Network Specialist All Flashcards
What is required to send VPC Flow Logs to CloudWatch?
IAM Role
3 Types of Placement Groups?
• Cluster – clusters instances into a low-latency group in a single Availability Zone
• Partition – spreads instances across logical partitions, ensuring that instances in one partition do not share underlying hardware with instances in other partitions
Spread – spreads instances across underlying hardware
Is CloudWatch supported for NAT GW?
No
Interface VPC Endpoint
- One interface per Avail Zone
- No endpoint policy support
- Access from direct connect but not from VPN GW
- Use endpoint specifc DNS name or route 53 private hosted
GW VPC Endpoint
- Supports multiple avail zones
- Uses routing table ID instead of DNS
- Pollicy is supported
What IP addresses can reach the public VIF of a customer router connected to direct connect?
All Amazon owned addresses.
Max Number of peering sessions per VPC
125
Number of Transit GW connections per DC GW
3
Can you access a Interface GW from DC?
No, only interface endpoints
Can you enable private hostname for DMS endpoint?
Yes. Then it can be accessed with https://kms..amazonaws.com
Does ALB support on premise targets?
Yes
What does VPC endpoint policy require?
- The principal that can perform actions
- The actions that can be performed
- The resources on which actions can be performed
What VPC endpoint operations does CloudTrial logs not support?
Principles in other accounts or operations from other accounts.
With ALB is cross-zone load-balancing enabled by default?
Yes
With NLB is cross-zone load-balancing enabled by default?
No
From within a VPC what is returned if the the public route53 DNS name is queried?
Private IP address
How many available IP addresses are required for Internet facing load-balancers?
8
Is it possible to create NS records in a private hosted zone to delegate a subdomain?
No
Number of VIFs support per DC connection?
50
How many VGW’s can a DC gateway connect to?
10
Can VPC’s connected with VGW’s through DC GW communicate over the connection?
No
Limit of CIDR advertisements through a transit VIF?
20
Can route 53 DNS health checkers check private addresses?
No. Instance must have public address
Are multiple VGW per VPC allowed?
Yes
Can VGW have more than a single BGP peer?
No
Number of VIFs per DC GW
30
Can ALB use KMS?
No
When to move private keys from site to AWS?
Never
How many fields can Cloudfront encrypt without using Lambda@Edge?
CloudFront can protect a maximum of 10 fields and only within HTTP(S) POST requests that carry HTML form encoded payloads.
What is the only required section in a CloudFormation Template?
Resources
What CloudFormation function returns array of CIDR ranges
Fn::Cidr
What is required for CloudFormation template in order to peer VPC’s from different accounts?
The VPC account being peered to needs a role for peering VPC. That must be reference in template
What must be turned on to complete config rule in CF t template?
Recorder
