Instant Access Amazon.ANS-C00.v2023-05-08.q132 Actual Practice Test Engine for Free (Page 4)

40%off

ANS-C00 Premium Dumps

Latest ANS-C00 Exam Premium Dumps provide by TrainingQuiz.com to help you Passing ANS-C00 Exam! TrainingQuiz.com offers the updated ANS-C00 exam dumps, the TrainingQuiz.com ANS-C00 exam questions has been updated to correct Answer. Get the latest TrainingQuiz.com ANS-C00 pdf dumps with Exam Engine here:

(156 Q&As Dumps, 40%OFF Special Discount: DumpsDB)

Question 11

You need to set up a VPN between AWS VPC and your on-premises network. You create a VPN connection in the AWS Management Console, download the configuration file, and install it on your on-premises router.
The tunnel is not coming up because of firewall restrictions on your router. Which two network traffic options should you allow through the firewall? (Select two.)

A.UDP port 500
B.IP protocol 50
C.IP protocol 5
D.TCP port 50
E.TCP port 500

Question 12

What are two routing methods used by Route 53?
Choose the 2 correct answers:

A.RIP
B.Failover
C.Latency
D.AS_PATH

Question 13

A company is using AWS to host all of its applications. Each application is isolated in its own Amazon VPC.
Different environments such as Development, Test, and Production are also isolated in their own VPCs. The Network Engineer needs to automate VPC creation to enforce the company's network and security standards.
Additionally, the CIDR range used in each VPC needs to be unique.
Which solution meets all of these requirements?

A.Use the VPC wizard in the AWS Management Console. Type in the CIDR blocks for the VPC and subnets.
B.Use AWS CloudFormation to deploy the VPC infrastructure and a custom resource to request a CIDR range from an external IP address management (IPAM) service.
C.Create the VPCs using AWS CLI and use the dry-run flag to validate if the current CIDR range is in use.
D.Use AWS OpsWorks to deploy the VPC infrastructure and a custom resource to request a CIDR range from an external IP address management (IPAM) service.

Question 14

Your AWS WorkSpaces users are unable to authenticate. What could be one reason for this?
Choose the correct answer:

A.Your AD server is running Windows Server 2016
B.Port 3389 is not open to your AD server.
C.Port 389 is not open to your AD server.
D.Your AD server is running Windows Server 2012 Core Edition.

Question 15

A company has 225 mobile and desktop devices and 300 partner VPNs that need access to an AWS VPC.
VPN users should not be able to reach one another. Which approach will meet the technical and security requirements while minimizing costs?

A.Use an Amazon EC2 instance VPN for the desktop, mobile, and partner VPN connections. Use features of the VPN instance to limit routing and connectivity.
B.Create an AWS Direct Connect connection between on-premises and AWS Use a public virtual interface to connect to the AWS IPsec VPN for the mobile, desktop, and partner VPN connections.
C.Use the AWS IPsec VPN for the partner VPN connections. Use an Amazon EC2 instance VPN for the mobile and desktop devices. Use Network ACLs and security groups to maintain routing separation.
D.Use the AWS IPsec VPN for the mobile, desktop, and partner VPN connections. Use network access control lists (Network ACLs) and security groups to maintain routing separation.