Architecting on AWS Certification Networking & Content Delivery Flashcards
7 cards from real Architecting on AWS Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Architecting on AWS Certification Networking & Content Delivery flashcards as text
An architect is designing a multi-tier application and wants to ensure that database instances in the data tier are not directly accessible from the internet. What is the best approach?
Answer: Place database instances in a private subnet with no route to an Internet Gateway
Placing database instances in a private subnet ensures there is no route to the Internet Gateway, making them inaccessible from the public internet by network design.
A company wants to accelerate the transfer of large files to Amazon S3 from users worldwide. Which feature should be enabled?
Answer: S3 Transfer Acceleration
S3 Transfer Acceleration uses CloudFront's globally distributed edge locations to route uploads over optimized AWS network paths, significantly speeding up transfers from distant locations.
Which Route 53 routing policy would you use to direct a small percentage of traffic to a new application version for testing while the majority continues to the existing version?
Answer: Weighted routing
Weighted routing lets you assign numeric weights to resource record sets, allowing you to split traffic in any ratio — ideal for canary deployments or A/B testing.
An application needs to distribute incoming TCP traffic across multiple EC2 instances and requires support for static IP addresses. Which load balancer type should be used?
Answer: Network Load Balancer (NLB)
Network Load Balancer operates at Layer 4, supports static and Elastic IP addresses, and handles millions of TCP requests per second with ultra-low latency.
What is the maximum number of route tables that can be associated with a single subnet in a VPC?
Answer: One
Each subnet can be associated with only one route table at a time, though the same route table can be associated with multiple subnets.
A solutions architect needs to implement DNS failover so that traffic is automatically rerouted to a healthy endpoint when the primary endpoint becomes unavailable. Which Route 53 feature enables this?
Answer: Health checks with failover routing
Route 53 health checks continuously monitor endpoint health and, combined with failover routing policy, automatically route traffic to the secondary endpoint when the primary fails.
Which VPC feature allows two VPCs to route traffic between each other using private IPv4 or IPv6 addresses, as if they were within the same network?
Answer: VPC Peering
VPC Peering creates a networking connection between two VPCs enabling instances to communicate using private IP addresses, but it is non-transitive and limited to two VPCs per connection.