A Systems Administrator is designing a hybrid DNS solution with spilt-view. The apex-domain
"example.com" should be served through name servers across multiple top-level domains (TLDs). The name server for subdomain "dev.example.com" should reside on-premises. The administrator has decided to use Amazon Route 53 to achieve this scenario.
What procedurals steps must be taken to implement the solution?

• A.Use a Route 53 public hosted zone for example.com and a private hosted zone for dev.example.com
• B.Use a Route 53 public hosted zone for example.com and perform subdomain delegation for dev.example.com
• C.Use a Route 53 public and private hosted zone for example.com and perform subdomain delegation for dev.example.com
• D.Use a Route 53 private hosted zone for example.com and perform subdomain delegation for dev.example.com

Comment: *

Name: *

Email: *

Verification: *

A company has 225 mobile and desktop devices and 300 partner VPNs that need access to an AWS VPC.
VPN users should not be able to reach one another. Which approach will meet the technical and security requirements while minimizing costs?

• A.Use an Amazon EC2 instance VPN for the desktop, mobile, and partner VPN connections. Use features of the VPN instance to limit routing and connectivity.
• B.Create an AWS Direct Connect connection between on-premises and AWS Use a public virtual interface to connect to the AWS IPsec VPN for the mobile, desktop, and partner VPN connections.
• C.Use the AWS IPsec VPN for the partner VPN connections. Use an Amazon EC2 instance VPN for the mobile and desktop devices. Use Network ACLs and security groups to maintain routing separation.
• D.Use the AWS IPsec VPN for the mobile, desktop, and partner VPN connections. Use network access control lists (Network ACLs) and security groups to maintain routing separation.

Comment: *

Name: *

Email: *

Verification: *

What service is used to store the log files generated by CloudTrail?

• A.EC2
• B.EBS
• C.S3
• D.VPC

Comment: *

Name: *

Email: *

Verification: *

A company has a VPC in the us-west-1 Region and another VPC in the ap-southeast-2 Region Network engineers set up an AWS Direct Connect connection from their data center to the us-east-1 Region They create a private virtual interface (VIF) that references a Direct Connect gateway, which is then connected to virtual private gateways in both VPCs When the setup is complete, the engineers cannot access resources in us-west-1 from ap-southeast-2 What should the network engineers do to resolve this issued

• A.Establish a VPC peering connection between the VPCs in ap-southeast-2 and us-west-2 Add the subnet ranges to the routing tables
• B.Create static routes in each VPC that point to the destination VPC with the virtual private gateway as the route target
• C.Configure the Direct Connect gateway to route traffic between the VPCs in ap-southeast-2 and us-west-2
• D.Add the subnet range for the VPCs in us-west-1 and ap-southeast-2 to the route tables for both VPCs Add the Direct Connect gateway as a target

Comment: *

Name: *

Email: *

Verification: *

The IPsec protocol suite is made up of various components covering aspects such as confidentiality, encryption, and integrity. Select the correct statement below regarding the correct configuration options for ensure IPsec confidentiality:

• A.The following protocols may be used to configure IPsec confidentiality, DES, 3DES, MD5
• B.The following protocols may be used to configure IPsec confidentiality, DES, 3DES, AES
• C.The following protocols may be used to configure IPsec confidentiality, PSK, RSA
• D.The following protocols may be used to configure IPsec confidentiality, PSK, MD5
• E.The following protocols may be used to configure IPsec confidentiality, PSK, RSA

Comment: *

Name: *

Email: *

Verification: *