Amazon Virtual Private Cloud (VPC) Flashcards
VPC provides complete control over the _______ __________ environment
VPC provides complete control over the virtual networking environment
VPCs are _____ wide service
VPCs are region wide service
A default VPC is created in each _____ with a ____ in each AZ
A default VPC is created in each region with a subnet in each AZ
By default, you can create up to ____ VPCs per region
By default, you can create up to Five VPCs per region
Public subnets are subnets that have which setting set to “Yes”
Public subnets are subnets that have which setting set to “Yes”
- “Auto-assign public IPv4 address” set to “Yes”
Public subnet route table has an ________ _______ attached
Public subnet route table has an Internet Gateway attached
When you create a VPC, you must specify a ____ of ____ addresses for the VPC in the form of a ____ block
When you create a VPC, you must specify a range of Ipv4 addresses for the VPC in the form of a CIDR block
A VPC spans all the ____ _____ in the region
A VPC spans all the ____ _____ in the region
Availability Zones
You have ___ _______ over who has access to the AWS resources inside your VPC
You have ___ _______ over who has access to the AWS resources inside your VPC
full control
Routers interconnect subnet and direct traffic between (4)
Internet gateways
NAT gateways
Virtual private gateways
Subnets
VPC Endpoints allows private connectivity between services ______ in ___
VPC Endpoints allows private connectivity between services hosted in AWS
Egress-only Internet Gateway is a stateful gateway that provides egress-only access for ____ traffic from the ___ to the internet
Egress-only Internet Gateway is a stateful gateway that provides egress-only access for IPv6 traffic from the VPC to the internet
Peering Connection enables you to route traffic via private IP addresses between two ______ _____
Peering Connection enables you to route traffic via private IP addresses between two peered VPCs
NAT Gateway features: (3)
_______ available
Provides resources in _______ subnet access to the ______ internet
______ Network Address Translation (NAT) service
Highly available
Provides resources in private subnet access to the public internet
Managed Network Address Translation (NAT) service
Your side of the VPN connection is called the ________ Gateway
Your side of the VPN connection is called the Customer Gateway
CIDR block size can be between ____ and _____
CIDR block size can be between /16 and /28
You cannot ____ or _____ the size of an existing CIDR blcok
You cannot increase or decrease the size of an existing CIDR block ;
The first ____ and ____ IP addresses in a subnet CIDR block are ___ _________ for use
The first four and last IP addresses in a subnet CIDR block are not available for use
AWS recommends you use CIDR blocks from the ___ _____ ranges
AWS recommends you use CIDR blocks from the RFC 1918 ranges
In order to work properly, VPC Peering requires non-overlapping CIDR blocks across all ____ in all _____ and _______ you want to connect
In order to work properly, VPC Peering requires non-overlapping CIDR blocks across all VPCs in all regions and accounts you want to connect
Flow Logs capture information about traffic to and from _______ interfaces in a ___
Flow Logs capture information about traffic to and from network interfaces in a VPC
The ________ Gateway is the Amazon ___ side of a connection to the public Internet.
The Internet Gateway is the Amazon VPC side of a connection to the public Internet.
Flow log data is stored using __________ Logs or ___
Flow log data is stored using CloudWatch Logs or S3
Flow logs can be created at the following levels: (3)
Network interface
Subnet
VPC
