CCP AWS Core Infrastructure Services 2

Question 1

Which AWS networking component acts as a virtual firewall controlling inbound and outbound traffic at the instance level?

Accepted Answer

Security Group

Answer

Security Groups act as stateful virtual firewalls at the EC2 instance level, automatically allowing return traffic for allowed outbound connections.

Question 2

What is the key difference between a Security Group and a Network ACL in AWS?

Accepted Answer

Security Groups are stateful; NACLs are stateless

Answer

Security Groups are stateful (return traffic is automatically allowed), while Network ACLs are stateless (you must explicitly allow both inbound and outbound traffic).

Question 3

Which AWS service distributes incoming application traffic across multiple EC2 instances, containers, or IP addresses?

Accepted Answer

Elastic Load Balancing

Answer

Elastic Load Balancing automatically distributes incoming traffic across healthy targets in one or more Availability Zones to improve availability.

Question 4

Which Amazon VPC component allows instances in a private subnet to access the internet without exposing them to inbound internet traffic?

Accepted Answer

NAT Gateway

Answer

A NAT Gateway allows outbound internet access for instances in private subnets while preventing the internet from initiating connections to those instances.

Question 5

Which AWS service is a globally distributed DNS service that routes end users to the nearest AWS endpoint?

Accepted Answer

Amazon Route 53

Answer

Amazon Route 53 is a highly available DNS service that translates domain names to IP addresses and supports routing policies like latency-based and geolocation routing.

CCP - Certified Cloud Practitioner Practice Test

CCP - Certified Cloud Practitioner Practice Test

CCP AWS Core Infrastructure Services 2