QUESTION: 69

DNS name resolution must be provided for services in the following four zones:

The contents of these zones is not considered sensitive, however, the zones only need to be used by services hosted in these VPCs, one per geographic region. Each VPC should resolve the names in all zones.

How can you use Amazon route 53 to meet these requirements?

Create a Route 53 Private Hosted Zone for each of the four zones and associate them with the three VPCs.
Create a single Route 53 Private Hosted Zone for the zone company.private. and associate it with the three VPCs.
Create a Route Public 53 Hosted Zone for each of the four zones and configure the VPC DNS Resolver to forward
Create a single Route 53 Public Hosted Zone for the zone company.private. and configure the VPC DNS Resolver to forward

Answer(s): D

Reveal Solution Next Question

QUESTION: 70

An organization is replacing a tape backup system with a storage gateway. there is currently no connectivity to AWS. Initial testing is needed.What connection option should the organization use to get up and running at minimal cost?

Use an internet connection.
Set up an AWS VPN connection.
Provision an AWS Direct Connection private virtual interface.
Provision a Direct Connect public virtual interface.

Answer(s): A

Reveal Solution Next Question

QUESTION: 71

All IP addresses within a 10.0.0.0/16 VPC are fully utilized with application servers across two Availability Zones. The application servers need to send frequent UDP probes to a single central authentication server on the Internet to confirm that it is running up-to-date packages. The network is designed for application servers to use a single NAT gateway for internal access. Testing reveals that a few of the servers are unable to communicate with the authentication server.
What is the reason for this failure?

The NAT gateway does not support UDP traffic.
The authentication server is not accepting traffic.
The NAT gateway cannot allocate more ports.
The NAT gateway is launched in a private subnet.

Answer(s): C

Reveal Solution Next Question

QUESTION: 72

An organization is using a VPC endpoint for Amazon S3. When the security group rules for a set of instances were initially configured, access was restricted to allow traffic only to the IP addresses of the Amazon S3 API endpoints in the region from the published JSON file. The application was working properly, but now is logging a growing number of timeouts when connecting with Amazon S3. No internet gateway is configured for the VPC.

Which solution will fix the connectivity failures with the LEAST amount of effort?

Create a Lambda function to update the security group based on AmazonIPSpaceChanged notifications.
Update the VPC routing to direct Amazon S3 prefix-list traffic to the VPC endpoint using the route table APIs.
Update the application server’s outbound security group to use the prefix-list for Amazon S3 in the same region.
Create an additional VPC endpoint for Amazon S3 in the same route table to scale the concurrent connections to Amazon S3.

Answer(s): C

Reveal Solution Next Question

Free AWS-Certified-Advanced-Networking-Specialty Exam Braindumps (page: 18)

QUESTION: 69

QUESTION: 70

QUESTION: 71

QUESTION: 72