cerf

See the architecture.
Pass the exam.

Flashcards teach you to spot the answer. cerf teaches you to see why, on real architectures you can trace, with a tutor that catches the miss and walks you back through it.

Task 1.1 · Edge services1 / 10

A media company fronts its API with AWS Global Accelerator for fast regional failover. At which OSI layer does Global Accelerator operate?

aLayer 7, the application layer
bLayer 4, the transport layer
cLayer 3, the network layer
dLayer 2, the data-link layer
Every question is backed by a real architecture

You trace the system, not memorize the answer.

This is Capital One’s real multi-account network. Click any flow, or open it fullscreen.

Capital OneMulti-account hub and spoke with a shared Transit Gateway
Multi-account hub and spoke with a shared Transit GatewayLegacy data center 172.16.0.0/12Hybrid pathAWS Cloudus-east-1Network services accountManagement accountProd workload accountDev workload accountEgress + inspection VPC 10.0.0.0/16Spoke VPC 10.1.0.0/16Spoke VPC 10.2.0.0/16Firewall subnetPublic subnetPrivate subnetPrivate subnetBGPTGW associationprod route tabledev route table0.0.0.0/0CustomergatewayASN 65000Direct Connecttransit VIFDX gatewayglobalTransit Gatewayshared via RAMNetworkFirewallinspectionNAT gatewayInternetgatewayProd workloadno IGW in VPCDev workloadno IGW in VPCAWSOrganizationsSCPs + policy as co…Internet
Trace
A network services account owns the Transit Gateway and shares it to the organization with AWS RAM. Spoke VPCs have no internet gateways of their own; all north-south traffic funnels through a central egress and inspection VPC, and hybrid connectivity rides a Direct Connect transit VIF into the same hub.
The tracks

Pick your exam.

Independent study material. Not affiliated with or endorsed by any certification vendor. Vendor names and marks belong to their owners.