Quiz
SAP - Networking
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (12)
1What are some reasons you might want to use a NAT Instance over a NAT Gateway?
Choose 3- AYou want to deny public internet initiated connections to your private instances.
- BYou only need to provide NAT for one or two machines.
- CYou want to use security groups.
- DYou want the ability to detach your Elastic IP.
- EYou want to support IPv6 traffic.
2What is the purpose of an Egress-Only Internet Gateway?
Choose 2- AAllows instances communicating over IPv4 or IPv6 to access the Internet
- BPrevents IPv6 traffic accessing the Internet by utilising Security Groups
- CPrevents IPv6 based Internet resources initiating a connection into a VPC
- DAllows VPC based IPv6 traffic to communicate to the Internet
3What networking components will allow IPv6 data to communicate between a VPC and the Internet?
Choose 2- ANAT
- BInternet Gateway
- CDirect Connect
- DEgress-Only Internet Gateway
4You want to allow your VPC instances to resolve using on-prem DNS. Can you do this and how/why?
- AYes, by setting up a Route 53 Private Zone and configuring NS records for your on-prem DNS.
- BYes, by configuring a DHCP Option Set to issue your on-prem DNS IP to VPC clients.
- CNo, VPC resources are prevented from using a DNS located on a non-AWS network for security reasons.
- DNo, VPC resources must use the local DNS within their respective subnet for latency reasons.
5You have setup VPC Peering between VPC_BLUE and VPC_YELLOW and also VPC_BLUE and VPC_RED. In testing, you realize that you cannot reach VPC_RED from VPC_YELLOW. What is the simplest way you can fix this?
- AEnsure that you are using the same CIDR block for both VPC_RED and VPC_YELLOW.
- BAdd a Transit VPC with appropriate VPN connection to each VPC.
- CSetup a peering connection between VPC_YELLOW and VPC_RED.
- DAdd a route from VPC_YELLOW to VPC_RED in the VPC_BLUE route table.
6You have the app currently hosted in three regions around the globe and you have defined Route 53 Geolocation routing to route people to the nearest region. Some customers complain that they are not able to access the service. What could be the cause?
- AYou need to ensure that you have a default route in addition to other geolocation routes.
- BYou need to ensure the weights of all routes do not exceed 255.
- CYou need to use a CNAME record rather than an A record.
- DYou need to use an AAAA record rather than an A record.
- EYou need to adjust the bias factor for the geolocation routes.
7In an effort to increase security, you have updated the NACLs for your VPC subnets to only allow inbound port 22 from the public Internet and deny all outbound traffic. Now, you are unable to SSH into your instance from the internet where you could before. Assuming nothing else has changed, What is the reason?
- AYou need to assign the updated NACL to the subnets.
- BYou need to allow outbound traffic on TCP port 22 in your NACL.
- CYou need to allow outbound traffic for TCP ports between 1025 to 65535.
- DYou need to allow all TCP inbound traffic in your NACL.
- EYou need to add the port for SSH to your SG.
8Which of these CIDR blocks and/or IP addresses are invalid (cannot be used or assigned to an instance) for a private VPC or subnet on AWS?
Choose 2- A8.8.8.8
- B172.31.4.2/15
- C192.168.1.2 with subnet mask 255.255.255.0
- D10.2.4.255
9You are building an application hosted on AWS for a customer. The customer has a very old firewall that can whitelist external destinations via IP address only. Which solution could you use?
Choose 2- ANetwork Load Balancer with EIP
- BApplication Load Balancer with Global Accelerator
- CApplication Load Balancer with EIP
- DClassic Load Balancer
- EUse the static IP address from any type of AWS Elastic Load Balancer to forward traffic to your application
10What might I consider to decrease the likelihood that multiple EC2 instances are impacted by some sort of underlying hardware failure in AWS.
- ADedicated Instances
- BDedicated Hosts
- CDistributed Placement Groups
- DSpread Placement Groups
- EClustered Placement Groups
11Which of these statements on Direct Connect are False.
Chosse 2- ADirect Connect requires BGP routing.
- BDirect Connect requires 802.1Q VLAN support.
- CDirect Connect connections are highly available.
- DTraffic through a Direct Connect connection can reach the internet via AWS Internet Gateway.
12Which of the following DNS record types does Route 53 not support?
- ACNAME
- BSPF
- CAAAA
- DDNSKEY
Informationen
- Beschreibung
- Quiz am SAP - Networking, erstellt von Linh Phan Van am 23/10/2020.
- Autor
- Linh Phan Van
- Sprache
- English
- Aufrufe
- 1
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz