Cloud Architecture

What does VPC stand for

• Virtual Personal Cloud

• Virtual Private Cloud

• Virtual Private Compute

• Virtual Processing Cloud

What makes a "private subnet" private? (pick 2)

• It is not attached to an Elastic IP

• It does not have a route to 0.0.0.0/0

• It cannot be reached from outside the VPC

• It has not been associated with a security group

What is an ARN?

• Amazon Record Number

• Amazon Resource Name

• Amazon Registration Number

• Arbitrary Resource Name

How do I secure and encrypt the data in my EC2 applications?

• Turn on VPC encryption for all services

• Enable EBS encryption for my volumes

• Place all EC2 instances in public subnets

• Generate a security key for the VPC

The purpose of a security group is ...

• To control which AWS users can connect to my cloud resources

• To control which ports and addresses can connect to my cloud resources

• To control what software is allowed to connect to my cloud resources

• To control what services run securely in your server(s)

What function does a route table perform?

• Route tables direct users to the right server(s)

• Route tables control IP/port ingress and egress

• Route tables direct network traffic in a VPC

• Route tables monitor network traffic for malicious activity

What is the function of a NAT host or gateway?

• It enables user traffic to pass into a private subnet

• It enables resources in a private subnet to indirectly reach the internet

• It controls traffic between private and public subnets

• Admins can shell into a NAT host first and then into other instances

What effect does this IAM policy have?

• It allows full control over a single EC2 instance

• It allows full control over all EC2 instances in an account

• It allows all inbound traffic to a single EC2 instance

• It denies control over a single EC2 instance

A lawyer in your company has expired contracts that must be retained for legal reasons. It's unlikely they will be referred to often. What storage solution would you suggest?

• Amazon S3

• Amazon Glacier

• Amazon Storage Gateway

• Amazon EFS

"Ephemeral Storage" is another term for persistent storage

• True

• False