CCP AWS Networking and Content Delivery 3

Question 1

What is a subnet in Amazon VPC?

Accepted Answer

A range of IP addresses within a VPC that resources are placed into, tied to a specific Availability Zone

Answer

A separate AWS account used to isolate workloads within an organization

Answer

A virtual router that connects multiple VPCs across different AWS Regions

Answer

A security boundary that separates development and production environments

Question 2

Which Route 53 routing policy would you use to route traffic based on the lowest network latency for end users?

Accepted Answer

Latency-based routing

Answer

Failover routing

Answer

Weighted routing

Answer

Geolocation routing

Question 3

What is AWS Transit Gateway?

Accepted Answer

A managed service that connects VPCs and on-premises networks through a central hub, simplifying the network topology

Answer

A service that translates private IP addresses to public IP addresses for internet-bound traffic

Answer

A dedicated fiber connection between an AWS Region and a corporate data center

Answer

A load balancer that distributes traffic across resources in multiple AWS Regions

Question 4

What is the difference between a public subnet and a private subnet in a VPC?

Accepted Answer

Public subnets have a route to an Internet Gateway allowing direct internet access, while private subnets do not

Answer

Public subnets use IPv6 while private subnets use IPv4 addressing

Answer

Public subnets are available to all AWS accounts while private subnets are restricted to one account

Answer

Public subnets allow all traffic by default while private subnets deny all traffic by default

Question 5

In Amazon CloudFront, what is an 'origin'?

Accepted Answer

The server or AWS service (such as S3 or an ALB) where CloudFront fetches content to cache and distribute

Answer

An AWS Region where CloudFront caches content before delivering it to users

Answer

The geographic location of the end user requesting content from CloudFront

Answer

The SSL/TLS certificate that CloudFront uses to secure connections

Question 6

What is AWS PrivateLink?

Accepted Answer

A technology that provides private connectivity between VPCs and services without exposing traffic to the public internet

Answer

A private tunnel that connects two AWS accounts using encrypted traffic over the public internet

Answer

A feature that allows Lambda functions to access resources inside a private VPC

Answer

A managed NAT service that replaces NAT Gateway for private subnet outbound access

Question 7

Which AWS networking feature allows you to capture and inspect network traffic flowing to and from network interfaces in your VPC?

Accepted Answer

VPC Flow Logs

Answer

AWS CloudTrail

Answer

AWS Config

Answer

Amazon GuardDuty