AWS Security and Networking Essentials Day 1 DVNG

What is the purpose of AWS IAM policies?

• The purpose of AWS IAM policies is to manage permissions for AWS resources.

• To store data in AWS S3 buckets.

• To monitor network traffic in AWS VPC.

• To create virtual machines in AWS EC2.

How do VPC peering connections work?

• VPC peering connections can only be established between VPCs owned by the same account.

• VPC peering connections require public IP addresses for communication.

• VPC peering connections enable direct communication between two VPCs using private IP addresses.

• VPC peering connections only work within the same AWS region.

What distinguishes a public subnet from a private subnet?

• A public subnet has direct internet access, while a private subnet does not.

• A public subnet is used for storing sensitive data.

• A private subnet has more security features than a public subnet.

• A public subnet is only accessible by internal users.

What are security groups used for in a VPC?

• Security groups are used to control inbound and outbound traffic for instances in a VPC.

• To manage user permissions in a VPC

• To store data in a VPC

• To create virtual private networks within a VPC

How do IAM roles benefit EC2 instances?

• IAM roles allow EC2 instances to access AWS services securely without embedding credentials.

• IAM roles are only applicable to S3 buckets.

• EC2 instances do not require IAM roles for security.

• IAM roles are only used for managing user permissions.

What is the function of a NAT gateway in a VPC?

• To manage security groups for instances in a VPC.

• To route traffic between different VPCs.

• To provide static IP addresses for instances in public subnets.

• The function of a NAT gateway in a VPC is to enable outbound internet access for instances in private subnets while blocking inbound traffic.

Can you attach multiple IAM policies to a single user?

• No, you can only attach one IAM policy to a user.

• Yes, but only if the policies are from the same service.

• Yes, you can attach multiple IAM policies to a single user.

• No, IAM policies can only be attached to groups, not users.

What is the maximum number of VPC peering connections allowed per VPC?

• 10

• 50

• 25

• 100

How does a public subnet route traffic to the internet?

• Traffic is routed through a VPN connection for internet access.

• A public subnet uses a NAT Gateway to connect to the internet.

• A public subnet requires a dedicated firewall to access the internet.

• A public subnet routes traffic to the internet via an Internet Gateway and a route table entry directing traffic to the IGW.

What is the difference between stateful and stateless security groups?

• Stateful groups do not track any connections; stateless groups do.

• Stateful security groups remember connection states; stateless groups do not.

• Stateless security groups are more secure than stateful groups.

• Stateful groups are used for public networks; stateless groups are for private networks.