Question 1

Emina has three separate VPCs at the cloud service provider that her company uses. Some of the services in each of the VPCs need to communicate with some of the services in other VPCs on that same CSP. Which of the following might she implement in order to accommodate that requirement?
A) VLANs
B) Internet connection sharing
C) Cloud peering
D) IPsec

Accepted Answer

Cloud peering allows for the direct network connection of two separate cloud environments, enabling them to share resources directly. This is the most suitable option for connecting services across different VPCs within the same cloud service provider.

Question 2

Daisy is researching load balancing solutions to implement for a new application that she is tasked with designing and deploying the infrastructure for. One of the requirements is that a client should continue communicating with the same server for the duration of their web browsing session. Which of the following features should she look for in the load balancer?
A) Glue connectivity
B) Ephemeral sessions
C) Sticky sessions
D) One-time pad

Accepted Answer

Sticky sessions, also known as session persistence, allow a client to maintain a continuous connection with the same server for the duration of their session. This is useful for ensuring that session-specific data (like shopping cart contents in an e-commerce site) remains consistent across multiple requests.

Question 3

Angela has decided upon a multi-cloud deployment so that the company can continue to operate even if one of the cloud service providers experiences an outage. Which of the following explains the factor that was important to Angela in choosing this structure?
A) Cost optimization
B) Regulatory compliance
C) Cloudbursting
D) Disaster recovery

Accepted Answer

Angela's decision to use a multi-cloud deployment to ensure continuous operation during a cloud service provider outage is primarily aimed at disaster recovery. This approach enhances the company's resilience against potential failures or disruptions in cloud services by distributing resources across multiple clouds.

Question 4

Quinn is currently looking to deploy a new Microsoft SharePoint server farm, a web-based application, into its own VPC. Which of the following ports would be unnecessary for her to leave open on the firewall for usage or management purposes?
A) 22
B) 80
C) 443
D) 3389

Accepted Answer

Port 22, used for SSH (Secure Shell), is not necessary for the usage or management of a Microsoft SharePoint server farm, as SharePoint primarily uses web protocols (ports 80 and 443) for access and HTTPS traffic, and port 3389 for remote desktop access.

Question 5

Marissa is wanting to implement a VPN at her company, but knows that some of the places the users need to connect from have issues with IPsec being used through the firewall. Which of the following protocols should she choose?
A) L2TP
B) PPTP
C) GRE
D) OpenVPN

Accepted Answer

OpenVPN is a versatile VPN protocol that can use either TCP or UDP ports, making it more likely to work in environments where IPsec might be blocked by firewalls. It is known for its flexibility and security, making it a suitable choice for Marissa's situation.

Question 6

Ophelia wants to create a VPN that uses SSL or TLS for the encryption. Which of the following protocols should she choose?
A) GRE
B) PPTP
C) L2TP
D) OpenVPN

Accepted Answer

OpenVPN is a VPN protocol that uses SSL/TLS for key exchange and is capable of traversing network address translators (NATs) and firewalls. It provides a secure connection over the internet by encrypting the data traffic.

Question 7

Karen's manager knows that she is working on implementing a VPN connection between the company's on-premises data center and the cloud service provider her company uses. The manager approached her with a concern to make sure that she wasn't using an older data link layer protocol developed by Microsoft that is no longer considered secure. Which of the following was most likely the protocol that the manager was concerned about?
A) L2TP
B) PPTP
C) GRE
D) OpenVPN

Accepted Answer

PPTP (Point-to-Point Tunneling Protocol) is the older data link layer protocol developed by Microsoft that is no longer considered secure due to its vulnerabilities and weak encryption standards.

Question 8

Breanne wants to create a tunneled connection between her on-premises data center and the cloud service provider that her company uses. Which of the following would allow her to create that connection?
A) VPN
B) VLAN
C) VNC
D) DNS

Accepted Answer

A VPN (Virtual Private Network) allows for the creation of a secure, encrypted tunnel between two networks over the internet, making it suitable for connecting an on-premises data center to a cloud service provider.

Question 9

Rita has decided that the servers in one of the VPCs that she manages should only be reachable by IP address and they should not be able to perform any domain name lookups from the Internet. Which of the following ports should she disable on the firewall for that VPC?
A) 23
B) 53
C) 389
D) 636

Accepted Answer

Port 53 is used for DNS (Domain Name System) services, which translate domain names to IP addresses. Disabling it will prevent domain name lookups.

Question 10

Greta manages the on-premises networks for her company's Atlanta and Orlando offices. She hears about a technology that will allow her to connect certain network segments in Atlanta to their counterparts in Orlando by inserting the MAC address into layer 4 for UDP transport over the Internet. What is the technology that she has heard about that she should research more about in order to implement?
A) LAN
B) VLAN
C) VXLAN
D) CAN

Accepted Answer

VXLAN (Virtual Extensible LAN) is the technology that allows for the extension of LAN segments over an IP network by encapsulating Ethernet frames within a UDP packet. This encapsulation includes the original MAC address, enabling the connection of network segments across different geographical locations over the Internet.

Question 11

Tia has been analyzing the on-premises data center and determined that the data center can handle most of the traffic on a day-to-day basis. However, there are times when the bandwidth becomes saturated and she needs to find a solution to push the excess traffic out to virtual machines on a cloud service provider. Which of the following describes the technique she is looking to implement?
A) Cloud ripping
B) Cloudbursting
C) Cloud tipping
D) Cloud redirection

Accepted Answer

Cloudbursting is a technique used to handle peak loads by utilizing cloud resources. When an on-premises data center's capacity is exceeded, additional traffic is directed to the cloud to manage the load effectively.

Question 12

Haley does not want to manually assign IP addresses to clients on one of the network segments that she manages. Instead, she wants clients to obtain an IP address from a server that manages a pool of IP addresses. Which of the following technologies should she implement?
A) DNS
B) DHCP
C) RIP
D) OSPF

Accepted Answer

DHCP (Dynamic Host Configuration Protocol) is designed to automatically assign IP addresses to clients from a predefined pool, eliminating the need for manual configuration.

Question 13

Patti's company has just migrated the only Windows server in a particular VPC to a different VPC. Which of the following should she do next?
A) Disable port 3389 on the firewall of the original VPC.
B) Disable port 22 on the firewall of the original VPC.
C) Disable port 53 on the firewall of the original VPC.
D) Disable port 110 on the firewall of the original VPC.

Accepted Answer

Port 3389 is used for Remote Desktop Protocol (RDP), which is commonly used to connect to Windows servers. Since the Windows server has been migrated out of the original VPC, disabling port 3389 on the firewall of the original VPC can help improve security by closing unnecessary access points.

Question 14

Cara works for a startup company that up until now has been running on a single virtual machine. The virtual machine is starting to see capacity issues and she is unable to provision more CPU and memory resources to satisfy its needs. Which of the following would allow her to expand the capacity of her company's web server?
A) DHCP
B) VPN
C) Load balancer
D) OSPF

Accepted Answer

A load balancer can distribute incoming network traffic across multiple servers, which can help to expand the capacity of the company's web server by balancing the load among several instances instead of just one. This way, no single server bears too much demand.

Question 15

Ingrid has configured one of the network segments to use a DHCP server to dynamically assign IP addresses. She knows that DHCP can also tell the clients the address of the server that they should use to resolve FQDNs to IP addresses. Which of the following settings should she configure?
A) Next server
B) DHCP servers
C) DNS servers
D) FQDN servers

Accepted Answer

The DHCP server can be configured to provide clients with DNS server addresses, which are used to resolve Fully Qualified Domain Names (FQDNs) to IP addresses. This is done through the DNS servers option in the DHCP configuration.

Question 16

Shelley wants to make sure that any protocols not using encryption are blocked at the firewall for one of her VPCs. Which of the following protocols should she ensure has a deny rule enabled for it?
A) HTTPS
B) RDP
C) Telnet
D) SSH

Accepted Answer

Telnet is a protocol that does not use encryption, making it insecure for transmitting data over a network. Therefore, Shelley should ensure that a deny rule is enabled for Telnet to block it at the firewall.

Question 17

Jenna's cloud service provider has just started supporting IPv6. She wants her web servers there to be accessible by both IPv4 and IPv6. Which of the following records should she add to the DNS configuration to ensure that IPv6 clients can access her company's website?
A) A
B) PTR
C) MX
D) AAAA

Accepted Answer

The AAAA record is used in DNS to map a domain name to an IPv6 address, allowing IPv6 clients to access the website.

Question 18

Lara is trying to decide on a protocol to use for a VPN to connect from one cloud service provider to another. She knows there are a variety of protocols out there that can be used for VPNs, but wants to make sure she chooses one that both cloud service providers support and that can be combined with IPsec. Which of the following protocols would she most likely need to choose?
A) L2TP
B) PPTP
C) GRE
D) PPP

Accepted Answer

L2TP (Layer 2 Tunneling Protocol) is commonly used with IPsec to provide secure VPN connections and is widely supported by cloud service providers.

Question 19

Nancy was recently reading about a network layer protocol that provides encryption, authentication, and key management for TCP/IP transmissions that is built into the IPv6 protocol stack. Which of the following should she read more about to find out how she can implement it?
A) PPTP
B) IPsec
C) GRE
D) L2TP

Accepted Answer

IPsec is the network layer protocol that provides encryption, authentication, and key management for TCP/IP transmissions and is built into the IPv6 protocol stack, making it the correct choice for implementation in this context.

Question 20

Fredrica is installing more infrastructure in her company's on-premises data center. She has installed 10 servers, but there is only one switch in the rack that the new equipment is going in. Which of the following technologies can she use to segment the servers into two groups without having to add a new switch that will also put them into separate broadcast domains?
A) VLAN
B) VPC
C) VNC
D) VLC

Accepted Answer

VLAN (Virtual Local Area Network) allows for the segmentation of a physical network into multiple logical networks. By using VLANs, Fredrica can divide the servers into two groups on the same switch, with each group acting as if it's on a separate network, effectively putting them into separate broadcast domains without the need for additional physical hardware.

Quiz 5: Cloud Connectivity and Troubleshooting

Emina has three separate VPCs at the cloud service provider that her company uses. Some of the services in each of the VPCs need to communicate with some of the services in other VPCs on that same CSP. Which of the following might she implement in order to accommodate that requirement?

Angela has decided upon a multi-cloud deployment so that the company can continue to operate even if one of the cloud service providers experiences an outage. Which of the following explains the factor that was important to Angela in choosing this structure?

Quinn is currently looking to deploy a new Microsoft SharePoint server farm, a web-based application, into its own VPC. Which of the following ports would be unnecessary for her to leave open on the firewall for usage or management purposes?

Marissa is wanting to implement a VPN at her company, but knows that some of the places the users need to connect from have issues with IPsec being used through the firewall. Which of the following protocols should she choose?

Ophelia wants to create a VPN that uses SSL or TLS for the encryption. Which of the following protocols should she choose?

Breanne wants to create a tunneled connection between her on-premises data center and the cloud service provider that her company uses. Which of the following would allow her to create that connection?

Rita has decided that the servers in one of the VPCs that she manages should only be reachable by IP address and they should not be able to perform any domain name lookups from the Internet. Which of the following ports should she disable on the firewall for that VPC?

Haley does not want to manually assign IP addresses to clients on one of the network segments that she manages. Instead, she wants clients to obtain an IP address from a server that manages a pool of IP addresses. Which of the following technologies should she implement?

Patti's company has just migrated the only Windows server in a particular VPC to a different VPC. Which of the following should she do next?

Ingrid has configured one of the network segments to use a DHCP server to dynamically assign IP addresses. She knows that DHCP can also tell the clients the address of the server that they should use to resolve FQDNs to IP addresses. Which of the following settings should she configure?

Shelley wants to make sure that any protocols not using encryption are blocked at the firewall for one of her VPCs. Which of the following protocols should she ensure has a deny rule enabled for it?

Jenna's cloud service provider has just started supporting IPv6. She wants her web servers there to be accessible by both IPv4 and IPv6. Which of the following records should she add to the DNS configuration to ensure that IPv6 clients can access her company's website?

Nancy was recently reading about a network layer protocol that provides encryption, authentication, and key management for TCP/IP transmissions that is built into the IPv6 protocol stack. Which of the following should she read more about to find out how she can implement it?