Networking Services

Question 1

Amazon Virtual Private Cloud (VPC)

Default limit on the number of VPCs?

What do you specify when you create a VPC?

Answer 1

• A VPC is a virtual network dedicated to your AWS account
• It is logically isolated from other virtual networks in the AWS
  Cloud
• Provides complete control over the virtual networking
  environment
• You can launch your AWS resources, such as Amazon EC2
  instances, into your VPC
• When you create a VPC, you must specify a range of IPv4
  addresses for the VPC in the form of a Classless Inter-Domain
  Routing (CIDR) block;
• A VPC spans all the Availability Zones in the region
• You have full control over who has access to the AWS
  resources inside your VPC
• By default you can create up to 5 VPCs per region
• A default VPC is created in each region with a subnet in each
  AZ

Question 2

Security Groups

Answer 2

• Firewall for EC2 instances
• Operate at the instance level
• Support allow rules only
• Stateful

Question 3

Network Access Control Lists (ACLs)

Answer 3

• Firewall at the subnet level
• Support allow and deny rules
• Stateless
• Process rules in order

Question 4

IP addresses types

Answer 4

• Public IP
• Private IPs
• Elastic IPs

Question 5

Public IP

Answer 5

• Public IP is dynamic and lost when instance is stopped
• Public IPs cannot be moved between instances

Question 6

Private IPs

Answer 6

• Private IPs are attached to all EC2 instances
• Private IPs are retained when the instance is stopped

Question 7

Elastic IPs

Answer 7

• Elastic IPs are static public addresses
• Elastic IPs are retained when the instance is stopped
• Elastic IPs can be moved between instances
• Elastic IPs are chargeable if not used

Question 8

NAT Instances and Gateways

Answer 8

NAT Instances and Gateways
* Used for accessing the internet from private subnets
* Deployed in public subnets
* Must update the route table in private subnets
* NAT instances are managed by you
* NAT gateways are managed by AWS

Question 9

VPC Peering

Answer 9

• Used to route between VPCs using private IP addresses

Question 10

AWS Managed VPN

Answer 10

• Virtual private network (VPN) connection between onpremises sites and AWS
• Uses the public Internet

Question 11

AWS Direct Connect

Answer 11

• Private connection from on-premises to AWS
• Avoids the public Internet

Question 12

AWS Transit Gateway

Answer 12

• Connects VPCs and on-premises networks through a central
  hub
• Simplifies network configuration

Question 13

AWS Outposts

Answer 13

• Deploy AWS infrastructure on-premises and connect AWS
  services
• Can extend a VPC into the on-premises environment
• Supports several AWS services