Networking Flashcards
7 cards from real CLF-C02 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Networking flashcards as text
Which type of VPC subnet is directly accessible from the internet because its route table contains a route to an Internet Gateway?
Answer: Public subnet
A public subnet has a route in its route table that points to an Internet Gateway, allowing resources with public IP addresses to communicate with the internet.
AWS Security Groups act as virtual firewalls. What is a key characteristic that differentiates them from Network ACLs?
Answer: Security groups are stateful and track connection state
Security groups are stateful, meaning if you allow inbound traffic on a port, the return traffic is automatically allowed without needing an explicit outbound rule.
A company needs to connect multiple branch offices and VPCs using a single managed service that scales elastically. Which AWS service best fits this requirement?
Answer: AWS Transit Gateway
AWS Transit Gateway is a managed network transit hub that connects VPCs and on-premises networks, simplifying network architecture by eliminating complex peering meshes.
What does an Elastic IP address provide in AWS networking?
Answer: A static, public IPv4 address that can be quickly remapped to another instance
An Elastic IP address is a static, public IPv4 address that remains associated with your AWS account and can be rapidly remapped to a different instance to mask failures.
Which AWS networking service would you use to inspect and filter traffic between your VPCs and the internet using third-party virtual appliances?
Answer: Gateway Load Balancer
Gateway Load Balancer enables deployment, scaling, and management of third-party virtual network appliances (like firewalls and IDS/IPS) transparently inline.
A Network Load Balancer (NLB) operates at which OSI model layer and is optimized for which type of traffic?
Answer: Layer 4, TCP/UDP traffic with extreme performance
Network Load Balancer operates at Layer 4 (Transport Layer) and is designed to handle millions of requests per second with ultra-low latency for TCP and UDP traffic.
What is the CIDR block 10.0.0.0/16 used for when creating a VPC?
Answer: It specifies the private IP address range available within the VPC
The CIDR block (like 10.0.0.0/16) defines the private IP address space for your VPC, providing 65,536 IP addresses that can be subdivided into subnets.