Virtual Private Clouds (VPC) CSE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security analyst suspects that an instance in a private subnet is communicating with a known malicious IP address. The analyst needs to confirm the communication and identify the source and destination ports. What should the analyst enable?

   • AVPC flow logs on the subnet or VPC, capturing accepted and rejected traffic.
   • BNetwork ACLs to log all traffic at the subnet level.
   • CSecurity group rules to log all accepted connections.
   • DAWS CloudTrail to log all API calls made by the instance.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary advantage of AWS Direct Connect over a VPN connection?

   • AIt allows multiple VPCs to be connected without any routing configuration.
   • BIt automatically encrypts all traffic without any configuration.
   • CIt is always cheaper than a VPN connection.
   • DIt provides a dedicated, private network connection that does not traverse the public internet.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the purpose of a NAT gateway in a VPC?

   • ATo enable direct inbound SSH access to instances in a private subnet.
   • BTo replace the need for security groups in the private subnet.
   • CTo provide a static public IP address for every instance in the VPC.
   • DTo allow instances in a private subnet to initiate outbound internet traffic while preventing inbound internet connections.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company has a VPC with a public subnet and a private subnet. They want to host a web server in the public subnet that is accessible from the internet. They have attached an internet gateway to the VPC. What else must they do to make the web server reachable from the internet?

   • AAssign a private IP address to the web server and add a route in the private subnet's route table pointing 0.0.0.0/0 to the internet gateway.
   • BCreate a VPC endpoint for the web server and add a route in the public subnet's route table to the endpoint.
   • CCreate a NAT gateway in the public subnet and add a route in the public subnet's route table pointing 0.0.0.0/0 to the NAT gateway.
   • DAssign a public IP address to the web server and add a route in the public subnet's route table pointing 0.0.0.0/0 to the internet gateway.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the purpose of a VPN connection in a VPC context?

   • ATo allow instances in a private subnet to access the internet.
   • BTo provide a dedicated, private physical connection to the cloud.
   • CTo connect two VPCs within the same region.
   • DTo securely connect an on-premises network to a VPC over the public internet using encrypted tunnels.
   Reveal Solution Discussion Select an answer first