The data center firewall is blocking all traffic sent from the VPC CIDR range destined for 0.0.0.0/0.