Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS VPC - SAA-C02 > VPC routing and internet gateway > Flashcards

VPC routing and internet gateway Flashcards

1
Q

Is a VPC router highly available?

A

Yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Where can you find a VPC router?

A

In each VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Where do VPC routers have their network interface?

A

It has a network interface (NETWORK + 1) in each subnet in the VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the main function of the VPC router?

A

Route traffic between subnets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What do route tables do?

A

Route tables defines what the VPC router will do with traffic when data leaves that subnet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Are VPCs created with route tables by default?

A

Yes, if you don’t associate a custom route table with a subnet, it uses the main route table of the VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What happens to the main route table when you associate a custom route table with a subnet?

A

the main route table is disassociated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How many route tables can be associated with a subnet?

A

A subnet can only have one route table associated at a time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Can a route table be associated with many subnets?

A

Yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What happens when traffic needs to leave a subnet?

A

The VPC router reviews the IP packet, looking for the destination address and uses the route table to know where to direct the packet towards.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What happens when there are more than one route found as a match?

A

The prefix is used as priority.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

In route tables, what does “target: local” mean?

A

It means that the destination is in the VPC itself

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Can the local route entry be edited? What is the priority of the local route?

A

No, it can never be updated and it takes the maximum priority.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Is there any exception to the prefix (priority) rule in route tables?

A

Yes, local routes are max priority.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

In Route tables, how are local targets always configured by default?

A

They match the IPv4 and IPv6 CIDR range

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is an internet gateway?

A

A managed service that allows gateway traffic between the VPC and the internet or AWS Public Zones (S3, SQS, SNS, etc.)

17
Q

What type of resilience does Internet Gateways provide?

A

Regional resilience

18
Q

To what are Internet gateways attached?

A

To a VPC.

19
Q

What will a IGW cover within a VPC?

A

It will cover all AZs in a region for the VPC it is attached to.

20
Q

How many IGW can be attached to a VPC?

A

One

21
Q

What happens if no IGW is attached to a VPC?

A

It will be entirely private.

22
Q

Can you create an IGW without being attached to a VPC?

A

Yes.

23
Q

In which AWS domain do IGWs run (private or public)?

A

It runs within the AWS public Zone

24
Q

Who handles the performance of IGWs?

A

AWS, it is a managed service.

25
Q

What do you need to make a subnet public?

A
  1. Create IGW
  2. Attach IGW to VPC
  3. Create custom RT
  4. Associate RT
  5. Define default routes to the IGW
26
Q

If an instance is created with private and public IP, is the public IP configured in the OS?

A

No, it is not configured in the OS.

27
Q

What is the interaction of IGW with public and private IPs of an EC2 instance?

A

The IGW creates a record that links the instance’s private IP to the public IP.

28
Q

What does the IGW do when a package needs to be sent to the public internet from an EC2 instance?

A

As the Source IP address of the package is the private IP of the instance (remember, the public IP is not configured in the OS), when the package arrives to the IGW, this swaps the private IP for the public IP and pushes the package on the public internet.

29
Q

Related to private/public IPs and IGWs: what happens when a package comes back from the public internet (response for example)?

A

The package comes back with the public IP as destination and the IGW swaps it for the private IP of the instance and routes it.

30
Q

Does the public IP of an EC2 instance ever touch the instance?

A

No.

31
Q

What does the IGW do if an instance uses IPv6?

A

It does not translate any IP, it just pushes it to the public internet.

32
Q

What is a bastion host?

A

It is an instance in a public subnet inside a VPC

33
Q

What are bastion hosts designed for?

A

They are used to allow incoming management connections. Used as a management point or as an entry point for a private-only VPC.

34
Q

How can you secure bastion hosts’ access?

A

Allow specific IP addresses, authentication with SSH or it can integrate with on-premises identification services.

AWS VPC - SAA-C02 (8 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions