AWS CLOUD-ALCTEST31

What two attributes are supported when configuring an Amazon Virtual private gateway (VPG)? What two attributes are supported when configuring an Amazon Virtual private gateway (VPG)?

1 Mark(s)

route propagation, DHCP route propagation, DHCP
Elastic IP (EIP), public IPv4 address Elastic IP (EIP), public IPv4 address
public subnets, public IPv4 address public subnets, public IPv4 address

You have been asked to setup a VPC endpoint connection between VPC and S3 buckets for storing backups and snapshots. What AWS components are currently required when configuring a VPC endpoint? You have been asked to setup a VPC endpoint connection between VPC and S3 buckets for storing backups and snapshots. What AWS components are currently required when configuring a VPC endpoint?

1 Mark(s)

Internet gateway Internet gateway
NAT instance NAT instance
Elastic IP Elastic IP
private IP address private IP address

What VPC component provides Network Address Translation? What VPC component provides Network Address Translation?

1 Mark(s)

NAT instance NAT instance
NAT gateway NAT gateway
virtual private gateway virtual private gateway
Internet gateway Internet gateway

Refer to the network drawing. How are packets routed from private subnet to public subnet for the following web-based application with a database tier? Refer to the network drawing. How are packets routed from private subnet to public subnet for the following web-based application with a database tier?

1 Mark(s)

Internet gateway Internet gateway
custom route table custom route table
10.0.0.0/16 10.0.0.0/16
nat-instance-id nat-instance-id

What two features are available with AWS Direct Connect service? What two features are available with AWS Direct Connect service?

1 Mark(s)

internet access, extend on-premises VLANs to cloud
load balancing between Direct Connect and VPN connection
bidirectional forwarding detection (BFD), public and private AWS services
None of these None of these

What are the advantages of NAT gateway over NAT instance? What are the advantages of NAT gateway over NAT instance?

1 Mark(s)

NAT gateway is scalable, NAT gateways is a managed service
NAT gateway requires a single EC2 instance
NAT gateway translates faster NAT gateway translates faster
NAT gateway is Linux-based NAT gateway is Linux-based

How are private DNS servers assigned to an Amazon VPC? How are private DNS servers assigned to an Amazon VPC?

1 Mark(s)

not supported not supported
select nondefault VPC select nondefault VPC
select default VPC select default VPC
select EC-2 classic select EC-2 classic

What are two characteristics of an Amazon security group? A. instance level packet filtering B. deny rules only C. permit rules only D. subnet level packet filtering E. inbound only What are two characteristics of an Amazon security group? A. instance level packet filtering B. deny rules only C. permit rules only D. subnet level packet filtering E. inbound only

1 Mark(s)

A, C A, C
B, D B, D
B, E B, E
D, E D, E

What is the purpose of a local route within a VPC route table? What is the purpose of a local route within a VPC route table?

1 Mark(s)

local route is derived from the default VPC CIDR block 10.0.0.0/16
communicate between instances within the same subnet or different subnets
used to communicate between instances within the same subnet
default route for communicating between private and public subnets

What DNS attributes are configured when Default VPC option is selected? What DNS attributes are configured when Default VPC option is selected?

1 Mark(s)

DNS resolution: yes / DNS hostnames: yes
DNS resolution: yes / DNS hostnames: no DNS resolution: yes / DNS hostnames: no
DNS resolution: no / DNS hostnames: yes DNS resolution: no / DNS hostnames: yes
DNS resolution: no / DNS hostnames: no DNS resolution: no / DNS hostnames: no

What CIDR block range is supported for IPv4 addressing and subnetting within a single VPC? What CIDR block range is supported for IPv4 addressing and subnetting within a single VPC?

1 Mark(s)

/16 to /32 /16 to /32
/16 to /24 /16 to /24
/16 to /28 /16 to /28
/16 to /20 /16 to /20

What problem is caused by the fact that VPC peering does not permit transitive routing? What problem is caused by the fact that VPC peering does not permit transitive routing?

1 Mark(s)

additional VPC route tables to manage additional VPC route tables to manage
increased number of peer links required increased number of peer links required
virtual private gateway is required virtual private gateway is required
Internet gateway is required for each VPC

What is the maximum access port speed available with Amazon Direct Connect service? What is the maximum access port speed available with Amazon Direct Connect service?

