VPC & Networking

Question 1

Service that gives you full control over your virtual networking environment, including resource placement, connectivity, and security

Answer 1

Amazon VPC

Question 2

A range of IP addresses in your VPC

Answer 2

Subnet

Question 3

A horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet

Answer 3

Internet Gateway

Question 4

Virtual device in a PUBLIC subnet that allows instances in a PRIVATE subnet to connect to services outside your VPC; external services cannot initiate a connection with those instances

Answer 4

NAT Gateway

Question 5

Item that allows or denies specific inbound or outbound traffic at the subnet level

Answer 5

Network Access Control List (NACL)

Question 6

Service that controls the traffic that is allowed to reach and leave the resources that it is associated with

Answer 6

Security Group

Question 7

A networking connection between two VPCs that enables you to route traffic between them using private IPv4 addresses or IPv6 addresses. Instances in either VPC can communicate with each other as if they are within the same network.

Answer 7

VPC Peering

Question 8

A virtual device which is horizontally scaled, redundant and highly available, that provides private communication between EC2 instances within your Virtual Private Cloud and other supported AWS services without introducing availability risks or bandwidth constraints on your network traffic

Answer 8

VPC Endpoint

Question 9

Provides private connectivity between VPCs, AWS services, and your on-premises networks, without exposing your traffic to the public internet

Answer 9

AWS PrivateLink

Question 10

A feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC

Answer 10

VPC Flow Logs

Question 11

VPN over public internet between on-premises DC and AWS

Answer 11

Site to Site VPN

Question 12

A managed client-based VPN service that enables you to securely access your AWS resources and resources in your on-premises network as-if they were on the same private network

Answer 12

AWS Client VPN

Question 13

Service that allows for a direct private connection to AWS

Answer 13

AWS Direct Connect

Question 14

Connects your Amazon Virtual Private Clouds (VPCs) and on-premises networks through a central hub

Answer 14

Transit Gateway

Question 15

Which components are required to build a successful site-to-site VPN connection on AWS? (Select two)
A) Internet Gateway
B) NAT Gateway
C) Customer Gateway
D) Transit Gateway
E) Virtual Private Gateway

Answer 15

C) Customer Gateway
E) Virtual Private Gateway

Question 16

A physical or software appliance that you own or manage in your on-premises network (on your side of a Site-to-Site VPN connection)

Answer 16

Customer gateway

Question 17

The VPN concentrator on the Amazon side of the Site-to-Site VPN connection

Answer 17

Virtual Private Gateway