Quiz
Domain 3.5
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (20)
1Which of the following inbound rules of a custom NACL would be evaluated first?
- ARule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW.
- BRule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW.
- CRule * // All // All // All // 0.0.0.0/0 -> DENY.
- DRule #130 // RDP // TCP // 3389 // 192.0.2.0/24 -> ALLOW.
2If all of the following inbound rules existed on a custom NACL, would SSH traffic be
allowed?
Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW
Rule * // All // All // All // 0.0.0.0/0 -> DENY
Rule #130 // RDP // TCP // 3389 // 192.0.2.0/24 -> ALLOW- ARule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
- BYes, SSH is included in the HTTPS protocol.
- COnly if the SSH access permission in IAM is granted.
- DNo
3If all of the following inbound rules existed on the default VPC’s default NACL, would
SSH traffic be allowed?
Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW- AYes, the default VPC’s default NACL allows all inbound traffic by default.
- BYes, SSH is included in the HTTPS protocol.
- COnly if the SSH access permission in IAM is granted.
- DNo
4If all of the following inbound rules existed on a custom NACL, would SSH traffic be
allowed?
Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW
Rule #140 // All // All // All // 0.0.0.0/0 -> DENY
Rule #120 // SSH // TCP // 22 // 192.0.2.0/24 -> ALLOW- AYes
- BYes, but only from the CIDR block 192.0.2.0/24.
- COnly if the SSH access permission in IAM is granted.
- DNo
5If all of the following inbound rules existed on a custom NACL, would SSH traffic be
allowed?
Rule #800 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW
Rule #100 // HTTPS // TCP // 443 // 0.0.0.0/0 -> ALLOW
Rule #110 // All // All // All // 0.0.0.0/0 -> DENY
Rule #120 // SSH // TCP // 22 // 192.0.2.0/24 -> ALLOW- AYes
- BYes, but only from the CIDR block 192.0.2.0/24.
- COnly if the SSH access permission in IAM is granted.
- DNo
6Which of the following is the most accurate statement about what the following inbound
rule on a NACL will do?
Rule #120 // SSH // TCP // 22 // 192.0.2.0/24 -> ALLOW- AAllows inbound SSH traffic to the associated subnets
- BAllows inbound TCP traffic to the associated subnets
- CAllows inbound TCP traffic to the associated subnets from the CIDR block
192.0.2.0/24 - DAllows inbound SSH traffic to the associated subnets from the CIDR block
192.0.2.0/24
7Which of the following is the most accurate statement about what the following inbound
rule on a NACL will do?
Rule #120 // HTTP // TCP // 80 // 0.0.0.0/0 -> ALLOW- AAllows inbound HTTP traffic to the associated subnets
- BAllows inbound IPv4 HTTP traffic to the associated subnets as long as it is not prevented
by lower-numbered rules - CAllows inbound IPv4 HTTP traffic to the associated subnets
- DAllows inbound IPv4 TCP traffic to the associated subnets
8What does the CIDR block 0.0.0.0/0 represent?
- AThe entire Internet
- BThe entire Internet, limited to IPv4 addresses
- CThe entire Internet, limited to IPv6 addresses
- DInbound traffic from the entire Internet
9What does the CIDR block ::/0 represent?
- AThe entire Internet
- BThe entire Internet, limited to IPv4 addresses
- CThe entire Internet, limited to IPv6 addresses
- DInbound traffic from the entire Internet
10Which of the following rules allows IPv6 outbound traffic to flow to the entire Internet
through a NAT gateway with the ID nat-123456789?- A0.0.0.0/0 -> NAT -> nat-123456789
- B::/0 -> nat-123456789
- C0.0.0.0/0 -> nat-123456789
- D::/0 -> NAT -> nat-123456789
11How many availability zones in a single region does a single VPC span?
- ANone, VPCs do not span availability zones.
- BOne
- CAt least two
- DAll of them
12Which of these must be specified when creating a new VPC? (Choose two.)
- AAn availability zone
- BA region
- CA CIDR block
- DA security group
13How many subnets can be added to an availability zone within a VPC?
- ANone
- BOne
- COne or more
- DAt least two
14To how many availability zones within a region can a single subnet in a VPC be added?
- ANone
- BOne
- COne or more
- DAt least two
15How many availability zones can a subnet span?
- ANone
- BOne
- COne or more
- DAt least two
16How many IPv6 CIDR blocks can be assigned to a single VPC?
- ANone
- BOne
- COne or more
- DAt least two
17How many IPv4 CIDR blocks can be assigned to a single VPC?
- ANone
- BOne
- COne or more
- DAt least two
18You have a VPC in US East 1 with three subnets. One of those subnets’ traffic is routed to
an internet gateway. What does this make the subnet?- AA private subnet
- BA restricted subnet
- CThe master subnet of that VPC
- DA public subnet
19You have a public subnet in a VPC and an EC2 instance serving web traffic within that
public subnet. Can that EC2 instance be reached via the Internet?- AYes
- BYes, as long as it has a public IPv4 address.
- CYes, as long as the VPC is marked as public.
- DNo
20You have a public subnet within your VPC. Within that subnet are three instances, each
running a web-accessible API. Two of the instances are responding to requests from Internet
clients, but one is not. What could be the problem?- AThe VPC needs to be marked as public-facing.
- BThe three instances should be moved into an Auto Scaling group.
- CThere is no internet gateway available for the VPC.
- DThe unavailable instance needs an elastic IP.
Information
- Description
- AWS (AWS - Practice Book Domain 3) Quiz on Domain 3.5, created by Fausto Trindade on 03/03/2020.
- Author
- Fausto Trindade
- Language
- Português
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz