[2020.11] Latest updates Amazon Exam practice questions and tips
The most popular Amazon Practice question and tips.
(Amazon ANS-C00 dumps, Amazon CLF-C01 dumps, Amazon DAS-C01 dumps) Examdad shares the latest exam Practice question and answers for free.
The latest popular Amazon Cloud exam certification pass method:
https://www.leads4pass.com/amazon.html High pass rate! Cost-effective!
Table of Contents:
- Popular Amazon ANS-C00 dumps List
- Popular Amazon CLF-C01 dumps List
- Popular Amazon DAS-C01 dumps List
- Lead4Pass Amazon Discount Code
- About Lead4pass Brand Advantage
AWS Certified Advanced Networking – Specialty: https://aws.amazon.com/certification/certified-advanced-networking-specialty/
[2020.11] Popular Amazon ANS-C00 exam practice questions(1-5)
QUESTION 1
Your organization requires strict adherence to a change control process for its Amazon Elastic Compute Cloud (EC2)
and VPC environments. The organization uses AWS CloudFormation as the AWS service to control and implement
changes. Which combination of three services provides an alert for changes made outside of AWS CloudFormation?
(Choose three.)
A. AWS Config
B. AWS Simple Notification Service
C. AWS CloudWatch metrics
D. AWS Lambda
E. AWS CloudFormation
F. AWS Identify and Access Management
Correct Answer: BCD
QUESTION 2
A company\\’s IT Security team needs to ensure that all servers within an Amazon VPC can communicate with a list of
five approved external IPs only. The team also wants to receive a notification every time any server tries to open a
connection with a non-approved endpoint.
What is the MOST cost-effective solution that meets these requirements?
A. Add allowed IPs to the network ACL for the application server subnets. Enable VPC Flow Logs with a filter set to ALL.
Create an Amazon CloudWatch Logs filter on the VPC Flow Logs log group filtered by REJECT. Create an alarm for this
metric to notify the Security team.
B. Enable Amazon GuardDuty on the account and the specific region. Upload a list of allowed IPs to Amazon S3 and
link the S3 object to the GuardDuty trusted IP list. Configure an Amazon CloudWatch Events rule on all GuardDuty
findings to trigger an Amazon SNS notification to the Security team.
C. Add allowed IPs to the network ACL for the application server subnets. Enable VPC Flow Logs with a filter set to
REJECT. Set an Amazon CloudWatch Logs filter for the log group on every event. Create an alarm for this metric to
notify the Security team.
D. Enable Amazon GuardDuty on the account and specific region. Upload a list of allowed IPs to Amazon S3 and link
the S3 object to the GuardDuty threat IP list. Integrate GuardDuty with a compatible SIEM to report on every alarm from
GuardDuty.
Correct Answer: A
QUESTION 3
A Network Engineer needs to create a public virtual interface on the company\\’s AWS Direct Connect connection and
only import routes which originated from the same region as the Direct Connect location What action should accomplish
this?
A. Configure a prefix-list on the customer router containing the AWS IP address ranges for the specific region.
B. Configure a filter on the company\\’s router to only import routes with the 7224:8100 BGP community attribute.
C. Configure a filter on the company\\’s router to only import routes without a BGP community attribute and a maximum path length of 3.
D. Configure a filter in the console and only allow routes advertised by AWS without a BGP community attribute and a maximum path length of 3.
Correct Answer: A
QUESTION 4
An organization will be extending its existing on-premises infrastructure into the cloud. The design consists of a transit
VPC that contains stateful firewalls that will be deployed in a highly available configuration across two Availability Zones
for automatic failover.
What MUST be configured for this design to work? (Choose two.)
