VPC

Question 1

VPC- virtual private cloud

Answer 1

private network to deploy your resource (regional resource)

• You need a logically isolated section of AWS, where you can launch AWS resources in a private network that you define. What should you use?

Question 2

Subnet

Answer 2

allow you to partition your network inside your VPC ( availability zone resource)

• tied to an AZ, network partition of the VPC

Question 3

Public subnet

Answer 3

a subnet that is accessible from the internet

Question 4

Private subnet

Answer 4

a subnet that is not accessible from the internet

Question 5

Route table

Answer 5

To define access to the internet and between subnet, we use

Question 6

Internet gateway

Answer 6

helps our VPC instance connect with the internet
- Public Subnets have a route to the internet gateway

-Your VPC needs to connect with the Internet. Which VPC component can help?

Question 7

NAT gateway / Instances

Answer 7

• give internet access to private subnets
• allow your instance in the private subnet to access the internet while remaining private
• Your private subnets need to connect to the Internet while still remaining private. Which AWS-managed VPC component allows you to do this?

Question 8

NACL: Network ACL

Answer 8

Stateless, subnet rules for inbound and out bound

• Operate at subnet level
• supports allow rules and deny rules
• is Stateless: Return traffic must be explicitly allows rules
• Which type of firewall has both ALLOW and DENY rules and operates at the subnet level?

Question 9

Security Group:

Answer 9

stateful, operate at the EC2 instance level or ENI

• Operate at instance level
• Support allow rules only
• Is stateful: return traffic is automatically allowed regardless of any rules

Question 10

VPC peering

Answer 10

connect two VPC with non overlapping IP ranges, non-transitive

• A company needs two VPCs to communicate with each other. What can they use?

Question 11

VPC endpoints

Answer 11

Provide private access to AWS service within VPC

• VPC endpoint Gateway: S3 & DynamoDB
• VPC Endpoint interface: the rest services

Question 12

VPC flow logs

Answer 12

Network traffic logs

• Capture information about IP traffic going into your interface
• Help to monitor & troubleshoot connectivity issue

Question 13

Site to Site VPN

Answer 13

VPN over public internet between on-perms DC and AWS

• public internet
• not fast
• take a month to establish

Question 14

Direct Connect

Answer 14

Direct private connection to AWS

• Private network
• fast
• Takes at last a month to establish
• A company needs to have a private, secure, and fast connection between its on-premises data centers and the AWS Cloud. Which connection should they use?

Question 15

Transit Gateway:

Answer 15

Connect thousands of VPC and on-perm networks together

• You would like to connect hundreds of VPCs and your on-premises data centers together. Which AWS service allows you to do link all these together efficiently?