A company has recently established an AWS Direct Connect connection from its on-premises data center to AWS. A Network Engineer has blocked all traffic destined for Amazon S3 over the company's gateway to the internet from its on-premises firewall. S3 traffic should only traverse the Direct Connect connection. Currently, no one in the on-premises data center can access Amazon S3.
Which solution will resolve this connectivity issue?

• A.Configure a private virtual interface on the Direct Connect connection.
  Update the on-premises routing tables to choose Direct Connect as the preferred next hop for traffic destined for Amazon S3.
• B.Establish an S3 VPC endpoint for the company's Amazon VPC.
  Configure a private virtual interface on the Direct Connect connection.
  Update the on-premises routing tables to choose Direct Connect as the preferred next hop
• C.Configure a public virtual interface on the Direct Connect connection.
  Update the on-premises routing tables to choose Direct Connect as the preferred next hop for traffic destined for Amazon S3.
• D.Configure a public virtual interface on the Direct Connect connection.
  Establish an AWS managed VPN over the connection.
  Update the on-premises routing tables to choose the VPN connection as the preferred next hop.

Comment: *

Name: *

Email: *

Verification: *

Your company uses an NTP server to synchronize time across systems. The company runs multiple versions of Linux and Windows systems. You discover that the NTP server has failed, and you need to add an alternate NTP server to your instances.
Where should you apply the NTP server update to propagate information without rebooting your running instances?

• A.cfn-init scripts
• B.DHCP Options Set
• C.instance user-data
• D.instance meta-data

Comment: *

Name: *

Email: *

Verification: *

What are two reasons to have multiple IP addresses or interfaces on one server? Choose the 2 correct answers:

• A.You can host multiple SSLs
• B.Create management networks
• C.Direct Connect connections
• D.Teaming multiple NICs for more throughput

Comment: *

Name: *

Email: *

Verification: *

An organization is using a VPC endpoint for Amazon S3. When the security group rules for a set of instances were initially configured, access was restricted to allow traffic only to the IP addresses of the Amazon S3 API endpoints in the region from the published JSON file. The application was working properly, but now is logging a growing number of timeouts when connecting with Amazon S3. No internet gateway is configured for the VPC.
Which solution will fix the connectivity failures with the LEAST amount of effort?

• A.Create a Lambda function to update the security group based on AmazonIPSpaceChanged notifications.
• B.Update the VPC routing to direct Amazon S3 prefix-list traffic to the VPC endpoint using the route table APIs.
• C.Update the application server's outbound security group to use the prefix-list for Amazon S3 in the same region.
• D.Create an additional VPC endpoint for Amazon S3 in the same route table to scale the concurrent connections to Amazon.

Comment: *

Name: *

Email: *

Verification: *

You have a global corporate network with 153 individual IP prefixes in your internal routing table. You establish a private virtual interface over AWS Direct Connect to a VPC that has an Internet gateway (IGW). All instances in the VPC must be able to route to the Internet via an IGW and route to the global corporate network via the VGW.
How should you configure your on-premises BGP peer to meet these requirements?

• A.Summarize your prefix announcement to less than 100
• B.Configure AS-Prepending on your BGP session
• C.Enable route propagation on the VPC route table
• D.Announce a default route to the VPC over the BGP session

Comment: *

Name: *

Email: *

Verification: *