Examice

Exam ANS-C01 All QuestionsBrowse all questions from this exam

Question 136

A company is deploying AWS Cloud WAN with edge locations in the us-east-1 Region and the ap-southeast-2 Region. Individual AWS Cloud WAN segments are configured for the development environment, the production environment, and the shared services environment at each edge location. Many new VPCs will be deployed for the environments and will be configured as attachments to the AWS Cloud WAN core network.

The company's network team wants to ensure that VPC attachments are configured for the correct segment. The network team will tag the VPC attachments by using the Environment key with a value of the corresponding environment segment name. The segment for the production environment in us-east-1 must require acceptance for attachment requests. All other attachment requests must not require acceptance.

Which solution will meet these requirements?

Create a rule with a number of 100 that requires acceptance for attachments to the production segment. In the rule, set the condition logic to the "or" value. Include conditions that require a tag:Environment value of Production or a Region value of us-east-1. Create a rule with a number of 200 that does not require acceptance to map any tag:Environment values to their respective segments.

Create a rule with a number of 100 that requires acceptance for attachments to the production segment. In the rule, set the condition logic to the "and" value. Include conditions that require a tag:Environment value of Production and a Region value of us-east-1. Create a rule with a number of 200 that does not require acceptance to map any tag.Environment values to their respective segments.

Create a rule with a number of 100 that does not require acceptance to map any tag:Environment values to their respective segments. Create a rule with a number of 200 that requires acceptance for attachments to the production segment. In the rule, set the condition logic to the "and" value. Include conditions that require a tag:Environment value of Production and a Region value of us-east-1.

Create a rule with a number of 100 that does not require acceptance to map any tag:Environment values to their respective segments. Create a rule with a number of 200 that requires acceptance for attachments to the production segment. In the rule, set the condition logic to the "or" value. Include conditions that require a tag:Environment value of Production or a Region value of us-east-1.

Correct Answer: B

To ensure that only the production segment in the us-east-1 Region requires acceptance for attachment requests, create a rule with a number of 100 that requires acceptance and uses the "and" condition logic to match both the tag:Environment value of Production and the Region value of us-east-1. This ensures that only attachment requests for the production segment in the us-east-1 Region require acceptance. Meanwhile, create a rule with a number of 200 to map other environments to their respective segments without requiring acceptance.

Discussion

TravelKoOption: B

I think B is correct.

[Removed]

Funny thing on this question is you do not need to understand a single bit on CloudWAN. All you need to know here is production = us-east-1 (-> and condition) and acceptance.

Sailor

Hahahahah

ISSDoksim

B - I guess https://docs.aws.amazon.com/network-manager/latest/cloudwan/cloudwan-policy-attachments.html

ISSDoksim

change to A

JoellaLi

why A?

Blitz1Option: B

CD - are not ok because the rules are processed in order and if first rule is matched will not go to second rule ( like in NACL) and we want to enforce attachment acceptance Now discussion is between A and B. Because question is saying: The segment for the production environment in us-east-1 must require acceptance" you basically need an AND between production env and us-east-1. If the question was saying " The segment for the production environment must require acceptance" then the answer will become A because you need to match production env without taking care about region.

Newbies

C for sure

mmiravet

https://aws.amazon.com/blogs/networking-and-content-delivery/achieving-traffic-segmentation-in-multi-aws-region-environments-using-aws-transit-gateway-and-aws-cloud-wan/