Architecting on AWS Certification Networking & Content Delivery Flashcards
7 cards from real Architecting on AWS Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Architecting on AWS Certification Networking & Content Delivery flashcards as text
A company needs to connect its on-premises data center to AWS with consistent, low-latency network performance. Which service should the architect recommend?
Answer: AWS Direct Connect
AWS Direct Connect provides a dedicated private network connection from on-premises to AWS, delivering consistent low-latency performance unlike VPN which traverses the public internet.
Which VPC component controls inbound and outbound traffic at the subnet level and is stateless?
Answer: Network Access Control Lists (NACLs)
NACLs are stateless subnet-level firewalls that evaluate both inbound and outbound rules independently, unlike Security Groups which are stateful.
A solutions architect needs to route users to the nearest AWS edge location to reduce latency for a global web application. Which Route 53 routing policy should be used?
Answer: Latency-based routing
Latency-based routing directs users to the AWS region that provides the lowest network latency for their location, improving performance for global applications.
An architect wants to enable instances in a private subnet to access the internet for software updates without exposing them to inbound internet traffic. What should be deployed?
Answer: NAT Gateway in a public subnet
A NAT Gateway placed in a public subnet allows private subnet instances to initiate outbound internet connections while blocking unsolicited inbound connections.
Which AWS service allows you to privately connect your VPC to supported AWS services without requiring an internet gateway, NAT device, or VPN connection?
Answer: VPC Endpoints
VPC Endpoints (both Gateway and Interface types) enable private connectivity between your VPC and AWS services without traffic leaving the Amazon network.
A company has multiple VPCs that all need to communicate with each other and with an on-premises network. Which AWS service simplifies this hub-and-spoke network topology?
Answer: AWS Transit Gateway
AWS Transit Gateway acts as a central hub that connects multiple VPCs and on-premises networks, eliminating the complexity of managing multiple VPC peering connections.
Which CloudFront feature allows an architect to serve different content to users based on the type of device they are using (mobile vs. desktop)?
Answer: Lambda@Edge
Lambda@Edge runs serverless functions at CloudFront edge locations and can inspect request headers (like User-Agent) to customize responses based on device type.