Advanced Networking Flashcards

1
Q

Q: What is Amazon VPC?

A

A: A service that allows you to launch AWS resources in a logically isolated virtual network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Q: What are subnets in a VPC?

A

A: Subdivisions of a VPC where resources are launched, which can be public, private, or dedicated.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Q: What is a CIDR block in networking?

A

A: Classless Inter-Domain Routing (CIDR) defines the IP address range for a VPC or subnet (e.g., 10.0.0.0/16).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Q: What is a route table in a VPC?

A

A: A set of rules (routes) that determines the flow of network traffic within a VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Q: What is an Internet Gateway in a VPC?

A

A: A gateway that allows instances in a VPC to connect to the internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Q: What is a NAT Gateway?

A

A: A managed service that enables instances in a private subnet to access the internet while remaining inaccessible from the internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Q: What is an Elastic IP address in AWS?

A

A: A static, public IPv4 address that can be assigned to resources in AWS for consistent external reachability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Q: What are VPC Endpoints?

A

A: Private connections that enable communication between VPC resources and AWS services without using the internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Q: What is VPC Peering?

A

A: A connection between two VPCs to enable traffic routing between them using private IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Q: What is AWS Transit Gateway?

A

A: A service that acts as a hub to connect multiple VPCs and on-premises networks via a central point.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Q: What is AWS Direct Connect?

A

A: A dedicated, private connection between your on-premises data center and AWS, offering high bandwidth and low latency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Q: What are VPN connections in AWS?

A

A: Secure connections between an on-premises network and AWS using IPsec tunnels.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Q: What are NACLs in a VPC?

A

A: Stateless firewalls at the subnet level that control inbound and outbound traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Q: What are security groups in AWS?

A

A: Stateful firewalls that control inbound and outbound traffic for instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Q: What is AWS Global Accelerator?

A

A: A service that improves the availability and performance of applications by routing traffic through AWS’s global network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Q: What are Elastic Load Balancers?

A

A: Services that distribute incoming traffic across multiple targets, such as EC2 instances, containers, and IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Q: What is AWS PrivateLink?

A

A: A service for creating private connectivity between VPCs and AWS services or third-party applications.

18
Q

Q: How is IPv6 supported in AWS?

A

A: IPv6 is natively supported for VPCs, subnets, and AWS services, providing global reachability without NAT.

19
Q

Q: What is AWS Wavelength?

A

A: A service that enables developers to deploy applications with ultra-low latency at the edge of 5G networks.

20
Q

Q: What are VPC Flow Logs?

A

A: Logs that capture information about IP traffic to and from network interfaces in a VPC.

21
Q

Q: What is an Elastic Network Interface?

A

A: A logical network interface that can be attached to EC2 instances in a VPC.

22
Q

Q: What is a Network Load Balancer?

A

A: A load balancer that handles millions of requests per second at ultra-low latency for TCP and UDP traffic.

23
Q

Q: What is cross-region VPC peering?

A

A: A peering connection that allows traffic between VPCs in different AWS Regions.

24
Q

Q: What is AWS App Mesh?

A

A: A service mesh that provides application-level networking to control and monitor communication between services.

25
Q

Q: What is VPC Sharing?

A

A: A feature that allows multiple AWS accounts to use subnets in a shared VPC for better resource management.

26
Q

Q: What is an egress-only internet gateway?

A

A: A gateway that allows outbound-only traffic from IPv6-enabled instances in a VPC.

27
Q

Q: What is traffic mirroring in AWS?

A

A: A feature that captures and inspects network traffic from ENIs for analysis or monitoring.

28
Q

Q: What is AWS Cloud WAN?

A

A: A managed WAN service that connects on-premises data centers, branch offices, and cloud resources.

29
Q

Q: What networking features support high availability in AWS?

A

A: Multi-AZ deployments, Elastic Load Balancers, Transit Gateways, and Cross-Region Replication.

30
Q

Q: How is DNS handled in AWS?

A

A: Using Amazon Route 53, a scalable Domain Name System for managing domain names and routing traffic.

31
Q

Q: What routing policies are supported in Route 53?

A

A: Simple, Weighted, Latency-Based, Failover, Geolocation, Geoproximity, and Multivalue Answer.

32
Q

Q: How does AWS Outposts handle networking?

A

A: By extending VPCs to on-premises environments and providing seamless integration with AWS services.

33
Q

Q: What are Jumbo Frames in AWS networking?
`

A

A: Frames with MTU of up to 9001 bytes, supported for enhanced data throughput in VPCs.

34
Q

Q: What is the difference between Transit Gateway and VPC Peering?

A

A: Transit Gateway acts as a central hub for many VPCs and on-premises networks, while VPC Peering establishes a direct connection between two VPCs.

35
Q

Q: How is cross-account networking managed in AWS?

A

A: Using resource-based policies, shared VPCs, and AWS PrivateLink.

36
Q

Q: What is AWS Network Access Analyzer?

A

A: A tool to identify and validate unintended network access paths in VPC configurations.

37
Q

Q: What is AWS Site-to-Site VPN?

A

A: A service that creates a secure IPsec tunnel between an on-premises network and an AWS VPC.

38
Q

Q: What is AWS Firewall Manager?

A

A: A service for managing firewall rules across multiple accounts and VPCs.

39
Q

Q: What is the difference between a NAT Gateway and a NAT Instance?

A

A: A NAT Gateway is a managed service, while a NAT Instance is a manually configured EC2 instance for routing traffic.

40
Q

Q: How do IPv4 and IPv6 differ in AWS networking?

A

A: IPv4 is widely used but limited in address space, while IPv6 provides a larger address space and supports direct internet access without NAT.