practice sheet · all objectives switch to smart practice →
Cloud Architect (Professional)
A network engineer must enforce subnet-level isolation between two tiers of ECS instances residing in different vSwitches, applying consistent inbound and outbound rules across those vSwitches. The team notes that return traffic for allowed inbound rules must be handled explicitly. Which access control mechanism best fits these requirements?
Explanation
Flow log Captures inbound and outbound traffic for elastic network interfaces (ENIs) to help you monitor network performance
Stateless. Return traffic must be explicitly allowed.
An architect is designing a cross-region cloud network using two transit routers (TRs) in different regions. The requirement is simply to interconnect the VPCs behind each TR with minimal manual maintenance and automatic route updates when the topology changes. Which TR connection approach should the architect choose?
Explanation
Two directly connected TRs can automatically learn routes or be manually configured with routes for communication.
Use direct TR connections with automatic route learning so routes update automatically when the topology changes.
Locked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to reviewLocked question — unlock this exam to view it.
locked — unlock to review