Sec. 15: VPC & Networking

Your private subnets need to connect to the Internet while still remaining private. Which AWS-managed VPC component allows you to do this?

• NAT Instances

• Internet Gateway

• Security Groups

• NAT Gateways

Answer explanation

NAT Gateways allow your instances in your private subnets to access the Internet while remaining private, and are managed by AWS.

A public subnet is accessible from the Internet while a private subnet is not accessible from the Internet.

• Yes

• No, all subnets are accessible from the Internet

• No, all subnets are not accessible from the Internet

Answer explanation

A public subnet is accessible from the Internet while a private subnet is not accessible from the Internet.

Which type of firewall has both ALLOW and DENY rules and operates at the subnet level?

• Network Access Control List (NACL)

• Web Application Firewall (WAF)

• Security Groups

• GuardDuty

Answer explanation

A network access control list (NACL) is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets. They have both ALLOW and DENY rules.

You would like to connect hundreds of VPCs and your on-premises data centers together. Which AWS service allows you to do link all these together efficiently?

• Site-to-Site VPN

• Transit Gateway

• Internet Gateway

• Direct Connect

Answer explanation

Transit Gateway connects thousands of VPC and on-premises networks together in a single gateway.

A company needs two VPCs to communicate with each other. What can they use?

• VPC Endpoints

• AWS Direct Connect

• Internet Gateway

• VPC Peering

Answer explanation

VPC Peering connection is a networking connection between two VPCs using AWS' network.

You need a logically isolated section of AWS, where you can launch AWS resources in a private network that you define. What should you use?

• Subnets

• Availability Zones

• A VPC

• NAT Instances

Answer explanation

A virtual private cloud (VPC) is a virtual network dedicated to your AWS account. It is logically isolated from other virtual networks in the AWS Cloud. You can launch your AWS resources, such as Amazon EC2 instances, into your VPC.

A company needs to have a private, secure, and fast connection between its on-premises data centers and the AWS Cloud. Which connection should they use?

• AWS Connect

• Site-to-Site VPN

• VPC Peering

• AWS Direct Connect

Answer explanation

AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated private network connection from your premises to AWS.

Your VPC needs to connect with the Internet. Which VPC component can help?

• NAT Gateways

• NAT Instances

• Network ACL

• Internet Gateway

Answer explanation

An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet.