#4 Virtual Private Cloud (VPC) Basics

Question 1

What service does a VPC provide?
A. Isolated Network
B. Isolated Account
C. Public Only Network Services
D. None of the above

Answer 1

A. Isolated Network

Question 2

What are true about default VPCs and custom VPCs (choose all)
A. Regions can only have 1 custom VPC and many default VPCs
B. Regions can only have 1 default VPC and many custom VPCs
C. Custom VPCs allow flexible network configuration, the default VPC has a fixed scheme
D. Default VPC can only be used for a limited number of services
E. Some services can behave oddly if the default VPC doesn’t exist
F. Default VPCs can be recreated
G. Default VPCs need a support ticket to recreate

Answer 2

B. Regions can only have 1 default VPC and many custom VPCs
C. Custom VPCs allow flexible network configuration, the default VPC has a fixed scheme
E. Some services can behave oddly if the default VPC doesn’t exist
F. Default VPCs can be recreated

Question 3

What are the valid sizes of a VPC?
A. Min /16 & Max /28
B. Max /16 & Min /28
C. Min /24 & Max /28
D. Max /8 & Min /32

Answer 3

B. Max /16 & Min /28

Question 4

What is the Minimum and Maximum size of a VPC Subnet?
A. Min /28 & Max /16
B. Min /8 & Max /32
C. Min /28 & Max /24
D. Min /24 & Max /28

Answer 4

A. Min /28 & Max /16

Question 5

What is true for a VPC Subnet & AZ?
A. An AZ can have many subnets, a subnet is in one AZ
B. An AZ can have many subnets, a subnet can be in many AZs
C. An AZ can have 1 subnet, a subnet can be in one AZ
D. An AZ can have 1 subnet, a subnet can be in many AZs

Answer 5

A. An AZ can have many subnets, a subnet is in one AZ

Question 6

How many IP addresses are reserved in each VPC Subnet?
A. 0
B. 1
C. 2
D. 5
F. 10

Answer 6

D. 5

Question 7

How can an internet Gateway (IGW) be configured to be highly available?
A. Add the AZs which are used to its configuration
B. It cannot be HA
C. It’s HA by default - attached to a VPC
D. Create and attach multiple IGWs to the VPC

Answer 7

C. Its HA by default - attached to a VPC

Question 8

What is true about SG’s and NACLs (choose 2)?
A. SGs can DENY and ALLOW traffic
B. SGs can only ALLOW traffic
C. NACLs can only ALLOW traffic
D. NACLs can ALLOW and DENY traffic

Answer 8

B. SGs can only ALLOW traffic
D. NACLs can ALLOW and DENY traffic

Question 9

What function does NAT serve?
A. Allows IPv4 and IPv6 public instances to access the internet
B. Allows IPv4 and IPv6 private instances to access the internet
C. Allows IPv4 private instances outgoing access to the internet
D. Allows IPv6 private instances outgoing access to the internet

Answer 9

C. Allows IPv4 private instances outgoing access to the internet

Question 10

What is true of Route Tables and VPC subnets? (choose two)
A. A Subnet can have multiple route tables
B. A subnet can have one Route table attached
C. A route table can be associated with multiple subnets
D. A route table can be associated with only one subnet

Answer 10

B. A subnet can have one Route table attached
C. A route table can be associated with multiple subnets