Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Archi_associate_AWS > VPN > Flashcards

VPN Flashcards

1
Q

With regard to VPN on AWS, what protocol is supported?

A

IPSec which is a secure network protocol suite that authenticates and encrypts the packets of data to provide secure encrypted communication between two computers over an Internet Protocol network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

When you assign a Virtual Private Gateway as part of a VPN, can you change the ASN after it has been assigned?

A

No it is not possible.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What happens if you do not assign an ASN to a Virtual Private Gateway?

A

AWS will assign a default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the key virtual components in an AWS VPN?

A
  • Virtual Private Gateway (VPG)
  • Customer Gateway (CG)
  • Connection
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How do I know if my hardware or software VPN device on the customer side is compatible with AWS VPN

A

AWS has a list of validated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

With AWS VPN, how many IPSec tunnels connect to the customer gateway?

A

Two for redundancy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

If there is a device failure on one of the tunnels, will you lose connectivity?

A

No, traffic will start to flow on the second tunnel.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

With AWS VPN, will the connection come up automatically?

A

No the connection only comes up with data is generated on the client side.
The AWS Virtual Private Gateway is not the initiator.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What protocol is used for payload encryption on AWS VPN IPsec tunnel?

A

AES 128 ( Advanced Encryption Standard ) or AES 256.(one of the strongest block ciphers available to encrypt your data, 256-bit Advanced Encryption Standard (AES-256).)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What authentication hashing algorithm is available on AWS VPN?

A

SHA-1 and SHA2. SHA-1 is vulnerable to hacking so it should not be used.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is Perfect Forward Secrecy?

A

It is an encryption style known for producing temporary private key exchanges between clients and servers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the VPN components used?

A
  • VPN Gateway

- CUSTOMER Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is a customer Gateway ?

A

The customer GW represents your on-prem physical VPN, this holds the information needed for AWS VPN about the Customer GW.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

I need to connect from on-prem to my VPC using IPv6, I, what options do I have?

A

You can’t use IPV6 with AWS site-to-site VPN, only IPv4 is supported, you will need to use a commercial VPN form the market place.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

I need to connect to a customer Gateway VPN, the customer insists that we need to use dynamic VPN’s, what options do I have?

A

AWS VPN supports dynamic routing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a virtual private gateway?

A

It is a VPN gateway that is used as part of the AWS Sit-to-Site VPN.
It’s is a logical, fully redundant distributed edge routing function that sits at the edge of your VPC. As it is capable of terminating VPN connections from your on-prem or customer environments, the VPG is the VPN concentrator on the Amazon side of the Site-to-Site VPN connection

17
Q

To create an AWS VPN, what are the building blocks?

A
  • Create a customer gateway and give it the IP of the public facing IP of the customer VPN.
  • Create a virtual private gateway and attach to VPC
  • Create a connection
18
Q

I have an AWS VPN configured with a single tunnel to a single customer VPN server, I want to make it HA, what options do I have?

A

I can create a second tunnel on the same Customer Gateway

19
Q

I have an AWS VPN with two tunnels, how is this configuration providing HA for an AZ failure?

A

Each tunnel is served to form a separate AZ, a single Each tunnel is served to form a separate AZ, a single AZ can fail or single v-appliance sup[plying the VPN tunnel.

20
Q

I have an AWS VPN with two tunnels, I want to ensure that it is even more HA, what can I do?

A

You can set up a second AWS VPN.

21
Q

I need 1.7GB of connectivity to my on-prem, what is the lowest cost option available?

A

Setup two VPNs, as each vpn is capable of 1.25gBs

22
Q

What IKE versions are supported by AWS VPN?

A

IKE version 1 + 2

23
Q

When you create VPG and create a connection to the customer GW, how many tunnels are created?

A

AWS creates two tunnels to a single customer gateway (the real VPN device on the customer’s side)

24
Q

When you create a VPN to the customer gateway, where is the single point of failure?

A

It is the customer GW, there is only one customer GW (physical device), the VPN GW represents two VPN tunnels with each VPN in a separate in the VPC, you get two public IP on the AWS service network.

25
Q

In AWS VPN architecture, how is a VPN at the AWS side resilient and highly available?

A

When you create a VPN connection, AWS creates two public facing endpoints in two different AZ’s

26
Q

What is an ASN ?

A

An autonomous system number (ASN) is a unique number assigned to an autonomous system (AS) by the Internet Assigned Numbers Authority (IANA).

An AS consists of blocks of IP addresses which have a distinctly defined policy for accessing external networks and are administered by a single organization but may be made up of several operators.

27
Q

What is AWS VPN ?

A

AWS VPN is comprised of two services:

  • AWS Site-to-Site VPN
  • AWS Client VPN.

AWS Site-to-Site VPN enables you to securely connect your on-premises network or branch office site to your Amazon Virtual Private Cloud (Amazon VPC).
AWS Client VPN enables you to securely connect users to AWS or on-premises networks.

28
Q

What is a Client VPN endpoint?

A

The Client VPN endpoint is a regional construct that you configure to use the service. The VPN sessions of the end users terminate at the Client VPN endpoint. As part of configuring the Client VPN endpoint, you specify the authentication details, server certificate information, client IP address allocation, logging, and VPN options.

29
Q

What is a target network?

A

A target network, is a network that you associate to the Client VPN endpoint that enables secure access to your AWS resources as well as access to on-premises. Currently, the target network is a subnet in your Amazon VPC.

30
Q

How many customer gateways, virtual private gateways, and AWS Site-to-Site VPN connections can I create?

A

You can have:

  • 1 internet gateway per VPC
  • 5 virtual private gateways per AWS account per AWS Region
  • 50 customer gateways per AWS account per AWS Region
  • 10 IPsec VPN Connections per virtual private gateway
31
Q

How does an AWS Site-to-Site VPN connection work with Amazon VPC?

A

An AWS Site-to-Site VPN connection connects your VPC to your datacenter. Amazon supports Internet Protocol security (IPsec) VPN connections. Data transferred between your VPC and datacenter routes over an encrypted VPN connection to help maintain the confidentiality and integrity of data in transit. An Internet gateway is not required to establish a Site-to-Site VPN connection.

Archi_associate_AWS (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions