An AWS CloudTrail log file provides the identity and source IP address of the API caller, and a time of the API call, request parameters, and ____.

• A.response elements
• B.event selectors
• C.port alarms
• D.destination buckets

Comment: *

Name: *

Email: *

Verification: *

You have a static VPN connecting your data center and your VPC. You currently have 50 routes added to your route table. You want to add more; how should you do this? Choose the correct answer:

• A.50 is the most you can have for any connection.
• B.Just add them, you have a maximum of 100 static routes per route table.
• C.Set up Direct Connect. A VPN will not support more routes.
• D.Convert your VPN to a dynamic VPN and use BGP.

Comment: *

Name: *

Email: *

Verification: *

A VPC is deployed with a 10 0 0.0/16 CIDR block. The engineering team is reviewing DHCP options and there is disagreement about the valid DNS addresses available for the VPC Which addresses are valid IP addresses provided by Amazon for this subnet' (Select TWO.)

• A.8.8.8.8
• B.10.00.2
• C.10.1.0.2
• D.169.254.169.253
• E.169.254.169.254

Comment: *

Name: *

Email: *

Verification: *

A manufacturing company has a hybrid environment that includes an AWS Direct Connect gateway that is associated with an AWS Transit Gateway The company wants to extend a third-party application that is hosted in its on-premises data center into one of its VPCs The application vendor has stated that It must use an overlay IP address to meet the company's requirement for high availability. The DHCP administrator has assigned a non-overlapping RFC1918 private address for use as the overlay IP address The security team requires connectivity to remain private Which solution meets these requirements with the LEAST management overhead''

• A.Create a transit VIF Then create static routes in the transit gateway route table to point to the VPC that contains the overlay IP address Create static routes in the VPC route table that point to the transit gateway Update the route tables on premises as needed
• B.Create a transit VIF with automatically propagated routes in the transit gateway route table Create a new subnet in the VPC for the overlay IP address, and propagate the route to the VPC route table. Update the route tables on premises as needed.
• C.Create a layer 2 VPN across a public VIF by using a software-based VPN on a pair of Amazon EC2 instances Use BGP to advertise the routes over the VPN
• D.Create an external Network Load Balancer by using Amazon Route 53 to create records that point to the target application's overlay IP address. Create static entries in the VPC route table

Comment: *

Name: *

Email: *

Verification: *

An organization has multiple applications running in VPCs across multiple AWS accounts. The network engineer has deployed a central VPC with a pair of software VPN instances that run IPSec tunnels with dynamic routing to VGWs of all application VPCs. This central VPC is connected to on-premises resources via a Direct Connect connection using a private VIF.
What additional configuration is required to enable the applications in VPCs to communicate with each other and access on-premises resources?

• A.Configure the central VPC with a static route entry pointing the on-premises CIDR block to local VGWs.
• B.Configure IPSec tunnels from the on-premises router into the software VPN instances with dynamic routing.
• C.Advertise all application VPC CIDR blocks to on-premises resources via the VGW in the central VPC.
• D.Configure each application VPC with a static route entry pointing the on-premises CIDR block to the software VPN instances.

Comment: *

Name: *

Email: *

Verification: *