An organization has multiple applications running in VPCs across multiple AWS accounts. The network engineer has deployed a central VPC with a pair of software VPN instances that run IPSec tunnels with dynamic routing to VGWs of all application VPCs. This central VPC is connected to on-premises resources via a Direct Connect connection using a private VIF.
What additional configuration is required to enable the applications in VPCs to communicate with each other and access on-premises resources?
Response:

• A.Configure each application VPC with a static route entry pointing the on-premises CIDR block to the software VPN instances
• B.Configure the central VPC with a static route entry pointing the on-premises CIDR block to local VGWs
• C.Configure IPSec tunnels from the on-premises router into the software VPN instances with dynamic routing
• D.Advertise all application VPC CIDR blocks to on-premises resources via the VGW in the central VPC

Comment: *

Name: *

Email: *

Verification: *

Which of the following allows you to restrict access to your Amazon Simple Storage Service (Amazon S3) bucket to Amazon CloudFront distributions that you control?
Response:

• A.Custom HTTP header
• B.Preshared keys
• C.AWS Lambda@Edge
• D.Origin Access Control (OAC)

Comment: *

Name: *

Email: *

Verification: *

You support an application that is hosted in ap-northeast-1 and eu-central-1. Users from around the word sometimes complain about long page-load times. Which Amazon Route 53 routing policy would provide the best user experience?
Response:

• A.Geolocation
• B.Latency-based
• C.Weighted
• D.Failover

Comment: *

Name: *

Email: *

Verification: *

The networking team at a company wants to do a Simple AD deployment and use it for the company's Microsoft Exchange email server. The team is having issues finding the AD server. What is the most probable root cause behind this issue?
Response:

• A.The Network Access Control List is blocking the traffic to the email server
• B.TLS is not implemented
• C.You need to contact AWS to receive an MX record for the Microsoft Exchange email server
• D.Simple AD does not support Microsoft Exchange

Comment: *

Name: *

Email: *

Verification: *

When setting up a client-to-site VPN using EC2 instance to access AWS resources, which of the following configuration would be preferable considering the security and management?
Response:

• A.Configure client software to use an EC2 elastic IP as the VPN termination endpoint. Build in automation to detect failure, and move Elastic IP from the primary to the secondary EC2 instance.
• B.Configure the client software to use an EC2 elastic IP as the VPN termination endpoint. Turn on EC2 auto-recovery on this instance.
• C.Leverage the high availability built into Virtual Private Gateway (VGW).
• D.Configure client software to use a DNS name as a VPN termination endpoint. Map the DNS name to multiple IP addresses using Amazon Route 53 and set up health checks.

Comment: *

Name: *

Email: *

Verification: *