AWS Certified Solutions Architect VPC Networking and Security 2

Question 1

A company needs to connect their on-premises data center to an AWS VPC with consistent, low-latency bandwidth. Which service provides a dedicated private connection?

Accepted Answer

AWS Direct Connect

Answer

AWS VPN CloudHub

Answer

AWS Transit Gateway

Answer

VPC Peering

Question 2

Which VPC feature allows you to capture and log IP traffic going to and from network interfaces in your VPC for security analysis?

Accepted Answer

VPC Flow Logs

Answer

CloudTrail Logs

Answer

AWS Config Rules

Answer

CloudWatch Metrics

Question 3

A Solutions Architect needs to allow EC2 instances in a private subnet to download software updates from the internet without being directly reachable. What should they use?

Accepted Answer

NAT Gateway

Answer

Internet Gateway

Answer

Virtual Private Gateway

Answer

Egress-Only Internet Gateway

Question 4

What is the maximum number of security groups that can be associated with a single EC2 instance's network interface?

Accepted Answer

5

Answer

2

Answer

10

Answer

16

Question 5

A company wants to restrict traffic between subnets within their VPC based on subnet-level rules. Which feature should they implement?

Accepted Answer

Network ACLs

Answer

Security Groups

Answer

IAM Policies

Answer

AWS WAF

Question 6

An application needs IPv6 connectivity for EC2 instances in a private subnet to communicate outbound to IPv6 internet resources. Which gateway should be used?

Accepted Answer

Egress-Only Internet Gateway

Answer

NAT Gateway

Answer

Internet Gateway

Answer

Virtual Private Gateway

Question 7

Which AWS service enables you to centrally manage and connect multiple VPCs and on-premises networks through a single hub?

Accepted Answer

AWS Transit Gateway

Answer

VPC Peering

Answer

AWS PrivateLink

Answer

AWS Direct Connect Gateway