SA-401-Oct4-Quiz

In AWS, what is the primary purpose of a Virtual Private Cloud (VPC)?

• To store and manage AWS IAM users and roles

• To provide a virtual network where you can launch AWS resources in a logically isolated section of the AWS cloud

• To manage billing and cost allocation for different AWS services

• To serve as a database service for storing relational data

Which of the following statements is true about subnets in an AWS VPC?

• A subnet can span multiple Availability Zones within a VPC

• Instances in a private subnet cannot communicate with the internet under any circumstances

• You can associate multiple route tables with a single subnet

• A subnet can be designated as either public or private based on its route table configuration

Which of the following is true about CIDR block allocation in an AWS VPC?

• The smallest subnet that can be created in a VPC has a CIDR block size of /28

• You can add multiple primary CIDR blocks to a VPC after creation

• The largest CIDR block that can be allocated to a VPC is /24

• You cannot assign both private and public IP addresses to instances in the same VPC

Which of the following is true regarding private IP addresses in AWS?

• Private IP addresses are released when an EC2 instance is stopped and restarted

• Each EC2 instance in a VPC can have only one private IP address

• A private IP address is only accessible within the VPC or through a VPN connection

• Private IP addresses are automatically assigned to instances in public subnets

Which of the following statements is true about public IP addresses in AWS?

• A public IP address is retained when an EC2 instance is stopped and restarted

• You must manually assign a public IP address to an EC2 instance in a public subnet

• Public IP addresses are automatically assigned to instances in private subnets

• A public IP address allows direct communication between the EC2 instance and the internet

Which of the following is a key characteristic of an AWS Security Group?

• Security Groups can only allow traffic, not deny it

• Security Groups are stateless, meaning you must configure rules for both inbound and outbound traffic

• A single instance can be associated with only one Security Group

• Security Groups are applied at the subnet level to control traffic to all instances within the subnet

Which of the following best describes an inbound rule in an AWS Security Group?

• It specifies which outbound traffic is allowed from the instance

• It controls incoming traffic to the instance

• It applies only to instances in a public subnet

• It automatically denies all traffic unless specified otherwise

Which of the following statements is true about outbound rules in an AWS Security Group?

• Outbound rules control the incoming traffic to the instance

• By default, all outbound traffic is denied until specified otherwise

• Outbound rules can only allow traffic to specific IP addresses

• Outbound rules determine which traffic is allowed to leave the instance

What is the primary purpose of a Network Access Control List (NACL) in AWS?

• To manage IAM user permissions

• To control inbound and outbound traffic at the subnet level

• To provide logging and monitoring for AWS resources

• To define security groups for EC2 instances

Which statement accurately describes the difference between AWS Network Access Control Lists (NACLs) and Security Groups?

• NACLs can only allow traffic, while Security Groups can both allow and deny traffic

• Security Groups apply to individual instances, while NACLs apply to entire subnets

• NACLs are always used for public subnets, while Security Groups are used for private subnets

• Security Groups evaluate rules based on a sequence, while NACLs evaluate all rules at once