CCP AWS Networking and Content Delivery 1 — Questions and Answers
Question 1: What is Amazon VPC (Virtual Private Cloud)?
- A managed database service for cloud applications
- A logically isolated section of the AWS Cloud where you can launch resources in a virtual network you define (Correct answer)
- A content delivery network that caches data at edge locations
- A service for managing DNS records and domain names
Correct answer: A logically isolated section of the AWS Cloud where you can launch resources in a virtual network you define
Amazon VPC lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define, giving you full control over your networking environment.
Question 2: What is the primary purpose of Amazon CloudFront?
- To provide dedicated network connections from on-premises to AWS
- To distribute incoming traffic across multiple EC2 instances
- To deliver content with low latency by caching it at globally distributed edge locations (Correct answer)
- To connect multiple VPCs together across different AWS accounts
Correct answer: To deliver content with low latency by caching it at globally distributed edge locations
Amazon CloudFront is a content delivery network (CDN) that speeds up distribution of static and dynamic web content by serving it from edge locations closest to users.
Question 3: Which AWS service functions as a highly available and scalable Domain Name System (DNS) web service?
- AWS Direct Connect
- Amazon Route 53 (Correct answer)
- Amazon CloudFront
- AWS Global Accelerator
Correct answer: Amazon Route 53
Amazon Route 53 is a scalable and highly available DNS web service that routes end users to internet applications and also supports domain registration.
Question 4: What is the role of an Internet Gateway in an Amazon VPC?
- It encrypts all traffic between subnets within a VPC
- It connects multiple VPCs together using private IP addresses
- It allows communication between instances in a VPC and the internet (Correct answer)
- It provides dedicated bandwidth between AWS and an on-premises data center
Correct answer: It allows communication between instances in a VPC and the internet
An Internet Gateway is a horizontally scaled, redundant VPC component that allows communication between instances in your VPC and the internet.
Question 5: What is a NAT Gateway used for in AWS networking?
- To allow instances in a private subnet to initiate outbound traffic to the internet while preventing inbound connections (Correct answer)
- To route traffic between two VPCs in different AWS Regions
- To inspect and filter all incoming traffic before it reaches EC2 instances
- To balance load across multiple availability zones automatically
Correct answer: To allow instances in a private subnet to initiate outbound traffic to the internet while preventing inbound connections
A NAT Gateway enables instances in a private subnet to connect to the internet or other AWS services while preventing the internet from initiating connections to those instances.
Question 6: What does AWS Direct Connect provide?
- A free tier for connecting EC2 instances within the same VPC
- A dedicated, private network connection from an on-premises data center to AWS (Correct answer)
- A managed VPN service that encrypts traffic over the public internet
- A service that automatically discovers and connects AWS resources
Correct answer: A dedicated, private network connection from an on-premises data center to AWS
AWS Direct Connect establishes a dedicated private network connection between your on-premises environment and AWS, offering consistent network performance and reduced data transfer costs compared to internet-based connections.
Question 7: What are Security Groups in AWS?
- IAM policies that control access to AWS management APIs
- Virtual firewalls that control inbound and outbound traffic for EC2 instances (Correct answer)
- Network ACLs applied at the VPC level to control subnet traffic
- Encryption keys used to secure data in transit between VPCs
Correct answer: Virtual firewalls that control inbound and outbound traffic for EC2 instances
Security Groups act as virtual firewalls for EC2 instances, controlling inbound and outbound traffic at the instance level using stateful rules.
CCP AWS Networking and Content Delivery 1
What is Amazon VPC (Virtual Private Cloud)?