Task 2.4: Automate and Configure Network Infrastructure ANS-C01 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which AWS service continuously monitors your AWS resources and can automatically evaluate network configurations against compliance rules, such as ensuring security groups do not allow unrestricted SSH access?

   • AAWS Config
   • BAmazon GuardDuty
   • CAWS Trusted Advisor
   • DAWS CloudTrail
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company uses Ansible to manage the configuration of its on-premises network devices. They want to extend this automation to manage AWS resources, such as security groups and route tables, using the same Ansible playbooks. What should they do?

   • AUse AWS CDK to generate Ansible playbooks for AWS resources.
   • BUse AWS CloudFormation to define the network resources and Ansible only for on-premises devices.
   • CUse the amazon.aws collection in Ansible to manage AWS resources from the same control node.
   • DUse AWS Systems Manager to run Ansible playbooks on EC2 instances only.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a common use case for automating VPN connection provisioning with infrastructure as code?

   • ATo provide a graphical interface for VPN management.
   • BTo replace the need for customer gateways.
   • CTo automatically encrypt all internet traffic without configuration.
   • DTo quickly deploy consistent VPN configurations across multiple environments or accounts.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a primary benefit of using Infrastructure as Code for automating network infrastructure deployment?

   • AIt allows network resources to be deployed consistently and repeatedly across environments.
   • BIt provides a graphical interface for all network configuration tasks.
   • CIt eliminates the need for any network monitoring or logging.
   • DIt automatically scales network bandwidth based on traffic patterns without configuration.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When you use the AWS CDK to define a VPC and its subnets, what happens when you run `cdk deploy`?

   • AThe CDK synthesizes a CloudFormation template and deploys it as a stack.
   • BThe CDK creates a new AWS account to host the resources.
   • CThe CDK directly calls the EC2 API to create the VPC and subnets.
   • DThe CDK generates a shell script that you must run manually.
   Reveal Solution Discussion Select an answer first