Task 1.5: Design a Routing Strategy and Connectivity Architecture Between On-Premises Networks and the AWS Cloud ANS-C01 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which AWS service can be used to connect multiple VPCs and on-premises networks to a single transit hub?

   • AVPC peering
   • BAWS Transit Gateway
   • CAWS Direct Connect
   • DAWS Client VPN
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the VPN CloudHub architecture used for?

   • AConnecting multiple on-premises sites to AWS via a hub-and-spoke VPN model
   • BConnecting multiple VPCs to each other
   • CReplacing Direct Connect for dedicated connectivity
   • DProviding internet access to on-premises networks
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company has an AWS Site-to-Site VPN connection between its on-premises network and a VPC. The VPC has a private subnet with EC2 instances that need to access the internet for software updates. The VPC also needs to receive traffic from the on-premises network. What should be configured to allow the EC2 instances to access the internet while still allowing inbound traffic from on-premises?

   • AAttach an internet gateway to the VPC and add a route for 0.0.0.0/0 to the private subnet's route table.
   • BUse a network ACL to allow outbound internet traffic from the private subnet.
   • CCreate a NAT gateway in a public subnet and add a route for 0.0.0.0/0 to the NAT gateway in the private subnet's route table.
   • DCreate a NAT instance in the private subnet and configure it as the default route.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company has four branch offices, each with its own on-premises network. They want to connect all branches to AWS and also enable the branches to communicate with each other through AWS. They want to use a single AWS Site-to-Site VPN connection from each branch. Which architecture should they implement?

   • ACreate a Transit Gateway and attach a VPN connection from each branch to the Transit Gateway.
   • BCreate a single Site-to-Site VPN connection and share it across all four branches.
   • CCreate a single VPC with four VPN connections, each terminating on a separate virtual private gateway.
   • DCreate a separate VPC for each branch and peer them all together.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has an AWS Site-to-Site VPN connection. The network team wants to be alerted if the VPN connection goes down. They also want to see historical metrics for the VPN tunnel's data transfer. What should they use?

   • AAWS Config
   • BAWS Trusted Advisor
   • CAmazon CloudWatch with a CloudWatch alarm on the VPN tunnel's status metric.
   • DVPC Flow Logs
   Reveal Solution Discussion Select an answer first