Task 5.1: Implement and Optimize Networking Features and Connectivity. SOA-C03 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company has two VPCs: VPC-A (10.1.0.0/16) and VPC-B (10.2.0.0/16). They have established a VPC peering connection between them. An EC2 instance in a private subnet in VPC-A needs to communicate with an EC2 instance in a private subnet in VPC-B. The route tables for the private subnets in both VPCs have been updated with the appropriate routes for the peering connection. What else must be configured to ensure the instances can communicate?

   • ACreate a NAT gateway in VPC-A and VPC-B.
   • BEnsure the instances are in the same availability zone.
   • CUpdate the security groups attached to the instances to allow traffic from the other VPC's CIDR.
   • DAttach an internet gateway to both VPCs.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the purpose of an egress-only internet gateway in a VPC?

   • ATo allow inbound IPv6 traffic from the internet to reach instances in a public subnet.
   • BTo enable outbound IPv4 traffic from instances in a private subnet to the internet.
   • CTo enable outbound IPv6 traffic from instances in a private subnet to the internet while preventing inbound IPv6 traffic from the internet.
   • DTo provide a static IPv6 address for an EC2 instance.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is preparing for a large product launch and expects a significant increase in traffic to their application. They are concerned about potential DDoS attacks. They want a managed service that provides always-on detection and automatic inline mitigations to protect their application. Which service should they use?

   • AAWS Network Firewall
   • BAWS Shield Advanced
   • CAWS WAF
   • DAWS Shield Standard
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In a VPC, what is the function of a route table?

   • AIt determines where network traffic from a subnet is directed.
   • BIt translates private IP addresses to public IP addresses.
   • CIt filters traffic based on IP addresses and ports.
   • DIt provides a domain name resolution service for resources in the subnet.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary purpose of a NAT gateway in a VPC?

   • ATo filter traffic between subnets in the same VPC.
   • BTo enable instances in a private subnet to initiate outbound traffic to the internet while preventing inbound traffic from the internet.
   • CTo provide a static IP address for an EC2 instance in a public subnet.
   • DTo allow inbound traffic from the internet to reach instances in a private subnet.
   Reveal Solution Discussion Select an answer first