Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS - Self Study > VPC & Shared Responsibility Model > Flashcards

VPC & Shared Responsibility Model Flashcards

1
Q

Shared Responsibility Levels

A

CIA

Infrastructure (EC2)
Container Services (OS & App Mgt)
Absracted (DynamoDB)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Shared Responsibility - Amazon vs Client

A

Client is responsible for Clisde Side Encryption and Customer Data

Amazon

  • 1) OS and Application Mgt
  • 2) S3 and DynamoDB
  • 3) Hypervisor???
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is VPC

A

Logical Data Center in AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How many Availability Zones can a VPC Span

A

Multiple :D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How man Regions can a VPC Span

A

1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What do VPCs consis of

A

Routs, Tables, ACL, IGW, Subnets, SGs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How many Availability Zones per subnet

A

1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

VPC Peering

A

you can peer VPCs even with other AWS accounts if you have an agreement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

NAT Instance does not support

A

Transitive Peering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

NAT Instance - what Instance setting do you need to disable?

A

Source Destination Check

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

NAT Instance - what type of subnet must it be under

A

Public

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

NAT Instance - what does it need in order to work

A

1) Elastic IP

2) Route out of the private subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

NAT Instance - Traffic size depends on this

A

Size of Instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

NAT Instance - what does it need to create High Availability

A

Autoscalling groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

NAT Instance - Does is use Security Groups or ACLs

A

Security Groups of course silly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

NAT Instance - are Stateful or Stateless

A

Stateful

17
Q

Stateful

A

Return Traffic Automatically Allowed. This the FULL = FULL of RIGHTS

18
Q

Stateless

A

Return Traffic must be Explicitly Allowed

19
Q

NAT Gateways Benefits

A

No need to patch and is preferred.

20
Q

NAT Gateways - Use ACL or SGs

A

ACLs. Only thing that uses SG are NAT Instances

21
Q

NAT Gateways - Auto assigns a public address - true or false

A

true

22
Q

NAT Gateways - what VPC item do you add them to? Subnet, IGW, Route, ACL

A

Route. They are added to the defualt route just like Route Instances.

23
Q

ACL (Access Control Lists) - Created automatically when VPC is created - true or false

A

true. A single default ACL (and Route) is created. it allows all traffic both inbount and outbound by default. Not like a custom.

24
Q

ACL - Default ACL allow all traffic - true or false

A

True

25
Q

ACL - Custom ACL allow all traffic - true or false

A

False - Denies all by default. It’s Stateless so access must be assigned explicitly.

26
Q

ACL - What happens when a subnet is not explicitly associated to an ACL?

A

The subnet will be associated with the default ACL. Subnet MUST be assigned to some ACL. Default allows all traffic.

27
Q

ACL - 1 Subnet equals how many ACLs

A

1 ACL. When you add a subnet to a new ACL the subnet is then removed from the old ACL.

28
Q

ACL - Can an ACL have multiple Subnets

A

Yes

29
Q

ACL - How are rules evaluted

A

In order form small to large

30
Q

ACL - Inbound and outbound roles are assigned together - true or flase

A

False. Inbound and outbound rules are assigned invidually. Stateless son!

31
Q

NAT vs Bastion

A

NAT=provides INTERNET traffic to EC2 in proivate subnet

Bastion= aka JumpBox allows secure admin EC2s in proivate subnets

32
Q

Resiliency - where must the 2 public subnets be located for resiliency?

A

in different Availability Zones

33
Q

Resiliency - how to you achieve resiliency for bastions?

A

Auto scalling Group. use Route53 with RR or Failover.

34
Q

Resiliency - How to make a NAT Instance resilient?

A

HARD- 1 in each public subnet each with their on public IP.

Need Fail Over Script

35
Q

VPC - How to monitor traffic

A

using VPC Flow Logs

36
Q

VPC - How many allowed per Region

A

5 VPCs

37
Q

ACL - what level do they provide security

A

At the Subnet Level. Also they block IP address as opposed to ports only.

AWS - Self Study (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions