AWS AWS Networking and Content Delivery 2

Question 1

Which VPC component allows instances in a private subnet to access the internet for outbound traffic without being directly reachable from the internet?

Accepted Answer

NAT Gateway

Answer

A NAT Gateway enables private subnet instances to initiate outbound IPv4 traffic while blocking inbound connections from the internet.

Question 2

What is the maximum number of IP addresses AWS reserves in every VPC subnet, making them unavailable for your instances?

Accepted Answer

5

Answer

AWS reserves 5 IP addresses in each subnet for the network address, VPC router, DNS, future use, and broadcast.

Question 3

Which feature provides a private connection between a VPC and supported AWS services without traversing the public internet?

Accepted Answer

VPC Endpoint

Answer

VPC Endpoints (Gateway or Interface) let resources reach AWS services privately without an internet gateway or NAT.

Question 4

By default, how does a network ACL differ from a security group regarding traffic state?

Accepted Answer

Network ACLs are stateless, security groups are stateful

Answer

Network ACLs are stateless so return traffic must be explicitly allowed, while security groups are stateful and automatically allow return traffic.

Question 5

Which AWS service establishes a dedicated, private physical network connection between an on-premises data center and AWS?

Accepted Answer

AWS Direct Connect

Answer

AWS Direct Connect provides a dedicated private physical link bypassing the public internet for consistent bandwidth and lower latency.

AWS Practice Test

AWS Practice Test

AWS AWS Networking and Content Delivery 2