1 Mark(s)

1 Gbps 1 Gbps
10 Gbps 10 Gbps
500 Mbps 500 Mbps
100 Gbps 100 Gbps

What are the DHCP option attributes used to assign private DNS servers to your VPC? What are the DHCP option attributes used to assign private DNS servers to your VPC?

1 Mark(s)

dns resolution and domain name dns resolution and domain name
hostnames and internet domain hostnames and internet domain
domain servers and domain name domain servers and domain name
domain-name-servers and domain-name domain-name-servers and domain-name

What is the management responsibility of tenants and not Amazon AWS? A. EC2 instances B. RDS C. Beanstalk D. NAT instance What is the management responsibility of tenants and not Amazon AWS? A. EC2 instances B. RDS C. Beanstalk D. NAT instance

1 Mark(s)

B B
C, D C, D
B, C B, C
A, D A, D

What statement is true of Network Access Control Lists (ACL) operation within an Amazon VPC? What statement is true of Network Access Control Lists (ACL) operation within an Amazon VPC?

1 Mark(s)

instance and subnet level packet filtering
subnet level packet filtering subnet level packet filtering
inbound only inbound only
only one ACL allowed per VPC only one ACL allowed per VPC

What AWS services are globally managed? A. IAM B. S3 C. CloudFront D. Route 53 E. DynamoDB F. WAF G. ELB What AWS services are globally managed? A. IAM B. S3 C. CloudFront D. Route 53 E. DynamoDB F. WAF G. ELB

1 Mark(s)

B,G, E B,G, E
A,C,D,F A,C,D,F
B, G B, G
E, G E, G

What is the default behavior when adding a new subnet to your VPC? What is the default behavior when adding a new subnet to your VPC?

1 Mark(s)

new subnet is associated with the main route table, new subnet is assigned from the VPC CIDR block
new subnet is associated with the custom route table, new subnet is associated with any selected route table
new subnet is assigned to the default subnet
new subnet is associated with the custom route table

When is Direct Connect a preferred solution over VPN IPsec? When is Direct Connect a preferred solution over VPN IPsec?

1 Mark(s)

fast and reliable connection fast and reliable connection
redundancy is a key requirement redundancy is a key requirement
fast and easy to deploy fast and easy to deploy
layer 3 connectivity layer 3 connectivity

What two statements correctly describe Amazon virtual private gateway? A. assign to private subnets only B. assign to public subnets only C. single virtual private gateway per VPC D. multiple virtual private gateways per VPC E. single virtual private gateway per region What two statements correctly describe Amazon virtual private gateway? A. assign to private subnets only B. assign to public subnets only C. single virtual private gateway per VPC D. multiple virtual private gateways per VPC E. single virtual private gateway per region

1 Mark(s)

B, D B, D
D, E D, E
A,C A,C
B, E B, E

What statements correctly describes Elastic Load Balancer operation? What statements correctly describes Elastic Load Balancer operation?

1 Mark(s)

spans multiple regions, assigned per subnet
assigned per EC2 instance, spans multiple regions
assigned per Auto-Scaling group, no cross-region support
spans multiple regions spans multiple regions

What are three characteristics of an Amazon Virtual Private Cloud? A. public and private IP addressing B. broadcasts C. multiple private IP addresses per network interface D. dedicated single tenant hardware only E. persistent public IP addresses F. HSRP What are three characteristics of an Amazon Virtual Private Cloud? A. public and private IP addressing B. broadcasts C. multiple private IP addresses per network interface D. dedicated single tenant hardware only E. persistent public IP addresses F. HSRP

1 Mark(s)

A,C,E A,C,E
B, D, F B, D, F
D, F D, F
B, F B, F

What is the purpose of the native VPC router? What is the purpose of the native VPC router?

1 Mark(s)

route packets across the internet route packets across the internet
route packets between private cloud instances
route packets from instances to S3 storage volumes
route packets between subnets route packets between subnets

What AWS services now support VPC endpoints feature for optimizing security? A. Kinesis B. DNS Route 53 C. S3 D. DynamoDB E. RDS What AWS services now support VPC endpoints feature for optimizing security? A. Kinesis B. DNS Route 53 C. S3 D. DynamoDB E. RDS

1 Mark(s)

B, E B, E
A,C,D A,C,D
B only B only
E only E only

How are packets forwarded between public and private subnets within VPC? How are packets forwarded between public and private subnets within VPC?

