MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What defines a private subnet in AWS?
   a. It has a direct route to an internet gateway.
   b. It allows inbound traffic from the internet.
   c. It does not have a direct route to an internet gateway.
   d. It assigns public IP addresses to all instances.
   Answer: c. It does not have a direct route to an internet gateway.aws.amazon+1​
2. Which AWS component allows instances in a private subnet to access the internet?
   a. Internet Gateway
   b. NAT Gateway
   c. VPC Endpoint
   d. Route Table
   Answer: b. NAT Gatewaytest-king+1​
3. What is the primary purpose of placing a database in a private subnet?
   a. To allow public access for reporting
   b. To reduce latency
   c. To enhance security by isolating from the internet
   d. To enable direct user access
   Answer: c. To enhance security by isolating from the internetics+1​
4. Which of the following is true about route tables in private subnets?
   a. They must have a route to an internet gateway.
   b. They typically route 0.0.0.0/0 to a NAT Gateway.
   c. They cannot have custom routes.
   d. They are not required.
   Answer: b. They typically route 0.0.0.0/0 to a NAT Gateway.aws.amazon+1​
5. What is a bastion host used for in a VPC?
   a. To serve web content
   b. To provide secure SSH access to instances in private subnets
   c. To host databases
   d. To act as a load balancer
   Answer: b. To provide secure SSH access to instances in private subnetstest-king+1​
6. Which security feature operates at the instance level in a private subnet?
   a. Network ACL
   b. Route Table
   c. Security Group
   d. Internet Gateway
   Answer: c. Security Groupics+1​
7. How are Network ACLs different from Security Groups in private subnets?
   a. NACLs are stateful; Security Groups are stateless
   b. NACLs operate at the subnet level; Security Groups at the instance level
   c. NACLs cannot block traffic
   d. Security Groups are applied to subnets
   Answer: b. NACLs operate at the subnet level; Security Groups at the instance leveltest-king+1​
