Examkin

Soru

Zorluk: ZorAWS Network Services

A rapidly growing software startup has configured isolated testing environments in separate Virtual Private Clouds (VPCs) across several AWS accounts. The network engineering team must implement a centralized routing hub to connect all these testing VPCs and link them to the local office. In addition, the security team requires a mechanism to prevent inbound traffic from specific blacklisted IP addresses from entering any subnet. Which TWO AWS services or features should the team implement to satisfy these requirements? (Select TWO.)

  1. AWS Transit GatewayCevap
  2. Network Access Control Lists (Network ACLs)Cevap
  3. C
    A full mesh of VPC Peering connections
  4. D
    Security Groups applied to each Amazon EC2 instance
  5. E
    AWS PrivateLink endpoints in each VPC

Cevap

AWS Transit Gateway and Network Access Control Lists (Network ACLs)
The correct options are the centralized cloud router and the subnet-level traffic filter. AWS Transit Gateway acts as a hub to connect multiple VPCs and on-premises networks in a hub-and-spoke topology, simplifying configuration. Network Access Control Lists (Network ACLs) act as stateless firewalls at the subnet boundary and support explicit deny rules, which are necessary to block specific inbound IP addresses.

Adım Adım Çözüm

1
Analyze the connectivity requirement: Connecting multiple VPCs across different accounts to each other and to an on-premises location.
Identify AWS Transit Gateway as the central hub service designed to simplify routing for multi-VPC and hybrid setups, avoiding the complexity of a full mesh of peerings.
Transit Gateway acts as a single gateway connecting all VPCs and on-premises networks, serving as a hub.
2
Analyze the security requirement: Blocking specific inbound IP addresses at the subnet level.
Identify Network Access Control Lists (Network ACLs) as the feature that operates at the subnet boundary and supports explicit deny rules.
Security Groups operate at the instance level and only support allow rules, so Network ACLs must be used to block specific blacklisted IPs.

Anahtar Kavram

Centralized hybrid routing and subnet-level traffic filtering
Bu soruyu puanla

Konular

AWS Network Services

Bu konudan daha fazla soru