MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What best describes a Virtual Private Cloud (VPC) in cloud computing?
a. A physically isolated section of a cloud provider’s data center
b. A dedicated physical server for each customer
c. A logically isolated environment within a public cloud
d. A serverless cloud resource
Answer: c. A logically isolated environment within a public cloudai21+2
Which core components are usually found in a VPC?
a. File systems, load balancers, auto scaling groups
b. Subnets, routing tables, gateways, firewall rules
c. Containers, blobs, and object stores
d. Only virtual machines
Answer: b. Subnets, routing tables, gateways, firewall rulesaws.amazon+1
What feature allows resources in a VPC to communicate with the internet?
a. Subnet mapping
b. Internet Gateway
c. NAT Gateway
d. VPN endpoint
Answer: b. Internet Gatewayaws.amazon
What is the main benefit of using a VPC compared to public cloud resources?
a. Lower latency due to physical proximity
b. Enhanced logical isolation and network security
c. Increased storage capacity
d. Better graphical performance
Answer: b. Enhanced logical isolation and network securitykentik+2
In AWS, a VPC spans how many regions?
a. One region
b. Multiple regions by default
c. All global locations
d. Only two availability zones
Answer: a. One regionaws.amazon
What networking element in a VPC controls outbound and inbound traffic at the subnet level?
a. Security Groups
b. Routing Tables
c. Network Access Control Lists (NACLs)
d. Elastic Load Balancers
Answer: c. Network Access Control Lists (NACLs)kentik+1
Which AWS service lets users establish secure connectivity between an on-premises network and a VPC?
a. Amazon RDS
b. VPC Peering
c. AWS VPN
d. Amazon S3
Answer: c. AWS VPNaws.amazon
What enables private connectivity for AWS resources without going through the public internet?
a. VPC endpoint
b. Internet Gateway
c. Elastic IP
d. Route 53
Answer: a. VPC endpointaws.amazon
Subnets in a VPC can be:
a. Only private
b. Only public
c. Public, private, or both
d. Global by default
Answer: c. Public, private, or bothaws.amazon
What is VPC peering?
a. Connecting two VPCs to route traffic securely
b. Peering with external clouds
c. Sharing public IP blocks
d. Migrating VMs between VPCs
Answer: a. Connecting two VPCs to route traffic securelykentik+1
A VPC’s default DHCP option set is used for:
a. Assigning private DNS suffixes
b. Controlling HTTP requests
c. Encrypting storage volumes
d. Defining security groups
Answer: a. Assigning private DNS suffixesaws.amazon
What helps inspect and filter packets that travel within a VPC?
a. VPC Flow Logs
b. IAM Roles
c. Auto Scaling
d. S3 Audit Logs
Answer: a. VPC Flow Logsaws.amazon
Which AWS feature allows monitoring of network traffic for security analysis in a VPC?
a. CloudWatch
b. VPC Flow Logs
c. Elastic Load Balancer logs
d. Trusted Advisor
Answer: b. VPC Flow Logsaws.amazon
The CIDR block in a VPC defines:
a. The available IP address range in the VPC
b. Only the public IP addresses
c. Only the number of subnets
d. The compute instance type
Answer: a. The available IP address range in the VPCkentik+1
What is a Transit Gateway in the context of VPCs?
a. A centralized hub for connecting multiple VPCs and remote networks
b. A specialized subnet for routing
c. A security gateway for outbound traffic
d. A backup internet connection
Answer: a. A centralized hub for connecting multiple VPCs and remote networksaws.amazon
Which method grants resources in one VPC access to resources in another VPC, but does not allow transitive peering?
a. VPC chaining
b. VPC Peering
c. Virtual Routing
d. Shared Subnets
Answer: b. VPC Peeringcloud.google+1
What network device is required for connecting multiple VPCs and supporting hybrid architectures?
a. NAT Gateway
b. Transit Gateway
c. S3 Gateway
d. Elastic IP
Answer: b. Transit Gatewayaws.amazon
What type of subnets are required to deploy public-facing resources in a VPC?
a. Private subnets only
b. Both private and public subnets
c. Public subnets with internet gateway
d. NAT-only subnets
Answer: c. Public subnets with internet gatewayaws.amazon
Which service does an organization use to connect their on-premises network directly to AWS bypassing the public internet?
a. AWS Direct Connect
b. VPC Peering
c. CloudTrail
d. AWS IAM
Answer: a. AWS Direct Connectaws.amazon
The primary role of NAT Gateway in a VPC is to:
a. Enable instances in a private subnet to connect to the internet
b. Host static websites
c. Assign Elastic IP addresses to all resources
d. Control subnet routing
Answer: a. Enable instances in a private subnet to connect to the internetaws.amazon
What is the purpose of security groups in VPC?
a. Network isolation at the subnet level
b. Instance-level virtual firewall
c. Traffic routing automation
d. Subnet scaling
Answer: b. Instance-level virtual firewallaws.amazon
How can you achieve redundancy and high availability within a VPC?
a. Place all resources in a single AZ
b. Use multiple AZs and subnets
c. Only use public gateways
d. Increase CIDR block range
Answer: b. Use multiple AZs and subnetsaws.amazon
Can an Elastic IP be associated with a resource inside a VPC?
a. Only with NAT gateway
b. Yes, with eligible EC2 instances or network interfaces
c. Only once per VPC
d. Only with S3 buckets
Answer: b. Yes, with eligible EC2 instances or network interfacesaws.amazon
Traffic between subnets in a VPC is allowed by default unless restricted by:
a. Security groups and NACLs
b. DNS settings only
c. Route tables only
d. IAM roles
Answer: a. Security groups and NACLsaws.amazon
Which of the following can be used to privately connect VPCs to supported AWS services?
a. VPC Endpoints
b. Security Groups
c. IAM Policies
d. Direct Connect
Answer: a. VPC Endpointsaws.amazon
What is VPC mirroring typically used for?
a. Copying network traffic for deep packet inspection
b. Cloning EC2 instances
c. Synchronizing subnets across regions
d. Scaling storage automatically
Answer: a. Copying network traffic for deep packet inspectionaws.amazon
What is the advantage of multi-tier architecture within a VPC?
a. Greater cost efficiency only
b. Logical segregation and enhanced security
c. Eliminates the need for subnets
d. Faster route propagation
Answer: b. Logical segregation and enhanced securitynordlayer+2
What is the default traffic access rule for new security groups in AWS VPC?
a. Allow all inbound and outbound traffic
b. Deny all inbound, allow all outbound
c. Allow all traffic
d. Deny all outbound, allow all inbound
Answer: b. Deny all inbound, allow all outboundaws.amazon
Which is not a typical use case for VPCs?
a. Web hosting with private database backends
b. Isolating sensitive workloads
c. Large scale image rendering
d. Private hybrid cloud networking
Answer: c. Large scale image renderingai21+1
Which AWS resource can span only a single Availability Zone within a VPC?
a. VPC itself
b. Subnet
c. Internet Gateway
d. Route Table
Answer: b. Subnetaws.amazon
VPC peering cannot:
a. Transmit traffic between non-overlapping CIDR blocks
b. Be transitive (VPC A–B, B–C does not imply A–C)
c. Cross regions
d. Allow bidirectional connectivity
Answer: b. Be transitive (VPC A–B, B–C does not imply A–C)cloud.google+1
Which natively supports network segmentation within a single VPC?
a. Multiple route tables and subnets
b. Multiple VPCs
c. Internet Gateways only
d. Direct Connect
Answer: a. Multiple route tables and subnetsaws.amazon
How are public IP addresses typically allocated to resources inside a VPC?
a. Automatically to every subnet
b. Must be allocated to resources in public subnets only
c. Assigned by AWS IAM
d. All resources get public IPs by default
Answer: b. Must be allocated to resources in public subnets onlyaws.amazon
VPC flow logs can capture:
a. HTTP request bodies
b. Network traffic metadata for interfaces, subnets, or VPC
c. CloudTrail actions
d. S3 access logs
Answer: b. Network traffic metadata for interfaces, subnets, or VPCaws.amazon
What ensures that a subnet within a VPC has unique network access?
a. Security Group configuration
b. Unique subnet CIDR block
c. Internet Gateway attachment
d. VPC Endpoint
Answer: b. Unique subnet CIDR blockaws.amazon
A shared services VPC model refers to:
a. A VPC dedicated to host resources like authentication and directory services for consuming VPCs
b. VPC that shares subnet with another account
c. VPC peering across accounts
d. Using NAT Gateway for shared traffic
Answer: a. A VPC dedicated to host resources like authentication and directory services for consuming VPCscloud.google
When deploying third-party security solutions, what is a key design consideration in VPC architecture?
a. Must always use public subnets
b. Resource quotas and the need for horizontally scalable security controls
c. Only deploy in a single region for consistency
d. Prefer classic networking over VPC
Answer: b. Resource quotas and the need for horizontally scalable security controlscloud.google
A transit VPC is designed to:
a. Consolidate and route connectivity between hybrid and peer VPCs
b. Host only one type of compute instance
c. Run security monitoring alone
d. Serve as a default NAT gateway
Answer: a. Consolidate and route connectivity between hybrid and peer VPCscloud.google
A typical use of VPC endpoints is for:
a. Private connectivity to AWS services without using public IPs or traversing the public internet
b. Distributing CDN content
c. Monitoring internal server health
d. Assigning static Private IPs
Answer: a. Private connectivity to AWS services without using public IPs or traversing the public internetaws.amazon
Which one is NOT a benefit of VPCs?
a. Enhanced security through isolation
b. Flexible network design
c. Guaranteed physical server allocation
d. Fine-grained access control
Answer: c. Guaranteed physical server allocationcloudflare+2
How does a VPC differ from a traditional data center environment?
a. No logical boundaries within the VPC
b. Software-defined, easily scalable, and isolated virtually rather than physically
c. Only supports public access
d. Always on-premises
Answer: b. Software-defined, easily scalable, and isolated virtually rather than physicallyai21+2
Which of these is an operational responsibility of VPC users?
a. Securing and managing subnets, security groups, and routes
b. Managing physical firewalls
c. Hardware replacement
d. Selecting undersea cables
Answer: a. Securing and managing subnets, security groups, and routesai21+1
By default, instances in a VPC:
a. Can connect to the internet without any configuration
b. Can communicate with other instances in the same subnet
c. Are isolated from each other unless explicitly allowed
d. Can access AWS services privately
Answer: b. Can communicate with other instances in the same subnetaws.amazon
VPC architecture is best suited for which scenario?
a. Large-scale isolated environments with granular network control
b. Applications demanding maximum public internet exposure
c. Only for test environments
d. Distributed blockchain mining
Answer: a. Large-scale isolated environments with granular network controlnordlayer+2
What is a subnet’s Availability Zone significance in a VPC?
a. Each subnet must be mapped to a single Availability Zone
b. Each subnet can span multiple Availability Zones
c. Each subnet maps across all regions
d. No link to physical resources
Answer: a. Each subnet must be mapped to a single Availability Zoneaws.amazon
In AWS, which resource acts as a virtual firewall at the instance level?
a. NAT gateway
b. Security group
c. Network ACL
d. Route Table
Answer: b. Security groupaws.amazon
What defines isolated network boundaries within a VPC?
a. Route Table
b. Subnets
c. Internet Gateway
d. Elastic Load Balancer
Answer: b. Subnetsaws.amazon
Which type of VPC connectivity allows multiple accounts to share resources through a central VPC?
a. Transit Gateway Peering
b. VPC Sharing
c. Classic Networking
d. Direct Connect
Answer: b. VPC Sharingcloud.google
What controls the traffic allowed to or from EC2 instances?
a. Route Table
b. Security Group
c. NAT Gateway
d. VPC Peering
Answer: b. Security Groupaws.amazon
In VPC design, what is a best practice for restricting resource exposure?
a. Only use public subnets
b. Use private subnets, tight security groups, and minimize public IP usage
c. Allow all outbound traffic
d. Remove routing tables
Answer: b. Use private subnets, tight security groups, and minimize public IP usageai21+2

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info