ACE Aviatrix Certified Engineer (ACE) program Questions and Answers

Basically, there are 4 options for consumers to access Azure:

* Internet connectivity.

* Point-to-site VPN (P2S VPN)

* Site-to-Site VPN (S2S VPN)

* ExpressRoute.

Aviatrix software enables enterprise IT to easily deploy a high-availability, multi-cloud

network data plane with end-to-end encryption, high-performance encryption, multi-cloud security

domains, and operational telemetry operations teams need. This is the main point of connection for every

aspect of the cloud. This global transit layer also has the notion of inserting services in its platform, which

is done through the service insertion framework.

Each Express Route connection includes two Microsoft Enterprise Edge and two-router

connections in between the connectivity provider and the local network perimeter. Microsoft ensures

there's a BGP connection between the connectivity and the edge of the on-premise network one each

allocated for the MSEE router. For the validation of the SLA, there must be a redundant layer 3

configured.

CloudWAN provides centralized, simple, cloud-based, automated reconfiguration of existing IOS

branch routers to securely connect directly to the optimal cloud access point.

CloudWAN Automates reconfiguration of Cisco IOS branch routers from the cloud. Orchestrates connectivity

directly to Aviatrix AVX Service Gateways, AWS Transit Gateways, or Azure Virtual WANs

NAT capability supported on the gateway - An Aviatrix OpenVPN® gateway performs a NAT function for

the user’s VPN traffic, effectively masking out the VPN client’s virtual IP address assigned by gateway from

the VPN CIDR Block. but here specifically AWS NAT Gateway is asked.

An Aviatrix OpenVPN is DUO multi-factor authentication supported.

LDAP/AD Integration Authenticates VPN user from Aviatrix gateways in addition to VPN certificate

authentication.