AWS ANS-C00 Certified Advanced Networking Practice Questions 2023 - Part 21

1. You need to have a managed threat detection service that continuously monitors for malicious or unauthorized behavior against your EC2 Instances. Which of the following can help in such a requirement?

A) Amazon Cloud Trail
B) Amazon Guard Duty
C) Amazon VPC Flow Logs
D) Amazon Cloud watch Logs



2. There is a requirement to see all port scans which are occurring on a couple of EC2 instances. Which of the following can be used for such a requirement?

A) AWS VPC Flow Logs
B) AWS Trusted Advisor
C) AWS Cloud watch Events
D) AWS Inspector



3. Your company has setup a Classic Load Balancer with EC2 Instances behind them. These EC2 Instances are spun up via an Auto scaling group. In your company there is normally a spike in traffic in the beginning and end of the day. The ELB and Auto scaling Groups have been created with the default settings. It has been noticed that there are timeouts or partially rendered pages at times. How can this be resolved?

A) Change the Connection Draining timeout in the ELB
B) Enable Cross Zone Load Balancing
C) Change the maximum number of instances setting in the Auto scaling Group
D) Add another Auto scaling group to the ELB



4. You have established a VPN connection between your on-premise and an AWS(Amazon Web Service) VPC. You need to also ensure that instances in the VPC can reach the Internet so you have also attached an Internet gateway. How would you setup the route tables to ensure traffic can flow via the VPN and the Internet?

A) Setup one route table. Add one route of 0.0.0.0/0 to the Internet and another route of 0.0.0.0/0 route for the Virtual Private gateway. Attach the Route table to the subnets In the VPC.
B) Setup 2 Route tables. One route table with a default route to the Internet and another one with the default route to the Virtual Private gateway. Attach the Route tables to the sub nets In the VPC.
C) Setup one route table. Add one route of 0.0.0.0/0 to the Internet and one specific prefix route for the Virtual Private gateway. Attach the Route table to the subnets in the VPC.
D) Setup 2 Route tables. One route table with a default route to the Internet and another one with the s prefix route to the Virtual Private gateway. Attach the Route tables to the subnets in the VPC.



5. You have configured a hosted zone in Route 53. You need to have the ability to see the types of records being requested to the zone. How can you configure this?

A) Configure Cloud trail
B) Configure VPC Flow Logs
C) Configure Cloud watch metrics
D) Configure Amazon Route 53 logging