Advanced Architecting on AWS - 1st Day (set 1)

Using site-to-site VPN, hosts inside VPN network must install client software or agent. TRUE or FALSE

• True

• False

What are the two types of Amazon Route 53 hosted zones?

• Public hosted zone & private hosted zone

• Public hosted zone & global hosted zone

• Public hosted zone & global hosted zone

• Routed hosted zone & global hosted zone

Which of the following exposes the Amazon side of a Virtual Private Network (VPN) connection?

• An Elastic IP address

• A customer gateway

• An Internet Gateway

• Transit Gateway attachment - type VPN

What of following services are used by AWS Control Tower?

• AWS Identity Center

• AWS Service Catalog

• Amazon S3

• AWS Config

What are support types of Transit Gateway attachment?

• Peering Connection

• VPN

• VPC

• Connect

• All of the options

What if we apply a SCP to management account in AWS Organizations?

• The SCP will apply all child OUs in the organization and the management account

• The SCP will apply to all child OUs in the organization but not the management account

• It will have no any impact

• We can't apply SCP to the management account in the organization

What AWS services are supported by VPC gateway endpoint?

• Systems Manager

• Secret Manager

• DynamoDB

• All of the options

Using Amazon Route 53, how can you share rules across AWS accounts or with an on-premises network?

• Amazon Route 53 Resolver is integrated with AWS Opsworks, which provides customers with a simple way to share their resources across AWS accounts and within their AWS Organizations.

• Amazon Route 53 Resolver is integrated with Amazon Route 53 which provides customers with a simple way to share their resources across AWS accounts or within their AWS Organizations.

• Amazon Route 53 Resolver is integrated with AWS Systems Manager, which provides customers with a simple way to share their resources across AWS accounts and within their AWS Organizations.

• Amazon Route 53 Resolver is integrated with AWS Resource Access Manager (RAM), which provides customers with a simple way to share their resources across AWS accounts and within their AWS Organizations.

How can you access resources in an Amazon VPC that is in a different Region from which you set up the TLS session using a private IP address via AWS Client VPN? (Select TWO.)

• You need to enable the VPC Gateway endpoint to achieve this.

• You need to set up a proxy farm provided by AWS Marketplace partners between the two VPCs in different regions.

• You should add a route and access rule for the destination VPC via the Client VPN endpoint.

• You need to set up an inter-region VPC peering connection between the two VPCs in different regions.

Which of the following statements best describes AWS Local Zones.

• Local Zones do not support AWS Direct Connect 

• Local Zones are connected by high speed links to an AWS Region

• Local Zones support all the same services offered by an AWS Region

• Local Zones offer lower latency than AWS Outposts