Aviatrix ACE Exam Questions Instant Access

Question 1

Which networking entity in the cloud infrastructure allows operators to run commands to see BGP state, route tables, diagnostic, logs etc.

AAWSVPC Implicit Router

BAzure VNET Router

CGoogle Cloud Router

DAviatrix Gateway

Answer : D

Question 2

Stateful Firewall rule:

SELECT THE CORRECT ANSWER

Ais another name of Azure Active Directory Firewall

Brequires explicit rule for the return traffic

Callows the return traffic implicitly

Dalone can easily satisfy the enterprise security needs

Answer : B

Question 3

ACE Inc. currently uses AWS as their primary cloud provider with a strong desire to expand to Azure and GCP. IT team has strict security and control requirements from different business units that require isolation and control from each other. The different business units want

* to own their own transit architecture

* the ability to control firewall rules for their own application

* to not share same transit with other business units but have ability to connect to other business units if needed

The architecture board has mandated that there needs to be a single design pattern that accommodates above requirements irrespective of the public cloud vendor being used.

Choose the best design option to meet above needs. Each option presents a complete solution.

AUse AWS Transit Gateway (TGW). Deploy several TGWs in each region and peer them together as needed. Use
TGW VPN to build IPSec tunnels to Azure Virtual WAN and Google Cloud VPN.

BUse Azure Virtual WAN to connect all the branches, users and VNets together. Insert a centralized 3rd party
firewall in Virtual WAN to control traffic. Use Azure Gateway to build IPSec tunnels to AWS Transit Gateway and
Google Cloud VPN.

CUse Aviatrix repeatable transit architecture integrated with 3rd party Next Gen Firewalls. Deploy same transit
architecture multiple times in a region and use same design and normalized datapath for AWS, Azure, GCP and
OCI. Provide NextGen firewalls in each transit so the business units can control their own firewalls and allow
connectivity in and out of their transit.

DUse GCP global routing which allows connecting all GCP VPCs. Use Google Cloud VPN to build tunnels to AWS
TGW and Azure Virtual WAN.

Answer : C

As here AWS is Primary Cloud Provider.

With Aviatrix You can Bring your own firewall to the cloud. Pre-integrated with Next-Generation Firewalls

to enable inline inspection of VPC traffic to maximize security and performance.

Multicloud and Multi-Region is the new normal: With Aviatrix You can support your business needs for onprem and multiple cloud providers. Instead of managing different cloud vendor gateways, Aviatrix NextGeneration Transit Network lets you abstract away the networking differences between AWS, Azure, Google

and Private Cloud.

Question 4

An example of when would you use Aviatrix FlightPath is:

ATo insert Firewall into traffic path between 2 VPCs

BTo connect your branch office to the cloud resources

CTo view controller logs

DTo troubleshoot connectivity between EC2 instances in 2 AWS VPCs

Answer : D

EC2 related information such as Security Groups, Route table and route table entries and network ACL.

This helps you to identify connectivity problems.

You do not need to launch Aviatrix gateways to use this tool, but you need to create Aviatrix accounts so

that the Controller can use the account credentials to execute AWS APIs to retrieve relevant information.

Question 5

Using AWS Terraform provider, a customer created an AWS Transit Gateway with 50 VPCs attached to it. After attaching the VPCs and spinning up some EC2 instances in them, none of the instances can communicate with each other. What should be done to resolve the issue?

AThere must be security group rules blocking traffic as AWS auto configures VPC routing tables

BConfigure BGP communities in VPC such that all VPCs that need to communicate with eachother have same community defined

CCreate routing tables in each VPC, add CIDR for all the other VPCs in the routing table pointing to AWS Transit Gateway

DThere must be security group rules blocking traffic as BGP in VPC auto configures VPC routing tables

Answer : A

Question 6

Choose the best definition for Firewall Network (FireNet)?

AAviatrix turn key solution to scalably deploy firewall instances in the cloud

BAzure functionality to deploy 3rd party firewalls in a VPC

CAWS functionality to deploy 3rd party firewalls in a VPC

DGCP functionality to deploy 3rd party firewalls in a VPC

Answer : A

Firewall Network (FireNet) Workflow Aviatrix Firewall Network (FireNet) is a turn key network solution to deploy firewall instances in the cloud.

FireNet is a solution for integrating firewalls in the AWS TGW deployment.

Question 7

Aviatrix Gateways support NAT capability in which public cloud?

AAWS

BAll the the Public Cloud listed here in the options

CGoogle Cloud

DMicrosoft Azure

Answer : B

Aviatrix Certified Engineer (ACE) Program ACE Exam Questions