ANS-C01 Practice Test 4 — 10 Questions

Question 1

A company is migrating its on-premises data center to AWS and wants to use AWS Direct Connect for private connectivity. The network team plans to advertise the company's public IP prefixes to AWS via BGP. Which AWS resource must be configured to allow advertisement of these prefixes?

Accepted Answer

A public virtual interface on the Direct Connect connection. To advertise public IP prefixes over AWS Direct Connect, you must use a public virtual interface (VIF). A public VIF allows you to reach public AWS endpoints (such as S3, DynamoDB, or any public IP range) over the Direct Connect link, and it supports BGP peering where you can advertise your public IP prefixes to AWS. Private VIFs are only for private VPC connectivity and do not accept customer-originated public prefix advertisements.

Answer

A VPN CloudHub topology

Answer

A private virtual interface on the Direct Connect connection

Answer

A transit virtual interface on the Direct Connect connection

Question 2

Match each AWS security feature to its description.

Question 3

Match each BGP attribute to its role in route selection.

Question 4

Match each VPN term to its correct description in the context of AWS Site-to-Site VPN.

Question 5

Match each AWS Direct Connect virtual interface type to its use case.

Question 6

Arrange the steps to configure a site-to-site VPN connection between an AWS Virtual Private Gateway and an on-premises Cisco ASA in the correct order.

Question 7

Order the steps to troubleshoot an AWS Direct Connect virtual interface that is in the 'down' state:

Question 8

Arrange the steps to configure BGP on a Cisco router for a Direct Connect private virtual interface:

Question 9

Arrange the steps to configure VPC Flow Logs for a VPC and publish logs to CloudWatch Logs:

Question 10

Order the steps to troubleshoot an inter-Region VPC peering connection that is not working: