Managing Cloud Networks at Scale GCAD Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security team needs to enforce consistent network security policies across hundreds of workloads in a multi-account cloud environment. They want to centrally manage allow/deny rules for inbound and outbound traffic and have visibility into traffic flows. Which solution should they implement?

   • AUse a cloud-native firewall service that provides centralized policy management and flow logging.
   • BDeploy a network firewall appliance in each VPC and manage them individually.
   • CConfigure security groups in each account and rely on each team to maintain them.
   • DUse only network ACLs at the subnet level and disable security groups.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which tool is commonly used to implement Infrastructure as Code for cloud network provisioning?

   • AAWS Trusted Advisor
   • BAWS CloudFormation
   • CAWS CloudTrail
   • DAWS Management Console
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A gaming company runs a real-time multiplayer platform that requires extremely low latency and handles unpredictable traffic spikes. They currently use a regional load balancer, but during peak events, latency increases and some players experience connection drops. They need to improve performance and resilience. Which solution should they implement?

   • AAdd more instances behind the load balancer and use connection draining to handle spikes.
   • BIncrease the instance size to handle more concurrent connections.
   • CUse a CDN to cache all game data and serve it from edge locations.
   • DDeploy a global load balancer with health checks and route traffic to the nearest regional endpoint.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A healthcare company is migrating to AWS and must comply with HIPAA. They have multiple VPCs and need to ensure that all data in transit is encrypted and that network access is restricted to authorized personnel only. They also want to centralize security policy management. Which solution should they implement?

   • AUse AWS PrivateLink to connect all VPCs and enforce encryption via TLS.
   • BUse AWS Site-to-Site VPN between all VPCs and use a central VPN appliance.
   • CUse VPC peering and security groups to restrict access, and enable encryption on all volumes.
   • DUse AWS Transit Gateway with Network Firewall in each VPC and centralize policies using AWS Firewall Manager.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is planning to migrate a large data analytics workload to the cloud. The workload generates significant inter-node traffic between compute instances in the same VPC. They are concerned about data transfer costs and want to optimize network spend without sacrificing performance. Which strategy should they use?

   • AUse a VPN to route inter-node traffic through on-premises to reduce cloud egress costs.
   • BSpread instances across multiple availability zones to improve resilience, even though it increases data transfer costs.
   • CUse a load balancer to distribute traffic between instances, assuming it will reduce data transfer costs.
   • DPlace all compute instances in the same availability zone and use placement groups to reduce network latency.
   Reveal Solution Discussion Select an answer first