Task 1.6: Design a Routing Strategy and Connectivity Architecture That Include Multiple AWS Accounts, AWS Regions, and VPCs to Support Different Connectivity Patterns ANS-C01 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has a service in a VPC in the 'provider' account. The service is fronted by a Network Load Balancer. Multiple consumer accounts need to access this service privately. The company has created an endpoint service and shared it with the consumer accounts. A consumer account has created an interface endpoint, but the application in the consumer VPC cannot connect to the service. What is the most likely cause?

   • AThe consumer VPC's route table does not have a route to the interface endpoint.
   • BThe Network Load Balancer is not in the same VPC as the endpoint service.
   • CThe security group associated with the interface endpoint does not allow inbound traffic from the application's source.
   • DThe consumer VPC and the provider VPC are in different AWS Regions.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which AWS service or feature allows you to connect VPCs in different AWS Regions with a single hub-and-spoke architecture?

   • AAWS Transit Gateway inter-Region peering
   • BAWS PrivateLink
   • CAWS Direct Connect
   • DVPC peering
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the purpose of a centralized internet egress design in a multi-VPC architecture?

   • ATo provide a public IP address for every resource
   • BTo route all outbound internet traffic from multiple VPCs through a single point of control
   • CTo eliminate the need for NAT gateways
   • DTo provide each VPC with its own internet gateway
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In a VPC, what is the purpose of a route table?

   • ATo determine where network traffic is directed based on destination IP addresses
   • BTo assign IP addresses to resources in the VPC
   • CTo define firewall rules for inbound and outbound traffic
   • DTo encrypt traffic between subnets
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which AWS service or feature is commonly used to integrate an on-premises network with multiple VPCs in a hybrid architecture?

   • AAWS Global Accelerator
   • BAWS Transit Gateway
   • CVPC peering
   • DAWS PrivateLink
   Reveal Solution Discussion Select an answer first