8. What is the default behavior of a security group in a private subnet?
   a. Allows all inbound traffic
   b. Denies all inbound traffic by default
   c. Allows all outbound traffic by default
   d. Both b and c
   Answer: d. Both b and cics+1​
9. Which of the following is a best practice for private subnets?
   a. Deploy all instances in a single AZ
   b. Use public IPs for all instances
   c. Deploy across multiple Availability Zones
   d. Disable security groups
   Answer: c. Deploy across multiple Availability Zonesnordlayer+1​
10. What is the role of a VPC endpoint in a private subnet?
    a. To provide internet access
    b. To allow private connectivity to AWS services without NAT
    c. To replace security groups
    d. To act as a firewall
    Answer: b. To allow private connectivity to AWS services without NATtest-king+1​
11. Which IP address range is commonly used in private subnets?
    a. 192.0.2.0/24
    b. 203.0.113.0/24
    c. 192.168.0.0/16
    d. 198.51.100.0/24
    Answer: c. 192.168.0.0/16geeksforgeeks+1​
12. What happens if a private subnet lacks a route to a NAT Gateway?
    a. Instances can still access the internet
    b. Instances cannot initiate outbound internet traffic
    c. Instances receive public IPs
    d. The subnet becomes public
    Answer: b. Instances cannot initiate outbound internet trafficaws.amazon+1​
13. Which AWS service can log traffic to and from network interfaces in a private subnet?
    a. AWS Shield
    b. VPC Flow Logs
    c. CloudTrail
    d. GuardDuty
    Answer: b. VPC Flow Logsaws.amazon+1​
14. What is the minimum CIDR block size for a subnet in AWS?
    a. /24
    b. /28
    c. /16
    d. /32
    Answer: b. /28trustedinstitute+1​
15. Can a private subnet have an Internet Gateway attached directly?
    a. Yes, always
    b. No, it would make it a public subnet
    c. Only if using IPv6
    d. Only in specific regions
    Answer: b. No, it would make it a public subnetaws.amazon+1​
16. What is the purpose of subnet isolation in cloud security?
    a. To increase bandwidth
    b. To reduce costs
    c. To segment and secure resources
    d. To simplify DNS
    Answer: c. To segment and secure resourcesnordlayer+1​
17. Which of the following is NOT a subnet type in AWS?
    a. Public
    b. Private
    c. Isolated
    d. Hybrid
    Answer: d. Hybridaws.amazon+1​
18. How does a NAT Gateway enhance security in a private subnet?
    a. By allowing inbound internet traffic
    b. By hiding private IP addresses from the internet
    c. By assigning public IPs to instances
    d. By disabling encryption
    Answer: b. By hiding private IP addresses from the internettest-king+1​
19. What is required for a private subnet to access S3 privately?
    a. NAT Gateway
    b. Internet Gateway
    c. VPC Endpoint
    d. Public IP
    Answer: c. VPC Endpointics+1​
20. Which of the following can be associated with a private subnet?
    a. Elastic IP
    b. Internet Gateway
    c. Route Table
    d. Public DNS
    Answer: c. Route Tablelearn.microsoft+1​
21. What is the default network ACL behavior in a private subnet?
    a. Denies all traffic
    b. Allows all traffic
    c. Blocks only outbound traffic
    d. Requires manual configuration
    Answer: b. Allows all trafficoracle+1​
22. Which of the following is a use case for a private subnet?
    a. Hosting a public website
    b. Running a database server
    c. Deploying a load balancer
    d. Serving static content
    Answer: b. Running a database serverics+1​
23. What is the benefit of using multiple private subnets across AZs?
    a. Reduced cost
    b. High availability
    c. Faster internet access
    d. Simpler routing
    Answer: b. High availabilitynordlayer+1​
24. Which protocol is commonly used to access instances in a private subnet securely?
    a. HTTP
    b. HTTPS
    c. SSH
    d. FTP
    Answer: c. SSHtest-king+1​
25. What is the role of a security group in a private subnet?
    a. To control subnet-level traffic
    b. To act as a router
    c. To filter instance-level traffic
    d. To assign IP addresses
    Answer: c. To filter instance-level trafficics+1​
26. Can a private subnet communicate with a public subnet?
    a. No, they are completely isolated
    b. Yes, if routing and security groups allow it
    c. Only via the internet
    d. Only in the same AZ
    Answer: b. Yes, if routing and security groups allow itoracle+1​
27. What is the primary security advantage of a private subnet?
    a. Faster performance
    b. No need for firewalls
    c. No direct internet exposure
    d. Automatic encryption
    Answer: c. No direct internet exposuretest-king+1​
28. Which AWS feature allows private subnets to access AWS services without internet?
    a. NAT Instance
    b. VPC Peering
    c. VPC Endpoint
    d. Direct Connect
    Answer: c. VPC Endpointics+1​
29. What is required to update an EC2 instance in a private subnet?
    a. Public IP
    b. NAT Gateway or VPC Endpoint
    c. Internet Gateway
    d. Elastic IP
    Answer: b. NAT Gateway or VPC Endpointtest-king+1​
30. Which of the following is a best practice for NAT Gateways?
    a. Share one NAT Gateway across regions
    b. Deploy one per AZ for high availability
    c. Place in private subnets
    d. Disable logging
    Answer: b. Deploy one per AZ for high availabilitynordlayer+1​
31. What is the function of a route table in a private subnet?
    a. To assign public IPs
    b. To define traffic paths
    c. To block all traffic
    d. To replace security groups
    Answer: b. To define traffic pathsaws.amazon+1​
32. Which of the following can be a target for a route in a private subnet?
    a. Internet Gateway
    b. NAT Gateway
    c. Public IP
    d. Elastic IP
    Answer: b. NAT Gatewayaws.amazon+1​
33. What is the impact of deleting a route to a NAT Gateway in a private subnet?
    a. Instances gain public access
    b. Outbound internet access is lost
    c. Inbound traffic increases
    d. Security groups are disabled
    Answer: b. Outbound internet access is lostaws.amazon+1​
34. Which of the following is true about private subnets and IPv6?
    a. They cannot use IPv6
    b. They must have a public IPv6 address
    c. They can be IPv6-only
    d. IPv6 requires NAT
    Answer: c. They can be IPv6-onlycloud.google+1​
35. What is the purpose of subnet CIDR reservations?
    a. To block traffic
    b. To reserve IP addresses for specific use
