CCP AWS Core Infrastructure Services 2 — Questions and Answers
Question 1: Which AWS networking component acts as a virtual firewall controlling inbound and outbound traffic at the instance level?
- Network ACL
- Security Group (Correct answer)
- Internet Gateway
- Route Table
Correct answer: Security Group
Security Groups act as stateful virtual firewalls at the EC2 instance level, automatically allowing return traffic for allowed outbound connections.
Question 2: What is the key difference between a Security Group and a Network ACL in AWS?
- Security Groups are stateless; NACLs are stateful
- Security Groups are stateful; NACLs are stateless (Correct answer)
- Both are stateless
- Both are stateful
Correct answer: Security Groups are stateful; NACLs are stateless
Security Groups are stateful (return traffic is automatically allowed), while Network ACLs are stateless (you must explicitly allow both inbound and outbound traffic).
Question 3: Which AWS service distributes incoming application traffic across multiple EC2 instances, containers, or IP addresses?
- Amazon Route 53
- AWS Auto Scaling
- Elastic Load Balancing (Correct answer)
- AWS Global Accelerator
Correct answer: Elastic Load Balancing
Elastic Load Balancing automatically distributes incoming traffic across healthy targets in one or more Availability Zones to improve availability.
Question 4: Which Amazon VPC component allows instances in a private subnet to access the internet without exposing them to inbound internet traffic?
- Internet Gateway
- NAT Gateway (Correct answer)
- Bastion Host
- VPN Gateway
Correct answer: NAT Gateway
A NAT Gateway allows outbound internet access for instances in private subnets while preventing the internet from initiating connections to those instances.
Question 5: Which AWS service is a globally distributed DNS service that routes end users to the nearest AWS endpoint?
- AWS CloudFront
- Elastic Load Balancing
- Amazon Route 53 (Correct answer)
- AWS Global Accelerator
Correct answer: Amazon Route 53
Amazon Route 53 is a highly available DNS service that translates domain names to IP addresses and supports routing policies like latency-based and geolocation routing.
Question 6: Which AWS service is a content delivery network (CDN) that caches content at edge locations worldwide?
- Amazon Route 53
- AWS Global Accelerator
- Amazon CloudFront (Correct answer)
- AWS Direct Connect
Correct answer: Amazon CloudFront
Amazon CloudFront caches content at over 400 edge locations globally to reduce latency and deliver content faster to end users.
CCP AWS Core Infrastructure Services 2
Which AWS networking component acts as a virtual firewall controlling inbound and outbound traffic at the instance level?