1 Mark(s)

EIP EIP
NAT NAT
main route table main route table
VPN VPN

What default configuration and components are added by AWS when Default VPC type is selected? A. Internet gateway B. virtual private gateway C. NAT instance D. security group E. DNS What default configuration and components are added by AWS when Default VPC type is selected? A. Internet gateway B. virtual private gateway C. NAT instance D. security group E. DNS

1 Mark(s)

A, D, E A, D, E
B, C B, C
C only C only
B only B only

What two features provide an encrypted (VPN) connection from VPC to an enterprise data center? What two features provide an encrypted (VPN) connection from VPC to an enterprise data center?

1 Mark(s)

Internet gateway, Amazon RDS Internet gateway, Amazon RDS
Amazon RDS Amazon RDS
Virtual private gateway, CSR 1000V router
NAT gateway NAT gateway

What two default settings are configured for tenants by AWS when Default VPC option is selected? What two default settings are configured for tenants by AWS when Default VPC option is selected?

1 Mark(s)

creates a size /20 default subnet in each Availability Zone, creates an Internet gateway
creates a main route table with local route 10.0.0.0/16
create a virtual private gateway, create a security group that explicitly denies all traffic
create a security group that explicitly denies all traffic, creates a main route table with local route 10.0.0.0/16

What two statements accurately describe Amazon VPC architecture? A. Elastic Load Balancer (ELB) cannot span multiple availability zones B. VPC does not support DMVPN connection C. VPC subnet cannot span multiple availability zones D. VPC cannot span multiple regions E. Flow logs are not supported within a VPC What two statements accurately describe Amazon VPC architecture? A. Elastic Load Balancer (ELB) cannot span multiple availability zones B. VPC does not support DMVPN connection C. VPC subnet cannot span multiple availability zones D. VPC cannot span multiple regions E. Flow logs are not supported within a VPC

1 Mark(s)

C, D C, D
A, B A, B
A, E A, E
B, E B, E

You are asked to deploy a web application comprised of multiple public web servers with only private addressing assigned. What Amazon AWS solutions enables multiple servers on a private subnet with only a single EIP required and Availability Zone redundancy? You are asked to deploy a web application comprised of multiple public web servers with only private addressing assigned. What Amazon AWS solutions enables multiple servers on a private subnet with only a single EIP required and Availability Zone redundancy?

1 Mark(s)

NAT instance NAT instance
Internet gateway Internet gateway
virtual private gateway virtual private gateway
NAT gateway NAT gateway

What is a requirement for attaching EC2 instances to on-premises clients and applications? What is a requirement for attaching EC2 instances to on-premises clients and applications?

1 Mark(s)

Amazon Virtual Private Gateway (VPN) Amazon Virtual Private Gateway (VPN)
Amazon Internet Gateway Amazon Internet Gateway
VPN Connection VPN Connection
Elastic Load Balancer (ELB) Elastic Load Balancer (ELB)

What is the IP addressing schema assigned to a default VPC? What is the IP addressing schema assigned to a default VPC?

1 Mark(s)

172.31.0.0/16 CIDR block subnetted with 172.31.0.0/20
172.16.0.0/16 CIDR block subnetted with 172.16.0.0/24
10.0.0.0/16 CIDR block subnetted with 10.0.0.0/24
172.16.0.0/24 CIDR block subnetted with 172.31.0.0/18

What are the minimum components required to enable a web-based application with public web servers and a private database tier? (select three) A. Internet gateway B. Assign EIP addressing to database instances on private subnet C. Virtual private gateway D. Assign database instances to private subnet and private IP addressing E. Assign EIP and private IP addressing to web servers on public subnet What are the minimum components required to enable a web-based application with public web servers and a private database tier? (select three) A. Internet gateway B. Assign EIP addressing to database instances on private subnet C. Virtual private gateway D. Assign database instances to private subnet and private IP addressing E. Assign EIP and private IP addressing to web servers on public subnet

1 Mark(s)

A,D,E A,D,E
B, C B, C
B only B only
C only C only

What are the advantages of Elastic IP (EIP) over AWS public IPv4 addresses? What are the advantages of Elastic IP (EIP) over AWS public IPv4 addresses?

