AWS Quest 4 Test Flashcards
Which of the following are characteristics of network ACL’s?
- They evaluate a list of rules to determine access, where lower number rules have precedent over higher numbers
- They can explicitly block IP addresses
- They are stateless
True or False: If your EC2 instance wants to send a request to a websites port 80 to request their website, the outbound port used to initiate that request from your EC2 will also be port 80
false
If you needed to set up secure communication for multiple remote locations, which service would allow this?
VPC CloudHub
If you wanted to establish private communication over the AWS network from an EC2 and an AWS service, you can:
Group of answer choices
Create a VPC endpoint between the EC2 and the network load balancer in front of the AWS service
If your EC2 instance attempts to send a request to the internet and the request fails, the cause is likely due to:
The ephemeral outbound ports being closed
True or False: If VPC A is peered with VPC B, and VPC B is peered with VPC C, then VPC A can communicate with VPC C
false
If you wanted to allow direct communication from another user’s VPC to one of your EC2 instances in your own VPC, what service can you use to enable this?
VPC Private Link
You work for an organization that uses AWS for their cloud infrastructure. Occasionally, developers need to connect to EC2 instances in order to perform routine work and maintenance. How should your developers connect?
Developers should use their personal access keys to connect to a bastion host
A new AWS professional created an EC2 instance for a short, 1 week demo. Anticipated running cost for this instance was about 1 dollar a day. At the end of the week, the total costs for the instance exceeds $500. What could have happened?
The instance was not properly secured and got DDoS attacked
What can a WAF do that the other firewall options can not?
Detect and protect against common attacks
True or False: VPC flow logs allow you to see the to and from IP address as well as which ports are used for communication across a VPC, Subnet, or ENI
Group of answer choices
true
Which of the following allows you to browse and purchase software from vendors?
AWS Marketplace
True or False: Lambda functions can invoke one or more other lambda functions
True
Amazon Kinesis ____ uses sharding to temporarily store data until it’s waiting to be processed
Streams
What is the purpose of the service Fargate?
Fargate offers serverless compute for containers and clusters