Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS CCP > 13. VPC > Flashcards

13. VPC Flashcards

1
Q

What is a VPC in AWS?

A

A Virtual Private Cloud (VPC) is a private network for deploying resources in AWS, providing isolation and security.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the main purpose of a subnet in a VPC?

A

Subnets partition the network within a VPC, and each subnet is associated with a specific Availability Zone.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

True or False: A private subnet can access the internet directly by default.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the role of an Internet Gateway in a VPC?

A

It enables internet access for instances in public subnets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Define Elastic IP in the context of AWS.

A

An Elastic IP is a fixed public IPv4 address that can be attached to an EC2 instance and retained across reboots.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Why would you use a NAT Gateway?

A

To allow instances in a private subnet to access the internet without exposing them to incoming internet traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which IP protocol version is private only in AWS, IPv4 or IPv6?

A

IPv4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Fill in the blank: A _______ is a firewall for controlling traffic at the instance level in AWS.

A

Security Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How does a Network ACL differ from a Security Group?

A

Network ACLs control traffic at the subnet level and allow both ALLOW and DENY rules, while Security Groups control traffic at the instance level and allow only ALLOW rules.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the main function of VPC Flow Logs?

A

To capture information about IP traffic entering and exiting network interfaces, helping monitor and troubleshoot connectivity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

True or False: VPC Peering connections are transitive.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is required for a VPC Peering connection between two VPCs?

A

They must have non-overlapping CIDR (IP address) ranges.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Explain the purpose of VPC Endpoints.

A

They enable private connectivity to AWS services within a VPC, bypassing the public internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is AWS PrivateLink used for?

A

To securely expose services to multiple VPCs without VPC peering or internet connectivity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

True or False: Direct Connect provides a secure, private connection between on-premises and AWS.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How does Site-to-Site VPN differ from Direct Connect?

A

Site-to-Site VPN uses an encrypted internet connection, while Direct Connect uses a private network connection.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Fill in the blank: A _______ allows computers to connect securely to a private network over the internet using OpenVPN.

A

Client VPN

18
Q

What is the role of a Transit Gateway?

A

It enables hub-and-spoke network topologies, connecting thousands of VPCs and on-premises networks together.

19
Q

True or False: AWS charges for public IPv4 addresses, including Elastic IPs, when they are not in use.

A

True

20
Q

What AWS service logs network traffic and can send data to S3 or CloudWatch?

A

VPC Flow Logs

21
Q

Compare: Public Subnet vs Private Subnet

A

Public subnets have a route to an internet gateway and can access the internet directly, while private subnets do not have this route and remain isolated.

22
Q

What must be established for a Site-to-Site VPN to function?

A

A Customer Gateway on-premises and a Virtual Private Gateway in AWS.

23
Q

What AWS feature would you use for private access to S3 or DynamoDB?

A

VPC Endpoint Gateway

24
Q

Fill in the blank: _______ connects two VPCs to behave as if they are in the same network.

A

VPC Peering

25
Q

What does a Customer Gateway represent?

A

A physical or software appliance in an on-premises data center that connects to a Virtual Private Gateway for Site-to-Site VPN.

26
Q

Explain a use case for NAT Instances.

A

NAT Instances can be used to provide internet access to private subnets if NAT Gateways are not feasible.

27
Q

True or False: Every IPv6 address in AWS is private.

A

False

28
Q

How does a VPC Endpoint Interface differ from a VPC Endpoint Gateway?

A

The Endpoint Interface connects to most AWS services, while the Endpoint Gateway connects specifically to S3 and DynamoDB.

29
Q

Which AWS service enables cross-account access without internet exposure?

A

AWS PrivateLink

30
Q

What is the primary benefit of using Transit Gateway in complex architectures?

A

It simplifies network connectivity by acting as a single hub for thousands of VPC and on-premises connections.

31
Q

Fill in the blank: ________ is required in a VPC to control inbound and outbound rules at the subnet level.

A

Network ACL

32
Q

What are the two primary types of IP addresses in AWS?

A

Public IP addresses (for internet) and Private IP addresses (for internal networks).

33
Q

True or False: Security Groups can have DENY rules.

A

False

34
Q

Why would you use an Elastic IP with an EC2 instance?

A

To provide a static public IP that does not change across instance restarts.

35
Q

What service enables encrypted connections between on-premises infrastructure and AWS over the internet?

A

Site-to-Site VPN

36
Q

Fill in the blank: ______ allows secure VPN connection from individual computers to AWS VPCs.

A

AWS Client VPN

37
Q

What is a common CIDR block for VPCs in AWS?

A

10.0.0.0/16

38
Q

Describe how a default VPC differs from a custom VPC.

A

A default VPC is pre-configured by AWS with public subnets, while a custom VPC requires manual setup of subnets and configurations.

39
Q

What does an ENI represent in the context of VPC networking?

A

An Elastic Network Interface is a virtual network card for connecting EC2 instances within a VPC.

40
Q

True or False: A private subnet cannot access AWS services without a VPC Endpoint.

A

True

41
Q

Which AWS service is known as the ‘network firewall’ at the instance level?

A

Security Group

AWS CCP (19 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions