← Back to exam page

Free ANS-C00 – Amazon ANS-C00 Practice Test Question

Loading demo links...

Showing 7–9 of 38 questions

Question 7 (Topic 1)

A company has an application running on Amazon EC2 instances in a private subnet that connects to a third-party service provider's public HTTP endpoint through a NAT gateway. As request rates increase, new connections are starting to fail. At the same time, the ErrorPortAllocation Amazon CloudWatch metric count for the NAT gateway is increasing. Which of the following actions should improve the connectivity issues? (Choose two.)

Select an option, then click Submit answer.

  • ○ Allocate additional Elastic IP addresses to the NAT gateway.
  • ○ Request that the third-party service provider implement HTTP keepalive.
  • ○ Implement TCP keepalive on the client instances.
  • ○ Create additional NAT gateways and update the private subnet route table to introduce the new NAT gateways.
  • ○ Create additional NAT gateways in the public subnet and split client instances into multiple private subnets, each with a route to a different NAT gateway.
Question 8 (Topic 1)

A Network Engineer has enabled VPC Flow Logs to troubleshoot an ICMP reachability issue for an echo reply from an Amazon EC2 instance. The flow logs reveal an ACCEPT record for the request from the client to the EC2 instance, and a REJECT record for the response from the EC2 instance to the client. What is the MOST likely reason for there to be a REJECT record?

Select an option, then click Submit answer.

  • ○ The security group is denying inbound ICMP.
  • ○ The network ACL is denying inbound ICMP.
  • ○ The security group is denying outbound ICMP.
  • ○ The network ACL is denying outbound ICMP.
Question 9 (Topic 1)

A network architect is designing a website. It has web, application, and database tiers that will run in AWS. The website uses Amazon DynamoDB. Which architecture will minimize public exposure of the backend instances?

Select an option, then click Submit answer.

  • ○ A VPC with public subnets for the NLB, public subnets for the web tier, private subnets for the application tier, and private subnets for DynamoDB.
  • ○ A VPC with public subnets for the ALB, private subnets for the web tier, and private subnets for the application tier. The application tier connects DynamoDB through a VPC endpoint.
  • ○ A VPC with public subnets for the ALB, public subnets for the web tier, private subnets for the application tier, and private subnets for DynamoDB.
  • ○ A VPC with public subnets for the NLB, private subnets for the web tier, and public subnets for the application tier. The application tier connects DynamoDB through a VPC endpoint.