Aviatrix Certified Engineer (ACE) program - ACE Exam Practice Test
Question 1
ACE Inc. has 50 VPCs in AWS with applications that need access to SaaS services on the internet using pre-defined.
FQDNs. Current deployment has AWS NAT instances deployed that allow full internet access.
ACE Inc.'s security team has mandated that these applications should only be allowed access to pre-approved FQDNs.
You have been tasked to solve this problem considering the following three goals.
1. Solution must be easy to implement
2. Same URLs definitions can be used for multiple applications
3. Keep the cost down
FQDNs. Current deployment has AWS NAT instances deployed that allow full internet access.
ACE Inc.'s security team has mandated that these applications should only be allowed access to pre-approved FQDNs.
You have been tasked to solve this problem considering the following three goals.
1. Solution must be easy to implement
2. Same URLs definitions can be used for multiple applications
3. Keep the cost down
Correct Answer: C
Question 2
The IPSec tunnels terminating at AWS TGW/VGW, Azure VPN GW, and other native VPN support interconnecting networks with overlapping IP ranges SELECT THE CORRECT ANSWER
Correct Answer: B
Question 3
As a Cloud Networking Consultant, you are reviewing a Microsoft Azure Virtual WAN network design that will be used to connect several VNets, branches, users and a Data Center (using ExpressRoute). What are some known challenges with this design pattern? (Choose 3)
Correct Answer: A,D,F
Question 4
Where is the 'center of gravity' in the new computing model?
Correct Answer: A
Question 5
Stateful Firewall rule:
SELECT THE CORRECT ANSWER
SELECT THE CORRECT ANSWER
Correct Answer: D
Question 6
Customers do not need to sign a separate licensing agreement with Aviatrix to get started because controller can be launched from any cloud provider's Marketplace (Pay-As-You-Go metering).
Correct Answer: B
Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).
Question 7
ACE Inc. has a Direct Connect for their on-premise location to connect to AWS. Security team has recently been notified of issues where employees and contractors working from the on-premise location are using non-corporate (personal or public) S3 buckets using ACE Inc.'s Direct Connect. This is overwhelming the Direct Connect and also showing the source of traffic to these S3 buckets as ACE Inc. which has potential compliance and security risks.
As a cloud architect, you are tasked with securing the Direct Connect for specific ACE Inc. corporate S3 buckets access only. Which Aviatrix feature can help ACE Inc. overcome this problem?
As a cloud architect, you are tasked with securing the Direct Connect for specific ACE Inc. corporate S3 buckets access only. Which Aviatrix feature can help ACE Inc. overcome this problem?
Correct Answer: A
Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).
Question 8
An operator needs to create a new VPC, VCN or VNet using Aviatrix Controller.
Can the operator use Aviatrix VPC Tracker feature to validate potential CIDR/Prefix/Address space duplication across multiple clouds?
Can the operator use Aviatrix VPC Tracker feature to validate potential CIDR/Prefix/Address space duplication across multiple clouds?
Correct Answer: A
