AWS Module 5 Flashcards
In a typical VPC what type of Servers should be placed in the private subnet?
- Database server
- Streaming video server
- Web Server
- CloudFront Server
Database Server
What logical entity allows for instances in a private subnet to connect to the Internet?
- internet gateway
- private gateway
- public gateway
- nat gateway
nat gateway
Which of the following is NOT a feature of Amazon VPC?
- control your virtual networking resources
- customize network configuration
- create different users and groups
- enable multiple layers of security
create different users and groups
Which type of security option should you use if you want to apply both allow and deny rules and is stateless?
- Network ACLs
- Security groups
- IAM groups
- VPC security
Network ACLs
AWS Lambda is a “Serverless” service.
True
False
True
What logical entity allows for communication between instances in a VPC and the Internet?
- web gateway
- nat gateway
- public gateway
- internet gateway
internet gateway
If you need 4 subnets in your VPC then you would use what CIDR?
- /30
- /28
- /24
- /16
/24
VPC is a service that is charged for usage by AWS.
True
False
False
What contains a set of rules to help direct network traffic on a subnet?
- subnet
- AZ
- nat table
- route table
route table
VPCs belong to a single:
- EC2
- AZ
- Datacenter
- Region
Region
Which service allows for global low-latency access to your applications?
- Route 53
- CloudFront
- Lambda
- Transit Gateway
CloudFront
How many of the 256 address available are reserved and cannot be used by the user?
- 10
- 8
- 6
- 5
5
You can create multiple private and public subnets in a VPC.
True
False
True
If you want a fixed IP address for your EC2 instances then you should use:
- Static IP address
- Elastic IP address
- Public IP address
- Dedicated IP address
Elastic IP address
AWS Elastic Beanstalk is considered a Software as a Service entity.
- True
- False
False, it is PaaS
The number of bits used for the subnet mask is known as the:
- CIDR
- CDMA
- CSMA
- IP
CIDR
What protocols do you need to add to a security group if you want customers to access your Web Server?
- HTTP/HTTPS
- SSH/HTTP
- RDP/HTTP
- SSH/RDP
HTTP/HTTPS
The standard security option for most instances is:
- NACLS
- ACLS
- IAM Security
- Security groups
Security groups
A VPC entity that connects different VPC, Direct Connect and VPN connections is known as a:
- VPC peering
- Direct Connect
- Transit Gateway
- VPN connection
Transit gateway
A VPC then can be divided into:
- subnets
- AZs
- regions
- data centers
subnets
Geolocation and geoproximity routing are features of:
- Route 53
- CloudFront
- CloudFormation
- VPC
Route 53
What is the name of Amazon’s fast, global and secure CDN service?
- Cloud Formation
- Transit Gateway
- Route 53
- CloudFront
CloudFront
Which of the following is NOT an advanced VPC feature?
- VPC sharing
- Transit gateway
- VPC peering
- Direct Connect
- Internet gateway
- Site-to-site VPN
Internet gateway
NACLs are more complex and granular then Security groups.
True
False
True
