Which of the following is an optional security control that can be applied at the subnet layer of a VPC?
A. Network ACL
B. Security Group
C. Firewall
D. Web application firewall
Answer: A
Learn More :
Amazon Virtual Private Cloud %28VPC%29
- Which Amazon VPC feature allows you to create a dual-homed instance?
- What properties of an Amazon VPC must be specified at the time of creation? (Choose 2 answers)
- Which of the following Amazon VPC resources would you use in order for EC2-VPC instances to send traffic directly to Amazon S3?
- Which of the following is the security protocol supported by Amazon VPC?
- You are responsible for your company's AWS resources, and you notice a significant amount of traffic from an IP address in a foreign country in which your company does not have customers. Further investigation of the traffic indicates the source of the traffic is scanning for open ports on your EC2-VPC instances.
- What is the default limit for the number of Amazon VPCs that a customer may have in a region?
- Which of the following is the Amazon side of an Amazon VPN connection?
- Which of the following AWS resources would you use in order for an EC2-VPC instance to resolve DNS names outside of AWS?
- How many VPC Peering connections are required for four VPCs located within the same AWS region to be able to send traffic to each of the others?
- Which of the following will occur when an Amazon Elastic Block Store (Amazon EBS)- backed Amazon EC2 instance in an Amazon VPC with an associated EIP is stopped and started? (Choose 2 answers)
- You have created a custom Amazon VPC with both private and public subnets. You have created a NAT instance and deployed this instance to a public subnet. You have attached an EIP address and added your NAT to the route table. Unfortunately, instances in your private subnet still cannot access the Internet. What may be the cause of this?
- What aspect of an Amazon VPC is stateful?
- How many IGWs can you attach to an Amazon VPC at any one time?
- You create a new VPC in US-East-1 and provision three subnets inside this Amazon VPC. Which of the following statements is true?
- What happens when you create a new Amazon VPC?
- You create a new subnet and then add a route to your route table that routes traffic out from that subnet to the Internet using an IGW. What type of subnet have you created?
- What is the maximum size IP address range that you can have in an Amazon VPC?
- You are a solutions architect working for a large travel company that is migrating its existing server estate to AWS. You have recommended that they use a custom Amazon VPC, and they have agreed to proceed. They will need a public subnet for their web servers and a private subnet in which to place their databases. They also require that the web servers and database servers be highly available and that there be a minimum of two web servers and two database servers each. How many subnets should you have to maintain high availability?
- What is the minimum size subnet that you can have in an Amazon VPC?