Virtual Private Clouds (VPC) CSE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In a VPC, what is the typical purpose of a route with destination 0.0.0.0/0?

   • AIt routes all traffic with destinations outside the VPC CIDR to a specified gateway, such as an internet gateway.
   • BIt blocks all inbound traffic from the internet.
   • CIt allows all resources in the VPC to communicate with each other without any restrictions.
   • DIt assigns a public IP address to every resource in the VPC.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary benefit of using a VPC endpoint?

   • AIt allows private connectivity to supported cloud services without traversing the public internet.
   • BIt provides a public IP address for resources in the VPC.
   • CIt allows two VPCs to communicate with each other.
   • DIt encrypts all traffic between instances in the VPC.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a common best practice for VPC design in a multi-tier application?

   • APlace all resources in a single subnet to simplify management.
   • BAvoid using route tables to reduce configuration overhead.
   • CPlace web servers in a public subnet and database servers in a private subnet.
   • DUse the same security group for all instances to reduce complexity.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which scenario is best suited for using a VPC endpoint?

   • AAn on-premises network needs to connect to a VPC over a VPN.
   • BA web application needs to be accessible from the internet.
   • CAn instance in a private subnet needs to access a cloud storage service without using a NAT gateway or internet gateway.
   • DTwo VPCs need to share resources using private IP addresses.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company has two VPCs: VPC-A (CIDR 10.0.0.0/16) and VPC-B (CIDR 10.0.0.0/16). They want to establish VPC peering between them so that instances in VPC-A can communicate with instances in VPC-B. What is the issue?

   • AVPC peering cannot be established between VPCs with overlapping CIDR blocks.
   • BVPC peering can be established, but you must create a route in each VPC pointing to the other VPC's CIDR.
   • CVPC peering can be established, but you must use a NAT gateway to resolve the overlapping IP addresses.
   • DVPC peering can be established, but you must use security groups to allow traffic between the VPCs.
   Reveal Solution Discussion Select an answer first