Quiz
Chapter 4 - 13 Amazon Virtual Private Cloud
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (20)
1What is the range of allowed IPv4 prefix lengths for a VPC CIDR block?
- A/16 to /28
- B/16 to /56
- C/8 to /30
- D/56 only
2You’ve created a VPC with the CIDR 192.168.16.0/24. You want to assign a secondary
CIDR to this VPC. Which CIDR can you use?- A172.31.0.0/16
- B192.168.0.0/16
- C192.168.0.0/24
- D192.168.16.0/23
3You need to create two subnets in a VPC that has a CIDR of 10.0.0.0/16. Which of the following
CIDRs can you assign to one of the subnets while leaving room for an additional
subnet? (Choose all that apply.)- A10.0.0.0/24
- B10.0.0.0/8
- C10.0.0.0/16
- D10.0.0.0/23
4What is the relationship between a subnet and an availability zone?
- AA subnet can exist in multiple availability zones.
- BAn availability zone can have multiple subnets.
- CAn availability zone can have only one subnet.
- DA subnet’s CIDR is derived from its availability zone.
5Which is true regarding an elastic network interface?
- AIt must have a private IP address from the subnet that it resides in.
- BIt cannot exist independently of an instance.
- CIt can be connected to multiple subnets.
- DIt can have multiple IP addresses from different subnets.
6What is true of security groups?
- AOnly one security group can be attached to an ENI.
- BA security group must always be attached to an ENI.
- CA security group can be attached to a subnet.
- DEvery VPC contains a default security group.
7How does a NACL differ from a security group?
- AA NACL is stateless.
- BA NACL is stateful.
- CA NACL is attached to an ENI.
- DA NACL can be associated with only one subnet.
8What is an Internet gateway?
- AA resource that grants instances in multiple VPCs’ Internet access
- BAn implied router
- CA physical router
- DA VPC resource with no management IP address
9What is the destination for a default IPv4 route?
- A0.0.0.0/0
- B::0/0
- CAn Internet gateway
- DThe IP address of the implied router
10You create a new route table in a VPC but perform no other configuration on it. You then
create a new subnet in the same VPC. Which route table will your new subnet be associated
with?- AThe main route table
- BThe route table you created
- CThe default route table
- DNone of these
11You create a Linux instance and have AWS automatically assign a private IP address but not
a public IP address. What will happen when you stop and restart the instance?- AYou won’t be able to SSH directly to the instance from the Internet.
- BThe instance won’t be able to access the Internet.
- CThe instance will receive the same private IP address.
- DThe instance will be unable to reach other instances in its subnet.
12How can you assign a public IP address to a running instance that doesn’t have one?
- AAllocate an ENI and associate it with the instance’s primary EIP.
- BAllocate an EIP and associate it with the instance’s primary ENI.
- CConfigure the instance to use an automatically assigned public IP.
- DAllocate an EIP and change the private IP address of the instance’s ENI to match.
13When an instance with an automatically assigned public IP sends a packet to another
instance’s EIP, what source address does the destination instance see?- AThe public IP
- BThe EIP
- CThe private IP
- D0.0.0.0
14Why must a NAT device reside in a different subnet than an instance that uses it?
- ABoth must use different default gateways.
- BBoth must use different NACLs.
- CBoth must use different security groups.
- DThe NAT device requires a public interface and a private interface.
15Which is a difference between a NAT instance and NAT gateway?
- AA NAT gateway scales automatically.
- BA NAT instance scales automatically.
- CA NAT gateway can span multiple availability zones.
- DThere are different NAT gateway types.
16Which VPC resource performs network address translation?
- AInternet gateway
- BRoute table
- CEIP
- DENI
17What must you do to configure a NAT instance after creating it?
- ADisable the source/destination check on its ENI.
- BEnable the source/destination check on its ENI.
- CCreate a default route in its route table with a NAT gateway as the target.
- DAssign a primary private IP address to the instance.
18Which of the following is true regarding VPC peering?
- ATransitive routing is not supported.
- BA VPC peering connection requires a public IP address.
- CYou can peer up to three VPCs using a single peering connection.
- DYou can use a peering connection to share an Internet gateway among multiple VPCs.
19You’ve created one VPC peering connection between two VPCs. What must you do to use
this connection for bidirectional instance-to-instance communication? (Choose all that
apply.)- ACreate two routes with the peering connection as the target.
- BCreate only one default route with the peering connection as the target.
- CCreate another peering connection between the VPCs.
- DConfigure the instances’ security groups correctly.
20Which of the following is a not a limitation of inter-region VPC peering?
- AYou can’t use IPv4.
- BThe maximum MTU is 1,500 bytes.
- CIt’s not supported in some regions.
- DYou can’t use IPv6.
Information
- Description
- AWS (AWS - Study Book) Quiz on Chapter 4 - 13 Amazon Virtual Private Cloud, created by Fausto Trindade on 26/01/2020.
- Author
- Fausto Trindade
- Language
- Português
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz