Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

SAA-CO2 - AWS Associate Architect > VPC > Flashcards

VPC Flashcards

1
Q

VPC. What does it mean. What is it.

A

Virtual Private Cloud.

It’s your own little bit of the AWS network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

VPC Limit Per Account

A

5 VPCs, per region, per account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What’s a subnet?

A

Subnets allow you to split your VPC into networks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

True or false. Subjects must reside in the CIDR block of their parent VPC?

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

CIDR block means.

A

Classless inter domain routing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

True or false. Public subnets will have a public and private IP.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

For a subnet to be made public. You must carry out two action. What are they?

A

Add an internet gateway

Add a record to the routes table referring to said internet gateway.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

The two types of subnet are.

A

Public

Private

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

IGW stands for?

A

Internet gateway.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

True or false. To make a application highly available. Resources should be in subnets split across multiple AZ’s.

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

All subnets have a default route that can not be deleted. It allows all the subnets to talk to each other. What is this route?

A

10.0.0.0/16

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

1st address in an AWS subnet is reserved for…

A

Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

2nd address in an AWS subnet is reserved for…

A

Routing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

3rd address in an AWS subnet is reserved for…

A

DNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

4th address in an AWS subnet is reserved for…

A

AWS future use

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Last address in an AWS subnet is reserved for…

A

Broadcasting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

NACL stands for

A

Network access control list

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the purpose of a NACL?

A

Network firewalls for subnets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

True or false. NACLs contain a numbered list of rules that run sequentially

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What’s the purpose of a security group?

A

Firewall / access control at the resource level.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Security groups are state full. What doss this mean?

A

You don’t have to configure rules to allow for return traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

NACLs are stateless. What does this mean?

A

You will have to configure rules for how to handle return traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What’s the purpose of a NAT gateway?

A

It allows resources from a private subnet to make requests out to the internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

True or false. NAT gateways do not respond to incoming requests from the internet?

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Steps that must be taken to get a NAT gateway up and running?

A

Create the Nat gateway.

Add a route to the gateway in the routes table.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

NAT gateway stands for.

A

Network Address Translator.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What’s the purpose in a bastion host?

A

It allows you to access subnets from external hosts.

Eg connect to an EC2 in a private subnet, from your home computer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What resource is used to create a bastion host on AWS?

A

EC2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Keys to other servers should never be kept on a bastion server. How do you get around this?

A

SSH agent forwarding.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What does the transit gateway do?

A

It’s one hub that can centralise all data in all VPCs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

If your VPN decice DOES support BGP (Border Gateway Protocol) you should enable…

A

Dynamic routing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

If your VPN decice DOES NOT support BGP (Border Gateway Protocol) you should specify.

A

Static Routing.

33
Q

True or false. A subnet is automatically created when you create a VPC?

34
Q

When creating a VPC. AWS automatically creates three things.

A

A DHCP options set
A route table
A network ACL

35
Q

True or false. An internet gateway is highly available, redundant and horizontally scaleable.

36
Q

An ENI can be attached directly to a running instance. What is this practise known as?

A

A hot attatch

37
Q

Attaching an ENI to an instance during launch, is known as

A

A cold attatch

38
Q

Where are VPC flowlogs stored

A

Cloudwatch Logs

39
Q

Once a VPC flow log has been created. Can it be modified.

40
Q

VPC flow logs. Can capture info from…

A

A network interface for an instance
A subnet
The VPC

41
Q

Each VPC flow log. Is made up with data from a time window. How long is this time window?

42
Q

A route table can be assigned to how many subnets?

43
Q

Can a subnet be assigned to multiple routes tables?

44
Q

Within a VPC public subnet. What function does the IP address provide?

A

To allow communication with external resources via the internet.

45
Q

What does the local route on a routes table enable?

A

Communication between VPC subnets.

46
Q

Security groups support allow rules only. True or false.

47
Q

You launch a dedicated EBS-Backed EC2 instance. Does the EBS run on the single tennant hardware with the EC2 instance?

48
Q

What RDS service uses mirroring, instead of multi AZ deployment

A

Microsoft sql server

49
Q

IAM policy logic always starts with…

A

A default deny.

50
Q

Are network ACLs stateless or stateful

51
Q

Can instances in a custom security group, communicate with each other by default?

A

No. You must give explicit permission.

52
Q

Can instances in the default security group, communicate with each other by default?

53
Q

Are EIPs region specific?

54
Q

Can EIPs be moved between VPCs in the same region

55
Q

What does a VPC end point allow for?

A

To establish a private connection between a VPC and other AWS resources.

Eg an EC2 instance in a private subnet and s3

56
Q

To make different resources talk to each other. Always use …. never ….

A

IAM roles

Access keys

57
Q

You can not use NAT gateways on private subnets. What must you use instead?

A

VPC end points

58
Q

The two types of VPC endpoint are

A

Gateway endpoint

Interface endpoint

59
Q

When to use a gateway endpoint?

A

For s3 and Dynamo

60
Q

When to use an interface endpoint?

A

When it’s not for s3 or Dynamo

61
Q

Want to secure your VPC. Use what two things?

A

Network ACLs

Security groups

62
Q

If you add a rule to a network ACL. Does it effect all instances in the related subnet?

63
Q

You detect a malicious set of IPs attacking your VPC. Where best to apply a block on the IP range?

A

The network ACL

64
Q

NAT instances. Who is responsible for security, scalability and health checks?

65
Q

What is NAT gateway?

A

Fully managed service for NAT instances

66
Q

How to make NAT gateways HA?

A

Place them in multiple AZ’s

67
Q

True or false. NAT gateways are a good choice where a NAT instance is a bottle neck?

68
Q

Is Amazon direct connect encrypted by default?

69
Q

How to encrypt data sent over direct connect?

70
Q

Is direct connect considered low latency?

71
Q

What does direct connect do?

A

Managed connectivity between multiple VPCs

72
Q

What is flat network architecture in AWS

A

Single account with a single VPC

73
Q

What is seven enter network architecture in AWS?

A

Multiple accounts in multiple VPCs

74
Q

Is transistive routing supporting in VPC peering?

75
Q

Does VPC Peering work cross region?

76
Q

Site to site VPN connections require

A

A pupbloc IP address on the customer gateway of the on premisises network
A virtual gateway attatched to the VPC

77
Q

Can you share a NAT instance across a VPC?

78
Q

You have a direct connect connection. But you need it to be highly available. How do you do this?

A

Have a redundant connection fallback from another location.

SAA-CO2 - AWS Associate Architect (47 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions