Networking Flashcards

1
Q

What are the different types of virtual networking cards you can attach to your EC2 instance?

A

Elastic network interface (ENI), Enhanced Networking (EN), and Elastic Fabric Adapter (EFA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the most common type of networking card?

A

Elastic network interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What networking card uses single root I/O virtualization to provide high performance?

A

Elastic networking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

what networking card accelerates high performance computing and machine learning applications?

A

Elastic fabric adapter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what networking card is put on an EC2 instance by default?

A

ENI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What can a VPC be thought of as?

A

A virtual data center in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the three tiers of a VPC?

A

Web (public facing subnet), application (private subnet that can only speak to web tier and database tier), database (private subnet that can only speak to application tier)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How many AZ can a subnet be in?

A

One

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a NAT gateway?

A

A network address translation gateway is used to enable instances in a private subnet to connect to the internet or other AWS services while preventing the internet from initiating a connection with those instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Are NAT gateways redundant within an AZ?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the Gbps range for a NAT gateway?

A

5 to 45 gbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How often do YOU have to patch NAT gateways?

A

Never, Amazon does it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How do you create a NAT gateway’s public IP address?

A

You don’t have to, one is automatically assigned

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is a VPC endpoint?

A

Enables you to privately connect your VPC to supported AWS services and VPC endpoint services without requiring an internet gateway, NAT device, VPN connection, or AWS direct connect connection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How often does traffic between VPC endpoints leave the Amazon network?

A

Never

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What kind of public IP address does VPC endpoints require?

A

No public IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the two types of endpoints?

A

Interface endpoints and gateway endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is an interface endpoint?

A

An elastic network interface with a private IP address that serves as an entry point for traffic headed to a supported service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is a gateway endpoint?

A

A virtual device you provision that supports connections to S3 and DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

When you want to connect AWS services without leaving the AWS network, what should you use?

A

VPC endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is an intranet?

A

A network of computers designed for a certain group of users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is VPC peering?

A

Allows you to connect VPC’s via a direct network route

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How does VPC peering connect VPC’s?

A

Private IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Can you VPC peer between regions? Accounts?

A

Yes and yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Is VPC peering the same as transitive peering?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What options are there to open our applications in a VPC to another VPC?

A

You can open it up to the internet, use VPC peering, or PrivateLink

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What must the service VPC have to use PrivateLink?

A

A NLB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What must the customer VPC have to use PrivateLink?

A

An ENI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is direct connect?

A

A cloud service solution that makes it easy to establish a direct network connection from your premises to AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What are the two types of direct connect connections?

A

Dedicated connections and hosted connections

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is AWS Transit Gateway?

A

Connects VPC’s and on premises networks through a central hub. this simplifies your network and puts an end to complex peering relationships.It acts as a cloud router each new connection is only made once

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is AWS Transit Gateway?

A

Connects VPC’s and on premises networks through a central hub. this simplifies your network and puts an end to complex peering relationships.It acts as a cloud router each new connection is only made once

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What AWS service allows transitive peering?

A

AWS Transit Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

How can you limit how VPC’s talk to each other with Transit Gateway

A

route tables

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What AWS service supports IP multicast?

A

Transit Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is AWS wavelength?

A

Embeds AWS compute and storage services within 5g networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is AWS wavelength?

A

Embeds AWS compute and storage services within 5g networks

36
Q

At what geographical level is NAT gateway redundant at?

A

AZ

37
Q

What is the IPv4 CIDR block of the default VPC?

A

172.31.0.0/16

38
Q

What is the purpose of NAT gateways?

A

to forward traffic from your private subnets to services outside your VPC

39
Q

When would you use transit gateway over VPC peering?

A

You have too many VPC’s to reasonably peer together

40
Q

What is DNS?

A

DNS is used to convert human friendly domain names into IP addresses

41
Q

What does DNS stand for?

A

domain name system

42
Q

Where can you find the top level domain name in a URL?

A

the last phrase

43
Q

Where can you find the second level domain name?

A

the second phrase separated by periods.

44
Q

Who controls the top level domains?

A

Internet assigned numbers authority (IANA)

45
Q

What do NS records do?

