Architecting on AWS Certification Architecting on AWS Certification Networking & Content Delivery

Question 1

A company needs to connect its on-premises data center to AWS with consistent, low-latency network performance. Which service should the architect recommend?

Accepted Answer

AWS Direct Connect

Answer

AWS Direct Connect provides a dedicated private network connection from on-premises to AWS, delivering consistent low-latency performance unlike VPN which traverses the public internet.

Question 2

Which VPC component controls inbound and outbound traffic at the subnet level and is stateless?

Accepted Answer

Network Access Control Lists (NACLs)

Answer

NACLs are stateless subnet-level firewalls that evaluate both inbound and outbound rules independently, unlike Security Groups which are stateful.

Question 3

A solutions architect needs to route users to the nearest AWS edge location to reduce latency for a global web application. Which Route 53 routing policy should be used?

Accepted Answer

Latency-based routing

Answer

Latency-based routing directs users to the AWS region that provides the lowest network latency for their location, improving performance for global applications.

Question 4

An architect wants to enable instances in a private subnet to access the internet for software updates without exposing them to inbound internet traffic. What should be deployed?

Accepted Answer

NAT Gateway in a public subnet

Answer

A NAT Gateway placed in a public subnet allows private subnet instances to initiate outbound internet connections while blocking unsolicited inbound connections.

Question 5

Which AWS service allows you to privately connect your VPC to supported AWS services without requiring an internet gateway, NAT device, or VPN connection?

Accepted Answer

VPC Endpoints

Answer

VPC Endpoints (both Gateway and Interface types) enable private connectivity between your VPC and AWS services without traffic leaving the Amazon network.

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Architecting on AWS Certification Networking & Content Delivery