CLF-C02 Networking 4

Question 1

Which type of VPC subnet is directly accessible from the internet because its route table contains a route to an Internet Gateway?

Accepted Answer

Public subnet

Answer

A public subnet has a route in its route table that points to an Internet Gateway, allowing resources with public IP addresses to communicate with the internet.

Question 2

AWS Security Groups act as virtual firewalls. What is a key characteristic that differentiates them from Network ACLs?

Accepted Answer

Security groups are stateful and track connection state

Answer

Security groups are stateful, meaning if you allow inbound traffic on a port, the return traffic is automatically allowed without needing an explicit outbound rule.

Question 3

A company needs to connect multiple branch offices and VPCs using a single managed service that scales elastically. Which AWS service best fits this requirement?

Accepted Answer

AWS Transit Gateway

Answer

AWS Transit Gateway is a managed network transit hub that connects VPCs and on-premises networks, simplifying network architecture by eliminating complex peering meshes.

Question 4

What does an Elastic IP address provide in AWS networking?

Accepted Answer

A static, public IPv4 address that can be quickly remapped to another instance

Answer

An Elastic IP address is a static, public IPv4 address that remains associated with your AWS account and can be rapidly remapped to a different instance to mask failures.

Question 5

Which AWS networking service would you use to inspect and filter traffic between your VPCs and the internet using third-party virtual appliances?

Accepted Answer

Gateway Load Balancer

Answer

Gateway Load Balancer enables deployment, scaling, and management of third-party virtual network appliances (like firewalls and IDS/IPS) transparently inline.

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

CLF-C02 Networking 4