Networking Flashcards

1
Q

What are the different types of virtual networking cards you can attach to your EC2 instance?

A

Elastic network interface (ENI), Enhanced Networking (EN), and Elastic Fabric Adapter (EFA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the most common type of networking card?

A

Elastic network interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What networking card uses single root I/O virtualization to provide high performance?

A

Elastic networking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

what networking card accelerates high performance computing and machine learning applications?

A

Elastic fabric adapter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

what networking card is put on an EC2 instance by default?

A

ENI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What can a VPC be thought of as?

A

A virtual data center in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the three tiers of a VPC?

A

Web (public facing subnet), application (private subnet that can only speak to web tier and database tier), database (private subnet that can only speak to application tier)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How many AZ can a subnet be in?

A

One

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a NAT gateway?

A

A network address translation gateway is used to enable instances in a private subnet to connect to the internet or other AWS services while preventing the internet from initiating a connection with those instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Are NAT gateways redundant within an AZ?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the Gbps range for a NAT gateway?

A

5 to 45 gbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How often do YOU have to patch NAT gateways?

A

Never, Amazon does it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How do you create a NAT gateway’s public IP address?

A

You don’t have to, one is automatically assigned

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is a VPC endpoint?

A

Enables you to privately connect your VPC to supported AWS services and VPC endpoint services without requiring an internet gateway, NAT device, VPN connection, or AWS direct connect connection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How often does traffic between VPC endpoints leave the Amazon network?

A

Never

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What kind of public IP address does VPC endpoints require?

A

No public IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the two types of endpoints?

A

Interface endpoints and gateway endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is an interface endpoint?

A

An elastic network interface with a private IP address that serves as an entry point for traffic headed to a supported service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is a gateway endpoint?

A

A virtual device you provision that supports connections to S3 and DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

When you want to connect AWS services without leaving the AWS network, what should you use?

A

VPC endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is an intranet?

A

A network of computers designed for a certain group of users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is VPC peering?

A

Allows you to connect VPC’s via a direct network route

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How does VPC peering connect VPC’s?

A

Private IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Can you VPC peer between regions? Accounts?

A

Yes and yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Is VPC peering the same as transitive peering?
No
26
What options are there to open our applications in a VPC to another VPC?
You can open it up to the internet, use VPC peering, or PrivateLink
27
What must the service VPC have to use PrivateLink?
A NLB
28
What must the customer VPC have to use PrivateLink?
An ENI
29
What is direct connect?
A cloud service solution that makes it easy to establish a direct network connection from your premises to AWS
30
What are the two types of direct connect connections?
Dedicated connections and hosted connections
31
What is AWS Transit Gateway?
Connects VPC's and on premises networks through a central hub. this simplifies your network and puts an end to complex peering relationships.It acts as a cloud router each new connection is only made once
31
What is AWS Transit Gateway?
Connects VPC's and on premises networks through a central hub. this simplifies your network and puts an end to complex peering relationships.It acts as a cloud router each new connection is only made once
32
What AWS service allows transitive peering?
AWS Transit Gateway
33
How can you limit how VPC's talk to each other with Transit Gateway
route tables
34
What AWS service supports IP multicast?
Transit Gateway
35
What is AWS wavelength?
Embeds AWS compute and storage services within 5g networks
35
What is AWS wavelength?
Embeds AWS compute and storage services within 5g networks
36
At what geographical level is NAT gateway redundant at?
AZ
37
What is the IPv4 CIDR block of the default VPC?
172.31.0.0/16
38
What is the purpose of NAT gateways?
to forward traffic from your private subnets to services outside your VPC
39
When would you use transit gateway over VPC peering?
You have too many VPC's to reasonably peer together
40
What is DNS?
DNS is used to convert human friendly domain names into IP addresses
41
What does DNS stand for?
domain name system
42
Where can you find the top level domain name in a URL?
the last phrase
43
Where can you find the second level domain name?
the second phrase separated by periods.
44
Who controls the top level domains?
Internet assigned numbers authority (IANA)
45
What do NS records do?
Used by top level domain servers to direct traffic to the content DNS server that contains the authoritative DNS records
46
What does SOA stand for?
start of authority
47
What is an A record?
Address Record is the fundamental type of DNS record that is used by computers to translate the name of the domain to an IP address
48
What is a TTL?
a time to live is the length that a DNS record is cached on either the resolving server or the user's own local PC measured in seconds
49
What does a lower TTL mean?
the changes to DNS records propagate faster throughout the internet
50
What is a CNAME?
a canonical name can be used to map one domain name to another.
51
Give an example of a CNAME
http://mobile.acloud.guru goes to http://acloud.guru
52
Can a CNAME be used for naked domain names?
No
53
Can Alias records be used for naked domain names?
Yes
54
What is route 53?
Route 53 is Amazon's DNS service
55
What is an alias record?
A way to map domain names to a each other
56
What are 4 common DNS record types?
SOA records, CNAME records, NS records, A records
56
What are 4 common DNS record types?
SOA records, CNAME records, NS records, A records
57
What does a simple routing policy do?
It has one record for multiple IP addresses. If multiple values are in record, route 53 returns all values in a random order
58
What does a weighted routing policy do?
Allows you split your traffic based on weights assigned to destinations
59
If a record fails a health check, what happens?
Removed from route 53 until it passes health check
60
How can you get alerted of a failed health record check?
SNS notifications
61
When would you use a failover routing policy?
When you want to create an active passive set up
62
What does geolocation routing do?
Geolocation let’s you choose where your traffic will be sent based on the geographic location of your users
63
What does route 53 traffic flow do?
Allows you to build routing system that uses a combination of geographic location, latency, and availability to route traffic
64
What is required to use geoproximity routing?
A traffic flow routing policy
65
What does geoproximity routing do?
Allows you to route traffic to your resources based on geographic location of your users and your resources
66
What is a latency routing policy?
Allows you to route traffic based on lowest network latency for end user
67
What is a multi value answer routing policy?
Route 53 only returns values for healthy resources
68
What is ELB?
Elastic load balancing automatically distributed incoming traffic across multiple targets
69
What are the three types of load balancers?
Application load balancer, network load balancer, classic load balancer
70
What type of load balancer scan be configured with health checks?
All types
71
Does an ELB automatically stop sending requests to an unhealthy instance?
Yes
72
What does it mean to be a layer 7 load balancer?
It operates at the 7 the layer of the open systems interconnection model: the application level
73
What does each rule regarding an ELB contain?
Each rule consists of a priority, at least one action, and at least one condition
74
What are the two kinds of listener an application load balancer supports?
Http and https
75
What is a listener?
A listener checks for connection requests from clients using the protocol and port you configure in your ELB
76
What layers of the OSI model does the network load balancer operate at?
The fourth layer: transport layer
77
What type of load balancer offers the highest performance?
Network load balancer
78
How does network load balancers use intelligent routing?
They cannot do intelligence based routing because they have no rules
79
What are target groups?
Target groups route requests to one or more registered targets
80
What are network load balancers best suited for?
Load balancing of TCP traffic
81
What does TCP stand for?
Transmission Control Protocol
82
Can network load balancers decrypt traffic?
Yes
83
What error means that a gateway has timed out?
A 504 error
84
If you need the iPv4 address of end user, what should you look for?
The X-forwarded-for header
85
What are sticky sessions?
Binds a user’s session to a specific EC2 instance
86
What is deregistration delay?
Allows load balancers to keep existing connections open if the EC2 instances are deregistered or become unhealthy
87
If you want to complete inflight requests made to an unhealthy or deregistered instance, what should you use?
Deregistration delay