Module 8: Knowledge Check AWS Academy Cloud Architecting [102862]

What is the simplest way to connect 100 virtual private clouds (VPCs) together?

A) Connect each VPC to all the other VPCs by using VPC peering.

B) Create a hub-spoke network by using AWS VPN CloudHub.

C) Chain VPCs together by using VPC peering.

D) Connect the VPCs to AWS Transit Gateway.

D Connect the VPCs to AWS Transit Gateway.

A company needs network traffic to flow between an AWS account in one Region to another account in a different Region. What should they set up between the transit gateways in each region?

A) AWS Direct Connect

B) Transit Gateway peering attachment

C) AWS Site-to-Site VPN

D) AWS PrivateLink

B Transit Gateway peering attachment

A company has two virtual private clouds (VPCs). VPC A has a Classless Inter-Domain Routing (CIDR) block of 10.1.0.0/16. VPC B has CIDR block of 10.2.0.0/16. Both VPCs belong to the same AWS account. What is the simplest way to connect the two VPCs so that they can route all traffic between them?

A) AWS Site-to-Site VPN

B) VPC peering

C) AWS Direct Connect

D) VPC endpoints

B VPC peering

Systems in a secure subnet in a virtual private cloud (VPC) must access a bucket in AMazon S3. WHich solutions stop traffic from crossing the internet? (Select TWO.)

A) Create a VPC gateway endpoint for Amazon S3.

B) Use VPC interface endpoints.

C) Use the private IP address of Amazon S3.

D) Create a VPC peering connection to Amazon S3.

E) Use a private IP address for the system.

A, B Create a VPC gateway endpoint for Amazon S3, Use VPC interface endpoints

A company has three virtual private clouds (VPCs). VPCs A, B, and C have Classless INter-Domain Routing (CIDR) blocks that do not overlap. Both A and C have separate VPC peering connections with B. However, A cannot communicate with C. What is the simplest and most cost-effective way to enable full communication between A and C?

A) Add routes to B to enable traffic between A and C through B.

B) Add peering conneciton between A and C, and route traffic between A and C through the peering connection.

C) Link all three VPCs through a transit VPC, and route all traffic through the transit VPC.

D) Create VPC endpoints in A and C for the individual hosts that need to communicate with eachother.

B Add peering conneciton between A and C, and route traffic between A and C through the peering connection

Because of a natural disaster, a company moved a secondary data center to a temporary facility with internet connectivity. It needs a secure conneciton to the company's virtual private cloud (VPC) that must be operational as soon as possible. The data center will move again in 2 weeks. Which options meets the requirements?

A) AWS Site-to-Site VPN

B) AWS Direct Connect

C) VPC endpoints

D) VPC peering

A AWS Site-to-Site VPN

A company is concerned about internet disrup[tions. It wants to efficiently route traffic from their on-premises network to an AWS edge location close to their customer gateway device. What should they use?

A) AWS Global Accelerator

B) AWS Direct Connect

C) AWS Transit Gateway

D) AWS VPN CloudHub

A AWS Global Accelerator

A company is implementing a system to back up on-premises systems to AWS. Which network connectivity method provides a solution with the most consistent performance?

A) Virtual private cloud (VPC) peering

B) AWS Direct Connect

C) AWS Site-to-Site VPN

D) Virtual private cloud (VPC) endpoints

B AWS Direct Connect

A company uses a single AWS Direct Connect connection between their on-premises network and their virtual private cloud (VPC). They want to ensure that the network connectivity is highly available by adding a backup connection. Which network connectivity method provides the most cost-effective solution for the backup connection?

A) Another AWS Direct COnnect connection throug a different Direct Connect location

B) An on-demand AWS Client VPN connection acress the internet

C) Another AWS Direct Connect connection through the same Direct Connect location

D) An on-demnad AWS Site-to-Site VPN connection across the internet

D An on-demnad AWS Site-to-Site VPN connection across the internet

A company is connecting a virtual private cloud (VPC) to multiple on-premises data centers using a virtual private network (VPN). Which implementation ensures resiliency and predictable bandwidth requirements?

A) Implement Direct Connect as the primary connection and use the VPN as a secondary failover connection from each data center.

B) Implement AWS Transit Gateway to connect to each on-premises data center.

C) Use a many-to-many mesh topology, such as Amazon VPC peering.

D) Establish multiple Border Gateway Protocol (BGP) sessions for each VPC to create connectivity to multiple VPCs across multiple AWS Regions.

A Implement Direct Connect as the primary connection and use the VPN as a secondary failover connection from each data center