Virtual Private Clouds (VPC) CSE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the purpose of VPC peering?

   • ATo allow a VPC to access cloud services without using the internet.
   • BTo connect a VPC to the public internet.
   • CTo enable private communication between two VPCs using their private IP addresses.
   • DTo connect a VPC to an on-premises data center.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of a Virtual Private Cloud (VPC) in a public cloud environment?

   • ATo provide a logically isolated network segment where cloud resources can be launched and managed.
   • BTo replace the need for any firewall or security controls within the cloud environment.
   • CTo provide a dedicated physical data center exclusively for a single customer.
   • DTo automatically encrypt all data stored in cloud services within the VPC.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company has two VPCs in the same region: VPC-A hosts a web application and VPC-B hosts a database. The application in VPC-A must communicate with the database in VPC-B over a private connection. The database must not be reachable from the internet. What should you do?

   • ACreate a NAT gateway in VPC-B and route traffic from VPC-A through the NAT gateway to reach the database.
   • BCreate a VPC endpoint in VPC-B and attach it to the database instances.
   • CCreate an internet gateway in VPC-B and route database traffic through the public internet to VPC-A.
   • DCreate a VPC peering connection between VPC-A and VPC-B, add routes in both VPC route tables to direct traffic to the peered VPC's CIDR, and update security groups to allow the application to reach the database.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A cloud architect needs to create a subnet within a VPC that can host 100 usable IP addresses. Which CIDR block is appropriate for this subnet?

   • A/24 (256 total IPs, 251 usable in most clouds)
   • B/30 (4 total IPs, 2 usable)
   • C/26 (64 total IPs, 59 usable)
   • D/28 (16 total IPs, 11 usable)
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A company wants to allow instances in a private subnet to download security patches from the internet. Which solution should they use?

   • AA network ACL that allows outbound traffic to the internet.
   • BA VPC peering connection to a public VPC.
   • CAn internet gateway attached directly to the private subnet.
   • DA NAT gateway or NAT instance in a public subnet with a route in the private subnet's route table.
   Reveal Solution Discussion Select an answer first