Hybrid Connectivity CNX-001 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A multinational company uses MPLS to connect its offices globally. The company is adopting a cloud-based ERP system and wants to ensure that traffic to the cloud is routed efficiently and does not traverse the public internet. The company has a presence in multiple cloud regions. Which approach should the architect take?

   • AUse the public internet for cloud traffic and keep MPLS for office-to-office traffic.
   • BRoute all cloud traffic from the MPLS core to a single cloud region via a VPN.
   • CExtend MPLS to the cloud provider using a single virtual circuit from headquarters.
   • DConnect each regional office to the nearest cloud region using a dedicated private connection and route cloud traffic over that connection.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A financial services firm uses MPLS to connect its headquarters and two regional offices. The firm is adding a third office in a location where MPLS is not available. The new office needs to securely access applications in the headquarters and the cloud. The firm wants to maintain consistent routing policies and minimize changes to the existing MPLS core. What should the architect implement?

   • AInstall a second MPLS router at headquarters and extend the MPLS network to the new office using a virtual circuit.
   • BUse a cloud-based VPN gateway and connect the new office directly to the cloud, bypassing headquarters.
   • CConnect the new office to headquarters with a site-to-site VPN over the internet and advertise routes into the MPLS core via BGP.
   • DConfigure static routes on the new office router to send all traffic to headquarters over the internet.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A global enterprise has offices in multiple countries and uses MPLS for inter-office connectivity. The company is moving a critical application to a public cloud and needs to ensure that all offices can access the application with low latency. The company has a compliance requirement that data must not leave a specific geographic region. Which solution should the architect implement?

   • AUse a site-to-site VPN from each office to the cloud region, but route all traffic through the headquarters.
   • BConnect all offices to a single cloud region outside the required geographic boundary to centralize management.
   • CDeploy SD-WAN with cloud on-ramp to connect each office to the nearest cloud region within the required geographic boundary.
   • DExtend MPLS to the cloud using a single virtual circuit from the headquarters.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company with multiple remote sites currently uses individual site-to-site VPN tunnels to its headquarters. The network team wants to simplify management and improve failover between sites. The company has a mix of MPLS and broadband connections at different sites. Which solution should the architect implement?

   • ADeploy SD-WAN at each site to manage VPN tunnels centrally and provide automatic failover between MPLS and broadband.
   • BReplace all site-to-site VPNs with a single MPLS network.
   • CUse a cloud-based VPN concentrator at headquarters to terminate all tunnels.
   • DKeep the existing VPN tunnels and add static backup routes on each router.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is connecting its on-premises network to a public cloud using a dedicated private connection. The company also has branch offices that need to access cloud resources. The branch offices currently use MPLS to connect to the headquarters. Which approach should the architect use to provide cloud access to the branches?

   • AEstablish a separate site-to-site VPN from each branch to the cloud.
   • BDeploy SD-WAN at each branch to connect directly to the cloud.
   • CRoute branch traffic to the headquarters over MPLS and then to the cloud over the dedicated private connection.
   • DUse a cloud VPN gateway and connect the branches to the cloud, bypassing headquarters.
   Reveal Solution Discussion Select an answer first