Custom VPC Flashcards
What is the domain of VPCs (global, region, AZ)?
it is regional and it is isolated.
Is VPC a resilient service by default?
Yes.
Where does a VPC operate?
Operates from all AZs in that region where it is created.
Can you have multiple isolated VPCs in the same region for the same account?
Yes
What is the default configuration for IN and OUT traffic in VPCs?
Nothing IN or OUT of a VPC without explicit configuration
What is the default blast redius of a VPC?
Any problems are limited to that VPC or anything connected to it.
What means that VPC has a flexible configuration?
It can be configured to have simple or multi-tier networks.
Does VPC allow hybrid networking?
Yes, it allows connection to other cloud or on-premises networks.
Does VPC support “Dedicated tenancy”? and what does it mean?
Yes, it means that the hardware where the VPC runs is dedicated to you.
When can you choose between default or dedicated tenancy?
During the VPC creation.
Is the dedicated tenancy a default we should choose? and why?
Not by default because it comes with a premium price. Only choose when really needed.
What is mandatory to create a VPC?
To assign a CIDR range (min /28, max /16)
Can secondary CIDR ranges be added after the VPC is created?
Yes, you can add a maximum of 5 more ranges.
Is the limit of 5 CIDR blocks per VCP a hard or soft limit?
It is a soft limit that can be increased by creating an AWS support ticket.
Can you choose what IPv6 range to use in a VPC?
Yes, you can use your own IPv6 that you own.
When AWS allocates an IPv6 range, can you choose which one it will be?
No, when the range is allocated by AWS you have no choice on which range to use.
Does IPv6 have public and private addresses?
No, all are public.
How are IPv6 addresses routed by default (as public or private)?
they are routed as public addresses by default.
Using IPv6 addresses means lower or higher overhead?
Lower.
What is the default DNS address by default in a range?
VPC + 2.
Example: 10.0.0.0 –> 10.0.0.2 is the DNS IP
What main options over DNS can be configured in VPC?
- Edit DNS hostnames - with function ‘enableDnsHostnames’
2. Edit DNS resolution - with function ‘enableDnsSupport’
What means that enableDnsHostnames function is enabled?
Instances with public IPs in a VPC are given public DNS hostnames
What means that enableDnsSupport function is enabled?
Instances in the VPC can use the DNS IP address