AWS cuestionario 3

A new VPC with CIDR range 10.10.0.0/16 has been set up with a public and a private subnet. Internet Gateway and a custom route table have been created, and a route has been added with the 'Destination' as '0.0.0.0/0' and the 'Target' with Internet Gateway ( igw-id ). A new Linux EC2 instance has been launched on the public subnet with the auto-assign public IP option enabled, but the connection is getting failed when trying to SSH into the machine. What could be the reason?

• Elastic IP is not assigned.

• A public IP address is not assigned.

• The NACL of the public subnet disallows the ingress SSH traffic.

• The Security group of the instance disallows the egress traffic on port 80.

What service does a VPC provide?

• Public only network services

• Isolated Account

• Isolated Network

• None of the above

A user has created a VPC with a subnet and a security group. The user has launched an instance in that subnet and attached a public IP. The user is still unable to connect to the instance. The internet gateway has also been created. What can be the reason for the error?

• The outbound traffic on the security group is disabled

• The internet gateway is not configured with the route table

• The private IP is not present

• The internet gateway is not configured with the security group

What is true for a VPC Subnet & AZ?

• An AZ can have 1 subnet, a subnet can be in many AZs

• AZ can have many subnets, a subnet can be in many AZs

• An AZ can have 1 subnet, a subnet can be in one AZ

• An AZ can have many subnets, a subnet is in one AZ

What function does NAT serve?

• IPv4 and IPv6 private instances to access theinternet.

• Allows IPv4 and IPv6 public instances to access the internet.

• Allows IPv6 private instances outgoing access to the internet.

• Allows IPv4 private instances outgoing access to the internet.

Which AWS Services is used to make VPC accessible from internet?

• Internet Gateway

• Security group

• Network Access Control List

• Public Subnet

How can an Internet Gateway (IGW) be configured to be highly available?

• It cannot be HA.

• It's HA by default - attached to a VPC

• Add the AZs which are used to its configuration.

• Create and attach multiple IGWs to the VPC.

Which of the following is NOT a benefit of Virtual Private Clouds (VPC)?

• VPCs are typically cheaper than a public cloud.

• VPCs can offer overall better cybersecurity

• VPCs are highly scalable.

• VPCs offer better performance

A user has created a VPC with CIDR 20.0.0.0/24. The user has created a public subnet with CIDR 20.0.0.0/25 and a private subnet with CIDR 20.0.0.128/25. The user has launched one instance each in the private and public subnets. Which of the below mentioned options cannot be the correct IP address (private IP) assigned to an instance in the public or private subnet?

• 20.0.0.132

• 20.0.0.255

• 20.0.0.122

• 20.0.0.55

Your organization already had a VPC(10.10.0.0/16) setup with one public(10.10.1.0/24) and two private subnets – private subnet 1 (10.10.2.0/24) and private subnet 2 (10.10.3.0/24). The public subnet has the main route table, and two private subnets have two different route tables respectively. AWS sysops team reports a problem starting the EC2 instance in private subnet 1 cannot communicate to the RDS MySQL database on private subnet 2. What are the possible reasons? (choose 2 options)

• One of the private subnet route table’s local route has been changed to restrict access only within the subnet IP range.

• RDS security group inbound rule is incorrectly configured with 10.10.1.0/24 instead of 10.10.2.0/24.

• RDS Security group outbound does not contain a rule for ALL traffic or port 3306 for 10.10.2.0/24 IP range.

• 10.10.3.0/24 subnet's NACL is modified to deny inbound on port 3306 from subnet 10.10.2.0/24