Network Security & Name Resolution Flashcards
You need to allow inbound DNS client queries to a VPC subnet. Which port should you allow in the Network ACL rule?
25
443
23
53
53
Which type of DNS record routing rule allows sending a percentage of traffic to a specific host?
Weighted
Simple
Latency
Geolocation
Weighted
You are registering a new DNS domain through Route 53. What must you supply when registering the domain?
Contact details
VPC ID
Account ID
EC2 instance ID
Contact details
Which records exist automatically in a new hosted DNS zone?
SOA
NS
AAAA
A
SOA
NS
Which of the following statements is correct?
Network ACLs are associated with EC2 instances
Network ACL rules have a priority number
Security group rules have a priority number
Security groups are associated with subnets
Network ACL rules have a priority number
Which of the following statements is correct? Choose two.
Network ACL rules have a priority number
Security group rules have a priority number
Security groups are associated with EC2 instances
Network ACLs are associated subnets
Network ACL rules have a priority number
Network ACLs are associated subnets
You are using the AWS management console to create a new Network ACL. What must the ACL be associated with?
VPC
EC2 instance
DNS zone
Security group
VPC
You have created a network ACL. You now need to create ACL rules using the CLI. Which command should you use?
aws vpc create-network-acl-entry
aws ec2 create-network-acl-entry
aws vpc create-acl-entry
aws ec2 create- acl-entry
aws ec2 create-network-acl-entry
Which PowerShell statement is used to create a Network ACL?
New-VPCNetworkAcl -VpcId
New-VPCNetworkAcl -SubnetId
New-EC2NetworkAcl -SubnetId
New-EC2NetworkAcl -VpcId
New-EC2NetworkAcl -VpcId
Which AWS objects can Elastic IPs be associated with? Choose two.
Instance
Network interface
EC2 instance
VPC subnet
Instance
Network interface
You are using the AWS management console to create a new Security Group. What must the security group be associated with?
VPC
DNS zone
EC2 instance
Security group
VPC
Which CLI command is used to list AWS Security Groups?
aws ec2 show-security-groups
aws ec2 get-security-groups
aws ec2 describe-security-groups
aws ec2 list-security-groups
aws ec2 describe-security-groups
You need to allow port 3389 traffic to pass into an EC2 instance. Which PowerShell cmdlet should you use to modify the security group associated with the instance?
Add-SecurityGroupIngress
Add-EC2SecurityGroupIngress
Grant-EC2SecurityGroupIngress
Grant-SecurityGroupIngress
Grant-EC2SecurityGroupIngress
Which term best describes the role of an AWS Internet Gateway?
Proxy
Routing table
Pass-through
Packet filtering
Pass-through
You have created an Internet Gateway in VPC1, yet EC2 instances in VPC1 subnets cannot reach the Internet. What should you do?
Add a route from the subnets
Associate the Internet Gateway with each subnet
Restart the instances
Associate the Internet Gateway with each EC2 instance
Add a route from the subnets
