Networking Flashcards

1
Q

What does Amazon VPC stands for?

A

Amazon Virtual Private Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the abbreviation of Amazon Virtual Private Cloud?

A

Amazon VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is Amazon Virtual Private Cloud(Amazon VPC) used for?

A

To establish boundaries around your AWS resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What do you use to to establish boundaries around your AWS resources?

A

Amazon Virtual Private Cloud(Amazon VPC)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How do you organize your resources in VPC?

A

With the help of subnets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What do you need to attach to your VPC to allow public traffic from the internet?

A

Internet Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Internet Gateway used for ?

A

You attach Internet Gateway to your VPC so you can allow public traffic from the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What do you use to access private resources in your VPC?

A

Virtual Private Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Virtual Private Gateway used for?

A

To access private resources in your VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does virtual private gateway enable you to establish?

A

A corporate data center routes network traffic over a VPN connection to a virtual private gateway, which is attached to a VPC

A virtual private gateway enables you to establish a virtual private network (VPN) connection between your VPC and a private network, such as an on-premises data center or internal corporate network. A virtual private gateway allows traffic into the VPC only if it is coming from an approved network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is AWS Direct Connect used for?

A

AWS Direct Connect (opens in a new tab) is a service that lets you to establish a dedicated private connection between your data center and a VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What service is used to establish a dedicated private connection between your data center and a VPC?

A

AWS Direct Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is a subnet?

A

A subnet is a section of a VPC in which you can group resources based on security or operational needs. Subnets can be public or private

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which thing is a section of a VPC in which you can group resources based on security or operational needs. It can also be public or private?

A

Subnet/s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is a packet?

A

Unit of data sent over the internet or a network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is called a unit of data that is sent over the internet or a network?

A

A packet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Through what a packet enters a VPC?

A

Internet Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What passes through a Internet Gateway?

A

A packet.

19
Q

What does the packet have to check for before entering or exiting a subnet ?

A

It checks for permissions.

20
Q

What is the VPC component that checks packet permissions for subnets?

A

Network Access Control Lists (ACL)

21
Q

What does Network Access Control Lists (ACL) check for?

A

It checks for packet permissions for a subnet.

22
Q

What is network ACL?

A

Virtual firewall that controls inbound and outbound traffic at the subnet level.

23
Q

It is a virtual firewall that controls inbound and outbound at the subnet level, how do we call that?

A

Network ACL

24
Q

By default your account’s default network ACL allows all inbound and outbound traffic, but you can modify it by adding your own rules ? (YES/NO)

A

Yes

25
Q

What kind of packet filtering do Network ACLs perform?

A

Stateless packet filtering

26
Q

What does stateless packet filtering mean for ACLs?

A

They remember nothing and check packets that cross the subnet border each way :inbound and outbound.

27
Q

After a packet has entered a subnet what does it need to have for the resources in that subnet?

A

Permission/s.

28
Q

What is the VPC component that checks for packet permissions ( such as for an Amazon EC2 instance) ?

A

Security group

29
Q

What is security group?

A

A VPC component that checks for packet permissions.

30
Q

By default, a security group denies all inbound traffic and allows all outbound traffic. You can add custom rules to configure which traffic should be allowed; any other traffic would then be denied. Yes or No?

A

Yes

31
Q

If you have multiple Amazon EC2 instances within the same VPC, you can associate them with the same security group or use different security groups for each instance. Yes or No?

A

Yes

32
Q

What kind of packet filtering do security groups perform?

A

Stateful packet filtering

33
Q

What does stateful packet filtering mean for security groups?

A

It means that they remember previous decisions made for incoming packets.

34
Q

Which statement best describes an AWS account’s default network access control list?

It is stateless and denies all inbound and outbound traffic.
It is stateful and allows all inbound and outbound traffic.
It is stateless and allows all inbound and outbound traffic.
It is stateful and denies all inbound and outbound traffic.

A

It is stateless and allows all inbound and outbound traffic.

35
Q

What is Amazon Route 53?

A

Amazon’s DNS

36
Q

Can you use Amazon Route 53 to register domain names?

A

Yes

37
Q

Can you also transfer DNS records for existing domain names managed by other domain registrars in Amazon Route 53?

A

Yes

38
Q

Which statement best describes DNS resolution?

Launching resources in a virtual network that you define
Storing local copies of content at edge locations around the world
Connecting a VPC to the internet
Translating a domain name to an IP address

A

Translating a domain name to an IP address

39
Q

Your company has an application that uses Amazon EC2 instances to run the customer-facing website and Amazon RDS database instances to store customers’ personal information. How should the developer configure the VPC according to best practices?

Place the Amazon EC2 instances in a private subnet and the Amazon RDS database instances in a public subnet.
Place the Amazon EC2 instances in a public subnet and the Amazon RDS database instances in a private subnet.
Place the Amazon EC2 instances and the Amazon RDS database instances in a public subnet.
Place the Amazon EC2 instances and the Amazon RDS database instances in a private subnet.

A

Place the Amazon EC2 instances in a public subnet and the Amazon RDS database instances in a private subnet.

40
Q

Which component can be used to establish a private dedicated connection between your company’s data center and AWS?

Private subnet
DNS
AWS Direct Connect
Virtual private gateway

A

AWS Direct Connect

41
Q

Which statement best describes security groups?

They are stateful and deny all inbound traffic by default.
They are stateful and allow all inbound traffic by default.
They are stateless and deny all inbound traffic by default.
They are stateless and allow all inbound traffic by default.

A

They are stateful and deny all inbound traffic by default.

42
Q

Which component is used to connect a VPC to the internet?

Public subnet
Edge location
Security group
Internet gateway

A

Internet gateway

43
Q

Which service is used to manage the DNS records for domain names?

Amazon Virtual Private Cloud
AWS Direct Connect
Amazon CloudFront
Amazon Route 53

A

Amazon Route 53