A. A different Autonomous System Number (ASN) for each firewall.
B. Border Gateway Protocol (BGP) routing
C. Autonomous system (AS) path prepending
D. Static routing
E. Equal-cost multi-path routing (ECMP)
Correct Answer: BE
QUESTION 5
A corporate network routing table contains 624 individual RFC 1918 and public IP prefixes. You have two AWS Direct
Connect connectors. You configure a private virtual interface on both connections to a virtual private gateway. The
virtual private gateway is not currently attached to a VPC. Neither BGP session will maintain the Established state on
the customer router. The AWS Management Console reports the private virtual interfaces as Down.
What could you do to address the problem so that the AWS Management Console reports the private virtual interface as
Available?
A. Attach the virtual private gateway to a VPC and enable route propagation.
B. Filter the public IP pre? xes on the corporate network from the private virtual interface.
C. Change the BGP advertisements from the corporate network to only be a default route.
D. Attach the second virtual interface to an alternative virtual private gateway. Correct Answer: D
[PDF q1 – q13] Free Amazon ANS-C00 pdf dumps download from Google Drive: https://drive.google.com/file/d/1B_eBjBOMm_7uwZ2qBSOU3hoTtKJbY8lg/
Full Amazon ANS-C00 brain dumps: https://www.leads4pass.com/aws-certified-advanced-networking-specialty.html (Total Questions: 348 Q&A)
Popular Amazon CLF-C01 dumps List
Latest Amazon CLF-C01 Exam Video
AWS Certified Cloud Practitioner：https://aws.amazon.com/certification/certified-cloud-practitioner/
[2020.11] Popular Amazon CLF-C01 exam practice questions (1-5)
QUESTION 1
A characteristic of edge locations is that they:
A. host Amazon EC2 instances are closer to users.
B. help lower latency and improve performance for users.
C. cache frequently changing data without reaching the origin server.
D. refresh data changes daily.
Correct Answer: C
Reference: https://www.edureka.co/community/600/what-is-an-edge-location-in-aws
QUESTION 2
The AWS Trusted Advisor checks include recommendations regarding which of the following? (Choose two.)
A. Information on Amazon S3 bucket permissions
B. AWS service outages
C. Multi-factor authentication enabled on the AWS account root user
D. Available software patches
E. Number of users in the account
Correct Answer: AC
Reference: https://aws.amazon.com/premiumsupport/technology/trusted-advisor/best-practice-checklist/
QUESTION 3
A customer is deploying a new application and needs to choose an AWS Region. Which of the following factors could
influence customer\\’s decision? (Choose two.)
A. Reduced latency to users
B. The application\\’s presentation in the local language
C. Data sovereignty compliance
D. Cooling costs in hotter climates
E. Proximity to the customer\\’s office for on-site visits
Correct Answer: AC
QUESTION 4
Which AWS service provides on-demand AWS security and compliance documentation?
A. AWS Directory Service
B. AWS Artifact
C. AWS Trusted Advisor
D. Amazon Inspector
Correct Answer: B
Reference: https://aws.amazon.com/artifact/#:~:text=AWS%20Artifact%20is%20your%20go,reports%20and%20select%20online%20agreements
QUESTION 5
Which Amazon RDS feature can be used to achieve high availability?
A. Multiple Availability Zones
B. Amazon Reserved Instances
C. Provisioned IOPS storage
D. Enhanced monitoring
Correct Answer: A
Amazon RDS provides high availability and failover support for DB instances using Multi-AZ deployments. Amazon RDS
uses several different technologies to provide failover support. Multi-AZ deployments for Oracle, PostgreSQL, MySQL,
and MariaDB DB instances use Amazon\\’s failover technology. SQL Server DB instances use SQL Server Database
Mirroring (DBM).
