AWS-Certified-Advanced-Networking-Specialty Amazon Exam Questions and Free Practice Test

Question 7

You have many IAM users with the ability to create EC2 volumes. Most of the data your team works with is sensitive, so you would like to make sure all volumes are encrypted. How might you facilitate this requirement?

A. Create an AWS KMS policy and attach it to all IAM users that can create EC2 volumes

B. Use AWS Config and create a rule that requires all volumes, upon creation, be encrypted.

C. Use AWS Config to send out reminders to IAM users every time they create an EC2 volume.

D. Set EC2 to notify creators to encrypt their EC2 volume

Correct Answer:B
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html

Question 8

True or false: A VPC contains multiple subnets, where each subnet can span multiple Availability Zones.

A. This is true only for US regions.

B. This is false.

C. This is true.

D. This is true only if requested during the set-up of VP

Correct Answer:B
Reference:
https://aws.amazon.com/vpc/faqs/

Question 9

A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services does not provide detailed monitoring with CloudWatch?

A. AWS Route53

B. AWS EMR

C. AWS ELB

D. AWS RDS

Correct Answer:B
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

Question 10

When using AWS Config, which two items are stored on S3 as a part of its operation?

A. Configuration Items and Configuration History

B. Configuration Recorder and Configuration Snapshots

C. Configuration History and Configuration Snapshots

D. Configuration Snapshots and Configuration Streams

Correct Answer:C
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/config-concepts.html#config-items

Question 11

You can use the ______ command of the AWS Config service CLI to see the compliance state for each AWS resource of a specific type.

A. describe-compliance-by-resource

B. get-compliance-details-by-config-rule

C. describe-compliance-by-config-rule

D. get-compliance-details-by-config-rule

Correct Answer:A
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

Question 12

Which of the following types of contents cannot serve over HTTP or HTTPS in Amazon CloudFront?

A. Apple HTTP Live Streaming

B. Static and dynamic download content

C. Adobe Flash multimedia content

D. CloudFront RTMP distribution

Correct Answer:C
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-overview.html

START AWS-Certified-Advanced-Networking-Specialty EXAM