Task 2.4: Automate and Configure Network Infrastructure ANS-C01 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which AWS service automates application deployment and can provision the underlying network resources (such as a VPC, subnets, and security groups) as part of the environment?

   • AAWS Global Accelerator
   • BAmazon Route 53
   • CAWS Elastic Beanstalk
   • DAWS Direct Connect
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is a common use case for using AWS SDKs (e.g., boto3 for Python) in network automation?

   • ATo write code that programmatically creates and modifies network resources within an application.
   • BTo replace the need for IAM permissions.
   • CTo automatically optimize network traffic without any code.
   • DTo provide a graphical user interface for network configuration.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company uses AWS CDK in TypeScript to manage its network infrastructure. They need to add a new VPC peering connection between two existing VPCs that are defined in the same CDK app. The peering connection must be created in the same region. What is the most efficient way to define this in the CDK code?

   • ADefine the peering connection in a separate CloudFormation template and deploy it after the CDK stack.
   • BCreate the peering connection using the AWS CLI from a custom resource in the CDK stack.
   • CUse the VpcPeeringConnection higher-level construct, which automatically creates the route entries in both route tables.
   • DUse the CfnVPCPeeringConnection construct, referencing the VPC IDs from the existing VPC constructs.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A networking team manages a VPC with a custom network ACL that has been manually edited over time, causing configuration drift. They want to enforce a known-good state using CloudFormation. The team has a stack that creates the VPC and subnets, but the network ACL was created outside the stack. What should they do to bring the network ACL under IaC management with the least operational overhead?

   • AImport the existing network ACL into the CloudFormation stack using the resource import feature, then update the template to match its current configuration.
   • BUse AWS Config to detect the drift and manually correct the ACL each time a change is detected.
   • CCreate a second CloudFormation stack that only contains the network ACL and associate it with the subnets from the first stack.
   • DDelete the existing network ACL and add a new one to the CloudFormation template, accepting brief network disruption during stack update.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which AWS service is designed to orchestrate complex workflows by coordinating multiple AWS services, such as automating the creation of a VPN connection that involves several steps?

   • AAWS Step Functions
   • BAmazon Simple Queue Service (SQS)
   • CAWS CloudFormation
   • DAWS Lambda
   Reveal Solution Discussion Select an answer first