Reference: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.MultiAZ.html
[PDF q1 – q13] Free Amazon CLF-C01 pdf dumps download from Google Drive: https://drive.google.com/file/d/1jJBwlWmxy1Ilr6M4KVoFj4_n1amuUZKt/
Full Amazon CLF-C01 brain dumps: https://www.leads4pass.com/aws-certified-cloud-practitioner.html (Total Questions: 623 Q&A)
Popular Amazon DAS-C01 dumps List
Latest Amazon DAS-C01 Exam Video
AWS Certified Data Analytics – Specialty Certification：https://aws.amazon.com/certification/certified-data-analytics-specialty/
[2020.11] Popular Amazon DAS-C01 exam practice questions (1-5)
QUESTION 1
A retail company\\’s data analytics team recently created multiple product sales analysis dashboards for the average
selling price per product using Amazon QuickSight. The dashboards were created from .csv files uploaded to Amazon
S3. The team is now planning to share the dashboards with the respective external product owners by creating
individual users in Amazon QuickSight. For compliance and governance reasons, restricting access is a key
requirement. The product owners should view only their respective product analysis in the dashboard reports.
Which approach should the data analytics team take to allow product owners to view only their products in the
dashboard?
A. Separate the data by product and use S3 bucket policies for authorization.
B. Separate the data by product and use IAM policies for authorization.
C. Create a manifest file with row-level security.
D. Create dataset rules with row-level security.
Correct Answer: B
QUESTION 2
A large company has a central data lake to run analytics across different departments. Each department uses a
separate AWS account and stores its data in an Amazon S3 bucket in that account. Each AWS account uses the AWS
Glue Data Catalog as its data catalog. There are different data lake access requirements based on roles. Associate
analysts should only have read access to their departmental data. Senior data analysts can have access to multiple
departments including theirs, but for a subset of columns only.
Which solution achieves these required access patterns to minimize costs and administrative tasks?
A. Consolidate all AWS accounts into one account. Create different S3 buckets for each department and move all the
data from every account to the central data lake account. Migrate the individual data catalogs into a central data catalog
and apply fine-grained permissions to give to each user the required access to tables and databases in AWS Glue and
Amazon S3.
B. Keep the account structure and the individual AWS Glue catalogs on each account. Add a central data lake account
and use AWS Glue to catalog data from various accounts. Configure cross-account access for AWS Glue crawlers to
scan the data in each departmental S3 bucket to identify the schema and populate the catalog. Add the senior data
analysts into the central account and apply highly detailed access controls in the Data Catalog and Amazon S3.
C. Set up an individual AWS account for the central data lake. Use AWS Lake Formation to catalog the cross-account
locations. On each individual S3 bucket, modify the bucket policy to grant S3 permissions to the Lake Formation service-linked role. Use Lake Formation permissions to add fine-grained access controls to allow senior analysts to view specific
tables and columns.
D. Set up an individual AWS account for the central data lake and configure a central S3 bucket. Use an AWS Lake
Formation blueprint to move the data from the various buckets into the central S3 bucket. On each individual bucket,
modify the bucket policy to grant S3 permissions to the Lake Formation service-linked role. Use Lake Formation
permissions to add fine-grained access controls for both associate and senior analysts to view specific tables and
columns.
Correct Answer: B
QUESTION 3
Once a month, a company receives a 100 MB .csv file compressed with gzip. The file contains 50,000 property listing
records and is stored in Amazon S3 Glacier. The company needs its data analyst to query a subset of the data for a
specific vendor.
What is the most cost-effective solution?
A. Load the data into Amazon S3 and query it with Amazon S3 Select.
B. Query the data from Amazon S3 Glacier directly with Amazon Glacier Select.
C. Load the data to Amazon S3 and query it with Amazon Athena.
D. Load the data to Amazon S3 and query it with Amazon Redshift Spectrum.
Correct Answer: C
Reference: https://aws.amazon.com/athena/faqs/
QUESTION 4
A manufacturing company has been collecting IoT sensor data from devices on its factory floor for a year and is storing
the data in Amazon Redshift for daily analysis. A data analyst has determined that, at an expected ingestion rate of
about 2 TB per day, the cluster will be undersized in less than 4 months. A long-term solution is needed. The data
analyst has indicated that most queries only reference the most recent 13 months of data, yet there are also quarterly
reports that need to query all the data generated from the past 7 years. The chief technology officer (CTO) is concerned
about the costs, administrative effort, and performance of a long-term solution.
Which solution should the data analyst use to meet these requirements?
A. Create a daily job in AWS Glue to UNLOAD records older than 13 months to Amazon S3 and delete those records
from Amazon Redshift. Create an external table in Amazon Redshift to point to the S3 location. Use Amazon Redshift
Spectrum to join data that is older than 13 months.
B. Take a snapshot of the Amazon Redshift cluster. Restore the cluster to a new cluster using dense storage nodes with
additional storage capacity.
C. Execute a CREATE TABLE AS SELECT (CTAS) statement to move records that are older than 13 months to
quarterly partitioned data in Amazon Redshift Spectrum backed by Amazon S3.
D. Unload all the tables in Amazon Redshift to an Amazon S3 bucket using S3 Intelligent-Tiering. Use AWS Glue to
crawl the S3 bucket location to create external tables in an AWS Glue Data Catalog. Create an Amazon EMR cluster
using Auto Scaling for any daily analytics needs, and use Amazon Athena for the quarterly reports, with both using the
same AWS Glue Data Catalog.
Correct Answer: B
QUESTION 5
A financial company uses Apache Hive on Amazon EMR for ad-hoc queries. Users are complaining of sluggish
performance.
A data analyst notes the following:
Approximately 90% of the queries are submitted 1 hour after the market opens. Hadoop Distributed File System (HDFS)
utilization never exceeds 10%.
Which solution would help address the performance issues?
A. Create instance fleet configurations for core and task nodes. Create an automatic scaling policy to scale out the
instance groups based on the Amazon CloudWatch CapacityRemainingGB metric. Create an automatic scaling policy to
scale in the instance fleet based on the CloudWatch CapacityRemainingGB metric.
B. Create instance fleet configurations for core and task nodes. Create an automatic scaling policy to scale out the
instance groups based on the Amazon CloudWatch YARNMemoryAvailablePercentage metric. Create an automatic
scaling policy to scale in the instance fleet based on the CloudWatch YARNMemoryAvailablePercentage metric.
C. Create instance group configurations for core and task nodes. Create an automatic scaling policy to scale out the
instance groups based on the Amazon CloudWatch CapacityRemainingGB metric. Create an automatic scaling policy to
scale in the instance groups based on the CloudWatch CapacityRemainingGB metric.
D. Create instance group configurations for core and task nodes. Create an automatic scaling policy to scale out the
instance groups based on the Amazon CloudWatch YARNMemoryAvailablePercentage metric. Create an automatic
scaling policy to scale in the instance groups based on the CloudWatch YARNMemoryAvailablePercentage metric.
Correct Answer: C
[PDF q1 – q13] Free Amazon DAS-C01 pdf dumps download from Google Drive: https://drive.google.com/file/d/1SBtAYu3S8dc7a3iiAGAF36RHhwH02Rsx/
Full Amazon DAS-C01 brain dumps: https://www.leads4pass.com/das-c01.html (Total Questions: 77 Q&A)
Lead4Pass Discount Code 2020
About Lead4pass Brand Advantage
Lead4pass employs the most authoritative exam specialists from Amazon, Cisco, Microsoft, HP, CompTIA etc.
We update exam data throughout the year. Highest pass rate! We have a large user base. We are the industry leader!
Choose Lead4Pass to pass the exam with ease!
Summarize:
It’s not easy to pass exam, but with accurate learning materials and proper practice, you can crack the exam with excellent results. https://www.leads4pass.com/amazon.html provides you with the most relevant learning materials that you can use to help you prepare.
ps.
Get Amazon Full Series Exam Dumps: https://www.exammarkers.com/?s=Amazon (Updated daily)