Virtual Private Clouds (VPC) CSE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary role of an internet gateway (IGW) in a VPC?

   • ATo enable communication between resources in the VPC and the public internet.
   • BTo encrypt all traffic between the VPC and on-premises networks.
   • CTo filter traffic at the subnet level using stateless rules.
   • DTo provide a private connection between two VPCs.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of creating subnets within a VPC?

   • ATo create separate VPCs that are isolated from each other.
   • BTo increase the total number of IP addresses available in the VPC beyond the original CIDR range.
   • CTo automatically assign public IP addresses to all resources in the subnet.
   • DTo segment the VPC's IP address space into smaller networks for organizational and security purposes.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has a VPC with a private subnet containing database instances. The database instances need to access an S3 bucket to store backups. The company wants to avoid sending traffic over the internet and avoid using a NAT gateway. What should they configure?

   • AUse VPC peering with another VPC that has an S3 endpoint.
   • BCreate an internet gateway and assign public IP addresses to the database instances.
   • CCreate a VPC endpoint for S3, attach it to the VPC, and add a route in the private subnet's route table pointing to the endpoint.
   • DCreate a NAT gateway in a public subnet and add a route in the private subnet's route table pointing to the NAT gateway.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a key characteristic of a network ACL in a VPC?

   • AIt is stateless, so you must define rules for both inbound and outbound traffic.
   • BIt only controls inbound traffic, not outbound traffic.
   • CIt is stateful, automatically allowing return traffic.
   • DIt applies to individual instances, not subnets.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common use case for VPC flow logs?

   • AAutomatically updating security group rules based on traffic patterns.
   • BDiagnosing why traffic is being dropped by security groups or network ACLs.
   • CEncrypting traffic between on-premises and the VPC.
   • DProviding a direct connection to the internet for private subnets.
   Reveal Solution Discussion Select an answer first