AWS Certified Solutions Architect VPC Networking and Security 2

Question 1

A company needs to connect their on-premises data center to an AWS VPC with consistent, low-latency bandwidth. Which service provides a dedicated private connection?

Accepted Answer

AWS Direct Connect

Answer

AWS Direct Connect provides a dedicated private network connection from on-premises to AWS, bypassing the public internet for consistent performance.

Question 2

Which VPC feature allows you to capture and log IP traffic going to and from network interfaces in your VPC for security analysis?

Accepted Answer

VPC Flow Logs

Answer

VPC Flow Logs capture information about IP traffic to and from network interfaces and can be published to CloudWatch Logs or S3.

Question 3

A Solutions Architect needs to allow EC2 instances in a private subnet to download software updates from the internet without being directly reachable. What should they use?

Accepted Answer

NAT Gateway

Answer

A NAT Gateway allows instances in private subnets to initiate outbound internet traffic while preventing inbound connections from the internet.

Question 4

What is the maximum number of security groups that can be associated with a single EC2 instance's network interface?

Accepted Answer

5

Answer

By default, up to 5 security groups can be associated with a single network interface, though this limit can be increased.

Question 5

A company wants to restrict traffic between subnets within their VPC based on subnet-level rules. Which feature should they implement?

Accepted Answer

Network ACLs

Answer

Network ACLs (NACLs) are stateless firewalls that control inbound and outbound traffic at the subnet level.

AWS Practice Test

AWS Practice Test

AWS Certified Solutions Architect VPC Networking and Security 2