Ch4 VPC Flashcards
What is the minimum size subnet that you can have in an Amazon VPC? A. /24 B. /26 C. /28 D. /30
C. The minimum size subnet that you can have in an Amazon VPC is /28.
You are a solutions architect working for a large travel company that is migrating its
existing server estate to AWS. You have recommended that they use a custom Amazon
VPC, and they have agreed to proceed. They will need a public subnet for their web
servers and a private subnet in which to place their databases. They also require that the
web servers and database servers be highly available and that there be a minimum of two
web servers and two database servers each. How many subnets should you have to
maintain high availability?
A. 2
B. 3
C. 4
D. 1
C. You need two public subnets (one for each Availability Zone) and two private subnets
(one for each Availability Zone). Therefore, you need four subnets.
Which of the following is an optional security control that can be applied at the subnet layer of a VPC? A. Network ACL B. Security Group C. Firewall D. Web application firewall
A. Network ACLs are associated to a VPC subnet to control traffic flow.
What is the maximum size IP address range that you can have in an Amazon VPC? A. /16 B. /24 C. /28 D. /30
A. The maximum size subnet that you can have in a VPC is /16.
You create a new subnet and then add a route to your route table that routes traffic out
from that subnet to the Internet using an IGW. What type of subnet have you created?
A. An internal subnet
B. A private subnet
C. An external subnet
D. A public subnet
D. By creating a route out to the Internet using an IGW, you have made this subnet
public.
What happens when you create a new Amazon VPC?
A. A main route table is created by default.
B. Three subnets are created by default—one for each Availability Zone.
C. Three subnets are created by default in one Availability Zone.
D. An IGW is created by default.
A. When you create an Amazon VPC, a route table is created by default. You must
manually create subnets and an IGW.
You create a new VPC in US-East-1 and provision three subnets inside this Amazon VPC.
Which of the following statements is true?
A. By default, these subnets will not be able to communicate with each other; you will
need to create routes.
B. All subnets are public by default.
C. All subnets will be able to communicate with each other by default.
D. Each subnet will have identical CIDR blocks.
C. When you provision an Amazon VPC, all subnets can communicate with each other by
default.
How many IGWs can you attach to an Amazon VPC at any one time? A. 1 B. 2 C. 3 D. 4
A. You may only have one IGW for each Amazon VPC.
What aspect of an Amazon VPC is stateful? A. Network ACLs B. Security groups C. Amazon DynamoDB D. Amazon S3
B. Security groups are stateful, whereas network ACLs are stateless.
You have created a custom Amazon VPC with both private and public subnets. You have
created a NAT instance and deployed this instance to a public subnet. You have attached
an EIP address and added your NAT to the route table. Unfortunately, instances in your
private subnet still cannot access the Internet. What may be the cause of this?
A. Your NAT is in a public subnet, but it needs to be in a private subnet.
B. Your NAT should be behind an Elastic Load Balancer.
C. You should disable source/destination checks on the NAT.
D. Your NAT has been deployed on a Windows instance, but your other instances are
Linux. You should redeploy the NAT onto a Linux instance.
C. You should disable source/destination checks on the NAT.
Which of the following will occur when an Amazon Elastic Block Store (Amazon EBS)-
backed Amazon EC2 instance in an Amazon VPC with an associated EIP is stopped and
started? (Choose 2 answers)
A. The EIP will be dissociated from the instance.
B. All data on instance-store devices will be lost.
C. All data on Amazon EBS devices will be lost.
D. The ENI is detached.
E. The underlying host for the instance is changed.
B, E. In the EC2-Classic network, the EIP will be disassociated with the instance; in the
EC2-VPC network, the EIP remains associated with the instance. Regardless of the
underlying network, a stop/start of an Amazon EBS-backed Amazon EC2 instance always
changes the host computer.
How many VPC Peering connections are required for four VPCs located within the same
AWS region to be able to send traffic to each of the others?
A. 3
B. 4
C. 5
D. 6
D. Six VPC Peering connections are needed for each of the four VPCs to send traffic to
the other.
Which of the following AWS resources would you use in order for an EC2-VPC instance to resolve DNS names outside of AWS? A. A VPC peering connection B. A DHCP option set C. A routing rule D. An IGW
B. A DHCP option set allows customers to define DNS servers for DNS name resolution,
establish domain names for instances within an Amazon VPC, define NTP servers, and
define the NetBIOS name servers.
Which of the following is the Amazon side of an Amazon VPN connection? A. An EIP B. A CGW C. An IGW D. A VPG
D. A CGW is the customer side of a VPN connection, and an IGW connects a network to
the Internet. A VPG is the Amazon side of a VPN connection.
What is the default limit for the number of Amazon VPCs that a customer may have in a
region?
A. 5
B. 6
C. 7
D. There is no default maximum number of VPCs within a region.
A. The default limit for the number of Amazon VPCs that a customer may have in a
region is 5.
