VPC Lab

Question 1

What resources get created automatically when you provision a VPC?

Answer 1

Default Route
Default NACL
Default Security Group

Question 2

What does not get created when you provision a VPC?

Answer 2

Subnets

Question 3

How many IP addresses from your subnet will be reserved by AWS?

Answer 3

5

Question 4

Which IP addresses are reserved by AWS?

Answer 4

x. x.x.0 - 3

x. x.x.255

Question 5

What is the x.x.x.0 IP address?

Answer 5

The network address

Question 6

What is the x.x.x.1 IP address?

Answer 6

VPC router

Question 7

What is the x.x.x.2 IP address?

Answer 7

DNS

Question 8

What is the x.x.x.3 IP address?

Answer 8

Reserved for future use

Question 9

What is the x.x.x.255 IP address?

Answer 9

Network broadcast address

Question 10

True or false: Network broadcast is unsupported in AWS VPC?

Answer 10

True. This is why AWS reserves this IP address.

Question 11

True or false, you can have as many Internet Gateways as you need in a VPC?

Answer 11

False. You are limited to one.

Question 12

To what resource is a subnet attached?

Answer 12

The route table

Question 13

Which route table is a subnet attached by default?

Answer 13

The default route table

Question 14

True or false: It is best practice to allow your main route table internet access?

Answer 14

False. Since new subnets are automatically assigned to a route table, it is best to not associate an internet connection to it. Instead, use an alternate route table with internet access and explicitly add the subnet to it when it is ready.

Question 15

To provide a VPC with internet access, what steps must be done?

Answer 15

1. Create an internet gateway
2. Create a route table (or modify an existing)
3. Add a route from a specified CIDR to the specified internet gateway

Question 16

True or false: When you create a route for IP4, a similar route is created for IP6

Answer 16

False. You must create an IP6 route as well.

Question 17

True or false: By default, custom subnets do not automatically assign IP addresses?

Answer 17

True. This must be enabled.

Question 18

True or false: Security groups do not span VPCs?

Answer 18

True, you must create new security groups for each VPC

Question 19

What is a VPC Endpoint?

Answer 19

A route that allows access to an AWS service (such as s3) over the private network.