Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

DevOps > AWS VPC > Flashcards

AWS VPC Flashcards

1
Q

What is AWS VPC?

A

AWS VPC (Virtual Private Cloud) is a logically isolated virtual network that resembles a traditional data center network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Are VPCs region-specific, and can they connect across regions?

A

Yes, VPCs are region-specific but can be connected across regions using VPC Peering.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How many VPCs can you create per region by default?

A

By default, you can create up to 5 VPCs per region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How many subnets are allowed per VPC?

A

Up to 200 subnets per VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How many CIDR blocks can a VPC have per IPv4/6?

A

Up to 5 CIDR blocks per VPC per IPv4/6.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the default IPv4 CIDR block for a default VPC?

A

172.31.0.0/16

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is included in the default VPC configuration?

A

One subnet per Availability Zone, Internet Gateway (IGW), Default Security Group (SG), Network Access Control List (NACL), DHCP options set, and Route Table with a route to the internet via IGW.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can the default VPC be deleted and restored?

A

The default VPC can be deleted, but it cannot be restored; it must be recreated through AWS CLI.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How does the AWS Management Console handle VPC deletion?

A

The AWS Management Console will automatically delete the VPC along with its resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is a Default Route or Catch-All-Route?

A

It represents all possible IP addresses, essentially allowing access from anywhere or to the internet without restriction.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is AWS RAM, and how does it relate to VPCs?

A

AWS RAM (Resource Access Manager) allows sharing of resources across AWS Accounts. Shared VPCs help reduce the number of VPCs and separate accounts for billing and access control.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How do you share VPCs with other AWS Accounts using AWS RAM?

A

Share VPCs by sharing only non-default subnets, creating a resource share in RAM for what you are sharing, and creating shared principals in RAM for who you are sharing with.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What type of firewall is a Network Access Control List (NACL)?

A

Stateless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

At what level does a Network Access Control List (NACL) operate?

A

Subnet level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What rules/actions do NACL support?

A

Allow and Deny

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How are NACL rules evaluated?

A

Based on their number, from lowest to highest

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

At what level does a Security Group (SG) operate?

A

Instance level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

By what are Security Groups bound?

A

By a VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Are there exceptions from filtering in Security Groups?

A

YES
For Example:
Amazon DNS, Amazon DHCP, License activation for Windows instances, Reserved IP addresses used by the default VPC route

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does it mean if a firewall is stateful?
Which one is stateful Security Group or NACL?

A

It tracks the state of connections and automatically manages return traffic.
Security Group is stateful.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does it mean if a firewall is stateless?
Which one is stateless Security Group or NACL?

A

It does not track the state of connections; each packet is evaluated independently. Explicit rules are needed for both directions.

NACL is stateless.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the function of a Route Table in a VPC?

A

To determine where network traffic is directed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What must each subnet in a VPC be associated with?

A

A Route Table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Can one Route Table be associated with multiple subnets?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does a local target in a Route Table signify?

A

Traffic remains within the VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is an example of a target in a Route Table for public subnet traffic?
What does a Target mean?

A

igw-abc123 (Internet Gateway) can be used as a target.
Target means next hop from a source (e.g. a subnet or EC2 instance) to which traffic needs to be directed in order to reach Destination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

When is the Main Route Table created?
Can it be deleted?

A

It is created with VPC and it cannot be deleted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is a Gateway in networking?

A

A Gateway is a networking service that sits between two different networks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is the function of an Internet Gateway (IGW)?

A

An Internet Gateway handles inbound and outbound traffic for IPv4 and IPv6.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What does an Egress-Only Internet Gateway do?

A

It handles outbound-only private traffic for IPv6.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is the purpose of a NAT Gateway?

A

It handles outbound-only private traffic for IPv4.

32
Q

What is a Carrier Gateway used for?

A

It is used to connect to a telecom network.

33
Q

What is the difference between a Customer Gateway (CGW) and a Virtual Private Gateway (VGW)?

A

CGW is on-premise or external network side (not AWS side).
VGW is on the AWS side, within a specific VPC.

34
Q

What are the roles of CGW and VGW in a VPN connection?

A

CGW manages the VPN connection on your end.
VGW manages the VPN connection on the AWS end.

35
Q

What is a Gateway Load Balancer (GWLB)?

A

A Network Load Balancer that enables the use of third-party virtual appliances like firewalls or IDS/IPS.

36
Q

What is a Direct Connect Gateway used for?

A

It serves as the endpoint for a fiber optic connection at a co-location data center.

37
Q

What is a Backup Gateway?

A

It is an endpoint connection for AWS managed backups.

38
Q

What does an IoT Device Gateway do?

A

It provides endpoint connection for IoT data.

39
Q

What is the purpose of a Transit Gateway?

A

It simplifies VPC peering.

40
Q

What is an API Gateway used for?

A

It abstracts API endpoints to services.

41
Q

What is the function of a Storage Gateway?

A

It connects local storage to cloud storage.

42
Q

What is an Elastic IP (EIP) address?

A

An Elastic IP address is a static IPv4 address in AWS.

43
Q

What is Direct Connect?

A

Direct Connect is a solution for establishing dedicated network connections from on-premise locations to AWS.

44
Q

What do VPC Endpoints allow?

A

They allow private connections between a VPC and other services, with all communication occurring within the AWS network.

45
Q

What does AWS PrivateLink enable?

A

It enables secure connections between a VPC and supported AWS services, AWS services hosted in other AWS accounts, and supported AWS Marketplace services, without using public IPs.

46
Q

What are Interface Endpoints?

A

nterface Endpoints are Elastic Network Interfaces (ENIs) with private IP addresses that serve as an entry point for traffic going to supported services.

47
Q

What is an Elastic Network Interface (ENI)?

A

An Elastic Network Interface (ENI) is a logical network interface representing a virtual network card that can be attached to resources like an EC2 instance.

48
Q

What does a Gateway Endpoint provide connectivity to without using an Internet Gateway or NAT device?

A

Amazon S3 and DynamoDB.

49
Q

Do Gateway Endpoints use AWS PrivateLink?

A

No, Gateway Endpoints do not use AWS PrivateLink.

50
Q

What information do VPC Flow Logs capture?

A

IP information about traffic that goes through your VPC.

51
Q

What scopes can VPC Flow Logs capture information for?

A

VPC, Subnet, ENI, Transit Gateway, Transit Gateway Attachments.

52
Q

What traffic types can be monitored by VPC Flow Logs?

A

ALL (all traffic), ACCEPT (only accepted traffic), REJECT (only rejected traffic).

53
Q

Where can VPC Flow Logs be stored?

A

S3 Bucket, CloudWatch Logs, Amazon Kinesis Data Firehose.

54
Q

What does AWS VPN establish?

A

A secure and private tunnel from your network to AWS global network.

55
Q

What gateways does AWS VPN utilize?

A

Virtual Private Gateway (VGW) or Transit Gateway (TGW), and Customer Gateway (CGW).

56
Q

What are the two types of AWS VPN?

A

Site-to-Site VPN and Client VPN.

57
Q

What is a Virtual Private Gateway (VGW)?

A

Amazon’s side endpoint of a Site-to-Site VPN connection, attachable to a single VPC.

58
Q

What must be assigned to a Virtual Private Gateway (VGW) for it to function?

A

An Autonomous System Number (ASN), with 64512 as the default if not specified.

59
Q

What is a Customer Gateway (CGW)?

A

An AWS resource representing a device in an on-premise network for VPN connection.

60
Q

What does a Client VPN allow?

A

Secure access to AWS resources outside of the AWS network.

61
Q

What are the authentication methods supported by Client VPN?

A

Certificate-based authentication, Active Directory authentication, Federation authentication (Single-Sign-On, SAML).

62
Q

What is a NAT Gateway?

A

A NAT service that allows instances in private subnets to establish outbound connections.

63
Q

Does a NAT Gateway support IPv6 to IPv4 translation?

A

Yes, it supports translation from IPv6 to IPv4, known as NAT64.

64
Q

What is a NAT Instance?

A

A legacy feature for launching NAT on individual EC2 instances, with customer-managed scaling.

65
Q

What is a Jumpbox/Bastion?

A

Security-hardened virtual machines (EC2 instances) for secure access to private subnets.

66
Q

What is VPC Lattice?

A

A fully managed networking service that simplifies and secures communication between services running in VPCs.

67
Q

What are the components of VPC Lattice?

A

Service Network, Listener, Target Group, Service Directory.

68
Q

What is AWS Transit Gateway (TGW)?

A

A network transit hub that allows for the interconnection of VPCs and on-premise networks.

69
Q

What are some key features of Transit Gateway (TGW)?

A

Leverages AWS RAM, serves as a virtual router at regional level, and supports attachments of VPN connections, Direct Connect, and third-party appliances.

70
Q

What does Traffic Mirroring do?

A

Sends a copy of network traffic from a source ENI to a target ENI or UDP-enabled NLB or GWLB.

71
Q

What is the Route 53 Resolver DNS Firewall?

A

A feature of Route 53 Resolver that enhances security by filtering DNS queries in VPC.

72
Q

What is AWS Network Firewall?

A

A stateful, managed network firewall and IDS/IPS for VPCs, utilizing Suricata software.

73
Q

What is VPC Peering?

A

A one-to-one network connection between two VPCs that enables direct routing of traffic between them using private IP addresses.

74
Q

What is a key difference between VPC Peering and Transit Gateway?

A

VPC Peering is less scalable and does not support transitive routing, while Transit Gateway is highly scalable and supports transitive routing.

75
Q

What is Network Address Usage (NAU)?

A

A metric applied to resources in VPC to help plan and monitor the size of the VPC.

DevOps (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions