Task 2.1: Implement Routing and Connectivity Between On-Premises Networks and the AWS Cloud ANS-C01 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company has a VPC with a Site-to-Site VPN to its on-premises network. The on-premises network is 10.0.0.0/8. The VPC has a subnet with CIDR 10.1.0.0/16. The security group attached to the instances in the subnet allows inbound traffic from 10.0.0.0/8. However, instances cannot be reached from on-premises. What is the most likely cause?

   • AThe route table for the subnet does not have a route to the on-premises network.
   • BThe security group does not allow outbound traffic to the on-premises network.
   • CThe network ACL associated with the subnet does not allow inbound traffic from 10.0.0.0/8.
   • DThe VPN tunnel is down.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which AWS service can be used to provide outbound internet access from a private subnet without managing a NAT instance?

   • ANAT gateway
   • BInternet gateway
   • CElastic IP address
   • DVirtual private gateway
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has a VPC with a Site-to-Site VPN connection to its on-premises network. The on-premises network advertises the 10.0.0.0/8 CIDR over BGP. The VPC also has a static route in its route table for 10.0.0.0/16 via a virtual private gateway. An instance in the VPC tries to reach 10.0.1.10. Which route will be used?

   • AThe propagated route for 10.0.0.0/8 via the virtual private gateway.
   • BThe internet gateway route (0.0.0.0/0).
   • CThe static route for 10.0.0.0/16 via the virtual private gateway.
   • DThe local route for the VPC's CIDR.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In an AWS Transit Gateway hub-and-spoke topology, what is the role of the transit gateway?

   • AFirewall that filters traffic between VPCs
   • BEdge device that provides internet access to attached VPCs
   • CCentral hub that routes traffic between attached VPCs and on-premises networks
   • DDNS resolver for hybrid networks
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A network engineer is troubleshooting a Site-to-Site VPN connection. The tunnel status shows 'UP' in the console, but traffic from the on-premises network is not reaching instances in the VPC. The on-premises router is advertising the on-premises CIDR over BGP, and the VPC route table has the VPN propagation enabled. What should the engineer check first?

   • AVerify that the virtual private gateway is attached to the correct VPC.
   • BReboot the customer gateway device.
   • CCheck the security group of the instances to ensure inbound traffic is allowed.
   • DVerify that the on-premises router is advertising the correct CIDR and that the route is present in the VPC route table.
   Reveal Solution Discussion Select an answer first