Test
Domain 3.4
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (20)
1How many security groups can you attach to a single instance in a VPC?
- ANone, security groups aren’t attached to instances.
- B1
- C1 or more
- D2 or more
2Which of the following can be added to a VPC, in addition to security groups on included
instances, to further secure the VPC?- AA NACL
- BA port filter
- CAn ALB
- DA flow log
3Which of the following statements is true about a custom, user-created NACL?
- AA NACL by default allows all traffic out of a VPC.
- BA NACL by default allows all traffic into a VPC.
- CA NACL is a virtual firewall for associated subnets.
- DA NACL functions at the instance level.
4What do you use to permit and restrict control of a NACL?
- AVPC
- BWAF
- CAWS Organizations
- DIAM
5Which of these are true about security groups? (Choose two.)
- ASupport allow and deny rules
- BEvaluate all rules before deciding whether to allow traffic
- COperate at the instance level
- DApply to all instances in the associated subnet
6Which of these are true about security groups? (Choose two.)
- AStateful
- BStateless
- CProcess rules in order
- DAssociated with an instance
7Which of these are true about NACLs? (Choose two.)
- AStateful
- BStateless
- CProcess rules in order
- DAssociated with an instance
8Which of these are true about NACLs? (Choose two.)
- AApply to all instances in an associated subnet
- BOnly apply if no security group is present
- CSupport allow and deny rules
- DEvaluate all rules before deciding whether to allow or disallow traffic
9In which order are NACLs and security groups evaluated?
- ANACLs and security groups are evaluated in parallel.
- BA NACL is evaluated first, and then the security group.
- CA security group is evaluated first, and then the NACL.
- DIt depends on the VPC setup.
10Which of these statements are true? (Choose two.)
- AA security group can apply to two instances at the same time.
- BA NACL applies to all instances within a subnet at the same time.
- CA security group can apply to only one instance at the same time.
- DA NACL can apply to only one instance at the same time.
11With which of the following is a NACL associated?
- AAn instance
- BA subnet
- CA VPC
- DA NACL can be associated with all of these.
12Which of the following are true about the default NACL that comes with the default
VPC? (Choose two.)- AIt allows all inbound traffic.
- BIt allows all outbound traffic.
- CIt disallows all inbound traffic.
- DIt disallows all outbound traffic.
13Which of the following are true about a user-created NACL? (Choose two.)
- AIt allows all inbound traffic.
- BIt allows all outbound traffic.
- CIt disallows all inbound traffic.
- DIt disallows all outbound traffic.
14In which order are rules in a NACL evaluated?
- AFrom low to high, using the number on the rule
- BFrom high to low, using the number on the rule
- CFrom low to high, using the port of the rule
- DFrom high to low, using the port of the rule
15Which of the following statements is not true? (Choose two.)
- AA network ACL has separate inbound and outbound rules.
- BNetwork ACLs are stateful.
- CEach subnet in your VPC must be associated with a NACL.
- DA network ACL can only be associated with a single subnet.
16With how many subnets can a NACL be associated?
- AOne
- BOne or more
- CA NACL is associated with instances, not subnets.
- DA NACL is associated with VPCs, not subnets.
17With how many NACLs can a subnet be associated?
- AOne
- BOne or more
- CA subnet is associated with security groups, not NACLs.
- DA subnet is associated with VPCs, not NACLs.
18What happens when you associate a NACL with a subnet that already is associated with a
different NACL?- ANothing, both NACLs are associated with the subnet.
- BYou receive an error. You must remove the first NACL to associate the new one.
- CYou receive an error. You must first merge the two NACLs to apply them to a subnet.
- DThe new NACL replaces the previous NACL, and the subnet still only has one NACL
association.
19Which of the following are part of a network ACL rule? (Choose two.)
- AAn ASCII code
- BA rule number
- CAn IAM group
- DA protocol
20Which of the following are part of a network ACL rule? (Choose two.)
- AAn ALLOW or DENY specification
- BA CIDR range
- CAn IP address
- DA VPC identifier
Información
- Descripción
- (AWS - Practice Book Domain 3) AWS Test sobre Domain 3.4, creado por Fausto Trindade el 03/03/2020.
- Autor
- Fausto Trindade
- Idioma
- Português
- Visitas
- 0
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test