ANS-C01 Exam Questions & Answers

A company is running an online game on AWS. The game is played globally and is gaining popularity. Users are reporting problems with thegame's responsiveness. Replay rates are dropping, and the company is losing subscribers. Game servers are located in the us-west-2 Regionand use an Elastic Load Balancer to distribute client traffic.The company has decided to deploy game servers to 11 additional AWS Regions to reduce the round-trip times of network traffic to gameclients. A network engineer must design a DNS solution that uses Amazon Route 53 to ensure that user traffic is delivered to game serverswith an optimal response time.What should the network engineer do to meet these requirements?

A. Create Route 53 records for the Elastic Load Balancers in each Region. Specify a weighted routing policy. Calculate the weight by usingthe number of clients in each Region.

B. Create Route 53 records for the Elastic Load Balancers in each Region. Specify a latency routing policy. Set the Region to the Regionwhere the Elastic Load Balancer is deployed.

C. Create Route 53 records for the Elastic Load Balancers in each Region. Specify a multivalue answer routing policy. Test latency fromthe game client, and connect to the server with the best response.

D. Create Route 53 records for the Elastic Load Balancers in each Region. Specify a geolocation routing policy. Set the location to theRegion where the Elastic Load Balancer is deployed.

A European car manufacturer wants to migrate its customer-facing services and its analytics platform from two on-premises data centers tothe AWS Cloud. The company has a 50-mile (80.4 km) separation between its on-premises data centers and must maintain that separationbetween its two locations in the cloud. The company also needs failover capabilities between the two locations in the cloud.The company's infrastructure team creates several accounts to separate workloads and responsibilities. The company provisions resources inthe eu-west-3 Region and in the eu-central-1 Region. The company selects an AWS Direct Connect Partner in each Region and requests tworesilient 1 Gbps fiber connections from each provider.The company's network engineer must establish a connection between all VPCs in the accounts and between the on-premises network andthe AWS Cloud. The solution must provide access to all services in both Regions in case of network issues.Which solution will meet these requirements?

A. Create a Direct Connect gateway. Create a private VIF on each of the Direct Connect connections. Attach the private VIFs to the DirectConnect gateway. Use equal-cost multi-path (ECMP) routing to aggregate the four connections across the two Regions. Attach the DirectConnect gateway directly to each VPC's virtual private gateway.

B. Create a Direct Connect gateway. Create a transit gateway. Attach the transit gateway to the Direct Connect gateway. Create a transitVIF on each of the Direct Connect connections. Attach the transit VIFs to the Direct Connect gateway. Use a link aggregation group (LAG)to aggregate the four connections across the two Regions. Attach the transit gateway directly to each VPC.

C. Create a Direct Connect gateway. Create a transit gateway in each Region. Attach the transit gateways to the Direct Connect gateway.Create a transit VIF on each of the Direct Connect connections. Attach the transit VIFs to the Direct Connect gateway. Peer the transitgateways. Attach the transit gateways in each Region to the VPCs in the same Region.

D. Create a Direct Connect gateway. Create a private VIF on each of the Direct Connect connections. Attach the private VIFs to the DirectConnect gateway. Use a link aggregation group (LAG) to aggregate the four connections across the two Regions. Create a transit gateway.Attach the transit gateway to the Direct Connect gateway. Attach the transit gateway directly to each VPC.

A network engineer needs to deploy an AWS Network Firewall firewall into an existing AWS environment. The environment consists of thefollowing:. A transit gateway with all VPCs attached to it. Several hundred application VPCs. A centralized egress internet VPC with a NAT gateway and an internet gateway. A centralized ingress internet VPC that hosts public Application Load Balancers. On-premises connectivity through an AWS Direct Connect gateway attachmentThe application VPCs have workloads deployed across multiple Availability Zones in private subnets with the VPC route table s default route(0.0.0.0/0) pointing to the transit gateway. The Network Firewall firewall needs to inspect east-west (VPC-to-VPC) traffic and north-south(internet-bound and on-premises network) traffic by using Suricata compatible rules.The network engineer must deploy the firewall by using a solution that requires the least possible architectural changes to the existingproduction environment.Which combination of steps should the network engineer take to meet these requirements? (Choose three.)

A. Deploy Network Firewall in all Availability Zones in each application VPC.

B. Deploy Network Firewall in all Availability Zones in a centralized inspection VPC.

C. Update the HOME_NET rule group variable to include all CIDR ranges of the VPCs and on-premises networks.

D. Update the EXTERNAL_NET rule group variable to include all CIDR ranges of the VPCs and on-premises networks.

E. Configure a single transit gateway route table. Associate all application VPCs and the centralized inspection VPC with this route table.

F. Configure two transit gateway route tables. Associate all application VPCs with one transit gateway route table. Associate thecentralized inspection VPC with the other transit gateway route table.