Networking & Content Delivery

Question 1

Which VPC component allows instances in a public subnet to connect to the Internet?

Accepted Answer

Internet Gateway (IGW)

Answer

NAT Gateway

Answer

VPC Endpoint

Answer

VPN Gateway

Question 2

What are the two layers of virtual firewalls available in Amazon VPC? (Select TWO)

Accepted Answer

Answer

AWS WAF

Answer

Security Groups

Answer

Network ACLs

Answer

AWS Shield

Answer

Route Tables

Question 3

Which AWS service is used to manage DNS records and route end-user traffic to applications?

Accepted Answer

Amazon Route 53

Answer

AWS Direct Connect

Answer

Amazon CloudFront

Answer

AWS Global Accelerator

Question 4

A company needs to connect its on-premises data center to AWS using a private, dedicated network connection that does not traverse the public internet. Which service should they use?

Accepted Answer

AWS Direct Connect

Answer

AWS Site-to-Site VPN

Answer

Amazon VPC Peering

Answer

Internet Gateway

Question 5

Which features correctly describe Security Groups? (Select TWO)

Accepted Answer

Answer

Operate at the subnet level

Answer

Are Stateful

Answer

Support Deny rules

Answer

Operate at the instance level

Answer

Are Stateless

Question 6

Which service enables delivering content (images, videos, APIs) to users globally with low latency and high transfer speeds?

Accepted Answer

Amazon CloudFront

Answer

Amazon S3 Glacier

Answer

AWS Global Accelerator

Answer

Amazon Connect

Question 7

You want to connect multiple VPCs and your on-premises networks to a single central gateway to simplify network management. Which service do you use?

Accepted Answer

AWS Transit Gateway

Answer

VPC Peering

Answer

Nat Gateway

Answer

AWS PrivateLink

Question 8

Which components are required to establish a Site-to-Site VPN connection between your on-premises network and AWS? (Select TWO)

Accepted Answer

Answer

Internet Gateway

Answer

Virtual Private Gateway (VGW)

Answer

Customer Gateway (CGW)

Answer

Nat Gateway

Answer

VPC Endpoint

Question 9

Which service allows private access to AWS services (like S3) from your VPC without using an internet gateway or NAT?

Accepted Answer

VPC Endpoint (AWS PrivateLink)

Answer

VPC Peering

Answer

AWS Direct Connect

Answer

VPN Gateway

Question 10

What is the primary purpose of a NAT Gateway?

Accepted Answer

Allow instances in private subnets to connect to the Internet, but prevent the Internet from connecting to them.

Answer

Provide a dedicated physical connection to AWS.

Answer

Distribute incoming traffic across multiple instances.

Answer

Cache content close to users.