Free ANS-C00 Amazon ANS-C00 Practice Test Question - Page 11

Question 31 (Topic 1)

A user has enabled detailed CloudWatch monitoring with the AWS Simple Notification Service. Which of the below mentioned statements helps the user understand detailed monitoring better?

Select an option, then click Submit answer.

○ SNS cannot provide data every minute
○ There is no need to enable since SNS provides data every minute
○ SNS will send data every minute after configuration
○ AWS CloudWatch does not support monitoring for SNS

Reference / correct answer:

There is no need to enable since SNS provides data every minute

Most accepted answer: B. There is no need to enable since SNS provides data every minute

Community votes: B=1

The answer is B. https://docs.aws.amazon.com/sns/latest/dg/sns-monitoring-using-cloudwatch.html The metrics you configure with CloudWatch for your Amazon SNS topics are automatically collected and pushed to CloudWatch at 1-minute intervals. upvoted 10 times ChauPhan 4 years, 9 months ago Agree. That's what B means: there is no need to enable detail monitor at CW as SNS sends metric every minute upvoted 1 times jithin1234 4 years, 9 months ago question is old. SNS now supports 1-minute CloudWatch metrics from Jan 29, 2021. so answer should be A upvoted 6 times ... ...

Agree. That's what B means: there is no need to enable detail monitor at CW as SNS sends metric every minute upvoted 1 times jithin1234 4 years, 9 months ago question is old. SNS now supports 1-minute CloudWatch metrics from Jan 29, 2021. so answer should be A upvoted 6 times ...

question is old. SNS now supports 1-minute CloudWatch metrics from Jan 29, 2021. so answer should be A upvoted 6 times

I think A is correct ,as SNS sends data every 5 min. earlier as per 2019 AWS patters. And now it supports data every minute. Not sure if AWS exam has revised and updated the exam. upvoted 6 times

Selected Answer: B The Answer is the B. https://docs.aws.amazon.com/sns/latest/dg/sns-monitoring-using-cloudwatch.html "The metrics you configure with CloudWatch for your Amazon SNS topics are automatically collected and pushed to CloudWatch at 1-minute intervals." upvoted 1 times

Question 32 (Topic 1)

You have an application that is processing confidential data. The data is currently stored in your data center. You are moving workloads to AWS, and you need to ensure confidentiality and integrity of the data in transit to your VPC. Your company has an existing AWS Direct Connect connection. What combination of steps should you perform to set up the most cost-effective connection between your on-premises data center and AWS? (Choose three.)

Select an option, then click Submit answer.

○ Set up a VPC with a virtual private gateway.
○ Set up a VPC with an Internet gateway.
○ Configure a public virtual interface on your Direct Connect connection.
○ Configure a private virtual interface to the virtual private gateway.
○ Set up an IPsec tunnel between your customer gateway and a software VPN on Amazon EC2 in the VPC.
○ Set up an IPsec tunnel between your customer gateway appliance and the virtual private gateway.

Reference / correct answer:

Set up a VPC with a virtual private gateway.

Most accepted answer: A. Set up a VPC with a virtual private gateway.

Community votes: A=1, D=1, E=1

Keyword is " most cost-effective connection". So ACF should be right answer. upvoted 13 times jithin1234 4 years, 9 months ago why do you want to choose public VIF? in question it mentioned, "confidentiality and integrity of the data". so in my opinion, it's ADE upvoted 1 times walkwolf3 4 years, 9 months ago One more proof https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-direct-connect-vpn.html upvoted 2 times ... Homosapien 4 years, 9 months ago Both Public and Private VIF are not encrypted. You need to use a VPN tunnel to secure your connection. To use AWS VPN Site-To-Site you need to use a public VIF. If you are using a software VPN hosted on EC2 then you use a private VIF. However software VPN are more costly than using AWS Site-To-Site. upvoted 4 times ... wahlbergusa 4 years, 9 months ago Cause "confidentiality and integrity" refers to an IPSEC VPN Tunnel. And if you want to setup an IPSEC VPN over Direct Connect between a VGW and CGW then it is supported only through Public VIF. => https://aws.amazon.com/premiumsupport/knowledge-center/create-vpn-direct-connect/ Having said that ADE could be an option for being cheaper however I still have doubts on "D" cause it does not explicitly mention Direct Connect in the sentence. (compared to C) upvoted 2 times ... ...

why do you want to choose public VIF? in question it mentioned, "confidentiality and integrity of the data". so in my opinion, it's ADE upvoted 1 times walkwolf3 4 years, 9 months ago One more proof https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-direct-connect-vpn.html upvoted 2 times ... Homosapien 4 years, 9 months ago Both Public and Private VIF are not encrypted. You need to use a VPN tunnel to secure your connection. To use AWS VPN Site-To-Site you need to use a public VIF. If you are using a software VPN hosted on EC2 then you use a private VIF. However software VPN are more costly than using AWS Site-To-Site. upvoted 4 times ... wahlbergusa 4 years, 9 months ago Cause "confidentiality and integrity" refers to an IPSEC VPN Tunnel. And if you want to setup an IPSEC VPN over Direct Connect between a VGW and CGW then it is supported only through Public VIF. => https://aws.amazon.com/premiumsupport/knowledge-center/create-vpn-direct-connect/ Having said that ADE could be an option for being cheaper however I still have doubts on "D" cause it does not explicitly mention Direct Connect in the sentence. (compared to C) upvoted 2 times ...

One more proof https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-direct-connect-vpn.html upvoted 2 times

Both Public and Private VIF are not encrypted. You need to use a VPN tunnel to secure your connection. To use AWS VPN Site-To-Site you need to use a public VIF. If you are using a software VPN hosted on EC2 then you use a private VIF. However software VPN are more costly than using AWS Site-To-Site. upvoted 4 times

Cause "confidentiality and integrity" refers to an IPSEC VPN Tunnel. And if you want to setup an IPSEC VPN over Direct Connect between a VGW and CGW then it is supported only through Public VIF. => https://aws.amazon.com/premiumsupport/knowledge-center/create-vpn-direct-connect/ Having said that ADE could be an option for being cheaper however I still have doubts on "D" cause it does not explicitly mention Direct Connect in the sentence. (compared to C) upvoted 2 times

Question 33 (Topic 1)

Which of the following statements is true of AWS Elastic Beanstalk?

Select an option, then click Submit answer.

○ AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, meaning CloudWatch costs are applied to your AWS account for any alarms that you use.
○ AWS Elastic Beanstalk uses CloudWatch for monitoring and alarms, and both are free of charge.
○ AWS Elastic Beanstalk doesn't use CloudWatch for monitoring and alarms, but you pay extra for any AWS Elastic Beanstalk Alarm you set in the monitoring tool.
○ AWS Elastic Beanstalk has its own free-of-charge monitoring tool, and you are not charged for the alarm you set.

Free ANS-C00 – Amazon ANS-C00 Practice Test Question