Task 2.4: Automate and Configure Network Infrastructure ANS-C01 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In an AWS CloudFormation template, which section is used to define the actual network resources such as VPCs, subnets, and security groups?

   • AResources
   • BParameters
   • CMappings
   • DOutputs
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which AWS tool allows you to interact with AWS services from the command line to automate network resource creation, such as creating a VPC or subnet?

   • AAWS CloudTrail
   • BAWS Command Line Interface (CLI)
   • CAWS Management Console
   • DAWS Trusted Advisor
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a third-party configuration management tool that can be used to automate the configuration of AWS resources and network devices?

   • AAnsible
   • BAmazon VPC
   • CAWS IAM
   • DAWS CloudTrail
   Reveal Solution Discussion Select an answer first
5. 14expert · medium

   A network engineer wants to automate the process of adding a new CIDR block to a VPC and then updating the route tables. The engineer wants to use a script that runs on a schedule. The script must handle the case where the VPC is already in the 'pending' state from a previous CIDR addition. What is the best way to handle this in the script?

   • ACheck the VPC state with describe-vpcs before adding the CIDR, and wait if it is in the 'pending' state.
   • BUse the associate-vpc-cidr-block command and ignore any errors.
   • CUse a fixed sleep of 30 seconds after the associate-vpc-cidr-block command.
   • DUse the modify-vpc-attribute command to change the CIDR directly.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a key benefit of using AWS Step Functions for network automation workflows?

   • AIt replaces the need for IAM roles.
   • BIt provides built-in retry and error handling for each step in the workflow.
   • CIt automatically creates VPCs and subnets without any configuration.
   • DIt provides a graphical interface for manually configuring network devices.
   Reveal Solution Discussion Select an answer first