Sample Questions

Q) A company is planning on extending their on-premise AWS Infrastructure to the AWS Cloud. They need to have a solution that would give core benefits of traffic encryption and ensure latency is kept to a minimum Which of the following would help fulfill this requirement? Choose 2 answers from the options given below Please select:

a) AWS VPN

b) AWS VPC Peering

c) AWS NAT gateways

d) AWS Direct Connect

Q) How can you ensure that instance in an VPC does not use AWS DNS for routing DNS requests. You want to use your own managed DNS instance. How can this be achieved?

a) Change the existing DHCP options set

b) Create a new DHCP options set and replace the existing one

c) Change the route table for the VPC

d) change the subnet configuration to allow DNS requests from the new DNS Server

Q) A windows machine in one VPC needs to join the AD domain in another VPC. VPC Peering has been established. But the domain join is not working. What Is the other step that needs to be followed to ensure that the AD domain join can work as intended Please select:

a) Change the VPC peering connection to a VPN connection

b) Change the VPC peering connection to a Direct Connect connection

c) Ensure the security groups for the AD hosted subnet has the right rule for relevant subnets

d) Ensure that the AD is placed In a public subnet

Q) You need to have a cloud security device which would allow to generate encryption keys based on FIPS 140-2 Level 3. select Which of the following can be used for this purpose. ?

a) AWS KMS

b) AWS Customer Keys

c) AWS managed keys

d) AWS Cloud HSM

Q) You need to have a requirement to store objects in an 53 bucket with a key that is automatically managed and rotated. Which of the following can be used for this purpose?

a) AWS KMS

b) AWS S3 Server side encryption

c) AWS Customer Keys

d) AWS Cloud HSM