What kind of rules do Network Access Control Lists (NACLs) provide?
- Outbound allow and deny rules
- Inbound allow and deny rules
- Inbound and outbound allow rules
- Inbound and outbound allow and deny rules (Ans)
How can you make a VPC Peering connection highly available (HA)?
- You can pay more to purchase a highly available version of a VPC Peering connection
- You can configure multiple VPC Peering connections between two VPCs for HA
- They are automatically highly available (Ans)
Which are the most isolated – Regions or Availability Zones (AZ)?
- Regions (Ans)
- Availability Zones
Which of the following is true of Direct Connect?
A – It allows access to VPC resources using private IP addresses via a secure tunnel over the Internet
B – It allows access to VPC resources using private IP addresses but is not preferred over VPN tunnels
C – It allows access to VPC resources using private IP addresses and is preferred over VPN tunnels (Ans)
What was a major factor in the inception of Amazon Web Services?
- The ability to leverage Amazon’s existing web-scale infrastructure (Ans)
- The rise to popularity of the Docker container engine
- A response to Microsoft Azure
True or false, an ELB can be configured to accept incoming HTTPS connections and forward them internally as normal HTTP?
- True (Ans)
- False
Which of the following is a valid subnet in a VPC with the following CIDR block – 192.168.0.0/16?
- 192.0.1.0/24
- 10.0.0.0/16
- – 192.168.1.0/24 (Ans)
- 10.0.0.0/2
How do you create a Router in your VPC?
- Using the AWS CLI tools
- A router is automatically created for your VPC (Ans)
- From the Router-Config page in the VPC console
What AWS component is an Internet Gateway associated with?
- Availability Zone
- Subnet
- Region
- VPC (Ans)
At what level are Network ACLs applied?
- EC2 Instances
- VPCs
- Availability Zones
- Subnets (Ans)
Which AWS resource is a VPC bound by?
- A single Region (Ans)
- A VPC can span all AWS resources
- A single Availability Zone
- A single Subnet
How long does a VPC Peering request remain active?
- 28 days
- 7 days (Ans)
- 1 hour
- 1 day
Which protocol suite is used to encrypt most VPN tunnels?
- Secure DNS
- IPX/SPX
- IPsec (Ans)
- NetBIOS
What is the network portion of the following CIDR block – 10.0.0.0/24?
- 10.0
- 10
- 10.0.0.0
- 10.0.0 (Ans)
What form of address translation does the Amazon NAT AMI perform?
- Port Address Translation (PAT) (Ans)
- Route Address Translation (RAT)
- CIDR Address Translation (CAT)
- Network Address Translation (NAT)
Which of the following best describes an AWS Elastic Load Balancer?
- A service that balances incoming traffic across multiple instances and Regions
- A service that balances incoming traffic across multiple instances in a single Availability Zone
- A service that balances incoming traffic across multiple instances and Availability Zones (Ans)
- A service that balances incoming traffic across multiple instances and VPCs
What kind of Elastic Load Balancers can be created?
- Only internal
- Internet facing and internal (Ans)
- Only Internet facing
Which AWS VPC component is required to allow instances in a private subnet to communicate with the Internet?
- An Internet gateway in the private subnet
- A NAT instance in the private subnet
- An Internet gateway in the public subnet
- A NAT instance in the public subnet (Ans)
Which of the following is true of the behavior of Security Groups?
- Explicit deny rules are required to deny traffic
- All traffic not explicitly denied is implicitly allowed
- Any traffic not explicitly allowed is implicitly denied (Ans)
What is the major advantage of Elastic IPs over Public IPs?
- Elastic IPs are publicly routable, Public IPs are not
- Elastic IPs belong to you and do not change when an instance reboots (Ans)
- Elastic IPs allow you to manually choose a particular address from the pool of Amazon addresses
What is the acronym used in the AWS GUI to represent VPC Peering connection objects?
- PCX (Ans)
- VGW
- PGW
- IGW
Which AWS technology is used to connect multiple VPCs so they can communicate using private IPs?
- VPC Peering (Ans)
- Direct Connect
- Virtual Private Networks
- Elastic Load Balancing
I’m a DevOps/SRE/DevSecOps/Cloud Expert passionate about sharing knowledge and experiences. I have worked at Cotocus. I share tech blog at DevOps School, travel stories at Holiday Landmark, stock market tips at Stocks Mantra, health and fitness guidance at My Medic Plus, product reviews at TrueReviewNow , and SEO strategies at Wizbrand.
Do you want to learn Quantum Computing?
Please find my social handles as below;
Rajesh Kumar Personal Website
Rajesh Kumar at YOUTUBE
Rajesh Kumar at INSTAGRAM
Rajesh Kumar at X
Rajesh Kumar at FACEBOOK
Rajesh Kumar at LINKEDIN
Rajesh Kumar at WIZBRAND
Find Trusted Cardiac Hospitals
Compare heart hospitals by city and services — all in one place.
Explore Hospitals
