Virtual Private Clouds (VPC) CSE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   At what level do security groups apply in a VPC?

   • AAccount level
   • BVPC level
   • CSubnet level
   • DInstance level (or network interface level)
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is a key characteristic of a security group in a cloud VPC?

   • AIt is stateless, requiring explicit rules for both inbound and outbound traffic.
   • BIt is stateful, meaning return traffic is automatically allowed regardless of outbound rules.
   • CIt operates at the subnet level, filtering all traffic entering and leaving the subnet.
   • DIt automatically blocks all traffic by default, including traffic from within the same security group.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the primary purpose of VPC flow logs?

   • ATo block malicious traffic before it reaches instances.
   • BTo provide a real-time alert when a security breach occurs.
   • CTo capture information about IP traffic going to and from network interfaces in a VPC.
   • DTo automatically encrypt traffic between instances.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is a requirement for establishing a VPC peering connection?

   • AThe CIDR blocks of the two VPCs must not overlap.
   • BBoth VPCs must have internet gateways attached.
   • CBoth VPCs must be in the same region.
   • DBoth VPCs must use the same cloud provider.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   At what level do network ACLs provide traffic filtering in a VPC?

   • AInstance level
   • BSubnet level
   • CVPC level
   • DRegion level
   Reveal Solution Discussion Select an answer first