Quiz - Chapter 9 - VPC Overview

Question 1

How do you scale a NAT Gateway?

Answer 1

You don’t. AWS handles this for you.

AWS handles scaling for you

Question 2

Which of the following items are NOT a part of a VPC?

Answer 2

Service Gateway

Question 3

By default, what range of IP addresses and ports do security groups leave open for inbound traffic?

Answer 3

No inbound ports are open by default

Question 4

Where does a subnet live?

Answer 4

Subnets live inside an AZ

Question 5

Your security team will only approve S3 usage if your EC2 instances don’t transmit data over the public internet. What service can you use to comply with this requirement?

Answer 5

VPC Endpoints are used to keep your traffic to AWS services out of public networking space.

Question 6

Why would you use Transit Gateway over VPC peering?

Answer 6

Transit Gateway is designed for when you have too many VPCs to peer together.

Question 7

Fill in the blank: Network Access Control Lists (NACLs) are ____.

Answer 7

NACLs are stateless

Question 8

Fill in the blank: Security groups are ____.

Answer 8

Security groups are stateful

Question 9

What is the IPv4 CIDR block of the default VPC?

Answer 9

172.31.0.0/16 is the IPv4 CIDR block for the Default VPC provided by AWS out of the box

Question 10

What is the safest way to open up a single API endpoint to another AWS VPC?

Answer 10

Use PrivateLink to securely share out your API