QUESTION: 65

Your company has a 1-Gbps AWS Direct Connect connection to AWS. Your company needs to send traffic from on-premises to a VPC owned by a partner company. The connectivity must have minimal latency at the lowest price.Which of the following connectivity options should you choose?

Create a new Direct Connect connection, and set up a new circuit to connect to the partner VPC using a private virtual interface.
Create a new Direct Connect connection, and leverage the existing circuit to connect to the partner VPC.
Create a new private virtual interface, and leverage the existing connection to connect to the partner VP
Enable VPC peering and use your VPC as a transitive point to reach the partner VPC.

Answer(s): D

Reveal Solution Next Question

QUESTION: 66

An organization wants to process sensitive information using the Amazon EMR service. The information is stored in on-premises databases. The output of processing will be encrypted using AWS KMS before it is uploaded to a customer-owned Amazon S3 bucket. The current configuration includes a VPS with public and private subnets, with VPN connectivity to the on-premises network. The security organization does not allow Amazon EC2 instances to run in the public subnet.
What is the MOST simple and secure architecture that will achieve the organization’s goal?

Use the existing VPC and configure Amazon EMR in a private subnet with an Amazon S3 endpoint.
Use the existing VPS and a NAT gateway, and configure Amazon EMR in a private subnet with an Amazon S3 endpoint.
Create a new VPS without an IGW and configure the VPN and Amazon EMR in a private subnet with an Amazon S3 endpoint.
Create a new VPS without an IGW and configure the VPN and Amazon EMR in a private subnet with an Amazon S3 endpoint and a NAT gateway.

Answer(s): B

Reveal Solution Next Question

QUESTION: 67

An organization has three AWS accounts with each containing VPCs in Virginia, Canada and the Sydney regions. The organization wants to determine whether all available Elastic IP addresses (EIPs) in these accounts are attached to Amazon EC2 instances or in use elastic network interfaces (ENIs) in all of the specified regions for compliance and cost-optimization purposes.
Which of the following meets the requirements with the LEAST management overhead?

Use an Amazon CloudWatch Events rule to schedule an AWS Lambda function in each account in all three regions to find the unattached and unused EIPs.
Use a CloudWatch event bus to schedule Lambda functions in each account in all three regions to find the unattached and unused EIPs.
Add an AWS managed, EIP-attached AWS Config rule in each region in all three accounts to find unattached and unused EIPs.
Use AWS CloudFormation StackSets to deploy an AWS Config EIP-attached rule in all accounts and regions to find the unattached and unused EIPs.

Answer(s): C

Reveal Solution Next Question

QUESTION: 68

A Systems Administrator is designing a hybrid DNS solution with spilt-view. The apex-domain “example.com” should be served through name servers across multiple top-level domains (TLDs). The name server for subdomain “dev.example.com” should reside on-premises. The administrator has decided to use Amazon Route 53 to achieve this scenario.
What procedurals steps must be taken to implement the solution?

Use a Route 53 public hosted zone for example.com and a private hosted zone for dev.example.com
Use a Route 53 public and private hosted zone for example.com and perform subdomain delegation for dev.example.com
Use a Route 53 public hosted zone for example.com and perform subdomain delegation for dev.example.com
Use a Route 53 private hosted zone for example.com and perform subdomain delegation for dev.example.com

Answer(s): A

Reveal Solution Next Question

Free AWS-Certified-Advanced-Networking-Specialty Exam Braindumps (page: 17)

QUESTION: 65

QUESTION: 66

QUESTION: 67

QUESTION: 68