Quiz
Domain 3.5
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (20)
1Which of the following inbound rules of a custom NACL would be evaluated first?
- ARule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW.
- BRule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW.
- CRule * // All // All // All // 0.0.0.0/0 -> DENY.
- DRule #130 // RDP // TCP // 3389 // 192.0.2.0/24 -> ALLOW.
2If all of the following inbound rules existed on a custom NACL, would SSH traffic be
allowed?
Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW
Rule * // All // All // All // 0.0.0.0/0 -> DENY
Rule #130 // RDP // TCP // 3389 // 192.0.2.0/24 -> ALLOW- ARule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
- BYes, SSH is included in the HTTPS protocol.
- COnly if the SSH access permission in IAM is granted.
- DNo
3If all of the following inbound rules existed on the default VPC’s default NACL, would
SSH traffic be allowed?
Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW- AYes, the default VPC’s default NACL allows all inbound traffic by default.
- BYes, SSH is included in the HTTPS protocol.
- COnly if the SSH access permission in IAM is granted.
- DNo
4If all of the following inbound rules existed on a custom NACL, would SSH traffic be
allowed?
Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW
Rule #140 // All // All // All // 0.0.0.0/0 -> DENY
Rule #120 // SSH // TCP // 22 // 192.0.2.0/24 -> ALLOW- AYes
- BYes, but only from the CIDR block 192.0.2.0/24.
- COnly if the SSH access permission in IAM is granted.
- DNo
5If all of the following inbound rules existed on a custom NACL, would SSH traffic be
allowed?
Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW
Rule #110 // All // All // All // 0.0.0.0/0 -> DENY
Rule #120 // SSH // TCP // 22 // 192.0.2.0/24 -> ALLOW- AYes
- BYes, but only from the CIDR block 192.0.2.0/24.
- COnly if the SSH access permission in IAM is granted.
- DNo
6Which of the following is the most accurate statement about what the following inbound
rule on a NACL will do?
Rule #120 // SSH // TCP // 22 // 192.0.2.0/24 -> ALLOW- AAllows inbound SSH traffic to the associated subnets
- BAllows inbound TCP traffic to the associated subnets
- CAllows inbound TCP traffic to the associated subnets from the CIDR block
192.0.2.0/24 - DAllows inbound SSH traffic to the associated subnets from the CIDR block
192.0.2.0/24
7Which of the following is the most accurate statement about what the following inbound
rule on a NACL will do?
Rule #120 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW- AAllows inbound HTTP traffic to the associated subnets
- BAllows inbound IPv4 HTTP traffic to the associated subnets as long as it is not prevented
by lower-numbered rules - CAllows inbound IPv4 HTTP traffic to the associated subnets
- DAllows inbound IPv4 TCP traffic to the associated subnets
8What does the CIDR block 0.0.0.0/0 represent?
- AThe entire Internet
- BThe entire Internet, limited to IPv4 addresses
- CThe entire Internet, limited to IPv6 addresses
- DInbound traffic from the entire Internet
9What does the CIDR block ::/0 represent?
- AThe entire Internet
- BThe entire Internet, limited to IPv4 addresses
- CThe entire Internet, limited to IPv6 addresses
- DInbound traffic from the entire Internet
10Which of the following rules allows IPv6 outbound traffic to flow to the entire Internet
through a NAT gateway with the ID nat-123456789?- A0.0.0.0/0 -> NAT -> nat-123456789
- B::/0 -> nat-123456789
- C0.0.0.0/0 -> nat-123456789
- D::/0 -> NAT -> nat-123456789
11How many availability zones in a single region does a single VPC span?
- ANone, VPCs do not span availability zones.
- BOne
- CAt least two
- DAll of them
12Which of these must be specified when creating a new VPC? (Choose two.)
- AAn availability zone
- BA region
- CA CIDR block
- DA security group
13How many subnets can be added to an availability zone within a VPC?
- ANone
- BOne
- COne or more
- DAt least two
14To how many availability zones within a region can a single subnet in a VPC be added?
- ANone
- BOne
- COne or more
- DAt least two
15How many availability zones can a subnet span?
- ANone
- BOne
- COne or more
- DAt least two
16How many IPv6 CIDR blocks can be assigned to a single VPC?
- ANone
- BOne
- COne or more
- DAt least two
17How many IPv4 CIDR blocks can be assigned to a single VPC?
- ANone
- BOne
- COne or more
- DAt least two
18You have a VPC in US East 1 with three subnets. One of those subnets’ traffic is routed to
an internet gateway. What does this make the subnet?- AA private subnet
- BA restricted subnet
- CThe master subnet of that VPC
- DA public subnet
19You have a public subnet in a VPC and an EC2 instance serving web traffic within that
public subnet. Can that EC2 instance be reached via the Internet?- AYes
- BYes, as long as it has a public IPv4 address.
- CYes, as long as the VPC is marked as public.
- DNo
20You have a public subnet within your VPC. Within that subnet are three instances, each
running a web-accessible API. Two of the instances are responding to requests from Internet
clients, but one is not. What could be the problem?- AThe VPC needs to be marked as public-facing.
- BThe three instances should be moved into an Auto Scaling group.
- CThere is no internet gateway available for the VPC.
- DThe unavailable instance needs an elastic IP.
Informationen
- Beschreibung
- AWS (AWS - Practice Book Domain 3) Quiz am Domain 3.5, erstellt von Fausto Trindade am 03/03/2020.
- Autor
- Fausto Trindade
- Sprache
- Português
- Aufrufe
- 0
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz