AWS-Certified-Advanced-Networking-Specialty-Dumps

QUESTION 1

Which of the following does not configure Amazon CloudFront cache behaviors to forward
cookies to an origin for web distributions?

A. Origin server
B. AWS CLI
C. Amazon EMR
D. Amazon S3

Answer: D
Explanation:
Amazon S3 and some HTTP servers do not process cookies. Do not configure Amazon
CloudFront cache behaviors to forward cookies to an origin that doesn't process cookies or you'll
adversely affect cache ability and consequently performance.
Reference: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html


QUESTION 2

What is the maximum number of CloudTrails that you can create per AWS region?

A. 10
B. 2
C. 16
D. 5

Answer: D
Explanation:
You can create up to five CloudTrails per Amazon AWS region. A trail that applies to all regions
exists in each region and is counted as one trail in each region.
Reference: https://aws.amazon.com/cloudtrail/faqs/

QUESTION 3

Use ___________ to get more visibility into the health of your AWS Elastic Beanstalk application
and take appropriate actions in case of hardware failure or performance degradation.

A. Amazon Elastic Beanstalk command line
B. Amazon EC2 log files
C. Amazon CloudWatch
D. Amazon Load balancing

Answer: C
Explanation:
In AWS Elastic Beanstalk, you can use Amazon CloudWatch to get more visibility into the health
of your AWS Elastic Beanstalk application and take appropriate actions in case of hardware
failure or performance degradation.
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.concepts.design.html

QUESTION 4

To directly manage your CloudTrail security layer, you can use ____ for your CloudTrail log files.

A. SSE-S3
B. SCE-KMS
C. SCE-S3
D. SSE-KMS

Answer: D
Explanation:
By default, the log files delivered by CloudTrail to your bucket are encrypted by Amazon serverside encryption with Amazon S3-managed encryption keys (SSE-S3). To provide a security layer
that is directly manageable, you can instead use server-side encryption with AWS KMS-managed
keys (SSE-KMS) for your CloudTrail log files.
Reference:
http://docs.aws.amazon.com/awscloudtrail/latest/userguide/encrypting-cloudtrail-log-files-withaws-kms.html


QUESTION 5

Which of the following statements is true of AWS Elastic Beanstalk?

A. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, meaning CloudWatch costs
are applied to your AWS account for any alarms that you use.
B. AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, and both are free of charge.
C. AWS Elastic Beanstalk doesn't use CloudWatch for monitoring and alarms, but you pay extra for
any AWS Elastic Beanstalk Alarm you set in the monitoring tool.
D. AWS Elastic Beanstalk has its own free-of-charge monitoring tool, and you are not charged for
the alarm you set.

Answer: A
Explanation:
AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, meaning CloudWatch costs
are applied to your AWS account for any alarms that you use.
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.alarms.html