Managing Cloud Networks at Scale GCAD Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of network monitoring in a large-scale cloud environment?

   • ATo replace the need for security groups
   • BTo automatically fix all network problems without human intervention
   • CTo detect and diagnose network issues proactively
   • DTo increase the speed of network traffic
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company has grown to 50 VPCs across five AWS regions, each managed by separate teams. They use a mix of VPC peering and VPN connections to enable inter-VPC communication, leading to a complex mesh that is hard to troubleshoot. They are considering moving to a transit gateway architecture. The network team is concerned about the cost of transit gateway attachments and the effort to migrate existing connections. They also need to maintain compliance with a policy that requires all inter-VPC traffic to be inspected by a central security appliance. Which approach should they take?

   • AImplement a full mesh of VPC peering and use security groups to enforce inspection.
   • BUse AWS PrivateLink to connect all VPCs to a central security appliance service.
   • CMigrate all VPCs to a transit gateway and route all inter-VPC traffic through a centralized inspection VPC with the security appliance.
   • DKeep the existing peering and VPN mesh and add a third-party network monitoring tool to improve visibility.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of a load balancer in a cloud network?

   • ATo provide a static IP address for all backend instances
   • BTo encrypt all traffic between clients and servers
   • CTo distribute incoming traffic across multiple targets to improve availability and performance
   • DTo replace the need for security groups
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company has grown its cloud environment to over 200 VPCs across multiple accounts. They are experiencing increasing operational overhead because each VPC has its own set of security groups, route tables, and VPN connections. They also notice inconsistent security policies. What is the most effective way to address these challenges?

   • AHire more network engineers to manually manage each VPC.
   • BConsolidate all VPCs into a single large VPC with many subnets.
   • CImplement a centralized network management solution with policy-as-code and automated provisioning.
   • DDisable security groups and rely only on network ACLs to simplify management.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is deploying a multi-account AWS environment and needs to enforce a security policy that blocks all traffic to and from known malicious IP addresses. They also want to centrally monitor and log any blocked traffic. Which solution should they implement?

   • AConfigure VPC Flow Logs to filter and drop traffic from malicious IPs.
   • BUse AWS WAF in each account and attach it to all load balancers.
   • CDeploy AWS Network Firewall in each VPC and centrally manage the rule groups using AWS Firewall Manager.
   • DUse security groups in each VPC to deny traffic from the malicious IPs.
   Reveal Solution Discussion Select an answer first