AWS Hybrid Connectivity Architecture

1. AWS VPN connections use which encryption standard by default?

AES-128

AES-192

AES-256

DES-56

2. What is the typical recovery time objective (RTO) when using AWS Site-to-Site VPN as a backup for Direct Connect?

Less than 1 minute

1-5 minutes

15-30 minutes

1-2 hours

3. Which AWS service provides a private connectivity option for accessing AWS services from on-premises without traversing the internet?

AWS VPN Gateway

AWS PrivateLink

AWS Direct Connect

AWS CloudFront

4. In hybrid connectivity, what does BGP community tagging help accomplish?

Encrypt traffic between sites

Segment and prioritize traffic based on policies

Reduce bandwidth consumption

Simplify VPN setup

5. Which AWS service allows you to extend your on-premises Active Directory to AWS?

AWS Directory Service

AWS IAM

AWS Cognito

AWS Secrets Manager

6. What does AWS Transit Gateway Network Manager provide for hybrid architectures?

Encryption key management

Centralized monitoring and management of hybrid networks

Automatic bandwidth scaling

VPN protocol negotiation

7. In a disaster recovery scenario, what is the primary benefit of combining Direct Connect with VPN?

Reduced cost

Redundancy and automatic failover capability

Higher encryption strength

Simplified management

8. Which approach provides the lowest latency for hybrid connectivity to AWS?

Site-to-Site VPN over internet

AWS Direct Connect

Client VPN

VPC peering with on-premises gateway

9. What is a Virtual Interface (VIF) in the context of AWS Direct Connect?

A software-defined network interface

A logical connection over the physical Direct Connect link

A backup connection mechanism

An encrypted VPN tunnel

10. Which network topology allows you to connect multiple on-premises locations through AWS Transit Gateway?

Hub-and-spoke

Mesh

Point-to-point

Ring

11. Which AWS service provides a dedicated network connection from your on-premises data center to AWS with consistent network performance?

AWS VPN

AWS Direct Connect

AWS Transit Gateway

AWS AppSync

12. In a hybrid setup, what does the Direct Connect Gateway enable?

Connection to a single VPC only

Connections to multiple VPCs and on-premises networks across regions

VPN encryption for all traffic

Automatic DDoS protection

13. Which AWS service provides a managed IPsec VPN connection with automatic failover capability?

Client VPN

Site-to-Site VPN

Transit Gateway with Site-to-Site VPN

Direct Connect Gateway

14. What is the typical setup time for provisioning an AWS Direct Connect connection?

Minutes

Hours

Days to weeks

Months

15. Which routing protocol is commonly used with AWS Direct Connect for dynamic route propagation?

OSPF

BGP

RIP

EIGRP

16. In a hybrid architecture, what does VPC peering enable that Transit Gateway also supports?

Direct private connectivity between VPCs

On-premises to cloud encryption

Multi-region failover

BGP route propagation

17. What is the maximum bandwidth typically offered by AWS Direct Connect?

1 Gbps only

10 Gbps only

1 Gbps to 100 Gbps

100 Gbps to 400 Gbps

18. AWS Site-to-Site VPN typically provides encryption at which layer of the OSI model?

Layer 2 (Data Link)

Layer 3 (Network)

Layer 4 (Transport)

Layer 7 (Application)

19. Which feature allows you to establish a redundant connection to AWS using Direct Connect?

Direct Connect Redundancy

Direct Connect Backup

Direct Connect with Virtual Interface failover

Direct Connect Multi-Site Access

20. What is the primary advantage of using AWS Transit Gateway in a multi-region hybrid architecture?

Reduces VPN encryption overhead

Simplifies connectivity between multiple VPCs and on-premises networks

Eliminates the need for Direct Connect

Provides automatic failover without configuration

AWS Solutions Architect Hybrid Connectivity Architecture Quiz

1. AWS VPN connections use which encryption standard by default?

2.

What first name or nickname would you like us to use?

2. What is the typical recovery time objective (RTO) when using AWS Site-to-Site VPN as a backup for Direct Connect?

3. Which AWS service provides a private connectivity option for accessing AWS services from on-premises without traversing the internet?

4. In hybrid connectivity, what does BGP community tagging help accomplish?

5. Which AWS service allows you to extend your on-premises Active Directory to AWS?

6. What does AWS Transit Gateway Network Manager provide for hybrid architectures?

7. In a disaster recovery scenario, what is the primary benefit of combining Direct Connect with VPN?

8. Which approach provides the lowest latency for hybrid connectivity to AWS?

9. What is a Virtual Interface (VIF) in the context of AWS Direct Connect?

10. Which network topology allows you to connect multiple on-premises locations through AWS Transit Gateway?

11. Which AWS service provides a dedicated network connection from your on-premises data center to AWS with consistent network performance?

12. In a hybrid setup, what does the Direct Connect Gateway enable?

13. Which AWS service provides a managed IPsec VPN connection with automatic failover capability?

14. What is the typical setup time for provisioning an AWS Direct Connect connection?

15. Which routing protocol is commonly used with AWS Direct Connect for dynamic route propagation?

16. In a hybrid architecture, what does VPC peering enable that Transit Gateway also supports?

17. What is the maximum bandwidth typically offered by AWS Direct Connect?

18. AWS Site-to-Site VPN typically provides encryption at which layer of the OSI model?

19. Which feature allows you to establish a redundant connection to AWS using Direct Connect?

20. What is the primary advantage of using AWS Transit Gateway in a multi-region hybrid architecture?