Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Solutions Architect -- Associate > Section 27: Networking and VPC > Flashcards

Section 27: Networking and VPC Flashcards

1
Q

What does CIDR stand for?

A

CIDR = Classless Inter-Domain Routing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is CIDR?

A

CIDR is a method for allocating IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the two components of a CIDR?

A

1) Base IP
2) Subnet mask

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does a Subnet Mask do?

A

A subnet mask defines how many bits can change in the IP (like /0, /24/ /32)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a Base IP

A

A Base IP = IP contained in the range of (xx.xx.xx.xx), for example 10.0.0.0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a subnet?

A

A subnet is a range of IP addresses in your VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the point of VPC Subnets?

A

You launch AWS resources into subnets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can subnets connect to the internet?

A

Yes, a subnet can connect to the internet (and thus all the resources in that subnet), without connecting the VPC to the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How do you route traffic to and from subnets?

A

Using route tables

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the 5 reserved IP addresses in each subnet?

A

The first 4 and last 1 IP address in each subnet is reserved by AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What number do subnet sizes start at?

A

they start at 32. For example: 10.0.0.0/32

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a Bastion Host

A

Special purpose computer on a network, designed to withstand attacks by connecting a private subnet to the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Bastion host architecture: describe the main architectural pattern

A

EC2 instance (Bastion Host) sits in public subnet, receives user traffic, and then talks to EC2s in the private subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Important for the exam: What is the only port number for the Bastion Host traffic

A

Port 22

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Can VPCs be public?

A

No, VPCs are private resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How many addresses does subnet size of /26 get you?

A

64 - 5 = 59, (keep in mind it starts at /32, which is equal to 1 IP)

17
Q

What is the purpose of Internet Gateway (IGW)?

A

Internet Gateway allows resources in a VPC to connect to the internet

18
Q

You are trying to connect a VPC to the internet with an Internet gateway. What else do you need to do?

A

Route tables must also be edited, as internet gateways do not allow internet access on their own

19
Q

How many VPCs can be attached to an internet gateway?

A

Just one. And vice versa

20
Q

What does a NAT gateway do?

A

Allows a private subnet to access the internet

21
Q

Do NAT gateways need static or elastic IPs?

A

NAT Gateways need to be assigned Elastic IPs

22
Q

What happens if resources in multiple AZs share a NAT gateway, and the gateway goes down?

A

All the resources lose internet access

23
Q

If you have resources in multiple AZs, all in private subnets, how should you configure your NAT gateways?

A

Every AZ should have its own NAT gateway, and resources should have routing configured to the gateway in their AZ

24
Q

Do NAT connections enable inbound and outbound connection?

A

No, they only enable outbound connection. Your devices can outbound connect with the internet, but receive nothing inbound.

25
Q

What does NACL stand for?

A

Network Access Control List (network ACL)

26
Q

What are NACLs?

A

They are akin to firewalls that control traffic to and from subnets

27
Q

How many NACLs per subnet?

A

one

28
Q

How are rule precedents determined in NACL rules?

A

Lower the number, higher the rule precedent

29
Q

How does AWS recommend adding NACL rules?

A

in increments of 100

30
Q

How do default NACLs treat inbound / outbound traffic?

A

Default NACLs allow all inbound and outbound traffic

31
Q

Should you modify the default NACL?

A

NO. Do not modify the default NACL, just create new ones.

32
Q

What are Ephemeral Ports?

A

Short lived ports that are used on the server-end of communication

33
Q

What is the purpose of Ephemeral Ports?

A

Ephemeral ports allow continued communication with a client that initially connected using another port on the server

34
Q

What does NAT stand for?

A

Network Address Translation

35
Q

What is VPC peering?

A

Creating a private network connection between two VPCs. Makes them behave as if they were in the same network

36
Q

Can you peer VPCs with overlapping CIDR blocks?

A

No, you cannot.

37
Q

Can you peer VPCs transitively?

A

NO. Peering has to be from one VPC to another. VPC A cannot peer with VPC B and then be magically peered with VPCs C, D, E etc.

38
Q

What do you need to update in recently peered VPCs?

A

Route tables

AWS Solutions Architect -- Associate (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions