1. A Company currently uses the Net Flow software to monitor and get the details of the traffic that flows between systems in their On-premise network. They want to have the same ability when they start moving their servers to AWS. Which of the following service can help them meet this requirement?

A) AWS Cloud watch logs
B) AWS Config
C) AWS Cloud watch metrics
D) AWS VPC Flow Logs



2. Your company is planning on trying out AWS(Amazon Web Service) Workspaces for 100 users. They want to use a directory service along with AWS(Amazon Web Service) workspaces. Which of the following would be the ideal option which will have a least administrative overhead and also be cost effective?

A) Choose Simple AD to use along with AWS(Amazon Web Service) Workspaces
B) Deploy an AD domain server in a VPC and configure AWS(Amazon Web Service) Workspace to use the newly created AD Domain server
C) Choose AWS(Amazon Web Service) Directory Service to use along with AWS(Amazon Web Service) Workspaces
D) Choose an AD connector to use along with AWS(Amazon Web Service) Workspaces



3. You have a set of Instances in your VPC that communicate over the lPv6 protocol. You need to ensure that traffic can flow from the Instances to the Internet but not vice versa. How ca you achieve this?

A) Use an Egress only Internet gateway
B) Change the Internet gateway to only allow outbound traffic for lPvG
C) Change the Security Groups to not allow Inbound Traffic on the Instances
D) Change the NACL?s to not allow Inbound Traffic on the Instances



4. Your company currently has a VPC defined as 10.0.0.0/16. Subnets are defined in this VPC along with Instances created in the subnet. You need to ensure that resources In the VPC can resolve your on-premise DNS resources. How can you achieve this? Choose 2 answers from the options given below.(Select 2answers)

A) Configure DHCP Options for your VPC to point to the EC2 Instance.
B) Create a private hosted zone in Route53
C) Configure DHCP Options for your Subnet to point to the EC2 Instance.
D) Create an EC2 Instance in your VPC which will act as the DNS server



5. Your company currently uses NAT instances to route traffic for Instances in private subnets. They need to convert these to NAT gateways to increase the amount of bandwidth required. They want to automate the provision. How can you accomplish this?

A) Use Cloud formatlon templates to replace the NAT Instances with NAT gateways
B) Use Ops work to replace the NAT instances with NAT gateways
C) Use AWS(Amazon Web Service) Conflg to change the configuration of the NAT instance to a NAT gateway
D) Use AWS(Amazon Web Service) Inspector to replace the NAT instances with NAT gateways