1 Mark(s)

EIP can be reassigned, EIP is persistent
EIP is private, EIP is dynamic EIP is private, EIP is dynamic
EIP is public and private EIP is public and private
EIP is dynamic EIP is dynamic

What methods are available for creating a VPC? A. AWS management console B. AWS marketplace C. VPC wizard D. VPC console E. Direct Connect What methods are available for creating a VPC? A. AWS management console B. AWS marketplace C. VPC wizard D. VPC console E. Direct Connect

1 Mark(s)

A,C,D A,C,D
B,E B,E
E only E only
B only B only

You have enabled Amazon RDS database services in VPC1 for an application that has public web servers in VPC2. How do you connect the web servers to the RDS database instance so they can communicate considering the VPC’s are in the same region? You have enabled Amazon RDS database services in VPC1 for an application that has public web servers in VPC2. How do you connect the web servers to the RDS database instance so they can communicate considering the VPC’s are in the same region?

1 Mark(s)

VPC endpoints VPC endpoints
VPN gateway VPN gateway
path-based routing path-based routing
VPC peering VPC peering

What is the difference between VPC main route table and custom route table? What is the difference between VPC main route table and custom route table?

1 Mark(s)

VPC only creates a main route table when started
custom route table is the default custom route table is the default
custom route table is created for public subnets
custom route table is created for private subnets

What are two advantages of selecting default tenancy option for your VPC when creating it? What are two advantages of selecting default tenancy option for your VPC when creating it?

1 Mark(s)

performance and reliability performance and reliability
instance launch is faster instance launch is faster
performance and reliability, instance launch is faster
some AWS services do not work with a dedicated tenancy VPC, tenant can launch instances within VPC as default or dedicated instances

What feature requires tenants to disable source/destination check? What feature requires tenants to disable source/destination check?

1 Mark(s)

Elastic IP (EIP) Elastic IP (EIP)
data replication data replication
VPC peering VPC peering
NAT NAT

What route is used in a VPC routing table for packet forwarding to a Gateway? What route is used in a VPC routing table for packet forwarding to a Gateway?

1 Mark(s)

static route static route
10.0.0.0/16 10.0.0.0/16
tenant configured tenant configured
0.0.0.0/0 0.0.0.0/0

What are the primary advantages of VPC endpoints? (Select two) What are the primary advantages of VPC endpoints? (Select two)

1 Mark(s)

reliability reliability
Cost, security Cost, security
throughput throughput
reliability , throughput reliability , throughput

What features are not supported with VPC peering? A. overlapping CIDR blocks B. IPv6 addressing C. Gateways D. transitive routing E. RedShift F. ElastiCache What features are not supported with VPC peering? A. overlapping CIDR blocks B. IPv6 addressing C. Gateways D. transitive routing E. RedShift F. ElastiCache

1 Mark(s)

A,C,D A,C,D
B,E,F B,E,F
E, F E, F
B only B only

How is routing enabled by default within a VPC for an EC2 instance? How is routing enabled by default within a VPC for an EC2 instance?

1 Mark(s)

add a default route add a default route
main route table main route table
custom route table custom route table
must be configured explicitly must be configured explicitly

What three statements correctly describes IP address allocation within a VPC? A. EC2 instance must be terminated to reassign an IP address B. EC2 instance that is paused can reassign IP address C. EC2 instance that is stopped can reassign IP address D. private IP addresses are allocated from a pool and can be reassigned E. private IP addresses can be assigned by tenant F. VPC supports dual stack mode (IPv4/IPv6) What three statements correctly describes IP address allocation within a VPC? A. EC2 instance must be terminated to reassign an IP address B. EC2 instance that is paused can reassign IP address C. EC2 instance that is stopped can reassign IP address D. private IP addresses are allocated from a pool and can be reassigned E. private IP addresses can be assigned by tenant F. VPC supports dual stack mode (IPv4/IPv6)

1 Mark(s)

B,C,D B,C,D
B only B only
A,E,F A,E,F
B,C B,C

What configuration settings are required from the remote VPC in order to create cross-account peering? A. VPC ID B. account username C. account ID D. CMK keys E. VPC CIDR block F. volume type What configuration settings are required from the remote VPC in order to create cross-account peering? A. VPC ID B. account username C. account ID D. CMK keys E. VPC CIDR block F. volume type

1 Mark(s)

B, D, F B, D, F
D, F D, F
A, C, E A, C, E
D only D only

AWS CLOUD-ALCTEST31 - VPC : Question 1 of 45