Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS - Certified Solutions Architect - Associate (SAA-C03) > VPC > Flashcards

VPC Flashcards

1
Q

What is AWS VPC?

A

A virtual datacenter in the cloud. A logically isolated part of the AWS cloud where you can define your own network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does an AWS VPC consist of?

A

Internet gateways (or virtual private gateways), route tables, network access control lists, subnets, and security groups.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How many AZ’s can 1 subnet be in?

A

1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Can a subnet span multiple AZ’s?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a NAT Gateway?

A

Network Address Translation Gateway

it enables instances in a private subnet to connect to the internet or other AWS services while preventing the internet from initiating a connection with those instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a NAT Gateway?

A

Network Address Translation Gateway

it enables instances in a private subnet to connect to the internet or other AWS services while preventing the internet from initiating a connection with those instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Where does the NAT gateway live in your VPC environment?

A

The public subnet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What Gbps throughput does NAT Gateway start at?

A

5 Gbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What Gbps throughput can a NAT gateway scale too?

A

45 Gbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Do you need to patch a NAT Gateway?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Are security groups stateful?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does it mean that Security groups are stateful?

A

If you send a request from your instance, the response traffic for that request is allowed to flow in regardless of inbound security group rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Are Network ACL’s stateful?

A

No, they are stateless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Does your VPC Automatically come with a Network ACL?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Does the default NACL allow inbound and outbound traffic?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Does a custom NACL allow all inbound and outbound traffic by default?

A

No, it denies by default.

17
Q

Does a Subnet need to be associated with a NACL?

A

Yes, if you do not add one the default one will be associated to the subnet.

18
Q

Would you use a NACL or a security group to block an IP address?

A

A NACL

19
Q

Can a subnet be associated to multiple NACL’s?

A

No

20
Q

Can a NACL be associated to multiple subnets?

A

Yes

21
Q

If you add a subnet to a NACL what happens to the prior NACL associated to the subnet?

A

The previous association is removed.

22
Q

Does a NACL contain a numbered list of rules?

A

Yes

23
Q

In what order do NACLs evaluate the rule list?

A

In order starting with the lowest numbered rule.

24
Q

Can NACLs have separate inbound and outbound rules for the same thing.

For example can it allow inbound traffic on port 80 but deny outbound traffic on port 80?

A

Yes

25
Q

Are NACLs stateless?

A

Yes

26
Q

What would you use a VPC Endpoint for?

A

When you want to connect to an AWS service without leaving the Amazon internal network.

27
Q

What are the two VPC Endpoints?

A

1) Interface
2) gateway

28
Q

What are the two services the Gateway VPC Endpoint supports?

A

S3 and DynamoDB

29
Q

What does VPC Peering allow you to do?

A

Connect 1 VPC to another VPC via a direct network route using private IP addresses

30
Q

Is transitive peering allowed with VPC Peering?

A

No

31
Q

Can you peer between regions with VPC Peering?

A

Yes

32
Q

Can you overlap CIDR address ranges with VPC Peering?

A

No

33
Q

How can you peer VPC’s to tens, hundreds, or thousands of customer VPC’s?

A

AWS PrivateLink

34
Q

Does AWS PrivateLink require VPC Peering?

A

No

35
Q

Does AWS PrivateLink require no route tables?

A

Yes

36
Q

Does AWS PrivateLink require NAT Gateways?

A

No

37
Q

What are the two things an AWS PrivateLink require?

A

A Network Load Balancer on the service VPC and an ENI on the customer VPC

38
Q

What is AWS VPN CloudHub?

A

if you have multiple sites, each with their own VPN connection, you can use AWS VPN CloudHub to connect those sites together.

39
Q

What does AWS Direct Connect do?

A

Allows you yo directly connect your data center to AWS

AWS - Certified Solutions Architect - Associate (SAA-C03) (17 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions