AWS Networking Quiz

What is the primary function of a domain name service (DNS)?

• It provisions a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define.

• It allows you to create a subsection of a virtual private cloud (VPC) where you can isolate resources and control access.

• It translates human-readable domain names to machine readable IP addresses.

• It filters inbound and outbound traffic to Amazon EC2 instances in a virtual private cloud (VPC).

What is networking in the AWS Cloud?

• Logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define

• Physically isolated data centers or set of data centers within an AWS Region

• Interconnected devices that can exchange data and resources.

• System that translates readable domain names to IP addresses

A customer is moving their application to an Amazon VPC and wants to setup a traffic control at the subnet level. They need broad control of traffic in and out and would like to use both allow and deny type rules. Which solution or feature would meet their needs?

• Use security groups.

• Set up a virtual private gateway based on the application requirements.

• Change the public subnet to a private subnet to avoid public internet access.

• Use network access control lists (network ACLs).

A financial customer needs a content delivery solution to deliver required training videos and static content to their financial consultants worldwide. They want to make sure the solution provides low latency. Which AWS solution would BEST meet their needs?

• Amazon Route 53

• AWS Direct Connect

• Amazon CloudFront

• AWS Global Accelerator

A customer is exploring edge networking services to improve application availability, performance, and security. They need a solution for traffic routing when something goes wrong in one of their application's locations. Specifically, it takes into account the endpoint health, user location, and policies. Which AWS solution would BEST meet their needs?

• AWS Direct Connect

• Amazon Route 53

• AWS Global Accelerator

• Amazon CloudFront

A retail customer is hosting their application in an Amazon VPC and wants to configure traffic rules for the Amazon EC2 instances running in a public subnet. The application requires multiple rules to be defined at the instance level. Which solution or feature would meet their needs?

• Set up a virtual private gateway based on the application requirements.

• Set up security groups for the Amazon EC2 instances based on the application requirements.

• Change the public subnet to a private subnet to avoid public internet access.

• Set up network access control lists, (network ACLs) for the Amazon EC2 instances based on the application requirements.

What is the primary function of an Availability Zone in the AWS Cloud?

• It filters inbound and outbound traffic to EC2 instances in a VPC.

• It provisions a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define.

• It allows you to create a subsection of a virtual private cloud (VPC) where you can isolate resources and control access.

• It enhances application availability and fault tolerance by allowing resources to be deployed across multiple zones.

A media company needs a service to manage their domain registrations with different providers. They will also be using the service to route internet traffic to their resources hosted both in the AWS Cloud and elsewhere. Which AWS solution would BEST meet their needs?

• AWS Direct Connect

• Amazon Route 53

• AWS Global Accelerator

• Amazon CloudFront

A customer is creating their application resources in their virtual private cloud (VPC) subnets. They want to secure their resources in the cloud, specifically the networking traffic protection tasks. Which component is the customer responsible for, based on the shared responsibility model?

• Securing the software that runs the AWS Cloud services

• Securing network traffic with the subnets and resources with Network access control lists (network ACLs) and security groups

• Securing the hardware that runs the AWS Cloud services

• Securing access to the AWS data centers and facilities that run AWS Cloud services

A customer is exploring solutions to establish secure, encrypted connections between their on-premises networks at their data centers and branch offices. They are looking for the MOST cost-effective way to connect their office sites to other sites and their AWS services. They are not looking to increase the amount of bandwidth. Which solution would BEST meet their needs?

• AWS Direct Connect

• AWS Site-to-Site VPN

• AWS PrivateLink

• AWS Client VPN