AWS Certified Advanced Networking - Specialty Free Sample Questions

You are architecting your e-business application for PCI compliance. To meet the compliance requirements, you need to monitor web application logs to identify any malicious activity. You also need to monitor for remote attempts to change the network interface of web instances.

Which two AWS services will be helpful to achieve this goal?

You can use the _____ command of the AWS Config service CLI to see the compliance state of each resource that AWS Config evaluates for a specific rule.

A user has enabled detailed CloudWatch monitoring with the AWS Simple Notification Service.

Which of the below mentioned statements helps the user understand detailed monitoring better?

What value in a packet dictates the priority of the packet in a QoS enabled network?

An organization processes consumer information submitted through its website. The organization’s security policy requires that personally identifiable information (PH) elements are specifically encrypted at all times and as soon as feasible when received. The front-end Amazon EC2 instances should not have access to decrypted Pll. A single service within the production VPC must decrypt the Pll by leveraging an IAM role.

Which combination of services will support these requirements? (Choose two.)

What are two services that help mitigate a DDoS? (Choose two.)

You are managing a VPC with 4 AZs. There is a load balancer managing the public accessibility to your servers. You have a secondary ENI with a private IPv4 address on an instance that is serving public web traffic. Your server communicates over private addresses to a database in another subnet. Security is a major concern for your company and whitelisting is in effect.

You have to bring the web server down for maintenance, what two things should you do? (Choose two.)

You have two autoscaling groups in your VPC. One deploys servers that host the index of your website and another that deploys servers that host the images for your website.

What three steps would you take to ensure the right servers are used for the right purpose? (Choose three.)

A user is collecting 1000 records per second. The user wants to send the data to CloudWatch using a custom namespace.

Which of the below mentioned options is recommended for this activity?

You are the AWS cloud architect and have been tasked with designing an appropriate subnetting design for your production VPC. Your production VPC requires secure communications back to the corporate private network. Quality of Service (QoS) is very important 24 x 7 for this particular connection, as real-time data is passed continually backwards and forwards between your on-prem bioinformatics enterprise application, and the number crunching servers deployed in the cloud. Any potential latency incurred on this connection will have a direct impact on the company's ability to attract investors and expansion into new markets.

Select the correct network configuration that best facilitates your company's continued growth plans.