Question 1mediummultiple choice
Read the full NAT/PAT explanation →ANS-C01 Network Management and Operations • Complete Question Bank
Complete ANS-C01 Network Management and Operations question bank — all 0 questions with answers and detailed explanations.
Refer to the exhibit. VPC Flow Logs (vpc-flow-logs-1) - capture window: 2023-09-15T10:00:00Z to 2023-09-15T11:00:00Z 2 123456789010 eni-0a1b2c3d4e5f6g7h 10.0.1.5 10.0.2.10 443 54321 6 10 1000 1623456789 1623456790 ACCEPT OK 2 123456789010 eni-0a1b2c3d4e5f6g7h 10.0.2.10 10.0.1.5 54321 443 6 10 1000 1623456790 1623456795 ACCEPT OK 2 123456789010 eni-0a1b2c3d4e5f6g7h 10.0.1.5 192.168.1.1 80 12345 6 20 2000 1623456800 1623456810 ACCEPT OK 2 123456789010 eni-0a1b2c3d4e5f6g7h 10.0.1.5 10.0.2.10 443 54322 6 10 1000 1623456810 1623456820 ACCEPT OK 2 123456789010 eni-0a1b2c3d4e5f6g7h 10.0.2.10 10.0.1.5 54322 443 6 10 1000 1623456820 1623456830 ACCEPT OK
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag a concept onto its matching description — or click a concept then click the description.
Hub-and-spoke connectivity between VPCs and on-premises
Dedicated network connection from on-premises to AWS
Direct network connection between two VPCs
Private access to services across VPCs and accounts
Encrypted tunnel over the internet to AWS
Drag a concept onto its matching description — or click a concept then click the description.
VPN concentrator on the AWS side attached to a VPC
VPN device on the on-premises side
Encrypted IPsec connection between VGW and CGW
Secret key used to authenticate the VPN tunnel endpoints
Dynamic routing protocol used to exchange routes over VPN tunnels
Drag a concept onto its matching description — or click a concept then click the description.
Cisco-proprietary attribute, highest weight preferred
Used to influence outbound traffic from an AS
Shorter path is preferred
Used to influence inbound traffic to an AS
IP address of the next router to reach the destination
Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": "delivery.logs.amazonaws.com"
},
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::my-flow-logs-bucket/AWSLogs/*",
"Condition": {
"ArnLike": {
"aws:SourceArn": "arn:aws:logs:us-east-1:123456789012:*"
}
}
}
]
}
```Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:CreateFlowLogs",
"ec2:DescribeFlowLogs",
"ec2:DeleteFlowLogs"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"logs:CreateLogGroup",
"logs:CreateLogStream",
"logs:PutLogEvents",
"logs:DescribeLogGroups"
],
"Resource": "arn:aws:logs:us-east-1:123456789012:log-group:/aws/vpc-flow-logs/*"
},
{
"Effect": "Allow",
"Action": [
"iam:PassRole"
],
"Resource": "arn:aws:iam::123456789012:role/FlowLogsRole"
}
]
}
```Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:CreateVpcPeeringConnection",
"ec2:AcceptVpcPeeringConnection",
"ec2:DeleteVpcPeeringConnection"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ec2:CreateRoute",
"ec2:DeleteRoute",
"ec2:ModifyVpcPeeringConnectionOptions"
],
"Resource": "arn:aws:ec2:us-east-1:123456789012:vpc-peering-connection/*"
}
]
}
```Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Service": "vpc-flow-logs.amazonaws.com"
},
"Action": [
"logs:CreateLogGroup",
"logs:CreateLogStream",
"logs:PutLogEvents",
"logs:DescribeLogGroups",
"logs:DescribeLogStreams"
],
"Resource": "arn:aws:logs:us-east-1:123456789012:log-group:my-flow-logs:*"
}
]
}
```Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:CreateNetworkInterface",
"ec2:DescribeNetworkInterfaces",
"ec2:DeleteNetworkInterface"
],
"Resource": "*"
}
]
}
```Refer to the exhibit.
```
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:CreateVpcPeeringConnection",
"ec2:AcceptVpcPeeringConnection"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "ec2:DescribeVpcPeeringConnections",
"Resource": "*"
}
]
}
```