QUESTION: 21

An organization runs a consumer-facing website on AWS. The Amazon EC2-based web fleet is load balanced using the AWS Application Load Balancer, Amazon Route 53 is used to provide the public DNS services.

The following URLs need to server content to end users:

-test.example.com
-web.example.com
-example.com

Based on this information, what combination of services must be used to meet the requirement? (Choose two.)

Path condition in ALB listener to route example.com to appropriate target groups.
Host condition in ALB listener to route *.example.com to appropriate target groups.
Host condition in ALB listener to route example.com to appropriate target groups.
Path condition in ALB listener to route *.example.com to appropriate target groups.
Host condition in ALB listener to route $$$$.example.com to appropriate target groups.

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 22

Under increased cybersecurity concerns, a company is deploying a near real-time intrusion detection system (IDS) solution. A system must be put in place as soon as possible. The architecture consists of many AWS accounts, and all results must be delivered to a central location.
Which solution will meet this requirement, while minimizing downtime and costs?

Deploy a third-party vendor solution to perform deep packet inspection in a transit VPC.
Enable VPC Flow Logs on each VPC. Set up a stream of the flow logs to a central Amazon Elasticsearch cluster.
Enable Amazon Macie on each AWS account and configure central reporting.
Enable Amazon GuardDuty on each account as members of a central account.

Answer(s): D

Reference:

https://aws.amazon.com/blogs/security/how-to-manage-amazon-guardduty-security-findings-across-multiple-accounts/

Reveal Solution Next Question

QUESTION: 23

An organization delivers high-resolution, dynamic web content. Internet users access the content from a variety of platforms, including mobile, tablet and desktop. Each platform receives a customized experience to account for the differences in viewing modes. A dedicated, automatic-scaling fleet of Amazon EC2 instances is used for each platform to server content based on path-based headers.
Which combination of services will MINIMIZE cost and MAXIMIZE performance? (Choose two.)

Amazon CloudFront with Lambda@Edge
Network Load Balancer
Amazon S3 static websites
Amazon Route 53 with traffic flow policies
Application Load Balancer

Answer(s): A,E

Reference:

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-at-the-edge.html

Reveal Solution Next Question

QUESTION: 24

You need to set up a VPN between AWS VPC and your on-premises network. You create a VPN connection in the AWS Management Console, download the configuration file, and install it on your on-premises router. The tunnel is not coming up because of firewall restrictions on your router. Which two network traffic options should you allow through the firewall? (Choose two.)

UDP port 500
IP protocol 50
IP protocol 5
TCP port 50
TCP port 500

Answer(s): A,B

Reference:

https://docs.aws.amazon.com/vpc/latest/userguide/VPC_VPN.html

Reveal Solution Next Question

Free AWS-Certified-Advanced-Networking-Specialty Exam Braindumps (page: 6)

QUESTION: 21

QUESTION: 22

Reference:

QUESTION: 23

Reference:

QUESTION: 24

Reference: