首页  /     /   在线练习

更新时间：   试题数量：   购买人数：   提供作者：

有效期： 个月

章节介绍： 共有个章节

收藏
搜索
题库预览
A company is planning to create a service that requires encryption in transit. The tra¨c must not be decrypted between the client and the backend
Of the service. The company will implement the service by using the gRPC protocol over TCP port 443. The service will scale up to thousands of
Simultaneous connections. The backend of the service will be hosted on an Amazon Elastic Kubernetes Service (Amazon EKS) duster with the
Kubernetes Cluster Autoscaler and the Horizontal Pod Autoscaler con¦gured. The company needs to use mutual TLS for two-way authentication
Between the client and the backend.
Which solution will meet these requirements?
A company is deploying a new application in the AWS Cloud. The company wants a highly available web server that will sit behind an Elastic Load
Balancer. The load balancer will route requests to multiple target groups based on the URL in the request. All tra¨c must use HTTPS. TLS
Processing must be o©oaded to the load balancer. The web server must know the user’s IP address so that the company can keep accurate logs
For security purposes.
Which solution will meet these requirements?
A company has developed an application on AWS that will track inventory levels of vending machines and initiate the restocking process
Automatically. The company plans to integrate this application with vending machines and deploy the vending machines in several markets around
The world. The application resides in a VPC in the us-east-1 Region. The application consists of an Amazon Elastic Container Service (Amazon
ECS) cluster behind an Application Load Balancer (ALB). The communication from the vending machines to the application happens over HTTPS.
The company is planning to use an AWS Global Accelerator accelerator and con¦gure static IP addresses of the accelerator in the vending
Machines for application endpoint access. The application must be accessible only through the accelerator and not through a direct connection
Over the internet to the ALB endpoint.
Which solution will meet these requirements?
A global delivery company is modernizing its §eet management system. The company has several business units. Each business unit designs and
Maintains applications that are hosted in its own AWS account in separate application VPCs in the same AWS Region. Each business unit's
Applications are designed to get data from a central shared services VPC.
The company wants the network connectivity architecture to provide granular security controls. The architecture also must be able to scale as
More business units consume data from the central shared services VPC in the future.
Which solution will meet these requirements in the MOST secure manner?
A company uses a 4 Gbps AWS Direct Connect dedicated connection with a link aggregation group (LAG) bundle to connect to ¦ve VPCs that are
Deployed in the us-east-1 Region. Each VPC serves a different business unit and uses its own private VIF for connectivity to the on-premises
Environment. Users are reporting slowness when they access resources that are hosted on AWS.
A network engineer ¦nds that there are sudden increases in throughput and that the Direct Connect connection becomes saturated at the same
Time for about an hour each business day. The company wants to know which business unit is causing the sudden increase in throughput. The
Network engineer must ¦nd out this information and implement a solution to resolve the problem.
Which solution will meet these requirements?
A software-as-a-service (SaaS) provider hosts its solution on Amazon EC2 instances within a VPC in the AWS Cloud. All of the provider's
Customers also have their environments in the AWS Cloud.
A recent design meeting revealed that the customers have IP address overlap with the provider's AWS deployment. The customers have stated
That they will not share their internal IP addresses and that they do not want to connect to the provider's SaaS service over the internet.
Which combination of steps is part of a solution that meets these requirements? (Choose two.)
A network engineer is designing the architecture for a healthcare company's workload that is moving to the AWS Cloud. All data to and from the
On-premises environment must be encrypted in transit. All tra¨c also must be inspected in the cloud before the tra¨c is allowed to leave the
Cloud and travel to the on-premises environment or to the internet.
The company will expose components of the workload to the internet so that patients can reserve appointments. The architecture must secure
These components and protect them against DDoS attacks. The architecture also must provide protection against ¦nancial liability for services
That scale out during a DDoS event.
Which combination of steps should the network engineer take to meet all these requirements for the workload? (Choose three.)
A retail company is running its service on AWS. The company’s architecture includes Application Load Balancers (ALBs) in public subnets. The
ALB target groups are con¦gured to send tra¨c to backend Amazon EC2 instances in private subnets. These backend EC2 instances can call
Externally hosted services over the internet by using a NAT gateway.
The company has noticed in its billing that NAT gateway usage has increased signi¦cantly. A network engineer needs to ¦nd out the source of this
Increased usage.
Which options can the network engineer use to investigate the tra¨c through the NAT gateway? (Choose two.)
A banking company is successfully operating its public mobile banking stack on AWS. The mobile banking stack is deployed in a VPC that
Includes private subnets and public subnets. The company is using IPv4 networking and has not deployed or supported IPv6 in the environment.
The company has decided to adopt a third-party service provider's API and must integrate the API with the existing environment. The service
Provider’s API requires the use of IPv6.
A network engineer must turn on IPv6 connectivity for the existing workload that is deployed in a private subnet. The company does not want to
Permit IPv6 tra¨c from the public internet and mandates that the company's servers must initiate all IPv6 connectivity. The network engineer turns
On IPv6 in the VPC and in the private subnets.
Which solution will meet these requirements?
A company has deployed an AWS Network Firewall ¦rewall into a VPC. A network engineer needs to implement a solution to deliver Network
Firewall §ow logs to the company’s Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster in the shortest possible time.
Which solution will meet these requirements?
A company is using custom DNS servers that run BIND for name resolution in its VPCs. The VPCs are deployed across multiple AWS accounts that
Are part of the same organization in AWS Organizations. All the VPCs are connected to a transit gateway. The BIND servers are running in a central
VPC and are con¦gured to forward all queries for an on-premises DNS domain to DNS servers that are hosted in an on-premises data center. To
Ensure that all the VPCs use the custom DNS servers, a network engineer has con¦gured a VPC DHCP options set in all the VPCs that speci¦es the
Custom DNS servers to be used as domain name servers.
Multiple development teams in the company want to use Amazon Elastic File System (Amazon EFS). A development team has created a new EFS
¦le system but cannot mount the ¦le system to one of its Amazon EC2 instances. The network engineer discovers that the EC2 instance cannot
Resolve the IP address for the EFS mount point fs-33444567d.efs.us-east-1.amazonaws.com. The network engineer needs to implement a solution
So that development teams throughout the organization can mount EFS ¦le systems.
Which combination of steps will meet these requirements? (Choose two.)
An ecommerce company is hosting a web application on Amazon EC2 instances to handle continuously changing customer demand. The EC2
Instances are part of an Auto Scaling group. The company wants to implement a solution to distribute tra¨c from customers to the EC2 instances.
The company must encrypt all tra¨c at all stages between the customers and the application servers. No decryption at intermediate points is
Allowed.
Which solution will meet these requirements?
A company has two on-premises data center locations. There is a company-managed router at each data center. Each data center has a dedicated
AWS Direct Connect connection to a Direct Connect gateway through a private virtual interface. The router for the ¦rst location is advertising 110
Routes to the Direct Connect gateway by using BGP, and the router for the second location is advertising 60 routes to the Direct Connect gateway
By using BGP. The Direct Connect gateway is attached to a company VPC through a virtual private gateway.
A network engineer receives reports that resources in the VPC are not reachable from various locations in either data center. The network
Engineer checks the VPC route table and sees that the routes from the ¦rst data center location are not being populated into the route table. The
Network engineer must resolve this issue in the most operationally e¨cient manner.
What should the network engineer do to meet these requirements?
A company has expanded its network to the AWS Cloud by using a hybrid architecture with multiple AWS accounts. The company has set up a
Shared AWS account for the connection to its on-premises data centers and the company o¨ces. The workloads consist of private web-based
Services for internal use. These services run in different AWS accounts. O¨ce-based employees consume these services by using a DNS name in
An on-premises DNS zone that is named example.internal.
The process to register a new service that runs on AWS requires a manual and complicated change request to the internal DNS. The process
Involves many teams.
The company wants to update the DNS registration process by giving the service creators access that will allow them to register their DNS
Records. A network engineer must design a solution that will achieve this goal. The solution must maximize cost-effectiveness and must require
The least possible number of con¦guration changes.
Which combination of steps should the network engineer take to meet these requirements? (Choose three.)
A company has multiple AWS accounts. Each account contains one or more VPCs. A new security guideline requires the inspection of all tra¨c
Between VPCs.
The company has deployed a transit gateway that provides connectivity between all VPCs. The company also has deployed a shared services VPC
With Amazon EC2 instances that include IDS services for stateful inspection. The EC2 instances are deployed across three Availability Zones. The
Company has set up VPC associations and routing on the transit gateway. The company has migrated a few test VPCs to the new solution for
Tra¨c inspection.
Soon after the con¦guration of routing, the company receives reports of intermittent connections for tra¨c that crosses Availability Zones.
What should a network engineer do to resolve this issue?
A company is using a NAT gateway to allow internet connectivity for private subnets in a VPC in the us-west-2 Region. After a security audit, the
Company needs to remove the NAT gateway.
In the private subnets, the company has resources that use the uni¦ed Amazon CloudWatch agent. A network engineer must create a solution to
Ensure that the uni¦ed CloudWatch agent continues to work after the removal of the NAT gateway.
Which combination of steps should the network engineer take to meet these requirements? (Choose three.)
An international company provides early warning about tsunamis. The company plans to use IoT devices to monitor sea waves around the world.
The data that is collected by the IoT devices must reach the company’s infrastructure on AWS as quickly as possible. The company is using three
Operation centers around the world. Each operation center is connected to AWS through Its own AWS Direct Connect connection. Each operation
Center is connected to the internet through at least two upstream internet service providers.
The company has its own provider-independent (PI) address space. The IoT devices use TCP protocols for reliable transmission of the data they
Collect. The IoT devices have both landline and mobile internet connectivity. The infrastructure and the solution will be deployed in multiple AWS
Regions. The company will use Amazon Route 53 for DNS services.
A network engineer needs to design connectivity between the IoT devices and the services that run in the AWS Cloud.
Which solution will meet these requirements with the HIGHEST availability?
A company is planning a migration of its critical workloads from an on-premises data center to Amazon EC2 instances. The plan includes a new
10 Gbps AWS Direct Connect dedicated connection from the on-premises data center to a VPC that is attached to a transit gateway. The migration
Must occur over encrypted paths between the on-premises data center and the AWS Cloud.
Which solution will meet these requirements while providing the HIGHEST throughput?
A network engineer must develop an AWS CloudFormation template that can create a virtual private gateway, a customer gateway, a VPN
Connection, and static routes in a route table. During testing of the template, the network engineer notes that the CloudFormation template has
Encountered an error and is rolling back.
What should the network engineer do to resolve the error?
A company operates its IT services through a multi-site hybrid infrastructure. The company deploys resources on AWS in the us-east-1 Region and
In the eu-west-2 Region. The company also deploys resources in its own data centers that are located in the United States (US) and in the United
Kingdom (UK). In both AWS Regions, the company uses a transit gateway to connect 15 VPCs to each other. The company has created a transit
Gateway peering connection between the two transit gateways. The VPC CIDR blocks do not overlap with each other or with IP addresses used
Within the data centers. The VPC CIDR pre¦xes can also be aggregated either on a Regional level or for the company's entire AWS environment.
The data centers are connected to each other by a private WAN connection. IP routing information is exchanged dynamically through Interior BGP
(iBGP) sessions. The data centers maintain connectivity to AWS through one AWS Direct Connect connection in the US and one Direct Connect
Connection in the UK. Each Direct Connect connection is terminated on a Direct Connect gateway and is associated with a local transit gateway
Through a transit VIF.
Tra¨c follows the shortest geographical path from source to destination. For example, packets from the UK data center that are targeted to
Resources in eu-west-2 travel across the local Direct Connect connection. In cases of cross-Region data transfers, such as from the UK data center
To VPCs in us-east-1, the private WAN connection must be used to minimize costs on AWS. A network engineer has con¦gured each transit
Gateway association on the Direct Connect gateway to advertise VPC-speci¦c CIDR IP pre¦xes only from the local Region. The routes toward the
Other Region must be learned through BGP from the routers in the other data center in the original, non-aggregated form.
The company recently experienced a problem with cross-Region data transfers because of issues with its private WAN connection. The network
Engineer needs to modify the routing setup to prevent similar interruptions in the future. The solution cannot modify the original tra¨c routing
Goal when the network is operating normally.
Which modi¦cations will meet these requirements? (Choose two.)
1 2 3 4 5 6 9
更多题库
2023JX带电检测竞赛题库最新
带电比武新增08.18
甘网安竞_练习
20230829齐林安全题库
工业机器人运维员高级工题库第1-6部分
当当-判断题
御庭兰香入群试题
输电检修（3）
输电检修（2）
警务技能考试题库
工业机器人系统运维员理论题库
变电一次安装工
装备技师职业技能初级试题（第一套）
2023dang知识竞赛
低压电工试题
竞赛题库（全）
8月19日每日一练
德普运维锅炉运行岗位
安全督查安规考试题库等级评价
个人赛常规单选题