Managing Cloud Networks at Scale GCAD Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A cloud team manages network resources across multiple AWS accounts and regions. They currently create VPCs, subnets, route tables, and security groups manually, which has led to configuration drift and security misconfigurations. They want to enforce consistent network architecture and reduce human error. Which approach should they adopt?

   • ACreate a shared VPC in one account and peer all other accounts to it, eliminating the need to manage multiple VPCs.
   • BWrite a script that uses the AWS CLI to create resources in each account, and run it manually when changes are needed.
   • CUse AWS CloudFormation templates with parameters for each account and region, and deploy them through a CI/CD pipeline.
   • DUse AWS Config rules to detect and automatically correct any network configuration drift.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A healthcare company needs to design a disaster recovery (DR) architecture for its cloud network. The primary site is in one region, and the DR site is in another region. They must ensure that if the primary region fails, traffic can be redirected to the DR site with minimal downtime. They also need to maintain compliance with data residency requirements. Which architecture should they implement?

   • AUse VPC peering between the two regions and rely on manual DNS changes for failover.
   • BUse a transit gateway in each region and connect them via a peering connection, with DNS-based failover to the DR region.
   • CUse a single transit gateway in the primary region and extend it to the DR region using a VPN.
   • DUse a CDN to serve all traffic from the edge, eliminating the need for regional failover.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is moving a large number of workloads to the cloud and wants to minimize network egress costs. They have a mix of internet-facing and internal applications. Which strategy should they use to reduce data transfer costs?

   • AUse a VPN connection to route all traffic through on-premises and then to the internet.
   • BIncrease the size of instances to reduce the number of network calls.
   • CUse a content delivery network (CDN) for all internet-facing traffic and ensure internal traffic stays within the cloud provider's network.
   • DPlace all workloads in a single availability zone to reduce inter-zone data transfer charges.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a common strategy to manage cloud network costs at scale?

   • ACreating a separate VPC for each workload without any review
   • BAnalyzing network usage to identify and eliminate unused or underutilized resources
   • CDisabling all network monitoring to reduce data transfer costs
   • DUsing only the most expensive network services to ensure performance
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A global company has cloud resources in multiple regions and accounts. The network team wants a single pane of glass to monitor and configure network resources, and to enforce consistent policies. They also want to automate responses to certain events. Which approach should they use?

   • AUse a cloud management platform that aggregates APIs from all regions and accounts, and integrate with an automation engine.
   • BCreate a VPN connection between all regions and use a single network monitoring tool.
   • CUse a spreadsheet to track all network resources and manually update it.
   • DLog in to each account and region separately using the cloud provider's console.
   Reveal Solution Discussion Select an answer first