04-Default VPC

Question 1

What is a Virtual Private Cloud (VPC)?

Answer 1

A virtual network within AWS that allows you to create private networks for AWS resources, as well as connect to on-premises networks or other cloud platforms.

Question 2

What is a Default VPC?

Answer 2

A preconfigured VPC by AWS with a default IP range (CIDR) of 172.31.0.0/16.

Question 3

How many Default VPCs are there per Region?

Answer 3

One

Question 4

What is included with a Default VPC?

Answer 4

Preconfigured subnets, an internet gateway, a default security group, and network ACLs. Provides public IPv4 addressing for resources placed in its subnets by default.

Question 5

What are limitations of the Default VPC?

Answer 5

Less flexible and unsuitable for production environments due to its rigid structure.

Question 6

What is a Custom VPC?

Answer 6

Fully configure able by the user, allowing you to design your network’s size, structure, and connectivity.

Question 7

How many Custom VPCs can you have per Region?

Answer 7

Multiple

Question 8

By default, how are Custom VPCs configured?

Answer 8

100% private by default unless explicitly configured otherwise.

Question 9

What are some features of Custom VPCs?

Answer 9

Can be connected to other VPCs, cloud platforms, and on-premises networks.

Question 10

What resilience level is a VPC?

Answer 10

It is regionally resilient. It spans multiple AZs within a Region.

Question 11

What is a CIDR?

Answer 11

Defines the IP address range available within the VPC.

Question 12

What is the CIDR Block difference between Custom and Default VPCs?

Answer 12

Custom: Can have multiple CIDR blocks. Default: Can only have one and it is always 172.31.0.0/16

Question 13

What are subnets?

Answer 13

Smaller sub-networks within a VPC, each associated with a specific AZ.

Question 14

What resilience level is a subnet?

Answer 14

It is AZ resilient.

Question 15

Can subnets have overlapping CIDRs in the same VPC?

Answer 15

No.

Question 16

What is an Internet Gateway (IGW)?

Answer 16

Allows VPCs to connect to the internet. A Default VPC includes an IGW by default.

Question 17

What are Security Groups and Network ACLs (NACLs)?

Answer 17

Security layers to control incoming and outgoing traffic to and from resources within the VPC.

Question 18

What is an example of a Production VPC?

Answer 18

A custom VPC is created with multiple subnets across different availability zones (AZs) for a production workload. The VPC is fully isolated and only accessible through specific security rules and configurations.

Question 19

What is an example of a Hybrid VPC?

Answer 19

A hybrid environment is created using a custom VPC connected to an on-premises network via a VPN gateway, allowing private communication between AWS and the on-premises data center.