Quiz
Domain 3.4
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (20)
1How many security groups can you attach to a single instance in a VPC?
- ANone, security groups aren’t attached to instances.
- B1
- C1 or more
- D2 or more
2Which of the following can be added to a VPC, in addition to security groups on included
instances, to further secure the VPC?- AA NACL
- BA port filter
- CAn ALB
- DA flow log
3Which of the following statements is true about a custom, user-created NACL?
- AA NACL by default allows all traffic out of a VPC.
- BA NACL by default allows all traffic into a VPC.
- CA NACL is a virtual firewall for associated subnets.
- DA NACL functions at the instance level.
4What do you use to permit and restrict control of a NACL?
- AVPC
- BWAF
- CAWS Organizations
- DIAM
5Which of these are true about security groups? (Choose two.)
- ASupport allow and deny rules
- BEvaluate all rules before deciding whether to allow traffic
- COperate at the instance level
- DApply to all instances in the associated subnet
6Which of these are true about security groups? (Choose two.)
- AStateful
- BStateless
- CProcess rules in order
- DAssociated with an instance
7Which of these are true about NACLs? (Choose two.)
- AStateful
- BStateless
- CProcess rules in order
- DAssociated with an instance
8Which of these are true about NACLs? (Choose two.)
- AApply to all instances in an associated subnet
- BOnly apply if no security group is present
- CSupport allow and deny rules
- DEvaluate all rules before deciding whether to allow or disallow traffic
9In which order are NACLs and security groups evaluated?
- ANACLs and security groups are evaluated in parallel.
- BA NACL is evaluated first, and then the security group.
- CA security group is evaluated first, and then the NACL.
- DIt depends on the VPC setup.
10Which of these statements are true? (Choose two.)
- AA security group can apply to two instances at the same time.
- BA NACL applies to all instances within a subnet at the same time.
- CA security group can apply to only one instance at the same time.
- DA NACL can apply to only one instance at the same time.
11With which of the following is a NACL associated?
- AAn instance
- BA subnet
- CA VPC
- DA NACL can be associated with all of these.
12Which of the following are true about the default NACL that comes with the default
VPC? (Choose two.)- AIt allows all inbound traffic.
- BIt allows all outbound traffic.
- CIt disallows all inbound traffic.
- DIt disallows all outbound traffic.
13Which of the following are true about a user-created NACL? (Choose two.)
- AIt allows all inbound traffic.
- BIt allows all outbound traffic.
- CIt disallows all inbound traffic.
- DIt disallows all outbound traffic.
14In which order are rules in a NACL evaluated?
- AFrom low to high, using the number on the rule
- BFrom high to low, using the number on the rule
- CFrom low to high, using the port of the rule
- DFrom high to low, using the port of the rule
15Which of the following statements is not true? (Choose two.)
- AA network ACL has separate inbound and outbound rules.
- BNetwork ACLs are stateful.
- CEach subnet in your VPC must be associated with a NACL.
- DA network ACL can only be associated with a single subnet.
16With how many subnets can a NACL be associated?
- AOne
- BOne or more
- CA NACL is associated with instances, not subnets.
- DA NACL is associated with VPCs, not subnets.
17With how many NACLs can a subnet be associated?
- AOne
- BOne or more
- CA subnet is associated with security groups, not NACLs.
- DA subnet is associated with VPCs, not NACLs.
18What happens when you associate a NACL with a subnet that already is associated with a
different NACL?- ANothing, both NACLs are associated with the subnet.
- BYou receive an error. You must remove the first NACL to associate the new one.
- CYou receive an error. You must first merge the two NACLs to apply them to a subnet.
- DThe new NACL replaces the previous NACL, and the subnet still only has one NACL
association.
19Which of the following are part of a network ACL rule? (Choose two.)
- AAn ASCII code
- BA rule number
- CAn IAM group
- DA protocol
20Which of the following are part of a network ACL rule? (Choose two.)
- AAn ALLOW or DENY specification
- BA CIDR range
- CAn IP address
- DA VPC identifier
Information
- Description
- AWS (AWS - Practice Book Domain 3) Quiz on Domain 3.4, created by Fausto Trindade on 03/03/2020.
- Author
- Fausto Trindade
- Language
- Português
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz