ANS-C01 Exam: Absolutely Free Online Practice

Question 1
- A company has an AWS Direct Connect connection between its on-premises data center in the United States (US) and workloads in the us-east-1 Region. The connection uses a transit VIF to connect the data center to a transit gateway in us-east-1. The company is opening a new office in Europe with a new on-premises data center in England. A Direct Connect connection will connect the new data center with some workloads that are running in a single VPC in the eu-west-2 Region. The company needs to connect the US data center and us-east-1 with the Europe data center and eu-west-2. A network engineer must establish full connectivity between the data centers and Regions with the lowest possible latency. How should the network engineer design the network architecture to meet these requirements?
  
  A :
  Connect the VPC in eu-west-2 with the Europe data center by using a Direct Connect gateway and a private VIF. Associate the transit gateway in us-east-1 with the same Direct Connect gateway. Enable SiteLink for the transit VIF and the private VIF.
  
  B :
  Connect the VPC in eu-west-2 to a new transit gateway. Connect the Europe data center to the new transit gateway by using a Direct Connect gateway and a new transit VIF. Associate the transit gateway in us-east-1 with the same Direct Connect gateway. Enable SiteLink for both transit VIFs. Peer the two transit gateways
  
  C :
  Connect the VPC in eu-west-2 to a new transit gateway. Connect the Europe data center to the new transit gateway by using a Direct Connect gateway and a new transit VIF. Create a new Direct Connect gateway. Associate the transit gateway in us-east-1 with the new Direct Connect gateway. Enable SiteLink for both transit VIFs. Peer the two transit gateways.
  
  D :
  Connect the VPC in eu-west-2 with the Europe data center by using a Direct Connect gateway and a private VIF. Create a new Direct Connect gateway. Associate the transit gateway in us-east-1 with the new Direct Connect gateway. Enable SiteLink for the transit VIF and the private VIF.
  
  Answer: C
Question 2
- An organization is replacing a tape backup system with a storage gateway. there is currently no connectivity to AWS. Initial testing is needed. What connection option should the organization use to get up and running at minimal cost?
  
  A : Use an internet connection.
  
  B : Set up an AWS VPN connection.
  
  C : Provision an AWS Direct Connection private virtual interface.
  
  D : Provision a Direct Connect public virtual interface.
  
  Answer: A
Question 3
- An AWS CloudFormation template is being used to create a VPC peering connection between two existing
  operational VPCs, each belonging to a different AWS account. All necessary components in the ‘Remote’
  (receiving) account are already in place.
  The template below creates the VPC peering connection in the Originating account. It contains these
  components:
  AWSTemplateFormation Version: 2010-09-09
  Parameters:
  Originating VCId:
  Type: String
  RemoteVPCId:
  Type: String
  RemoteVPCAccountId:
  Type: String
  Resources:
  newVPCPeeringConnection:
  Type: ‘AWS::EC2::VPCPeeringConnection’
  Properties:
  VpcdId: !Ref OriginatingVPCId
  PeerVpcId: !Ref RemoteVPCId
  PeerOwnerId: !Ref RemoteVPCAccountId
  Which additional AWS CloudFormation components are necessary in the Originating account to create an operational cross-account VPC peering connection with AWS CloudFormation? (Select two.)
  
  A : Resources:NewEC2SecurityGroup:Type: AWS::EC2::SecurityGroup
  
  B : Resources:NetworkInterfaceToRemoteVPC:Type: “AWS::EC2NetworkInterface”
  
  C : Resources:newEC2Route:Type: AWS::EC2::Route
  
  D : Resources:VPCGatewayToRemoteVPC:Type: “AWS::EC2::VPCGatewayAttachment”
  
  E :
  Resources:newVPCPeeringConnection:Type: ‘AWS::EC2VPCPeeringConnection’PeerRoleArn: !Ref PeerRoleArn
  
  Answer: C,E
Question 4
- Two companies are merging. The companies have a large AWS presence with multiple VPCs and are designing connectivity between their AWS networks. Both companies are using AWS Direct Connect with a Direct Connect gateway. Each company also has a transit gateway and multiple AWS Site-to-Site VPN connections from its transit gateway to on-premises resources. The new solution must optimize network visibility, throughput, logging, and monitoring. Which solution will meet these requirements?
  
  A :
  Configure a Site-to-Site VPN connection between each company-s transit gateway to establish reachability between the respective networks. Configure VPC Flow Logs for all VPCs. Publish the flow logs to Amazon CloudWatch. Use VPC Reachability Analyzer to monitor connectivity.
  
  B :
  Configure a Site-to-Site VPN connection between each company-s transit gateway to establish reachability between the respective networks. Configure VPC Flow Logs for all VPCs. Publish the flow logs to Amazon CloudWatch. Use AWS Transit Gateway Network Manager to monitor the transit gateways and their respective connections.
  
  C :
  Configure transit gateway peering between each company-s transit gateway Configure VPC Flow Logs for all VPCs. Publish the flow logs to Amazon CloudWatch. Use VPC Reachability Analyzer to monitor connectivity.
  
  D :
  Configure transit gateway peering between each company-s transit gateway. Configure VPC Flow Logs for all VPCs. Publish the flow logs to Amazon CloudWatch. Use AWS Transit Gateway Network Manager to monitor the transit gateways, their respective connections, and the transit gateway peering link.
  
  Answer: D
Question 5
- A retail company has its corporate headquarters in New York with an on-premises data center using an AWS Direct Connect connection to the AWS VPC. The branch offices in San Francisco and Miami use Siteto-Site VPN connections to connect to the AWS VPC. The company is looking for a solution to have the branch offices send and receive data with each other as well as with their corporate headquarters. As an AWS Certified Networking Specialist, which of the following options would you suggest to address the given requirements?
  
  A :
  Configure VPC Endpoints between branch offices and corporate headquarters which will enable branch offices to send and receive data with each other as well as with their corporate headquarters
  
  B :
  Configure Public Virtual Interfaces (VIFs) between branch offices and corporate headquarters which will enable branch offices to send and receive data with each other as well as with their corporate headquarters
  
  C :
  Set up VPN CloudHub between branch offices and corporate headquarters which will enable branch offices to send and receive data with each other as well as with their corporate headquarters
  
  D :
  Set up VPC Peering between branch offices and corporate headquarters which will enable branch offices to send and receive data with each other as well as with their corporate headquarters
  
  Answer: C

Free Amazon ANS-C01 Exam Questions

Absolute Free ANS-C01 Exam Practice for Comprehensive Preparation