Domain 3.5

1. 1Which of the following inbound rules of a custom NACL would be evaluated first?

   1. ARule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW.
   2. BRule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW.
   3. CRule * // All // All // All // 0.0.0.0/0 -> DENY.
   4. DRule #130 // RDP // TCP // 3389 // 192.0.2.0/24 -> ALLOW.
2. 2If all of the following inbound rules existed on a custom NACL, would SSH traffic be
   allowed?
   Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
   Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW
   Rule * // All // All // All // 0.0.0.0/0 -> DENY
   Rule #130 // RDP // TCP // 3389 // 192.0.2.0/24 -> ALLOW

   1. ARule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
   2. BYes, SSH is included in the HTTPS protocol.
   3. COnly if the SSH access permission in IAM is granted.
   4. DNo
3. 3If all of the following inbound rules existed on the default VPC’s default NACL, would
   SSH traffic be allowed?
   Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
   Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW

   1. AYes, the default VPC’s default NACL allows all inbound traffic by default.
   2. BYes, SSH is included in the HTTPS protocol.
   3. COnly if the SSH access permission in IAM is granted.
   4. DNo
4. 4If all of the following inbound rules existed on a custom NACL, would SSH traffic be
   allowed?
   Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
   Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW
   Rule #140 // All // All // All // 0.0.0.0/0 -> DENY
   Rule #120 // SSH // TCP // 22 // 192.0.2.0/24 -> ALLOW

   1. AYes
   2. BYes, but only from the CIDR block 192.0.2.0/24.
   3. COnly if the SSH access permission in IAM is granted.
   4. DNo
5. 5If all of the following inbound rules existed on a custom NACL, would SSH traffic be
   allowed?
   Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
   Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW
   Rule #110 // All // All // All // 0.0.0.0/0 -> DENY
   Rule #120 // SSH // TCP // 22 // 192.0.2.0/24 -> ALLOW

   1. AYes
   2. BYes, but only from the CIDR block 192.0.2.0/24.
   3. COnly if the SSH access permission in IAM is granted.
   4. DNo
6. 6Which of the following is the most accurate statement about what the following inbound
   rule on a NACL will do?
   Rule #120 // SSH // TCP // 22 // 192.0.2.0/24 -> ALLOW

   1. AAllows inbound SSH traffic to the associated subnets
   2. BAllows inbound TCP traffic to the associated subnets
   3. CAllows inbound TCP traffic to the associated subnets from the CIDR block
      192.0.2.0/24
   4. DAllows inbound SSH traffic to the associated subnets from the CIDR block
      192.0.2.0/24
7. 7Which of the following is the most accurate statement about what the following inbound
   rule on a NACL will do?
   Rule #120 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW

   1. AAllows inbound HTTP traffic to the associated subnets
   2. BAllows inbound IPv4 HTTP traffic to the associated subnets as long as it is not prevented
      by lower-numbered rules
   3. CAllows inbound IPv4 HTTP traffic to the associated subnets
   4. DAllows inbound IPv4 TCP traffic to the associated subnets
8. 8What does the CIDR block 0.0.0.0/0 represent?

   1. AThe entire Internet
   2. BThe entire Internet, limited to IPv4 addresses
   3. CThe entire Internet, limited to IPv6 addresses
   4. DInbound traffic from the entire Internet
9. 9What does the CIDR block ::/0 represent?

   1. AThe entire Internet
   2. BThe entire Internet, limited to IPv4 addresses
   3. CThe entire Internet, limited to IPv6 addresses
   4. DInbound traffic from the entire Internet
10. 10Which of the following rules allows IPv6 outbound traffic to flow to the entire Internet
    through a NAT gateway with the ID nat-123456789?

    1. A0.0.0.0/0 -> NAT -> nat-123456789
    2. B::/0 -> nat-123456789
    3. C0.0.0.0/0 -> nat-123456789
    4. D::/0 -> NAT -> nat-123456789

11. 11How many availability zones in a single region does a single VPC span?

    1. ANone, VPCs do not span availability zones.
    2. BOne
    3. CAt least two
    4. DAll of them
12. 12Which of these must be specified when creating a new VPC? (Choose two.)

    1. AAn availability zone
    2. BA region
    3. CA CIDR block
    4. DA security group
13. 13How many subnets can be added to an availability zone within a VPC?

    1. ANone
    2. BOne
    3. COne or more
    4. DAt least two
14. 14To how many availability zones within a region can a single subnet in a VPC be added?

    1. ANone
    2. BOne
    3. COne or more
    4. DAt least two
15. 15How many availability zones can a subnet span?

    1. ANone
    2. BOne
    3. COne or more
    4. DAt least two
16. 16How many IPv6 CIDR blocks can be assigned to a single VPC?

    1. ANone
    2. BOne
    3. COne or more
    4. DAt least two
17. 17How many IPv4 CIDR blocks can be assigned to a single VPC?

    1. ANone
    2. BOne
    3. COne or more
    4. DAt least two
18. 18You have a VPC in US East 1 with three subnets. One of those subnets’ traffic is routed to
    an internet gateway. What does this make the subnet?

    1. AA private subnet
    2. BA restricted subnet
    3. CThe master subnet of that VPC
    4. DA public subnet
19. 19You have a public subnet in a VPC and an EC2 instance serving web traffic within that
    public subnet. Can that EC2 instance be reached via the Internet?

    1. AYes
    2. BYes, as long as it has a public IPv4 address.
    3. CYes, as long as the VPC is marked as public.
    4. DNo
20. 20You have a public subnet within your VPC. Within that subnet are three instances, each
    running a web-accessible API. Two of the instances are responding to requests from Internet
    clients, but one is not. What could be the problem?

    1. AThe VPC needs to be marked as public-facing.
    2. BThe three instances should be moved into an Auto Scaling group.
    3. CThere is no internet gateway available for the VPC.
    4. DThe unavailable instance needs an elastic IP.

Descripción

(AWS - Practice Book Domain 3) AWS Test sobre Domain 3.5, creado por Fausto Trindade el 03/03/2020.

Autor

Fausto Trindade

Idioma

Português

Visitas

0

Etiquetas

awsaws - practice book domain 3

Valoración

Aún sin valoraciones

Valora este test

Valora este test

Más sobre Cloud Network Security