CCP AWS Networking and Content Delivery 2

Question 1

What is VPC Peering?

Accepted Answer

A networking connection between two VPCs that enables routing traffic between them using private IP addresses

Answer

A method to connect your VPC to the public internet through a managed gateway

Answer

A service that replicates your VPC configuration to multiple AWS Regions automatically

Answer

A tool that monitors network traffic between subnets for security threats

Question 2

How do Network Access Control Lists (NACLs) differ from Security Groups?

Accepted Answer

NACLs apply at the subnet level and are stateless, while Security Groups apply at the instance level and are stateful

Answer

NACLs are only used for IPv6 traffic, while Security Groups handle IPv4 traffic

Answer

NACLs require approval from AWS Support to modify, while Security Groups can be changed freely

Answer

NACLs only allow traffic rules, while Security Groups can both allow and deny traffic

Question 3

What is AWS Site-to-Site VPN primarily used for?

Accepted Answer

Creating an encrypted connection between an on-premises network and an AWS VPC over the public internet

Answer

Connecting two Amazon VPCs in different accounts using private IPs

Answer

Providing low-latency access to AWS services for mobile applications

Answer

Establishing dedicated bandwidth between AWS and a colocation facility

Question 4

What is the function of Amazon API Gateway?

Accepted Answer

It provides a fully managed service to create, publish, maintain, monitor, and secure APIs

Answer

It manages network routing between EC2 instances in different availability zones

Answer

It acts as a DNS resolver for internal AWS service endpoints

Answer

It accelerates content delivery by caching API responses at CloudFront edge locations only

Question 5

Which type of Elastic Load Balancer operates at the connection level (Layer 4)?

Accepted Answer

Network Load Balancer

Answer

Application Load Balancer

Answer

Gateway Load Balancer

Answer

Classic Load Balancer

Question 6

What is AWS Global Accelerator?

Accepted Answer

A networking service that improves application availability and performance by routing traffic through AWS global network infrastructure

Answer

A service that automatically scales EC2 instances globally based on traffic demand

Answer

A CDN service that caches static assets at AWS edge locations worldwide

Answer

A tool that optimizes SQL queries for globally distributed RDS databases

Question 7

What is a VPC Endpoint used for?

Accepted Answer

To allow private communication between a VPC and supported AWS services without requiring internet access

Answer

To expose a private application to the public internet through a managed gateway

Answer

To extend a VPC's IP address range when the original CIDR block is exhausted

Answer

To monitor and log all network traffic within a VPC for compliance purposes