You are in browse mode. You must login to use MEMORY

level: VPC

Questions and Answers List

Virtual Private Network

level questions: VPC

Question	Answer
How many IP addresses are reserved in a CIDR in a subnet?	5
Between NAT Gteway and VPC endpoint, which is more cost effective?	VPC Endpoint
EC2 instances placed within an AZ is more cost-effective, but less available then EC2 instances placed across two AZ. True or False?	True
What is the maximum CIDR blocks we can create per VPC?	5
What is the maximum size per CIDR in a VPC?	16
Minimum size per CIDR in a VPC is 28. True or False?	True
Your VPC CIDR should not overlap with other networks. True or False?	True
How many internet gateways can be attached per VPC?	1
How do you allow EC2 instances in the private subnet to access internet?	NAT Instances (outdated) or NAT Gateway
Source/Destination check must be disabled for NAT Instance. True or False?	True
How do you make a private Instance get only outbound Internet connectivity?	In the route table, create a route from 0.0.0.0/0 to NAT Instance
Is it correct to place a NAT Instance on a private subnet?	No
NAT Gateway is resilient within a single AZ only. True or False?	True
To use private hosted zones, you must set the following Amazon VPC settings to true: enableDnsHostnames, enableDnsSupport. True or False?	True
Default NACL allows everything inbound and outbound. True or False?	True
Newly created NACL will block everything. True or False?	True
Non-overlapping CIDR is a key requirement for VPC Peering. True or False?	True
VPC Peering can work cross-region and cross-account. True or False?	True
VPC Peering will work wihtout updating route table in both VPCs that are getting peered. True or False?	False
To connect to AWS services using a private network, will you use VPC Endpoint ot NAT Gateway?	VPC Endpoint
Lead times are often more than a month to establish Direct Connection. True or False?	True
How do you secure Direct Connect?	AWS Direct Connect + VPN
Egress only Internet Gateway works only for IPV6. True or False?	True
All IPV6 addresses are public. True or False?	True
Connectivity through AWS VPN CloudHub goes over public internet. True or False?	True
To connect multiple VPCs to talk to each other, what service will you use?	Transit Gateway
The only service in AWS that supports IP MultiCast?	Transit Gateway
Direct connect location that are co-located in the same AWS region results in lower cost for egress network. True or False?	True
Cloudfront to Internet is slightly cheaper than S3 and also provides caching capability. True or False?	True
Even if you use IPV6, IPV4 cannot be disabled for your VPC and subnets. True or False?	True