Aviatrix ACE Exam Questions Instant Access

Question 1

As per the cloud architecture best practices guidelines in Multi-Cloud Network Architecture (MCNA), which component provides a consistent transit available in all regions across all public cloud providers.

ACloud Operations Layer

BGlobal Transit Layer

CCloud Applications Layer

DCloud Security Layer

Answer : B

Aviatrix software enables enterprise IT to easily deploy a high-availability, multi-cloud

network data plane with end-to-end encryption, high-performance encryption, multi-cloud security

domains, and operational telemetry operations teams need. This is the main point of connection for every

aspect of the cloud. This global transit layer also has the notion of inserting services in its platform, which

is done through the service insertion framework.

Question 2

An operator needs to create a new VPC, VCN or VNet using Aviatrix Controller.

Can the operator use Aviatrix VPC Tracker feature to validate potential CIDR/Prefix/Address space duplication across multiple clouds?

ATrue

BFalse

Answer : A

Question 3

The feature in Aviatrix Controller that allows customers to see path between two instances/AMI/EC2/VM (including, but not limited to Security Groups, ACLs, Routes, etc.) is called:

AFlightPath

BNetflow

CFlightControl

DNetwork Connectivity Test

Answer : A

Question 4

ACE Inc. has a Direct Connect for their on-premise location to connect to AWS. Security team has recently been notified of issues where employees and contractors working from the on-premise location are using non-corporate (personal or public) S3 buckets using ACE Inc.'s Direct Connect. This is overwhelming the Direct Connect and also showing the source of traffic to these S3 buckets as ACE Inc. which has potential compliance and security risks.

As a cloud architect, you are tasked with securing the Direct Connect for specific ACE Inc. corporate S3 buckets access only. Which Aviatrix feature can help ACE Inc. overcome this problem?

AAviatrix FlightPath

BAviatrix CoPilot

CAviatrix Private S3

DAviatrix Multi-Account Onboarding

Answer : C

Aviatrix PrivateS3 is a feature that allows you to leverage AWS Direct Connect to transfer

objects and files between on-prem and S3 while giving you control of the S3 buckets by the ability to

whitelist the S3 buckets.

Question 5

AWS Global Accelerator is a service which allows a direct connectivity between AWS DirectConnect and Azure ExpressRoute.

ATrue

BFalse

Answer : B

AWS Global Accelerator is a service that improves the availability and performance of your applications with local or global users. It provides static IP addresses that act as a fixed entry point to your application endpoints in a single or multiple AWS Regions, such as your Application Load Balancers, Network Load Balancers or Amazon EC2 instances.

Question 6

ACE Inc. has a VNet-A hosting Database services which is peered with several app VNets. There is a new requirement to add another CIDR to VNet-

AHow can you prevent a database connectivity outage for all the peered VNets while performing this task?

AUse powershell to update the VNet-A CIDR

BYou cannot add a CIDR to a VNet after It has been created

CIt's not possible to perform this action without an outage as you need to delete all existing peering before new CIDR can be added

DFirst modify peering routes for all the VNets to add the new CIDR and then add the new CIDR to VNET-A

Answer : D

Question 7

AWS Guard Duty automatically enforces its findings through the ingress routing feature, blocking the traffic by default.

SELECT THE CORRECT ANSWER

AFalse

BTrue

Answer : A

monitoring service that analyzes and processes the following Data sources.

Aviatrix Certified Engineer (ACE) Program ACE Exam Questions