1. You currently have setup a VPN configuration on-premises location AWS. AWS(Amazon Web Service) VPC CIDR is 10.0.0.0/16 and subnet 10.0.1.0/24. The company's premises location is a network of CIDR block 10.0.37.0/24. Traffic is dropped when it is sent to the subnet manifestations of the company's premises location. Therefore, it could be the most likely cause in this case?

A) You have not set the Enhanced networking Instances
B) Do not fragmenr is set in the IP header
C) MTU is not set to 9001
D) There is overlap between the prefixes
E) None


2. The company has setup a VPN connection to the company's premises infrastructure and the AWS. They have a number of VPC defined. They must also ensure that all traffic passes through VPC their security infrastructure on-premise. How to architect the solution? Select 2 response options below(Select 2answers)

A) Create a VPC traffic exchange agreements connection security VPC and other VPCS
B) between a VPN connection to all the other Security VPC VPC� � YS
C) VPN access on-premise channel environment to all other VPC
D) VPN access on-premise channel environment and safety VPC



3. You have created a NAT gateway, so that cases of private subnet can download updates from the Internet. But the cases are still not able to reach beyond the Internet gateway is created. Which of the following could be the one in the background?

A) The NAT gateway is created in the public subnet
B) NAT gateway is created in the private subnet
C) The NAT gateway is created with the wrong type Instance
D) The NAT gateway is not created false AMI
E) None


4. You have to setup a VPC subnet ENI Flow logs of your EC2 instance. You can see below REJECT record VPC Flow logs. What this shows 2123456789911 ENL-abcl23de 172.31.9.69172.31.9.1249761 3389620424914185300101418530070 REJECT OK

A) None
B) The request was made on port 80 Instance
C) Someone tried to log into SSH Instance
D) The request was made port 443 expression
E) Someone tried to log on via RDP Instance


5. The company is currently VPC spot us by the West and the East for us. The company is AWS(Amazon Web Service) Direct Connect connection with the US East region. They want to have the ability to connect us to expand to the west. They must also minimize the time and effort that this place. How can this be achieved?

A) Take advantage of Direct Connect gateway
B) Make the use of P Sec VPN
C) Create a second AWS(Amazon Web Service) Direct Connect link
D) Create a private VIF using the current connection
E) None