Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Advanced Network Specialist > Network Specialist All > Flashcards

Network Specialist All Flashcards

1
Q

What is required to send VPC Flow Logs to CloudWatch?

A

IAM Role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

3 Types of Placement Groups?

A

• Cluster – clusters instances into a low-latency group in a single Availability Zone
• Partition – spreads instances across logical partitions, ensuring that instances in one partition do not share underlying hardware with instances in other partitions
Spread – spreads instances across underlying hardware

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Is CloudWatch supported for NAT GW?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Interface VPC Endpoint

A
  1. One interface per Avail Zone
  2. No endpoint policy support
  3. Access from direct connect but not from VPN GW
  4. Use endpoint specifc DNS name or route 53 private hosted
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

GW VPC Endpoint

A
  1. Supports multiple avail zones
  2. Uses routing table ID instead of DNS
  3. Pollicy is supported
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What IP addresses can reach the public VIF of a customer router connected to direct connect?

A

All Amazon owned addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Max Number of peering sessions per VPC

A

125

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Number of Transit GW connections per DC GW

A

3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Can you access a Interface GW from DC?

A

No, only interface endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Can you enable private hostname for DMS endpoint?

A

Yes. Then it can be accessed with https://kms..amazonaws.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Does ALB support on premise targets?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does VPC endpoint policy require?

A
  1. The principal that can perform actions
  2. The actions that can be performed
  3. The resources on which actions can be performed
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What VPC endpoint operations does CloudTrial logs not support?

A

Principles in other accounts or operations from other accounts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

With ALB is cross-zone load-balancing enabled by default?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

With NLB is cross-zone load-balancing enabled by default?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

From within a VPC what is returned if the the public route53 DNS name is queried?

A

Private IP address

17
Q

How many available IP addresses are required for Internet facing load-balancers?

A

8

18
Q

Is it possible to create NS records in a private hosted zone to delegate a subdomain?

A

No

19
Q

Number of VIFs support per DC connection?

A

50

20
Q

How many VGW’s can a DC gateway connect to?

A

10

21
Q

Can VPC’s connected with VGW’s through DC GW communicate over the connection?

A

No

22
Q

Limit of CIDR advertisements through a transit VIF?

A

20

23
Q

Can route 53 DNS health checkers check private addresses?

A

No. Instance must have public address

24
Q

Are multiple VGW per VPC allowed?

A

Yes

25
Q

Can VGW have more than a single BGP peer?

A

No

26
Q

Number of VIFs per DC GW

A

30

27
Q

Can ALB use KMS?

A

No

28
Q

When to move private keys from site to AWS?

A

Never

29
Q

How many fields can Cloudfront encrypt without using Lambda@Edge?

A

CloudFront can protect a maximum of 10 fields and only within HTTP(S) POST requests that carry HTML form encoded payloads.

30
Q

What is the only required section in a CloudFormation Template?

A

Resources

31
Q

What CloudFormation function returns array of CIDR ranges

A

Fn::Cidr

32
Q

What is required for CloudFormation template in order to peer VPC’s from different accounts?

A

The VPC account being peered to needs a role for peering VPC. That must be reference in template

33
Q

What must be turned on to complete config rule in CF t template?

A

Recorder

AWS Advanced Network Specialist (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions