Task 2.4: Automate and Configure Network Infrastructure ANS-C01 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a primary advantage of automating VPC peering connections with infrastructure as code?

   • AIt allows you to create and manage peering connections consistently across multiple environments.
   • BIt eliminates the need for route tables in peered VPCs.
   • CIt provides a graphical interface for peering connections.
   • DIt automatically resolves DNS names between peered VPCs.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company wants to ensure that all EC2 instances in a specific VPC have the latest security patches installed. They want to use AWS Systems Manager to automate this. Which Systems Manager capability should they use?

   • AAWS Config rule to check for missing patches and remediate.
   • BState Manager association to run a script that installs patches.
   • CRun Command to manually trigger patching on each instance.
   • DPatch Manager with a maintenance window to apply patches on a schedule.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company wants to automatically remediate a security group that allows SSH access from 0.0.0.0/0. They want to use AWS Config to detect the violation and AWS Lambda to remove the offending rule. What is the correct way to trigger the Lambda function?

   • AConfigure the AWS Config rule to invoke the Lambda function as a remediation action.
   • BUse a CloudWatch Events rule to trigger the Lambda function on every security group change.
   • CUse AWS Systems Manager to run the Lambda function on a schedule.
   • DUse a scheduled Lambda function that runs every hour and checks all security groups.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A startup wants to move from manually creating VPCs and subnets in the AWS console to an automated approach. They want to version-control their network configuration and enable peer review of changes. Which approach best meets these requirements?

   • AUse AWS CLI scripts stored in a shared network drive and run them manually when needed.
   • BUse AWS Elastic Beanstalk to deploy the network infrastructure automatically.
   • CUse AWS OpsWorks to define the network configuration in cookbooks.
   • DStore AWS CloudFormation templates in a Git repository and use a CI/CD pipeline to deploy them.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has a fleet of EC2 instances that act as network appliances (e.g., NAT instances). The security team wants to ensure that a specific configuration file on these instances is always present and has the correct content. They want to use AWS Systems Manager to enforce this state. Which Systems Manager capability should they use?

   • AState Manager association with a custom script that checks and writes the configuration file.
   • BRun Command to execute the script once manually on each instance.
   • CParameter Store to store the configuration content and retrieve it on demand.
   • DPatch Manager to apply the latest operating system patches.
   Reveal Solution Discussion Select an answer first