CompTIA Cloud+ Networking and Connectivity 2 — Questions and Answers
Question 1: A company requires a dedicated, low-latency private connection from their data center to a cloud provider with guaranteed throughput. Which solution is MOST appropriate?
- Site-to-Site IPSec VPN over the internet
- Direct Connect or ExpressRoute dedicated circuit (Correct answer)
- Client VPN with split tunneling
- Internet Gateway with enhanced networking
Correct answer: Direct Connect or ExpressRoute dedicated circuit
Direct Connect (AWS) and ExpressRoute (Azure) provide dedicated private circuits between on-premises infrastructure and the cloud, offering consistent bandwidth and lower latency than internet-based VPNs.
Question 2: What is the primary advantage of using a Content Delivery Network (CDN) in a cloud architecture?
- It provides encrypted tunnels for all cloud-to-user communication
- It reduces latency by caching content at edge locations near users (Correct answer)
- It automatically scales compute resources during peak demand
- It provides dedicated bandwidth between cloud regions
Correct answer: It reduces latency by caching content at edge locations near users
A CDN caches content at geographically distributed edge locations, reducing latency by serving requests from the point of presence closest to each user.
Question 3: A cloud architect needs to connect multiple VPCs and on-premises networks using a hub-and-spoke topology. Which service best supports this design?
- VPC Peering between all VPCs
- Internet Gateway with routing policies
- Transit Gateway (Correct answer)
- NAT Gateway with route propagation
Correct answer: Transit Gateway
A Transit Gateway acts as a central hub connecting multiple VPCs and on-premises networks, simplifying large-scale network architectures in a hub-and-spoke model.
Question 4: What is the CIDR notation for a subnet that provides exactly 254 usable host addresses?
- /16
- /24 (Correct answer)
- /28
- /32
Correct answer: /24
A /24 subnet provides 256 total addresses (2^8), with 254 usable host addresses after reserving the network address and broadcast address.
Question 5: Which type of cloud load balancer operates at OSI Layer 7 and can route requests based on HTTP headers, URL paths, and hostnames?
- Network Load Balancer
- Classic Load Balancer
- Application Load Balancer (Correct answer)
- Gateway Load Balancer
Correct answer: Application Load Balancer
An Application Load Balancer (ALB) operates at Layer 7 (application layer) and supports content-based routing using HTTP headers, URL paths, and hostnames.
Question 6: In cloud networking terminology, what does 'east-west traffic' refer to?
- Traffic flowing between the cloud and external internet users
- Lateral traffic flowing between servers or services within the same cloud environment (Correct answer)
- Traffic flowing from on-premises data centers to the cloud
- Traffic routed between geographically separated cloud regions
Correct answer: Lateral traffic flowing between servers or services within the same cloud environment
East-west traffic refers to lateral traffic flowing between servers, microservices, or workloads within the same cloud environment or data center.
Question 7: A cloud engineer needs two subnets in different VPCs across different AWS accounts (same region) to communicate privately without internet transit. Which solution achieves this?
- Internet Gateway with restrictive security group rules
- Site-to-Site VPN Gateway with IPSec encryption
- VPC Peering with cross-account authorization (Correct answer)
- Direct Connect with private virtual interface
Correct answer: VPC Peering with cross-account authorization
VPC Peering supports cross-account connections, enabling private communication between VPCs in different accounts using private IP addresses with no internet transit.
CompTIA Cloud+ Networking and Connectivity 2
A company requires a dedicated, low-latency private connection from their data center to a cloud provider with guaranteed throughput.
Which solution is MOST appropriate?