Quiz

Question 1

Which of these is FALSE regarding USER VPN Profile Based Security Policies:

• security based on user, not source ip
• user can be associated with multiple profiles
• a profile can be associated with multiple users
• security policy is manually pushed to the landing aviatrix VPN gateways

Answer 1

security policy is manually pushed to the landing Aviatrix VPN gateways is FALSE

Question 2

Which of these is FALSE regarding RBAC implementation on Aviatrix Controller

• UI options shown are same. Only difference is what you are allowed to do
• Permission groups can be granted access to one or more cloud accounts
• User MUST be created locally on the Controller
• Permission groups can be granted access to one or more permission sets

Answer 2

Users MUST be created locally on controller is FALSE

Question 3

HPE is also known as:

• Insane Mode
• Encryption on steroids (EoS)
• Ridiculous mode
• Super Fast Mode

Answer 3

Insane Mode

Question 4

How is aviatrix able to perform High Speed Encryption?

• buy utilizing all available cores to build multiple IPSec tunnels
• by using offload engines
• by using underlay switches that support 400 Gbe
• By using ASICs

Answer 4

By utilizing all available cores to build multiple IPSec tunnels

Question 5

Where Can ActiveMesh be enabled?

• Intra/Inter Region
• Multi-Cloud
• Cloud-to-On Prem
• All of the above

Answer 5

All of the above

Question 6

How long does route re-convergence take in ActiveMesh primary tunnel fails at Primary Spoke GW?

• no re-convergence. The tunnel was already active and fwding half the traffic
• typically less than 5 seconds
• typically less than a second
• as long as it takes to build another tunnel

Answer 6

No Reconvergence. The tunnel was already active and forwarding half the traffic

Question 7

What is the easiest way to determine what filters to set using Egress FQDN?

• Run Egress FQDN discovery
• Visit microsoft.com to see what IPs to filter office365.com on
• run a packet capture
• all of these

Answer 7

Run Egress FQDN Discovery

Question 8

What other Aviatrix feature does Private S3 Bucket Access use?

• Site2Cloud
• Egress FQDN
• CloudWan
• FireNet

Answer 8

Egress FQDN

Question 9

What is one of the ways Controller checks the FW instance health?

• APIs
• Terraform
• SNMP
• All Of these

Answer 9

APIs

Question 10

Aviatrix Encrypted Transit Firenet Supports which of these?

• 70 Gbps Thruput per transit VPC
• load balancing in N-Active mode
• Active-Active firewalls
• All of these

Answer 10

All of these

Question 11

In a MR/MC Transit FireNet scenario, what do you lose when you replace the Aviatrix Spoke GW’s with Native Constructs?

• Firewall performance and visibility at the transit level
• Firewall performance and visibility at the spoke level
• end-to-end encryption and visibility at transit level
• End to end encryption & visibility at the spoke level

Answer 11

End-to-end encryption and visibility at the spoke level

Question 12

(True of False) - CloudWAN is a specific case of Site2Cloud?

Answer 12

True