CCP AWS Networking and Content Delivery 2

Question 1

What is VPC Peering?

Accepted Answer

A networking connection between two VPCs that enables routing traffic between them using private IP addresses

Answer

VPC Peering is a networking connection between two VPCs that enables you to route traffic between them using private IPv4 or IPv6 addresses, as if they were in the same network.

Question 2

How do Network Access Control Lists (NACLs) differ from Security Groups?

Accepted Answer

NACLs apply at the subnet level and are stateless, while Security Groups apply at the instance level and are stateful

Answer

NACLs act as a firewall at the subnet level and are stateless (must explicitly allow both inbound and outbound), while Security Groups operate at the instance level and are stateful (return traffic is automatically allowed).

Question 3

What is AWS Site-to-Site VPN primarily used for?

Accepted Answer

Creating an encrypted connection between an on-premises network and an AWS VPC over the public internet

Answer

AWS Site-to-Site VPN creates an encrypted IPsec tunnel between your on-premises network and your Amazon VPC over the public internet, enabling secure hybrid cloud connectivity.

Question 4

What is the function of Amazon API Gateway?

Accepted Answer

It provides a fully managed service to create, publish, maintain, monitor, and secure APIs

Answer

Amazon API Gateway is a fully managed service that makes it easy to create, publish, maintain, monitor, and secure REST, HTTP, and WebSocket APIs at any scale.

Question 5

Which type of Elastic Load Balancer operates at the connection level (Layer 4)?

Accepted Answer

Network Load Balancer

Answer

Network Load Balancer operates at the transport layer (Layer 4) and is capable of handling millions of requests per second with ultra-low latency, making it ideal for TCP/UDP traffic.

CCP - Certified Cloud Practitioner Practice Test

CCP - Certified Cloud Practitioner Practice Test

CCP AWS Networking and Content Delivery 2