VPC-PART 2

What is the purpose of a Network Access Control List (ACL)?

• To define the size of a subnet

• To control access to and from the VPC at the subnet level

• To allow only certain instances to be used

• To manage billing for VPC usage

Answer explanation

A Network Access Control List (ACL) is used to control access to and from a Virtual Private Cloud (VPC) at the subnet level, allowing you to specify which traffic is permitted or denied.

What is the function of Inbound Rules in Network ACLs?

• Control outgoing traffic

• Control incoming traffic

• Assign IP addresses

• Create subnets

Answer explanation

Inbound Rules in Network ACLs are specifically designed to control incoming traffic to a network. They determine which incoming requests are allowed or denied, making 'Control incoming traffic' the correct choice.

Which of the following is true about Network Access Control Lists (ACLs)?

• ACLs apply to individual instances only

• ACLs are stateful

• ACLs are stateless and apply to entire subnets

• ACLs are used for data storage in the VPC

Answer explanation

ACLs are stateless, meaning they do not track the state of connections, and they apply to entire subnets rather than individual instances. This makes them suitable for controlling traffic at the subnet level.

At what level do Network ACLs operate?

• Instance level

• VPC level

• Subnet level

• Availability Zone level

Answer explanation

Network ACLs operate at the subnet level, controlling traffic in and out of one or more subnets within a VPC. This allows for fine-grained control over network access, unlike instance or VPC levels.

What is the purpose of NAT (Network Address Translation) Gateway in VPC?

• To assign public IP addresses

• To allow instances in private subnets to access the internet

• To create network interfaces

• To establish security groups

Answer explanation

The NAT Gateway allows instances in private subnets to access the internet by translating their private IP addresses to a public IP address, enabling outbound internet traffic while keeping the instances secure.

What is the difference between a Public IP and an Elastic IP in a VPC?

• A Public IP can be reassigned, whereas an Elastic IP is permanent

• A Public IP is fixed, while an Elastic IP is dynamically assigned

• A Public IP is used for internal traffic, while an Elastic IP is for external traffic

• Both are the same, just different names

Answer explanation

A Public IP is dynamically assigned and can change if the instance is stopped and started, while an Elastic IP is a static IP that remains associated with your account until you choose to release it.

What is a Route Table in VPC?

• A security group

• A map that directs traffic within the VPC

• A network interface

• A type of subnet

Answer explanation

A Route Table in a VPC is essentially a map that directs traffic within the VPC, determining how packets are routed between subnets and to external networks. This makes it crucial for network management.

Which of the following can be used to route traffic between your VPC and the internet?

• Route Tables

• Network ACLs

• Elastic IP Addresses

• Security Groups

Answer explanation

Route Tables are used to direct traffic between your VPC and the internet by defining routes. Network ACLs, Elastic IPs, and Security Groups serve different purposes and do not route traffic directly.

How do you ensure that your VPC has a connection to the internet?

• Use an Internet Gateway

• Use a NAT Gateway

• Use a VPN Connection

• Use a Route Table

Answer explanation

To ensure your VPC has internet access, you need to use an Internet Gateway. This allows resources in your VPC to communicate with the internet, while NAT Gateways and VPN Connections serve different purposes.

What does IPv6 provide that IPv4 does not?

• More IP address space

• Faster connection speeds

• More security features

• Limited address space

Answer explanation

IPv6 provides a vastly larger IP address space compared to IPv4, which is crucial as the number of devices connected to the internet continues to grow. This expansion allows for unique addresses for every device.