VPC & Networking Quiz

Question 1

Your private subnets need to connect to the Internet while still remaining private. Which AWS-managed VPC component allows you to do this?

1 - NAT Instances
2 - Internet Gateway
3 - Security Groups
4 - NAT Gateways

Answer 1

NAT Gateways

NAT Gateways allow your instances in your private subnets to access the Internet while remaining private, and are managed by AWS.

Question 2

A public subnet is accessible from the Internet while a private subnet is not accessible from the Internet.

1 - Yes
2 - No, all subnets are accessible from the internet
3 - No, all subnets are NOT accessible from the internet

Answer 2

Yes

A public subnet is accessible from the Internet while a private subnet is not accessible from the Internet.

Question 3

Which type of firewall has both ALLOW and DENY rules and operates at the subnet level?

1 - Network Access Control List (NACL)
2 - Web Application Firewall (WAF)
3 - Security Groups
4 - Guard Duty

Answer 3

Network Access Control List (NACL)

A network access control list (NACL) is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets. They have both ALLOW and DENY rules.

Question 4

You would like to connect hundreds of VPCs and your on-premises data centers together. Which AWS service allows you to do link all these together efficiently?

1 - Transit Gateway
2 - Site - to -Site VPN
3 - Internet Gateway
4 - Direct Connect

Answer 4

Transit Gateway

Transit Gateway connects thousands of VPC and on-premises networks together in a single gateway.

Question 5

A company needs two VPCs to communicate with each other. What can they use?

1 - VPC Endpoints
2 - AWS Direct Connect
3 - Internet Gateway
4 - VPC Peering

Answer 5

VPC Peering

VPC Peering connection is a networking connection between two VPCs using AWS’ network.

Question 6

You need a logically isolated section of AWS, where you can launch AWS resources in a private network that you define. What should you use?

1 - Subnets
2 - Availability Zones
3 - A VPC
4 - NAT Instances

Answer 6

VPC

A virtual private cloud (VPC) is a virtual network dedicated to your AWS account. It is logically isolated from other virtual networks in the AWS Cloud. You can launch your AWS resources, such as Amazon EC2 instances, into your VPC.

Question 7

A company needs to have a private, secure and fast connection between its on-premises data centers and the AWS Cloud. Which connection should they use?

1 - AWS Connect
2 - Site-to-site VPN
3 - VPC Peering
4 - AWS Direct Connect

Answer 7

AWS Direct Connect

AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated private network connection from your premises to AWS.

Question 8

Your VPC needs to connect with the Internet. Which VPC component can help?

1 - NAT Gateways
2 - NAT Instances
3 - Network ACL
4 - Internet Gateway

Answer 8

Internet Gateway

An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet.

Question 9

What is the scope of an Amazon VPC?

1. A data center
2. A region
3. An availability zone
4. A subnet

Answer 9

A Region

An Amazon VPC is created within a region. You can created multiple VPCs within a region and there is a default VPC created in every AWS region by default

Question 10

Which type of firewall operates at the instance level?

1. A security group
2. A network access control list (NACL)
3. A route table
4. A NAT Gateway

Answer 10

Security groups are considered to be instance-level firewalls

Question 11

How can an organization create a private hybrid cloud connection between their on-premises data center and the AWS Cloud?

1. AWS managed VPN
2. VPN CloudHub
3. Software VPN
4. AWS Direct Connect

Answer 11

AWS Direct Connect is a private network connection to the AWS Cloud. It provides high bandwidth and low latency with reliable performance

Question 12

Which type of public IP address is retained when the instance is stopped?

1. Public IP address
2. Private IP address
3. Elastic IP address
4. Local IP address

Answer 12

3.Elastic IP address

With Elastic IP addresses, the address is retained when the instance is stopped. Remember that you do pay for unused Elastic IP addresses

Question 13

Which AWS-managed network service can be used to enable Internet connectivity for EC2 instances in private subnets?

1. NAT Instance
2. NAT Gateway
3. Internet Gateway]
4. Network ACL

Answer 13

2.NAT Gateway

A NAT Gateway is an AWS managed service that can be used for enabling instance in private subnets to access the Internet

Question 14

A company needs a network connection to the AWS cloud with predictable performance. What should they use?

1. AWS managed VPN
2. VPN CloudHub
3. VPC Peering
4. AWS Direct Connect

Answer 14

AWS Direct Connect is a private network connection and offers predictable performance