AWS Certified Cloud Practitioner (CLF-C01)- Introduction to Amazon VPC Part 2

This video tutorial covers the security features of Amazon VPC, including security groups and network access control lists. It explains how to build a VPC, detailing components like route tables, internet gateways, and subnets. The tutorial also discusses IP address types and the use of NAT gateways for enabling internet access to private subnets.

What is the primary function of a security group in AWS?

• To manage DNS settings

• To control inbound and outbound traffic at the instance level

• To provide storage solutions

• To monitor application performance

What is the default behavior of a security group regarding inbound traffic?

• All inbound traffic is allowed

• Inbound traffic is allowed only during certain hours

• Inbound traffic is allowed only from specific IPs

• All inbound traffic is denied until rules are added

How do network access control lists (NACLs) differ from security groups?

• NACLs are used for storage management, while security groups are used for traffic control

• NACLs support both allow and deny rules, while security groups only support allow rules

• NACLs operate at the instance level, while security groups operate at the subnet level

• NACLs are stateful, while security groups are stateless

How are rules in a network access control list (NACL) evaluated?

• In random order

• Based on the time of day

• By the lowest numbered rule first

• By the highest numbered rule first

What is the role of the main route table in a VPC?

• To store data backups

• To determine traffic flow within the VPC

• To manage user access permissions

• To provide DNS resolution

What is the purpose of an Internet gateway in a VPC?

• To manage user authentication

• To store application logs

• To enable Internet access for instances in the VPC

• To provide DNS services

What is a key characteristic of a public IP address in AWS?

• It is assigned to storage volumes

• It is only used for internal communication

• It is dynamic and can change when an instance is stopped and started

• It is static and never changes

What is the function of a NAT gateway in a VPC?

• To store application data

• To enable instances in a private subnet to access the Internet

• To provide DNS services

• To manage user authentication

Why is an elastic IP address important for certain services?

• It automatically scales with demand

• It enhances application performance

• It offers unlimited storage capacity

• It provides a static public IP address that does not change

What is a key difference between public and private subnets in a VPC?

• Private subnets are used for DNS services

• Public subnets are more secure

• Private subnets have more storage capacity

• Public subnets can access the Internet directly, while private subnets cannot