Review Questions – Network Implementation – ANS-C01 Study Guide

Review Questions

  1. DX hybrid networks offer what advantages over traversing the Internet to access your AWS services? (Select three.)
    1. High bandwidth
    1. Dynamic routing resiliency
    1. Edge location access
    1. Low and predictable latency
    1. Global acceleration
    1. Native VxLAN support
  2. You want to establish a direct connection to your VPC in the eu-west-3 Paris region. Your finance group does not want to purchase and ship a router to France for this project. What options do you have?
    1. Open a support ticket with the AWS European support desk and request they allocate a router port in the Paris region
    1. Use an AWS carrier business partner that offers interconnection services at a collocation facility shared by AWS in France
    1. Use your DX router you have installed at the Stockholm collocation facility to also connect to eu-west-3
    1. You must have your router hardware installed locally at the Paris DX facility to be able to connect to the AWS router to access the eu-west-3 region
  3. Because of the large amounts of file transfers to your Redshift deployment running on Amazon, you are exploring options to increase your DX throughput to the maximum available. What is the best option available to meet this need?
    1. Upgrade to a VxLAN underlay for higher upload speeds to your DX availability zone connection
    1. Upgrade your port speed at the DX facility
    1. Use LACP to link aggregate multiple 100G interfaces between your customer interfaces and the AWS DX interfaces
    1. Remove the static routes and configure the interconnection to use BGP
  4. Your corporate requirement is to encrypt all external WAN traffic at the Austin corporate data center. You notice that the DX connection through Equinix in Dallas is not encrypted. What options are available to remediate this issue?
    1. Enable SSL/TLS encryption on the DX interface at the Equinix facility
    1. Enable IPSec at each end of the connection
    1. Encryption is not supported over the Direct Connect link
    1. Use the CloudFront network to connect to instead of Direct Connect since it supports IPSec
  5. You are exploring routing protocol options to dynamically exchange routes with AWS over your Direct Connect link in Denver. What options are available?
    1. iBGP
    1. OSPF
    1. IS-IS
    1. eBGP
  6. You are configuring your Direct Connect interface into the us-west-2 region and want to access your EC2 fleet in availability zone 1. How would you configure the DX interface?
    1. Use GRE and point it to AZ-A
    1. Create an overlay network that includes us-west-2 and availability zone 1
    1. Create a private VIF
    1. Create a public VIF
  7. What interface would you point your data center’s VPN concentrator to for a site-to-site AWS VPN connection?
    1. DX interconnect
    1. Customer gateway
    1. Virtual private gateway
    1. Global Accelerator endpoint
  8. For a router to forward an IPv4 packet to a remote location, what must be present?
    1. A static route
    1. A dynamic routing protocol that constantly updates the routing table
    1. A route in the routers routing and forwarding table showing the next hop egress interface
    1. Configure an 802.1Q tag pointing to the remote network
  9. You have a small network that never changes. You have no desire to manage the complexity of setting up the Border Gateway Protocol. What options are available to you to populate your router’s forwarding tables?
    1. Configure static routes.
    1. Use a less complex dynamic routing protocol such as OSPF.
    1. You must use BGP to route packets through a IPv4 network
    1. Networks that have fewer than eight subnets do not require routing to be configured.
  10. You are setting up a direct connection between your New Orleans data center and the AWS Ohio region and want to use a dynamic routing protocol. What will be required to begin building the router configuration needed at the DX hosting center?
    1. AWS will assign you a unique VLAN ID
    1. A connection into your OSPF Area 0 backbone router
    1. A unique autonomous system number
    1. A list from AWS of what IPSec transforms they want to use and then you can use that data to build your tunnel parameters
  11. BGP is known as a distance vector routing protocol; what characteristics give it this label?
    1. Next hop reachability based on latency, jitter, bandwidth, and reliability.
    1. AS path metrics.
    1. The use of the Bellman–Ford route calculation algorithm.
    1. Vector labels are exchanged by BGP to determine the best route to enter into the routing table.
  12. Outgoing BGP router advertisements are used to effect what result?
    1. AS egress traffic flows
    1. Multi-exit discriminator values
    1. Traffic coming into the AS
    1. Best metric policies
  13. You are setting up a site-to-site VPN from your corporate data center to AWS to access your EC2 fleet sitting behind application load balancers in multiple regions. You have been tasked with keeping the number of VPN tunnels low to reduce complexity and monitoring overhead. What is the best solution?
    1. Configure Route 53 to load balance between the application load balancers
    1. Configure CloudHub to connect to the required VPCs
    1. Configure a VPN connection to a VPG and use BGP routing in the data center.
    1. Use PrivateLink to connect to the application load balancers
  14. What architecture uses only one autonomous system across the entire worldwide routed network infrastructure?
    1. OSPF
    1. Generic Routing Protocol
    1. iBGP
    1. VxLAN
  15. Storage, video, and large file transfer traffic benefit from which layer 2 option being enabled?
    1. Spanning tree protocol
    1. LACP
    1. Jumbos
    1. Bidirectional forwarding
  16. You are required to support multicast traffic over your VPN network. You learn that the IPSec tunnels do not forward multicast traffic, and you are searching for a solution that does not require you to replace your network architecture. What is a viable option?
    1. Use an underlay network
    1. Implement VxLAN
    1. Configure Generic Routing Encapsulation and send the multicast traffic through the GRE tunnel
    1. Implement the GENEVE protocol
  17. You need a protocol that prevents bad actors from tampering with packets in flight. What would you suggest implementing?
    1. BGP
    1. Transport Layer Security
    1. Secure Sockets Layer
    1. IPSec
  18. What are some of the use cases for account resource sharing? (Select three.)
    1. Departmental segmentation
    1. Support for VPN backup connections in case the primary DX connection fails
    1. Nonrepudiation
    1. Serverless container isolation
    1. Docker support
    1. Accounting
    1. Company resource sharing between accounts