SA-401-MIDTERM-QUIZ

Which of the following correctly describes the purpose of an Internet Gateway in an AWS VPC?

• It provides a VPN connection to on-premises networks.

• It enables communication between VPCs in different AWS Regions.

• It routes traffic between subnets within the same VPC.

• It allows instances in a VPC to access the internet and enables inbound traffic from the internet.

What does AWS VPC stand for?

• Virtual Private Connection

• Virtual Protected Cloud

• Virtual Public Cloud

• Virtual Private Cloud

Which of the following statements is true regarding the security features of an AWS VPC?

• Security groups are stateful, meaning if you allow incoming traffic, the outgoing traffic is automatically allowed.

• Network ACLs (NACLs) are stateful and automatically allow responses to outbound requests.

• Security groups can be associated with multiple VPCs simultaneously.

• NACLs apply to individual instances within a subnet, while security groups apply at the VPC level.

When configuring an AWS VPC, which of the following statements regarding subnet IP address allocation is true?

• Each subnet must have a unique CIDR block that does not overlap with any other subnet in the same VPC.

• Subnets can share CIDR blocks as long as they belong to different Availability Zones.

• A subnet's CIDR block can overlap with the CIDR block of the VPC it belongs to.

• Subnets within the same VPC can have the same IP address ranges as long as they are in different regions.

Which of the following best describes the purpose of a private subnet in an AWS VPC?

• Instances in a private subnet can communicate directly with the internet without any additional configuration.

• Private subnets are used to host resources that do not require direct access to the internet for security purposes.

• Instances in a private subnet can receive public IP addresses automatically.

• Private subnets cannot be connected to other subnets within the same VPC.

Which of the following statements is true regarding IP addressing in an AWS VPC?

• AWS automatically assigns a public IP address to every instance launched in a private subnet.

• Private IP addresses assigned to instances in a VPC are globally unique.

• Elastic IP addresses can be associated with instances in both public and private subnets.

• Private IP addresses assigned to instances in a VPC remain assigned even after the instance is stopped and restarted.

Which of the following statements is true about AWS Security Groups?

• Security groups deny all inbound and outbound traffic by default.

• Security groups can be associated with multiple VPCs simultaneously.

• Security groups allow you to specify both IP addresses and other security groups as sources or destinations for traffic.

• Security groups are evaluated in order, similar to network ACLs.

In AWS VPC, you can associate more than one CIDR block with a single VPC to expand its IP address range?

• True

• False

In AWS VPC, Network ACLs are stateful, meaning that return traffic is automatically allowed if an outbound rule is permitted.

• True

• False

In AWS VPC, security groups can be used to control both inbound and outbound traffic for instances?

• True

• False