NET 300: Wrap-Up Session Quiz

What is the primary difference between a public and private subnet in an AWS VPC?

• Public subnet allows inbound traffic

• Public subnet has a route to the Internet Gateway

• Private subnet is more secure

• Public subnet is only used for databases

Which AWS component is required to allow instances in a public subnet to communicate with the internet?

• NAT Gateway

• Internet Gateway

• AWS Route 53

• AWS Direct Connect

How can instances in a private subnet access the internet in AWS?

• Assign public IP

• Use a NAT Gateway

• Connect to Internet Gateway

• Enable VPC peering

What is the primary benefit of enforcing Multi-Factor Authentication (MFA) in IAM policies?

• Eliminates passwords

• Adds extra security

• Bypasses IAM roles

• Speeds login

How can an AWS admin enforce MFA for sensitive resources?

• Enable console MFA

• Create MFA-based IAM policies

• Disable IAM roles

• Use AWS WAF

MFA helps prevent unauthorized access by requiring:

• A password only

• Two or more forms of verification

• SSH key

• Access keys

What is a key advantage of Security Groups in AWS?

• Unrestricted traffic

• Acts as virtual firewall

• Blocks all traffic

• Applies VPC-wide

How do Security Groups enhance AWS security?

• Auto encryption

• Explicit traffic control

• Replace IAM

• Root-level access

What inbound rule is required for a public web server?

• Allow SSH

• Allow HTTP on port 80 from 0.0.0.0/0

• Block all traffic

• Outbound only

Which type of virtualization allows multiple OS to run on a single hardware host?

• Storage virtualization

• Network virtualization

• System virtualization

• Cloud orchestration