Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

DVA > VPC - Virtual Private Cloud > Flashcards

VPC - Virtual Private Cloud Flashcards

1
Q

What is VPC?

A

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is an Internet Gateway?

A

An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What represents also an Internet Gateway for the instances that have a public IPv4?

A

a NAT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Does Internet Gateways guarantee on their own to access internet?

A

no, you must also edit Route tables, for Egress Only as well

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are Route Tables?

A

A route table contains a set of rules, called routes, that are used to determine where network traffic from your subnet or gateway is directed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a NAT Instance?

A

Use a NAT instance in a public VPC subnet to enable outbound internet traffic from instances in a private subnet. (OLD WAY, deprecated)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a NAT Gateway?

A

NAT Gateway is a highly available AWS managed service that makes it easy to connect to the Internet from instances within a private subnet in an Amazon Virtual Private Cloud (Amazon VPC). Previously, you needed to launch a NAT instance to enable NAT for instances in a private subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is NACL?

A

A network access control list (ACL) is an optional layer of security for your VPC that acts as a stateless firewall for controlling traffic in and out of one or more subnets. You might set up network ACLs with rules similar to your security groups in order to add an additional layer of security to your VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is default NACL default behavior

A

allows everything inbound and ourbound

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the relation cardinality between subnets and NACLs?

A

1 to 1, new Subnets are assigned the Default NACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the characteristics of NACLs?

A
  • Rules have a number (1-32766) and higher precedence with a lower number
  • E.g. If you define #100 ALLOW and #200 DENY , IP will be allowed
  • Last rule is an asterisk (*) and denies a request in case of no rule match
  • AWS recommends adding rules by increment of 100
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is new NACLs default behavior

A

deny everything

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is VPC peering?

A

A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IPv4 addresses or IPv6

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How do instances communicate on VPC peering?

A

Instances in either VPC can communicate with each other as if they are within the same network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What must not have VPCs involved in VPC peering?

A

overlaping CIDR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Is VPC peering transitive?

A

VPC Peering connection is not transitive (must be established for each VPC that need to
communicate with one another)

17
Q

Can you do VPC peering with another AWS account or inter-region?

A

yes to all

18
Q

What you must do in order to ensure instances can communicate in VPC peering?

A

you must update route tables in each VPC’s subnet

19
Q

What is a VPC endpoint?

A

Use a VPC endpoint to privately connect your VPC to other AWS services and endpoint services.

20
Q

What are the types of VPC endpoints?

A

interface and gateway

21
Q

What is a VPC Interface Endpoint?

A

is an elastic network interface (ENI) with a private IP address from the IP address range of your subnet that serves as an entry point for traffic destined to a supported service (most of services). Interface endpoints are powered by AWS PrivateLink, a technology that enables you to privately access services by using private IP addresses

22
Q

What is a VPC Gateway Endpoint?

A

is a gateway that you specify as a target for a route in your route table for traffic destined to a supported AWS service. The following AWS services are supported:
Amazon S3
DynamoDB

23
Q

What you must check in case of issues with you VPC endpoint?

A
  • Check DNS Setting Resolution in your VPC

* Check Route Tables

24
Q

What is VPC Flow Logs?

A

VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC

25
Q

Of what can you create a VPC Flow Log?

A
  • VPC Flow Logs
  • Subnet Flow Logs
  • Elastic Network Interface Flow Logs
26
Q

Where can Flow Logs go to?

A

S3 / CloudWatch Logs

27
Q

What helps you with Flow Logs?

A

Helps to monitor & troubleshoot connectivity issues

28
Q

What can you use to see better VPC Flow logs?

A

Athena on S3 or CloudWatch Logs Insights

29
Q

What are the components to connect Site to Site VPN between a VPC and a corporate data center?

A

Create a customer gateway on the Corporate DC
Provision the VPC with a VPN gateway
Connect both using a Site to Site VPN connection

30
Q

What is Direct Connect (DX)?

A

AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from your premises to AWS

31
Q

What you need to setup when using Direct Connect (DX)?

A

You need to provision the VPC with a VPN Gateway

32
Q

If you want to setup a Direct Connect to one or more VPC in many different regions (same account), what you must use?

A

a Direct Connect Gateway

33
Q

What are the Direct Connect connection types?

A
  • Dedicated Connections

- Hosted Connections

34
Q

What are Direct Connect lead times?

A

often larger than 1 month to establish a new connection

35
Q

How is Direct Connect data encrypted?

A

Data in transit is not encrypted but is private

36
Q

What is good to use for networking costs saving

A

• Use Private IP instead of Public IP for good savings and better network performance
• Use same AZ for maximum savings (at the cost of
high availability)

37
Q

How are Site to Site VPN and Direct Connect (DX) connections?

A

VPN: Goes over the public internet
DX: Goes over a private network

DVA (61 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions