An IT company wants to securely perform an on-off migration of its on-premises VMs to the AWS Cloud by using AWS Server Migration Service {AWS SMS) For the first phase of the migration, the company must migrate 50 development VMs m batches during non-peak times over the next 7 days The VMs are between 2 GB and 5 GB in size The company has 1 Gbps of available bandwidth over the internet
Which network connectivity option meets these requirements MOST cost-effectively?

1. A. Contact an AWS partner to order a hosted VIF
2. B. Use the existing internet connection
3. C. Order an AWS Direct Connect connection Provision a public VIF
4. D. Create a VPN connection to AWS.

Correct Answer: D

You are preparing to launch Amazon WorkSpaces and need to configure the appropriate networking resources. What must be configured to meet this requirement?

1. A. At least two subnets in different Availability Zones.
2. B. A dedicated VPC with Active Directory Services.
3. C. An IPsec VPN to on-premises Active Directory
4. D. Network address translation for outbound traffic.

Correct Answer: AD
References: https://docs.aws.amazon.com/workspaces/latest/adminguide/amazon-workspaces-vpc.html

A corporate network routing table contains 624 individual RFC 1918 and public IP prefixes. You have two AWS Direct Connect connectors. You congure a private virtual interface on both connections to a virtual private gateway. The virtual private gateway is not currently attached to a VPC. Neither BGP session will maintain the Established state on the customer router. The AWS Management Console reports the private virtual interfaces as Down.
What could you do to address the problem so that the AWS Management Console reports the private virtual interface as Available?

1. A. Attach the virtual private gateway to a VPC and enable route propagation.
2. B. Filter the public IP prexes on the corporate network from the private virtual interface.
3. C. Change the BGP advertisements from the corporate network to only be a default route.
4. D. Attach the second virtual interface to an alternative virtual private gateway.

Correct Answer: C
https://aws.amazon.com/es/premiumsupport/knowledge-center/virtual-interface-bgp-down/

You have to set up an AWS Direct Connect connection to connect your on-premises to an AWS VPC. Due to budget requirements, you can only provision a single Direct Connect port. You have two border gateway routers at your on-premises data center that can peer with the Direct Connect routers for redundancy.
Which two design methodologies, in combination, will achieve this connectivity? (Select two.)

1. A. Terminate the Direct Connect circuit on a L2 border switch, which in turn has trunk connections to thetwo routers.
2. B. Create two Direct Connect private VIFs for the same VPC, each with a different peer IP.
3. C. Terminate the Direct Connect circuit on any of the one routers, which in turn will have an IBGP session with the other router.
4. D. Create one Direct Connect private VIF for the VPC with two customer peer IPs.
5. E. Provision two VGWs for the VPC and create one Direct Connect private VIF per VGW.

Correct Answer: AD
https://docs.aws.amazon.com/directconnect/latest/UserGuide/add-peer-to-vif.html (Adding a BGP Peer)

An insurance company is planning the migration of workloads from its on-premises data center to the AWS Cloud The company requires end-to-end domain name resolution Bidirectional DNS resolution between AWS
and the existing on-premises environments must be established The workloads will be migrated into multiple VPCs. The workloads also have dependencies on each other, and not all the workloads will be migrated at the same time
Which solution meets these requirements? Which solution meets these requirements?

1. A. Configure a private hosted zone for each application VPC, and create the requisite records Create a set of Amazon Route 53 Resolver inbound and outbound endpoint In an egress VPC Define Route 53 Resolver rules to forward requests for the on-premises domains to the on-premises DNS resolver Associate the application VPC private hosted zones with the egress VPC and share the Route 53 Resolver rules with the application accounts by using AWS Resource Access Manage
2. B. Configure the on premises DNS servers to forward the cloud domains to the Route 53 inbound endpoint.
3. C. Configure a public hosted zone for each application VPC and create the requisite records Create a set of Amazon Route 53 Resolver Inbound and outbound endpoints in an egress VP
4. D. Define Route 53 Resolver rules to forward requests for the on-premises domains to the on-premises DNS resolver Associate the application VPC private hosted zones with the egress VPC and share the Route 53 Resolver rules with the application accounts by using AWS Resource Access Manager Configure the on-premises DNS servers to forward the cloud domains to the Route 53 inbound endpoints.
5. E. Configure a private hosted zone for each application VPC, and create the requisite records Create a set of Amazon Route 53 Resolver inbound and outbound endpoints in an egress VPC Define Route 53 Resolver rules to forward requests for the on-premises domains to the on-premises DNS resolve
6. F. Associate the application VPC private hosted zones with the egress VPC and share the Route 53 Resolver rules with the application accounts by using AWS Resource Access Manage
7. G. Configure the on-premises DNS servers to forward the cloud domains to the Route 53 outbound endpoint.
8. H. Configure a private hosted zone for each application VPC, and create the requisite records Create a set of Amazon Route 53 Resolver inbound and outbound endpoints in an egress VPC Define Route 53 Resolver rules to forward requests for the on-premises domains to the on-premises DNS resolver Associate the Route 53 outbound rules with the application VPCs and share the private hosted zones with the application accounts by using AWS Resource Access Manager Configure the on-premises DNS servers to forward the cloud domains to the Route 53 inbound endpoint.

Correct Answer: B