Module 7

What is AWS Site-to-Site VPN?

• A service that provides SSL-encrypted links between websites in AWS

• A solution that provides encrypted sessions between AWS and on-premises systems by using TLS

• A service that provides the ability to access AWS and on-premises networks by using OpenVPN clients

• A solution that provides a connection between a virtual private cloud (VPC) and an on-premises network by using IPsec

What does AWS Direct Connect provide?

• A dedicated network connection from an on-premises network to AWS that uses 802.1q

• A private telecommunications circuit from an on-premises network direct into AWS that uses Point-to-Point Protocol (PPP)

• An encrypted tunnel that connects an on-premises network to AWS over the internet

• An extension of the AWS Cloud into customer data centers that uses AWS hardware installed on premises

A company has two virtual private clouds (VPCs). VPC A has a Classless Inter- Domain Routing (CIDR) block of 10.1.0.0/16. VPC B has CIDR block of 10.2.0.0/16. Both VPCs belong to the same Amazon Web Services (AWS) account. What is the simplest way to connect the two VPCs so that they can route all traffic between them?

• AWS Site-to-Site VPN

• AWS Direct Connect

• VPC peering

• VPC endpoints

A company is implementing a system to back up on-premises systems to Amazon Web Services (AWS). Which network connectivity method will provide a solution with the most consistent performance?

• AWS Site-to-Site VPN

• AWS Direct Connect

• VPC peering

• VPC endpoints

Systems in a secure subnet in a virtual private cloud (VPC) must access a bucket in Amazon Simple Storage Service (Amazon S3). Which solution stops traffic from crossing the internet?

• Create a VPC gateway endpoint for Amazon S3

• Use a private IP address for the system

• Use the private IP address of Amazon S3

• Create a VPC peering connection to Amazon S3

A company has three virtual private clouds (VPCs). VPCs A, B, and C have Classless Inter-Domain Routing (CIDR) blocks that do not overlap. Both A and C have separate VPC peering connections with B. However, A cannot communicate with C. What is the simplest and most cost-effective way to enable full communication between A and C?

• Add routes to B to enable traffic between A and C through B.

• Add a peering connection between A and C, and route traffic between A and C through the peering connection.

• Link all three VPCs through a transit VPC, and route all traffic through the transit VPC.

• Create VPC endpoints in A and C for the individual hosts that need to communicate with each other.

Because of a natural disaster, a company moved a secondary data center to a temporary facility with internet connectivity. It needs a secure connection to the company's virtual private cloud (VPC) that must be operational as soon as possible. The data center will move again in 2 weeks. Which option meets the requirements?

• VPC peering

• VPC endpoints

• AWS Site-to-Site VPN

• AWS Direct Connect

What is the simplest way to connect 100 virtual private clouds (VPCs) together?

• Create a hub-and-spoke network by using AWS VPN CloudHub

• Chain VPCs together by using VPC peering

• Connect each VPC to all the other VPCs by using VPC peering

• Connect the VPCs to AWS Transit Gateway

A company's security administrator requires that EC2 instances in a specific subnet must connect to Amazon DynamoDB through a VPC endpoint. The company's network standards require that the infrastructure support high availability. Which action meets these architecture requirements without adding another subnet?

• Associate a single VPC endpoint with the subnet

• Associate two VPC endpoints with the subnet

• Associate two VPC endpoints with the subnet and use Elastic Load Balancing

• Associate VPC endpoints through an Auto Scaling group that is connected to Elastic Load Balancing

A company uses a single AWS Direct Connect connection between their on-premises network and their virtual private cloud (VPC). They want to ensure that the network connectivity is highly available by adding a backup connection. Which network connectivity method provides most cost-effective solution for the backup connection?

• Another AWS Direct Connect connection through the same Direct Connect location

• Another AWS Direct Connect connection through a different Direct Connect location

• An on-demand AWS Client VPN connection across the internet

• An on-demand AWS Site-to-Site VPN connection across the internet