Note! Following ACE Exam is Retired now. Please select the alternative replacement for your Exam Certification.

ACE Exam Dumps - Aviatrix Certified Engineer (ACE) program

Go to page:

Question # 9

ACE Inc. currently uses AWS as their primary cloud provider with a strong desire to expand to Azure and GCP. IT team has strict security and control requirements from different business units that require isolation and control from each other. The different business units want

â€¢ to own their own transit architecture

â€¢ the ability to control firewall rules for their own application

â€¢ to not share same transit with other business units but have ability to connect to other business units if needed

The architecture board has mandated that there needs to be a single design pattern that accommodates above requirements irrespective of the public cloud vendor being used.

Choose the best design option to meet above needs. Each option presents a complete solution.

Use AWS Transit Gateway (TGW). Deploy several TGWs in each region and peer them together as needed. Use

TGW VPN to build IPSec tunnels to Azure Virtual WAN and Google Cloud VPN.

Use Azure Virtual WAN to connect all the branches, users and VNets together. Insert a centralized 3rd party

firewall in Virtual WAN to control traffic. Use Azure Gateway to build IPSec tunnels to AWS Transit Gateway and

Google Cloud VPN.

Use Aviatrix repeatable transit architecture integrated with 3rd party Next Gen Firewalls. Deploy same transit

architecture multiple times in a region and use same design and normalized datapath for AWS, Azure, GCP and

OCI. Provide NextGen firewalls in each transit so the business units can control their own firewalls and allow

connectivity in and out of their transit.

Use GCP global routing which allows connecting all GCP VPCs. Use Google Cloud VPN to build tunnels to AWS

TGW and Azure Virtual WAN.

Full Access

Question # 10

Which Aviatrix solution lets customers connect and manage their branch Cisco ISR routers to AWS or Azure without requiring any manual effort on branch routers or replacement of equipment?

High Performance Encryption (Insane Mode)

FlightPath

Direct Connect

CloudWAN

Full Access