1. You have a number of instances in your VPC that communicate over IPv6. You need to ensure that traffic can flow Instances to the Internet, but not vice versa. How ca you achieve this?

A) Use only the outlet of the Internet gateway
B) Change NACLA � YS would not be allowed incoming traffic is Instances
C) Change Security groups allow incoming traffic is Instances
D) Change the Internet gateway to only allow outbound traffic lPvG
E) None


2. Your company is using hosted virtual interface from the parent AWS(Amazon Web Service) account. You need to mention IT management company to buy what you download. Which of the following would you mention?

A) data transfer
B) The number of hours that interface
C) Data transfer from the interface
D) None
E) Ports hour costs


3. You have a set of EC2 instances are deployed in a VPC. The application is hosted in those cases. There are some things that need to be repeated application and you're going to inspect the packets sent from the application to trace the error. How can you achieve this?

A) Use IDS
B) Use the VPC Flow logs
C) Use the Cloud to watch Logs
D) Use the Cloud trail
E) None


4. You are currently setup AWS(Amazon Web Service) VPC and subnets. You have to setup routes in the route table CIDR block traffic 0.0.0.0/0. You just want to set up all the hosts of communication. But note that some applications do not work in the desired manner. These are IPv6-enabled applications that sit on the VPC subnets. What must be done to alleviate this issue?

A) To ensure that the route 0.0.0.0/0 is removed and a more specific route has been added.
B) Add a default route to 172.132.0.0/16 route table
C) Add route :: / 0 route table as well
D) Delete instead of the route 0.0.0.0/0 and to add route :: I0 that all communications.
E) None


5. Company planning to move its files on its own premises on the location of the S3. Services hosted on-premise channel environment would be a low latency access to these files. Which of the following is the safest way is this for?

A) None
B) Create a Direct Connect connection, and a private VIF
C) VPN connection in a single VPC end point
D) VPN, which would allow the use of services S3 premise
E) Create a Direct Connect link together Public VIF