AWS AWS Networking and Content Delivery 2 — Questions and Answers
Question 1: Which VPC component allows instances in a private subnet to access the internet for outbound traffic without being directly reachable from the internet?
- Internet Gateway
- NAT Gateway (Correct answer)
- VPC Peering
- Egress-only Internet Gateway
Correct answer: NAT Gateway
A NAT Gateway enables private subnet instances to initiate outbound IPv4 traffic while blocking inbound connections from the internet.
Question 2: What is the maximum number of IP addresses AWS reserves in every VPC subnet, making them unavailable for your instances?
- 2
- 3
- 5 (Correct answer)
- 8
Correct answer: 5
AWS reserves 5 IP addresses in each subnet for the network address, VPC router, DNS, future use, and broadcast.
Question 3: Which feature provides a private connection between a VPC and supported AWS services without traversing the public internet?
- VPC Endpoint (Correct answer)
- Internet Gateway
- Elastic IP
- Direct Connect Gateway
Correct answer: VPC Endpoint
VPC Endpoints (Gateway or Interface) let resources reach AWS services privately without an internet gateway or NAT.
Question 4: By default, how does a network ACL differ from a security group regarding traffic state?
- Both are stateful
- Both are stateless
- Network ACLs are stateless, security groups are stateful (Correct answer)
- Network ACLs are stateful, security groups are stateless
Correct answer: Network ACLs are stateless, security groups are stateful
Network ACLs are stateless so return traffic must be explicitly allowed, while security groups are stateful and automatically allow return traffic.
Question 5: Which AWS service establishes a dedicated, private physical network connection between an on-premises data center and AWS?
- Site-to-Site VPN
- AWS Direct Connect (Correct answer)
- Transit Gateway
- AWS Global Accelerator
Correct answer: AWS Direct Connect
AWS Direct Connect provides a dedicated private physical link bypassing the public internet for consistent bandwidth and lower latency.
Question 6: What does Amazon CloudFront use to cache content closer to end users worldwide?
- Availability Zones
- Edge locations (Correct answer)
- Local Zones
- Outposts
Correct answer: Edge locations
CloudFront caches content at globally distributed edge locations to reduce latency for end users.
Question 7: Which routing policy in Amazon Route 53 directs traffic based on the geographic location of the user's DNS resolver?
- Weighted
- Latency-based
- Geolocation (Correct answer)
- Failover
Correct answer: Geolocation
Geolocation routing answers DNS queries based on the geographic origin of the request.
AWS AWS Networking and Content Delivery 2
Which VPC component allows instances in a private subnet to access the internet for outbound traffic without being directly reachable from the internet?