Skip to main content

AWS Certification Study - VPC questions Part I

1.You are going to design an application which should run in a virtual network closely resembles a traditional network that you'd operate in your own data center, with the benefits of using the scalable infrastructure of AWS. Which AWS feature allows you to define the virtual network?
    a) VGW
    b) VPC
    c) IGW
    d) Bastion Host
---------------------------------------------------------------------------------------------------------------------------
2.You have a EC2 instance which should be connected to the internet. You have created a VPC with private and public subnets. What is the best strategy to put this EC2 instance?

    a) Use public subnet for the EC2 instance
    b) Use private subnet for the EC2 instance because it is more secure
    c) Use Private subnet with Bastion host
    d) Use Private subnet with Network Gateway
---------------------------------------------------------------------------------------------------------------------------
3. A VPC spans all the Availability Zones in the region.True or False

   a) True
   b) False
--------------------------------------------------------------------------------------------------------------------------- 
 4. A Subnet spans many Availability Zones in the region. True or False?
  
    a) True
    b) False
---------------------------------------------------------------------------------------------------------------------------
5. If a subnet's traffic is routed to an internet gateway, the subnet is known as?

    a) Public Subnet
    b) Private Subnet
    c) Default Subnet
    d) Non Default Subnet
--------------------------------------------------------------------------------------------------------------------------- 
6. If a subnet doesn't have a route to the internet gateway, but has its traffic routed to a virtual private gateway for a Site-to-Site VPN connection, the subnet is known as?
 
    a) VPN-only-subnet
    b) VPC-Only-subnet
    c) VGW-only-subnet
    d) Private subnet
 ---------------------------------------------------------------------------------------------------------------------------
7. What is the maximum number of IP addresses allowed in a VPC with IPv4 CIDR block?
   
    a) 65536
    b) 32676
    c) 256
    d) 1024 
---------------------------------------------------------------------------------------------------------------------------
8. Select the VPC with maximum number of IP addresses.

    a) /16
    b) /20
    c)/28
    d) /24 
--------------------------------------------------------------------------------------------------------------------------
9. Suppose you have subnet with CIDR block 10.0.0.0/24. How many IP addresses are available for your application to use?

    a) 256
    b) 255
    c) 254
    d) 251 
--------------------------------------------------------------------------------------------------------------------------
10. Which of the following is true,
 
    a) You can create a VPC with multiple IPV4 CIDR blocks
    b) You can associate a secondary CIDR block to a VPC with one CIDR block
    c) A VPC can never have multiple CIDR blocks
    d) A VPC can have a maximum of 2 CIDR blocks
--------------------------------------------------------------------------------------------------------------------------
11. You have a subnet which should reach computers in the corporate network over the Site-to-Site VPN connection. What routing table entry should be there for your subnet?
 
    a) Route to IGW
    b) Route to NAT instance
    c) Route to NAT Gateway
    d) Route to VGW
--------------------------------------------------------------------------------------------------------------------------
12. You need to capture the traffic that flows to and from the network interfaces in your VPC or subnet. Then which log mechanism you should be using?

    a) VPC Flow logs
    b) CloudTrail
    c) CloudWatch
    d) Splunk
--------------------------------------------------------------------------------------------------------------------------
13. AWS supports Site-to-Site VPN connections over IPv6.
 
    a) True
    b) False
--------------------------------------------------------------------------------------------------------------------------
14. When you have a default VPC, each default subnet is a public subnet.
    
    a) True
    b) False
--------------------------------------------------------------------------------------------------------------------------
15. By default, each instance that you launch into a nondefault subnet has a private IPv4 address, but no public IPv4 address.  
    
    a) True    
    b) False
 --------------------------------------------------------------------------------------------------------------------------
Answers:
1)b  2)a 3)a 4)b 5)a 6) 7)a 8)a 9)b 10)b 11)d 12)a 13)b 14)a 15)a

Comments

Post a Comment

Popular posts from this blog

Create SNMP Client in JAVA Using SNMP4j

Please follow the below mentioned steps to write a very simple SNMP4J application using Java and eclipse IDE. First you need to download a copy of SNMP4J.jar. You can get it from http://www.snmp4j.org/html/download.html Then you need to decide how you are going to test your application. Check whether you have access to any real network devices like Cisco routers or Juniper routers or whether you are aware of any SNMP agent running on any of your servers.There is nothing to worry if you cannot find one , you can start SNMP agent on your desktop machine as well. Here I am giving an example of how you can use your Windows machine to test your application by starting the SNMP service on the machine. I am using a Windows XP machine and below are the steps needed to start SNMP agent on the machine. 1. Go to Start->Control Panel -> Add or Remove Programs -> Add or Remove Windows Components      Select or Check "Management and Monitoring Tools". ...
16 comments
Read more

Symantec Interview questions for the role of a Senior Software Developer C++

Below I have mentioned a few interview questions for the role of a Senior Software Engineer at Symantec. They were looking for a Senior person with mainly Windows API programming experience. I had 7 rounds of interview including a 'lunch with Manager' and a Director's interview. I have mentioned the questions below. I hope this would help some Developers looking for Symantec Interview Questions. Let me know your comments... C++/ OOPS Questions Rate yourself in C++ The interviewer wrote a  class with 2 members , a char* and a HANDLE  and asked me to complete the class. He was mainly looking for proper assignment operator and copy constructors. What is polymorphism What is abstract class and when to use abstract class How is virtual function implemented What is vptr, is vptr created per class or per object What is strlen_s() call would do? When to throw or catch an exception? Explain a few Design Patterns? Where did you use singleton and Factory patterns? ...
51 comments
Read more

How to create a minikube single node cluster for learning Kubernetes

In this post I will explain how to setup a minikube single node kubernetes cluster using AWS EC2 instance which would help anyone who is trying to learn kubernetes and also help them to gain practical knowledge in kubernetes by running kubernetes commands, creating kubernetes objects etc. Minikube is a single node kubernetes cluster which means a kubernetes cluster with only one node that is a single VM. Minikube is only used for learning purposes and it is not an alternative for a real kubernetes cluster and should not be used for development and production usage. In this example I have launched an AWS EC2 instance with below configuration where I will install minikube and related tools. AWS EC2 Instance Configuration AMI: Ubuntu Free tier eligible 64 bit Instance type : t2-large ( For me t2-small or t2-micro is giving performance issues due to less memory) Once the EC2 instance is up and running, login to the instance using below command on terminal. If you are using wi...
27 comments
Read more