AWS ACF Módulo 5 - Redes e entrega de conteúdo

Which statements regarding VPC Peering are accurate? Select two.

• Two VPCs in different AWS Region and under separate AWS Accounts can share traffic between each other.

• In order for VPC Peering to work each VPC should have a public subnet.

• In VPC Peering, it is possible for traffic from one VPC to traverse through a transit VPC in order to reach a third VPC.

• Traffic between VPC peers in different AWS Regions is not encrypted by default

• VPC Peering can be used to replicate data to geographically distinct locations for fault-tolerance, disaster recovery and redundancy

A website for an international sports governing body would like to serve its content to viewers from different parts of the world in their vernacular language. Which is the most suitable service that will allow different language versions of the same website to be served, according to where in the world the browser is viewing from?

• Amazon CloudFront

• Content Delivery Network (CDN)

• Amazon Lightsail

• Amazon Route 53

You are launching a new EC2 instance into a VPC with CIDR range of 10.10.0.0/16 with a single subnet using the 10.10.0.0/18 CIDR range. Which of the following private IP addresses can be assigned to the instance?

• 10.10.3.0

• 10.10.63.255

• 10.10.1.1

• 10.10.0.4

What is the most appropriate routing policy to implement in Amazon Route 53 when a web application co-located in two geographically distinct locations is experiencing degraded service in one of the locations?

• Geolocation routing policy

• Weighted routing policy

• Failover routing policy

• Latency-based routing policy

An online streaming company is prohibited from broadcasting its content in certain countries and regions in the world. Which Amazon Route 53 routing policy would be most suitable in guaranteeing their compliance?

• Geoproximity

• Geolocation

• Multi-value answer

• Failover

Which of the following security features is associated with a Subnet in a VPC to protect against incoming traffic requests?

• AWS Inspector

• Subnet Groups

• Security Groups

• Network ACL

Which of the following services helps provide a connection from on-premises infrastructure to resources hosted in the AWS Cloud? Choose 2 answers from the options given below.

• AWS VPC

• AWS VPN

• AWS Direct Connect

• AWS Subnets

Why does it take between 24 to 48 hours for changes made to a hosted zone in Amazon Route53 to reflect globally?

• DNS resolvers around the world can only reflect the changes in their cache after the Time To Live (TTL) has expired, it is 24 hours by default.

• AWS Name Servers need between 24 to 48 hours to create record sets, update their respective values and process changes.

• AWS Name Servers around the world update their cache in tandem, it takes between 24 hours to 48 hours for the process to complete.

• If changes to the hosted zone are made in the same AWS Region as the DNS resolver, it can take between 6 to 12 hours.

Which is TRUE of a new security group?

• It contains an inbound rule denying access from any IP address.

• It contains an inbound rule denying access from public IP addresses.

• It contains an inbound rule allowing access from any IP address

• It contains an outbound rule denying access to public IP addresses.

• It contains an outbound rule allowing access to any IP address.

What’s the difference between a security group and a network access control list (NACL)? [Choose TWO]

• A security group operates at the subnet level.

• A security group operates at the instance level

• A network access control list operates at the subnet level.

• A network access control list operates at the instance level.