Domain 3.6

1. 1Which of the following are allowed when creating a new VPC? (Choose two.)

   1. AAn IPv4 CIDR block
   2. BVPC description
   3. CAn IPv6 CIDR block
   4. DA security group
2. 2Which of the following is not a required part of creating a custom VPC? (Choose two.)

   1. AAn IPv6 CIDR block
   2. BA VPC name
   3. CA set of VPC tags
   4. DAn IPv4 CIDR block
3. 3Which of the following defines a subnet as a public subnet? (Choose two.)

   1. AA security group that allows inbound public traffic
   2. BA routing table that routes traffic through the internet gateway
   3. CInstances with public IP addresses
   4. DAn internet gateway
4. 4Which of the following defines a VPN-only subnet? (Choose two.)

   1. AA routing table that routes traffic through the internet gateway
   2. BA routing table that routes traffic through the virtual private gateway
   3. CA virtual private gateway
   4. DAn internet gateway
5. 5Which of the following are required components in a VPN-only subnet? (Choose two.)

   1. AA routing table
   2. BA virtual private gateway
   3. CAn elastic IP address
   4. DAn internet gateway
6. 6By default, how many VPCs can you create per region?

   1. A1
   2. B5
   3. C20
   4. D200
7. 7By default, how many subnets can you create per VPC?

   1. A1
   2. B5
   3. C20
   4. D200
8. 8By default, how many IPv4 CIDR blocks can you create per VPC?

   1. A1
   2. B2
   3. C20
   4. D200
9. 9By default, how many elastic IPs can you create per region?

   1. A1
   2. B5
   3. C20
   4. D200
10. 10Which of the following is not true? (Choose two.)

    1. AA subnet can have the same CIDR block as the VPC within which it exists.
    2. BA subnet can have a larger CIDR block than the VPC within which it exists.
    3. CA subnet can have a smaller CIDR block than the VPC within which it exists.
    4. DA subnet does not have to have a CIDR block specified.

11. 11A VPC peering connection connects a VPC to which of the following?

    1. AA subnet within another VPC
    2. BA specific instance within another VPC
    3. CAnother VPC
    4. DA virtual private gateway
12. 12An Amazon VPC VPN connection links your on-site network to which of the following?

    1. AA customer gateway
    2. BAn internet gateway
    3. CAn Amazon VPC
    4. DA virtual private gateway
13. 13Which of the following are required for a VPC VPN connection? (Choose two.)

    1. AA customer gateway
    2. BAn internet gateway
    3. CA virtual private gateway
    4. DA public subnet
14. 14Which of the following would you use to secure a VPC and its instances? (Choose two.)

    1. AA customer gateway
    2. BA NACL
    3. CA virtual private gateway
    4. DA security group
15. 15You want to ensure that no incoming traffic reaches any instances in your VPC. Which of
    the following is your best option to prevent this type of traffic?

    1. AA blacklist
    2. BA NACL
    3. CA virtual private gateway
    4. DA security group
16. 16You want to ensure that no incoming traffic reaches just the database instances in a particular
    subnet within your VPC. Which of the following is your best option to prevent this
    type of traffic?

    1. AA blacklist
    2. BA NACL
    3. CA virtual private gateway
    4. DA security group
17. 17You have a subnet with five instances within it. Two are serving public APIs and three are
    providing backend compute power through database instances. What is the best way to
    secure these instances? (Choose two.)

    1. AApply NACLs at the subnet level.
    2. BAttach a single security group to all the instances.
    3. CMove the two backend database instances into a different subnet.
    4. DAttach an internet gateway to the VPC.
18. 18Security groups operate most like which of the following?

    1. AA blacklist
    2. BA NACL
    3. CA whitelist
    4. DA greylist
19. 19If you have a NACL and a security group, at what two levels is security functioning?
    (Choose two.)

    1. AThe VPN level
    2. BThe service level
    3. CThe subnet level
    4. DThe instance level
20. 20What type of filtering does a security group perform?

    1. AStateful
    2. BSynchronous
    3. CWhitelist
    4. DStateless

Descrição

AWS (AWS - Practice Book Domain 3) Quiz sobre Domain 3.6, criado por Fausto Trindade em 03-03-2020.

Autor

Fausto Trindade

Idioma

Português

Visualizações

2

Etiquetas

awsaws - practice book domain 3

Avaliação

Ainda sem avaliações

Avalie este quiz

Avalie este quiz

Mais sobre Cloud Virtual Networks