A

Used by top level domain servers to direct traffic to the content DNS server that contains the authoritative DNS records

46
Q

What does SOA stand for?

A

start of authority

47
Q

What is an A record?

A

Address Record is the fundamental type of DNS record that is used by computers to translate the name of the domain to an IP address

48
Q

What is a TTL?

A

a time to live is the length that a DNS record is cached on either the resolving server or the user’s own local PC measured in seconds

49
Q

What does a lower TTL mean?

A

the changes to DNS records propagate faster throughout the internet

50
Q

What is a CNAME?

A

a canonical name can be used to map one domain name to another.

51
Q

Give an example of a CNAME

A

http://mobile.acloud.guru goes to http://acloud.guru

52
Q

Can a CNAME be used for naked domain names?

A

No

53
Q

Can Alias records be used for naked domain names?

A

Yes

54
Q

What is route 53?

A

Route 53 is Amazon’s DNS service

55
Q

What is an alias record?

A

A way to map domain names to a each other

56
Q

What are 4 common DNS record types?

A

SOA records, CNAME records, NS records, A records

56
Q

What are 4 common DNS record types?

A

SOA records, CNAME records, NS records, A records

57
Q

What does a simple routing policy do?

A

It has one record for multiple IP addresses. If multiple values are in record, route 53 returns all values in a random order

58
Q

What does a weighted routing policy do?

A

Allows you split your traffic based on weights assigned to destinations

59
Q

If a record fails a health check, what happens?

A

Removed from route 53 until it passes health check

60
Q

How can you get alerted of a failed health record check?

A

SNS notifications

61
Q

When would you use a failover routing policy?

A

When you want to create an active passive set up

62
Q

What does geolocation routing do?

A

Geolocation let’s you choose where your traffic will be sent based on the geographic location of your users

63
Q

What does route 53 traffic flow do?

A

Allows you to build routing system that uses a combination of geographic location, latency, and availability to route traffic

64
Q

What is required to use geoproximity routing?

A

A traffic flow routing policy

65
Q

What does geoproximity routing do?

A

Allows you to route traffic to your resources based on geographic location of your users and your resources

66
Q

What is a latency routing policy?

A

Allows you to route traffic based on lowest network latency for end user

67
Q

What is a multi value answer routing policy?

A

Route 53 only returns values for healthy resources

68
Q

What is ELB?

A

Elastic load balancing automatically distributed incoming traffic across multiple targets

69
Q

What are the three types of load balancers?

A

Application load balancer, network load balancer, classic load balancer

70
Q

What type of load balancer scan be configured with health checks?

A

All types

71
Q

Does an ELB automatically stop sending requests to an unhealthy instance?

A

Yes

72
Q

What does it mean to be a layer 7 load balancer?

A

It operates at the 7 the layer of the open systems interconnection model: the application level

73
Q

What does each rule regarding an ELB contain?

A

Each rule consists of a priority, at least one action, and at least one condition

74
Q

What are the two kinds of listener an application load balancer supports?

A

Http and https

75
Q

What is a listener?

A

A listener checks for connection requests from clients using the protocol and port you configure in your ELB

76
Q

What layers of the OSI model does the network load balancer operate at?

A

The fourth layer: transport layer

77
Q

What type of load balancer offers the highest performance?

A

Network load balancer

78
Q

How does network load balancers use intelligent routing?

A

They cannot do intelligence based routing because they have no rules

79
Q

What are target groups?

A

Target groups route requests to one or more registered targets

80
Q

What are network load balancers best suited for?

A

Load balancing of TCP traffic

81
Q

What does TCP stand for?

A

Transmission Control Protocol

82
Q

Can network load balancers decrypt traffic?

A

Yes

83
Q

What error means that a gateway has timed out?

A

A 504 error

84
Q

If you need the iPv4 address of end user, what should you look for?

A

The X-forwarded-for header

85
Q

What are sticky sessions?

A

Binds a user’s session to a specific EC2 instance

86
Q

What is deregistration delay?

A

Allows load balancers to keep existing connections open if the EC2 instances are deregistered or become unhealthy

87
Q

If you want to complete inflight requests made to an unhealthy or deregistered instance, what should you use?

A

Deregistration delay