Free Aviatrix Certified Engineer (ACE) Program ACE Exam Questions
Page: 1 / 8Total 72 questions
Want more questions? Get Premium Access.
Question 1
Aviatrix Controller provides a VPC Creator tool that allows customers to create VPC, VNETs across multiple clouds like AWS, GCP, Azure and OCI from single pane of glass.
Correct Answer:B. False
Explanation:
Aviatrix Controller provides a VPC Tracker tool. VPC Tracker is a tool that collects and helps you manage
your network CIDR ranges at a central place, eliminating the need to keep an Excel sheet on all your
VPC network addresses allocations.By using VPC Tracker tool one can create a VPC.
Aviatrix Gateways support NAT capability in which public cloud?
Correct Answer:B. All the the Public Cloud listed here in the options
Question 3
You must create one of the following virtual interfaces to begin using your AWS Direct Connect connection.
1. Private virtual interface
2. Public virtual interface
3. Transit virtual interface
Correct Answer:A. True
Explanation:
(AWS Direct Connect virtual interfaces)
You must create one of the following virtual interfaces to begin using your AWS Direct Connect
connection.
Private virtual interface: A private virtual interface should be used to access an Amazon VPC using
private IP addresses.
Public virtual interface: A public virtual interface can access all AWS public services using public IP
addresses.
Transit virtual interface: A transit virtual interface should be used to access one or more Amazon VPC
Transit Gateways associated with Direct Connect gateways. You can use transit virtual interfaces with
1/2/5/10 Gbps AWS Direct Connect connections. For information about Direct Connect gateway
configurations, see Direct Connect gateways.
Question 4
A Customer has 100 VPCs in GCP that they want to be able to route between. What are some of the solutions customers can use. Each option represents a complete solution. (Choose 2)
Correct Answer:A. Google already provides global routing for inter-VPC traffic; B. Use Aviatrix Transit solution to connect the VPCs with a Transit VPC running Aviatrix Gateways
Question 5
The IPSec tunnels terminating at AWS TGW/VGW, Azure VPN GW, and other native VPN support interconnecting networks with overlapping IP ranges
SELECT THE CORRECT ANSWER
Correct Answer:A. False
Question 6
ACE Inc. is currently using AWS Transit Gateway (TGW) with 100 VPCs attached to it from different security domains.
These 100 VPCs are used as following:
* 20 VPCs belong to Production,
* 40 VPCs belong to Development,
* 20 are part of UAT and
* 20 VPCs are for shared services and miscellanous common needs.
ACE Inc. requirements are to:
* provide network and traffic segmentation between Prod, Development, UAT VPCs such that there is no traffic between VPCs belonging to different domains
* allow all VPCs in each domain to communicate with each other
* allow every VPC access to shared services VPCs
Which Aviatrix feature would help to not only provide this segmentation but also decrease the complexity of this topology and routing configuration by orchestrating life-cycle management of AWS Transit Gateways?
(Choose 2)
Correct Answer:B. Aviatrix TGW Orchestrator; C. Aviatrix Security Domain
Explanation:
A Security Domain is an enforced network of member VPCs attached to the same route table. Member VPCs
have connectivity to each other. VPCs outside of the domain cannot connect. A Security Domain is an
instantiation of the AWS Transit Gateway (TGW) Route Domain concept. This enables VPC segmentation
through AWS Transit Gateway (TGW). For example, you can have ''dev'', ''prod'' and ''test'' security domains toisolate your development, production and test environments in your AWS cloud. In this scenario, the VPCs in dev security domain cannot talk to VPCs in prod and test security domains. A security domain can have one or more spoke VPCs as its members. VPCs within a security domain can communicate to each other via AWS Transit
Gateway (TGW).
we can leverage domains with the AWS Transit Gateway to segment and secure your network.
The AWS Transit Gateway (TGW) Orchestrator is a feature in Aviatrix Controller. It provides a point-andclick workflow to build a transit network and manages all network routing updates.
Aviatrix orchestrator (available in the AVX Controller) simplifies and extends the AWS Transit Gateway (TGW)
by using dynamic route propagation, policy abstraction and simplifying operations through a single pane of glass.
Question 7
What is one of the limitations of Microsoft Azure ExpressRoute that becomes more problematic in a Virtual WAN deployment with 'any-to-any' default connectivity behavior?
Correct Answer:B. From Azure cloud, only 200 routes can be advertised to on-prem over a single ExpressRoute Gateway
Explanation:
There is a maximum of 200 prefixes advertised on a single ExpressRoute connection, or
through VNet peering using gateway transit.
Question 8
ACE Inc. needs to deploy a single consistent network infrastructure across AWS, Azure, GCP and OCI using Aviatrix. How many Aviatrix controllers will be needed?
Correct Answer:D. 1
Question 9
One difference between Microsoft ExpressRoute circuits as compared to other cloud provide.... options, is that ExpressRoute is always provisioned as a redundant pair with two physical Microsoft Enterprise Edge Routers (MSEE)?
SELECT THE CORRECT ANSWER
Correct Answer:B. True
Explanation:
Each Express Route connection includes two Microsoft Enterprise Edge and two-router
connections in between the connectivity provider and the local network perimeter. Microsoft ensures
there's a BGP connection between the connectivity and the edge of the on-premise network one each
allocated for the MSEE router. For the validation of the SLA, there must be a redundant layer 3
configured.
Question 10
Private, Public, Transit VIFs (Virtual interfaces) are terms related to which...
SELECT THE CORRECT ANSWER
Correct Answer:C. AWS DirectConnect
Explanation:
(AWS Direct Connect virtual interfaces)
You must create one of the following virtual interfaces to begin using your AWS Direct Connect
connection.
Private virtual interface: A private virtual interface should be used to access an Amazon VPC using
private IP addresses.
Public virtual interface: A public virtual interface can access all AWS public services using public IP
addresses.
Transit virtual interface: A transit virtual interface should be used to access one or more Amazon VPC
Transit Gateways associated with Direct Connect gateways. You can use transit virtual interfaces with
1/2/5/10 Gbps AWS Direct Connect connections. For information about Direct Connect gateway
