Mock test 1

Question	Answer	Explanation
1	B	The VGW provides you with two tunnel endpoints for high availability. No need for a secondary link.
2	D	You will need a custom solution to connect to a GRE tunneled VPN network as GRE is not supported in AWS. You could redeploy everything to IPSec or the CloudHub VPN, but it could be very complicated. We are looking for the simplest way of doing this.
3	C	AWS is responsible for making the internet gateway highly available.
4	B	The NACLs are stateless. For every inbound rule, an outbound rule needs to be created to allow access.
5	A	To establish an initial VPN connection, simply initiate traffic from the on-premise site.
6	A	AWS direct connect partners can help you establish private optical or MPLS links from the collocation to your on-premise environment.
7	C	DynamoDB supports a gateway VPC endpoint. A will not work...