Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Certified Solutions Architect Advanced > VPCs > Flashcards

VPCs Flashcards

1
Q

Can VPC Peering be done between two VPCs in different AWS accounts?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Suppose VPC A is peered with VPC B, and VPC B is paired with VPC C. Is VPC A considered peered with VPC C?

A

NO. VPC Peering is NOT transitive!

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Can you use VPC Peering to peer two VPC in different AWS regions?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Can you have two VPC subnets in the same AZ?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Can you have a subnet stretched across multiple AZs?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

When you create a VPC, what infrastructure is created by default?

A
  • A Default Route Table
  • A Network ACL
  • A Default Security Group

(Note that it does NOT create subnets or IGWs)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How many IP Addresses does Amazon Reserve per subnet?

A

5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the maximum number of IGWs you can have per VPC?

A

1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Can you have a security group spanning multiple VPCs?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Can you create an ELB with only one public subnet?

A

No, to create an ELB you need at least 2 public subnets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Are Bastion Hosts usually placed in a private subnet or a public subnet?

A

They are placed in a public subnet so you can access the private subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is Direct Connect and what are its primary use cases?

A
  • Idea is that it directly connects your data center to AWS
  • Useful for high throughput workloads (lots of network traffic)
  • Useful if you need a stable and reliable secure connection
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the steps for setting up AWS Direct Connect?

A
  1. Create a virtual interface in the direct connect console. This is a PUBLIC virtual interface
  2. Go to the VPC Console and then to VPN Connection. Create a Customer Gateway
  3. Create a Virtual Private Gatway
  4. Attach the Virtual Private Gateway to the desired VPC
  5. Select VPN Connections and create a new VPN Connection.
  6. Select the Virtual Private Gateway and the Customer Gateway
  7. Once the VPN is available, set up the VPN on the customer gateway or firewall
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is AWS Global Accelerator?

A

A service in which you create accelerators to improve availability and performance of your applications for local and global users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How many static IP addresses does AWS assign to you for Global Accelerator?

A

2

(Note you can also bring your own static IPs!)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How do you control traffic in AWS Global Accelerator?

A

Use traffic dials. This is done within an endpoint group

17
Q

What is a VPC Endpoint?

A

A VPC Endpoint enables you to privately connect your VPC to supported AWS Services and VPC endpoint services powered by PrivateLink without requiring an internet gateway, NAT device, VPN Connection, or Direct Connect Connection

18
Q

What are the two types of VPC Endpoints?

A
  • Interface Endpoints
  • Gateway Endpoints
19
Q

For what services are VPC Gateway Endpoints supported?

A
  • Amazon S3
  • DynamoDB
20
Q

Suppose you want to peer a VPC with tens or thousands of other customer VPCs. What is the best way to accomplish this?

A

AWS PrivateLink

21
Q

Does AWS PrivateLink require VPC Peering?

A

No.

There’s no NAT, no route tables, no IGWs, etc.

22
Q

What is required to use AWS PrivateLink?

A
  • A Network Load Balancer on the service VPC
  • An ENI on the customer VPCs
23
Q

What is AWS Transit Gateway used for?

A
  • It allows you to have transitive peering between thousands of VPCs and on-premises data centers
  • Think simplify network topology
  • Always works on a hub-and-spoke model
24
Q

Can you use AWS Transit Gateway across multiple regions?

A

Yes

25
Q

Can you use AWS Transit Gateway across multiple accounts?

A

Yes

26
Q

Do AWS Transit Gateways work with Direct Connect?

A

Yes

27
Q

When using AWS Transit Gateways, how can I limit how VPCs talk to one another?

A

Use route tables

28
Q

What is the ONLY AWS Service that supports IP Multicast?

A

AWS Transit Gateway

29
Q

What is the use case for AWS VPN CloudHub?

A
  • Connecting multiple sites, each with a VPN Connection, together over a hub-and-spoke model
  • It operates over the public internet, but all traffic between the customer gateways and the VPN CloudHub is encrypted
30
Q

When using VPCs, will private IPs or public IPs produce a lower network cost? Why?

A

private IPs are less expensive than public IPs, because private IPs use the AWS Backbone Network

31
Q

In general, does AWS charge you more/less/or the same for communicating between VPCs in different AZs within the same region vs. communicating between VPCs in different regions?

A

communicating between VPCs in different AZs in the same region is less expensive than communicating between VPCs in different regions.

32
Q

Does VPC peering support edge to edge routing?

A

No

AWS Certified Solutions Architect Advanced (53 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions