QUESTION: 57

You are preparing to launch Amazon WorkSpaces and need to configure the appropriate networking resources. What must be configured to meet this requirement?

At least two subnets in different Availability Zones.
A dedicated VPC with Active Directory Services.
An IPsec VPN to on-premises Active Directory
Network address translation for outbound traffic.

Answer(s): A,D

Reference:

https://docs.aws.amazon.com/workspaces/latest/adminguide/amazon-workspaces-vpc.html

Reveal Solution Next Question

You have multiple Amazon Elastic Compute Cloud (EC2) instances running a web server in a VPC configured with security groups and NACL. You need to ensure layer 7 protocol level logging of all network traffic (ACCEPT/REJECT) on the instances. What should be enabled to complete this task?

CloudWatch Logs at the VPC level
Packet sniffing at the instance level
VPC flow logs at the subnet level
Packet sniffing at the VPC level

Answer(s): A

Reveal Solution Next Question

QUESTION: 59

Your company operates a single AWS account. A common services VPC is deployed to provide shared services, such as network scanning and compliance tools. Each AWS workload uses its own VPC, and each VPC must peer with the common services VPC. You must choose the most efficient and cost effective approach.Which approach should be used to automate the required VPC peering?

AWS CloudTrail integration with Amazon CloudWatch Logs to trigger a Lambda function.
An OpsWorks Chef recipe to execute a command-line peering request.
Cfn-init with AWS CloudFormation to execute a command-line peering request.
An AWS CloudFormation template that includes a peering request.

Answer(s): A

Reveal Solution Next Question

QUESTION: 60

Your organization requires strict adherence to a change control process for its Amazon Elastic Compute Cloud (EC2) and VPC environments. The organization uses AWS CloudFormation as the AWS service to control and implement changes. Which combination of three services provides an alert for changes made outside of AWS CloudFormation? (Choose three.)

AWS Config
AWS Simple Notification Service
AWS CloudWatch metrics
AWS Lambda
AWS CloudFormation
AWS Identify and Access Management

Answer(s): B,C,D

Reveal Solution Next Question

Free AWS-Certified-Advanced-Networking-Specialty Exam Braindumps (page: 15)

QUESTION: 57

Reference:

QUESTION: 58

QUESTION: 59

QUESTION: 60