Quiz
Chapter 4 - 13 Amazon Virtual Private Cloud
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (20)
1What is the range of allowed IPv4 prefix lengths for a VPC CIDR block?
- A/16 to /28
- B/16 to /56
- C/8 to /30
- D/56 only
2You’ve created a VPC with the CIDR 192.168.16.0/24. You want to assign a secondary
CIDR to this VPC. Which CIDR can you use?- A172.31.0.0/16
- B192.168.0.0/16
- C192.168.0.0/24
- D192.168.16.0/23
3You need to create two subnets in a VPC that has a CIDR of 10.0.0.0/16. Which of the following
CIDRs can you assign to one of the subnets while leaving room for an additional
subnet? (Choose all that apply.)- A10.0.0.0/24
- B10.0.0.0/8
- C10.0.0.0/16
- D10.0.0.0/23
4What is the relationship between a subnet and an availability zone?
- AA subnet can exist in multiple availability zones.
- BAn availability zone can have multiple subnets.
- CAn availability zone can have only one subnet.
- DA subnet’s CIDR is derived from its availability zone.
5Which is true regarding an elastic network interface?
- AIt must have a private IP address from the subnet that it resides in.
- BIt cannot exist independently of an instance.
- CIt can be connected to multiple subnets.
- DIt can have multiple IP addresses from different subnets.
6What is true of security groups?
- AOnly one security group can be attached to an ENI.
- BA security group must always be attached to an ENI.
- CA security group can be attached to a subnet.
- DEvery VPC contains a default security group.
7How does a NACL differ from a security group?
- AA NACL is stateless.
- BA NACL is stateful.
- CA NACL is attached to an ENI.
- DA NACL can be associated with only one subnet.
8What is an Internet gateway?
- AA resource that grants instances in multiple VPCs’ Internet access
- BAn implied router
- CA physical router
- DA VPC resource with no management IP address
9What is the destination for a default IPv4 route?
- A0.0.0.0/0
- B::0/0
- CAn Internet gateway
- DThe IP address of the implied router
10You create a new route table in a VPC but perform no other configuration on it. You then
create a new subnet in the same VPC. Which route table will your new subnet be associated
with?- AThe main route table
- BThe route table you created
- CThe default route table
- DNone of these
11You create a Linux instance and have AWS automatically assign a private IP address but not
a public IP address. What will happen when you stop and restart the instance?- AYou won’t be able to SSH directly to the instance from the Internet.
- BThe instance won’t be able to access the Internet.
- CThe instance will receive the same private IP address.
- DThe instance will be unable to reach other instances in its subnet.
12How can you assign a public IP address to a running instance that doesn’t have one?
- AAllocate an ENI and associate it with the instance’s primary EIP.
- BAllocate an EIP and associate it with the instance’s primary ENI.
- CConfigure the instance to use an automatically assigned public IP.
- DAllocate an EIP and change the private IP address of the instance’s ENI to match.
13When an instance with an automatically assigned public IP sends a packet to another
instance’s EIP, what source address does the destination instance see?- AThe public IP
- BThe EIP
- CThe private IP
- D0.0.0.0
14Why must a NAT device reside in a different subnet than an instance that uses it?
- ABoth must use different default gateways.
- BBoth must use different NACLs.
- CBoth must use different security groups.
- DThe NAT device requires a public interface and a private interface.
15Which is a difference between a NAT instance and NAT gateway?
- AA NAT gateway scales automatically.
- BA NAT instance scales automatically.
- CA NAT gateway can span multiple availability zones.
- DThere are different NAT gateway types.
16Which VPC resource performs network address translation?
- AInternet gateway
- BRoute table
- CEIP
- DENI
17What must you do to configure a NAT instance after creating it?
- ADisable the source/destination check on its ENI.
- BEnable the source/destination check on its ENI.
- CCreate a default route in its route table with a NAT gateway as the target.
- DAssign a primary private IP address to the instance.
18Which of the following is true regarding VPC peering?
- ATransitive routing is not supported.
- BA VPC peering connection requires a public IP address.
- CYou can peer up to three VPCs using a single peering connection.
- DYou can use a peering connection to share an Internet gateway among multiple VPCs.
19You’ve created one VPC peering connection between two VPCs. What must you do to use
this connection for bidirectional instance-to-instance communication? (Choose all that
apply.)- ACreate two routes with the peering connection as the target.
- BCreate only one default route with the peering connection as the target.
- CCreate another peering connection between the VPCs.
- DConfigure the instances’ security groups correctly.
20Which of the following is a not a limitation of inter-region VPC peering?
- AYou can’t use IPv4.
- BThe maximum MTU is 1,500 bytes.
- CIt’s not supported in some regions.
- DYou can’t use IPv6.
Informationen
- Beschreibung
- AWS (AWS - Study Book) Quiz am Chapter 4 - 13 Amazon Virtual Private Cloud, erstellt von Fausto Trindade am 26/01/2020.
- Autor
- Fausto Trindade
- Sprache
- Português
- Aufrufe
- 0
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz