Aviatrix Certified Engineer (ACE) program - ACE Exam Questions [2026]

QUESTION NO: 1
Statefull Firewall rule:

A. Alone can easily satisfy the enterprise security needs B. Requires explicit rule for the return traffic C. Is another name for Azure Active Directory Firewall D. Allows the return traffic implicitly

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
One difference between Microsoft ExpressRoute circuits as compared to other cloud provide.... options, is that ExpressRoute is always provisioned as a redundant pair with two physical Microsoft Enterprise Edge Routers (MSEE)?
SELECT THE CORRECT ANSWER

A. True B. False

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
Which AWS feature does Aviatrix integrate with to provide Public Subnet Filtering for Ingress Internet Traffic to a VPC?

A. AWS WAF B. AWS Shield C. AWS GuardDuty D. AWS inspector

Correct Answer: C

QUESTION NO: 4
Private, Public, Transit VIFs (Virtual interfaces) are terms related to which...
SELECT THE CORRECT ANSWER

A. Azure ExpressRoute B. AWS Transit Gateway C. AWS DirectConnect D. AWS Virtual Private Gateway (VGW)

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Using AWS Terraform provider, a customer created an AWS Transit Gateway with 50 VPCs attached to it. After attaching the VPCs and spinning up some EC2 instances in them, none of the instances can communicate with each other. What should be done to resolve the issue?

A. There must be security group rules blocking traffic as AWS auto configures VPC routing tables B. Create routing tables in each VPC, add CIDR for all the other VPCs in the routing table pointing to AWS Transit Gateway C. There must be security group rules blocking traffic as BGP in VPC auto configures VPC routing tables D. Configure BGP communities in VPC such that all VPCs that need to communicate with eachother have same community defined

Correct Answer: A

QUESTION NO: 6
As a Cloud Networking Consultant, you are reviewing a Microsoft Azure network design that will be using Microsoft Azure ExpressRoute Edge routers as transit for inter-VNet communication. What are some known challenges with this design pattern?

A. Lack of visibility into traffic at the edge routers B. All of the above C. No granular control to be able to route VNets selectively D. Multiple customers using same edge router may create noisy neighbor issues

Correct Answer: B

QUESTION NO: 7
The feature in Aviatrix Controller that allows customers to see path between two instances/AMI/EC2/VM (including, but not limited to Security Groups, ACLs, Routes, etc.) is called:

A. FlightControl B. Netflow C. FlightPath D. Network Connectivity Test

Correct Answer: C

QUESTION NO: 8
What is a challenge of using VNet peering for transit in Azure?

A. Limited to a single region B. Doesn't scale well as its a 1:1 mapping C. Limited bandwidth available over peering connections D. Requires BGP to be configured

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).