Managing Cloud Networks at Scale GCAD Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A media streaming company experiences high traffic spikes during live events. Their application runs on virtual machines in a cloud VPC. They need to distribute incoming traffic across multiple instances and handle sudden increases in load without manual intervention. Which combination of services should they use?

   • AContent Delivery Network (CDN) in front of a single large instance.
   • BApplication Load Balancer with an auto scaling group that adjusts instance count based on CPU utilization.
   • CNetwork Load Balancer with a fixed number of instances and a DNS-based round-robin.
   • DClassic Load Balancer with manual instance addition during peak times.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   A cloud architect is responsible for a multi-account environment with hundreds of VPCs. Which challenge is most directly associated with managing cloud networks at this scale?

   • AThe requirement to use a single region for all network resources
   • BThe need to manually configure each VPC's route tables to ensure connectivity
   • CThe inability to use cloud provider APIs for network management
   • DThe need to eliminate all security groups to reduce complexity
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A multinational company is designing a cloud network to connect 50 VPCs across three regions and two on-premises data centers. They have a limited budget and need to minimize data transfer costs while maintaining low latency between VPCs in the same region. They also need to enforce consistent security policies. Which connectivity architecture should they choose?

   • AUse a single transit gateway for all VPCs across all regions and on-premises connections.
   • BUse VPC peering for all connections, including inter-region and on-premises.
   • CUse a software-defined WAN (SD-WAN) appliance in each VPC to connect to all other VPCs and on-premises.
   • DCreate a full mesh of VPC peering connections between all VPCs in the same region, and use a transit gateway for inter-region and on-premises connectivity.
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A company has a multi-account AWS environment with many VPCs and uses AWS Transit Gateway to connect them. They are seeing high data transfer costs due to inter-VPC traffic. They want to reduce costs without sacrificing performance or security. Which approach is most effective?

   • AUse VPC endpoints (PrivateLink) for traffic to AWS services like S3 and DynamoDB to avoid NAT gateway and data transfer charges.
   • BMove all workloads to a single VPC to eliminate inter-VPC traffic.
   • CReplace Transit Gateway with VPC peering to reduce per-attachment costs.
   • DUse AWS Direct Connect to route inter-VPC traffic through on-premises.
   Reveal Solution Discussion Select an answer first
6. 50expert · hard

   A company is deploying a multi-tier application in a cloud VPC. The security team requires that the database tier be completely isolated from the internet and only accessible from the application tier. The application tier must be accessible from the internet via a load balancer. They also want to minimize the number of security rules to manage. Which segmentation strategy should they use?

   • APlace all tiers in the same subnet and use network ACLs to restrict traffic.
   • BPlace each tier in a separate subnet and use security groups that reference the application tier's security group for the database.
   • CPlace the database in a private subnet and the application in a public subnet, but use the same security group for both.
   • DUse a single security group for all tiers and rely on the load balancer to filter traffic.
   Reveal Solution Discussion Select an answer first