Question: 1
You are currently hosting multiple applications in a VPC and have logged numerous port scans coming in from a specific IP address block. Your security team has requested that all access from the offending IP address block be denied for the next 24 hours. Which of the following is the best method to quickly and temporarily deny access from the specified IP address block?
A. Create an AD policy to modify Windows Firewall settings on all hosts in the VPC to deny access from the IP address block
B. Modify the Network ACLs associated with all public subnets in the VPC to deny access from the IP address block
C. Add a rule to all of the VPC 5 Security Groups to deny access from the IP address block
D. Modify the Windows Firewall settings on all Amazon Machine Images (AMIs) that your organization uses in that VPC to deny access from the IP address block
Answer: B
Question: 2
The operations team and the development team want a single place to view both operating system and application logs. How should you implement this using AWS services? Choose two answers
A. Using AWS CloudFormation, create a CloudWatch Logs LogGroup and send the operating system and application logs of interest using the CloudWatch Logs Agent
B. Using AWS CloudFormation and configuration management, set up remote logging to send events via UDP packets to CloudTrail
C. Using configuration management, set up remote logging to send events to Amazon Kinesis and insert these into Amazon CloudSearch or Amazon Redshift, depending on available analytic tools
D. Using AWS CloudFormation, create a CloudWatch Logs LogGroup. Because the CloudWatch log agent automatically sends all operating system logs, you only have to configure the application logs for sending off-machine
E. Using AWS CloudFormation, merge the application logs with the operating system logs, and use IAM Roles to allow both teams to have access to view console output from Amazon EC2
Answer: A,C
Question: 3
You are working with customer who has 10 TB of archival data that they want to migrate to AmazonGlacier. The customer has a 1Mbps connection to the Internet. Which service or feature provide the fastest method of getting the data into Amazon Glacier?
A. Amazon Glacier multipart upload
B. AWS Storage Gateway
C. VM Import/Export
D. AWS Import/Export
Answer: D
Question: 4
A user has provisioned 2000 IOPS to the EBS volume. The application hosted on that EBS is experiencing less IOPS than provisioned. Which of the below mentioned options does not affect the IOPS of the volume?
A. The application does not have enough IO for the volume
B. The instance is EBS optimized
C. The EC2 instance has 10 Gigabit Network connectivity
D. The volume size is too large
Answer: D
Visit Our Website For Further Details:
https://www.exam4help.com/amazon/bds-c00-dumps.html
Dumpsforsure.com made me take advantage of the difficult scenario I was going to face on my test day. I passed my last BDS-C00 Dumps exam with impressive results. They offer additional tips and tricks that will come in handy in the final exams. The content is updated regularly so you don't have to worry about the latest questions. It has been recommended by many of my friends and I recommend everyone to try it too. What they said is true. Use their services and become one of the happiest customers. Many thanks to dumpsforsure.com.
ReplyDeleteI suggest all IT candidates to download Amazon BDS-C00 demo questions for free then it’s your will to download original PDF file or not. I checked these sample questions and then downloaded Amazon BDS-C00 dumps with passing guarantee. Now I am excited to have certification in my desired IT field. I pay very pure thanks to Dumps4Edu for all the help. Use D420 and get 20% discount.
ReplyDelete