Aviatrix Certified Engineer (ACE) program Exam Questions

1. A Customer has 100 VPCs in GCP that they want to be able to route between .

What are some of the solutions customers can use. Each option represents a complete solution. (Choose 2)

2. Operations team has noticed that during the peak working hours, Aviatrix Gateway’s throughput utilization stays around 80% of the current instance size. A decision has been made to scale up the instance size to provide more throughput .

Which below statement accurately describes instance sizing of Aviatrix Gateways?

3. Choose the two best statements that describe challenges of deploying a NextGen Firewall (NGFW) in public cloud. (Choose 2)

4. ACE Inc. is currently using AWS Transit Gateway (TGW) with 100 VPCs attached to it from different security domains.

These 100 VPCs are used as following:

* 20 VPCs belong to Production,

* 40 VPCs belong to Development,

* 20 are part of UAT and

* 20 VPCs are for shared services and miscellanous common needs.

ACE Inc. requirements are to:

* provide network and traffic segmentation between Prod, Development, UAT VPCs such that there is no traffic between VPCs belonging to different domains

* allow all VPCs in each domain to communicate with each other

* allow every VPC access to shared services VPCs

Which Aviatrix feature would help to not only provide this segmentation but also decrease the complexity of this topology and routing configuration by orchestrating life-cycle management of AWS Transit Gateways? (Choose 2)

5. Which networking entity in the cloud infrastructure allows operators to run commands to see BGP state, route tables, diagnostic, logs etc.

6. DRAG DROP

Aviatrix platform has several operational features and capabilities built-in to help network engineers perform day to day operational tasks.

Below, match the Aviatrix platform feature with the operational problem it addresses.

7. AWS Guard Duty automatically enforces its findings through the ingress routing feature, blocking the traffic by default. SELECT THE CORRECT ANSWER

8. The IPSec tunnels terminating at AWS TGW/VGW, Azure VPN GW, and other native VPN support interconnecting networks with overlapping IP ranges SELECT THE CORRECT ANSWER

9. An example of when would you use Aviatrix FlightPath is:

10. An example of a Network Virtual Appliance (NVA) would include which of the following. SELECT THE CORRECRT ANSWER

11. What native methods are available to configure Public Cloud Networks using Aviatrix Controller? (Choose 3)

12. The feature in Aviatrix Controller that allows customers to see path between two instances/AMI/EC2/VM (including, but not limited to Security Groups, ACLs, Routes, etc.) is called:

13. What is a challenge of using ExpressRoute Edge Routers as transit to interconnect VNets in Azure?

14. DRAG DROP

Aviatrix platform provides rich capabilities around networking, security and operations in public cloud networks. In addition to Aviatrix Transit, it also helps customers overcome limitations of native public cloud constructs. Below, match the Aviatrix platform capability for AWS Transit Gateway (TGW) with the appropriate problem description.

15. DRAG DROP

Match the Azure transit option below to the description which best describes it:

DRAG THE BOXES TO MATCH THE ANSWERS

16. What is a challenge of using ExpressRoute Edge Routers as transit to interconnect VNets in Azure?

17. ACE Inc. has a VNet-A hosting Database services which is peered with several app VNets. There is a new requirement to add another CIDR to VNet-A.

How can you prevent a database connectivity outage for all the peered VNets while performing this task?

18. Customers do not need to sign a separate licensing agreement with Aviatrix to get started because controller can be launched from any cloud provider’s Marketplace (Pay-As-You-Go metering).

19. ACE Inc. needs to deploy a single consistent network infrastructure across AWS, Azure, GCP and OCI using Aviatrix.

How many Aviatrix controllers will be needed?

20. Which AWS feature does Aviatrix integrate with to provide Public Subnet Filtering for Ingress Internet Traffic to a VPC?

21. Where is the ‘center of gravity’ in the new computing model?

22. Choose the two best statements that describe challenges of deploying a NextGen Firewall (NGFW) in public cloud. (Choose 2)

23. An operator needs to create a new VPC, VCN or VNet using Aviatrix Controller.

Can the operator use Aviatrix VPC Tracker feature to validate potential CIDR/Prefix/Address space duplication across multiple clouds?

24. What are some limitations of using Public Cloud Provider’s (AWS, Azure, GCP, OCl) native VPN Gateways that network engineers must account for in their deployments? (Choose 2)

25. What native methods are available to configure Public Cloud Networks using Aviatrix Controller? (Choose 3)

26. ACE Inc. has been using a 10 Gbps ExpressRoute connection into Microsoft Azure. Security and compliance team has recently flagged this as a policy violation as company data is going unencrypted over untrusted transport.

What are the encryption options available to ACE Inc. for connecting to Azure? (Choose 2)

27. Which Aviatrix Controller feature automates the configuration of AWS Transit Gateway, VPC Route Tables, Direct Connect learned routes and Security Domain?

28. What is a challenge of using VNet peering for transit in Azure?

29. Choose two examples where you would leverage the Aviatrix Controller’s S2C (Site-2-Cloud) workflow? (Choose 2)

30. As per the cloud architecture best practices guidelines in Multi-Cloud Network Architecture (MCNA), which component provides a consistent transit available in all regions across all public cloud providers.