    c. To increase subnet size
    d. To enable public access
    Answer: b. To reserve IP addresses for specific usecloud.google+1​
36. Which AWS service helps monitor traffic in private subnets?
    a. CloudFront
    b. VPC Flow Logs
    c. Route 53
    d. S3
    Answer: b. VPC Flow Logsaws.amazon+1​
37. What is a common compliance reason for using private subnets?
    a. To reduce latency
    b. To meet data isolation requirements
    c. To increase bandwidth
    d. To simplify management
    Answer: b. To meet data isolation requirementsics+1​
38. Which of the following is NOT a benefit of private subnets?
    a. Enhanced security
    b. Isolation from internet threats
    c. Direct public access
    d. Controlled outbound access
    Answer: c. Direct public accesstest-king+1​
39. How are private subnets typically accessed by administrators?
    a. Directly via public IP
    b. Through a bastion host
    c. Using public DNS
    d. Via internet gateway
    Answer: b. Through a bastion hostics+1​
40. What is the role of a security group rule allowing port 3306 in a private subnet?
    a. To enable MySQL access from authorized sources
    b. To allow HTTP traffic
    c. To block all database traffic
    d. To enable FTP
    Answer: a. To enable MySQL access from authorized sourcesstudocu+1​
41. Which of the following is a characteristic of a stateless firewall in a private subnet?
    a. Security Group
    b. Network ACL
    c. NAT Gateway
    d. Internet Gateway
    Answer: b. Network ACLtest-king+1​
42. What is required for a private subnet to resolve DNS queries?
    a. Public IP
    b. NAT Gateway or VPC DNS
    c. Internet Gateway
    d. Elastic IP
    Answer: b. NAT Gateway or VPC DNSaws.amazon+1​
43. Which of the following can be used to connect two VPCs with private subnets?
    a. Internet Gateway
    b. VPC Peering
    c. NAT Gateway
    d. Public IP
    Answer: b. VPC Peeringics+1​
44. What is the default number of IP addresses in a /28 subnet?
    a. 8
    b. 16
    c. 32
    d. 64
    Answer: b. 16scribd+1​
45. Which of the following is a best practice for security groups in private subnets?
    a. Allow all traffic from 0.0.0.0/0
    b. Restrict to specific ports and sources
    c. Disable outbound rules
    d. Use only NACLs
    Answer: b. Restrict to specific ports and sourcestest-king+1​
46. What happens when a private subnet’s NACL denies all inbound traffic?
    a. Instances can still receive traffic from the internet
    b. All inbound traffic is blocked
    c. Outbound traffic is also blocked
    d. The subnet becomes public
    Answer: b. All inbound traffic is blockedics+1​
47. Which AWS feature provides an additional layer of security at the subnet level?
    a. Security Group
    b. Network ACL
    c. Route Table
    d. Internet Gateway
    Answer: b. Network ACLtest-king+1​
48. What is the purpose of using CIDR blocks in private subnets?
    a. To assign public IPs
    b. To define IP address ranges
    c. To enable internet access
    d. To replace DNS
    Answer: b. To define IP address rangesgeeksforgeeks+1​
49. Which of the following is true about isolated subnets?
    a. They can access the internet via NAT
    b. They have no routes outside the VPC
    c. They are the same as public subnets
    d. They require an internet gateway
    Answer: b. They have no routes outside the VPCaws.amazon+1​
50. What is a key consideration when designing private subnets for scalability?
    a. Use the largest possible CIDR block
    b. Plan for future IP address needs
    c. Avoid multi-AZ deployments
    d. Disable monitoring
    Answer: b. Plan for future IP address needsnordlayer+1​

1. https://docs.aws.amazon.com/vpc/latest/userguide/configure-subnets.html
2. https://www.test-king.com/blog/explaining-public-and-private-subnets-in-aws-what-you-need-to-know/
3. https://www.ics.com/blog/best-practices-securing-your-private-network-cloud
4. https://nordlayer.com/blog/vpc-best-practices/
5. https://www.geeksforgeeks.org/computer-networks/introduction-to-subnetting/
6. https://cloud.google.com/vpc/docs/subnets
7. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-security-best-practices.html
8. https://trustedinstitute.com/concept/aws-solution-architect/amazon-vpc/subnets/
9. https://learn.microsoft.com/en-us/azure/virtual-network/concepts-and-best-practices
10. https://docs.oracle.com/en-us/iaas/private-cloud-appliance/cmn/network/public-and-private-subnets.htm
11. https://www.studocu.com/in/document/chitkara-university/software-engineering/vpc-exam-questions-aws-articles/40059184
12. https://www.scribd.com/document/859365488/Subnetting-MCQs
13. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-example-private-subnets-nat.html
14. https://www.geeksforgeeks.org/devops/public-vs-private-subnets/
15. https://www.w3schools.com/cybersecurity/cybersecurity_network_layer.php
16. https://www.ubicloud.com/docs/networking/private-subnet
17. https://hoop.dev/blog/nist-cybersecurity-framework-proxy-deployment-in-a-vpc-private-subnet/
18. https://learn.microsoft.com/en-us/azure/security/fundamentals/network-best-practices
19. https://www.mgt-commerce.com/blog/virtual-private-cloud-aws/
20. https://www.clouddefense.ai/glossary/aws/private-subnet
21. https://cloud.google.com/architecture/best-practices-vpc-design
22. https://www.hyperglance.com/blog/aws-vpc-security-best-practices/
23. https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/waystosecure.htm
24. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
25. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
26. https://www.placementpreparation.io/mcq/cyber-security/
27. https://www.scribd.com/document/479693150/Cyber-Security-MCQ
28. https://testbook.com/objective-questions/mcq-on-network-security–5eea6a0939140f30f369d917
29. https://www.examtopics.com/discussions/amazon/view/86019-exam-aws-certified-solutions-architect-associate-saa-c03/
30. https://www.sanfoundry.com/network-security-questions-answers-designing-subnets-i/
31. https://www.sanfoundry.com/cyber-security-questions-answers-vpns/
32. https://www.sanfoundry.com/computer-networks-questions-answers-analyzing-subnet-mask/
33. https://www.uninets.com/blog/computer-networks-mcq
34. https://aws.plainenglish.io/396-10-aws-vpc-networking-interview-questions-with-answers-q-a-fbd67d88ba9e
35. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
36. https://itexamanswers.net/7-7-2-cloud-security-quiz-answers.html
37. https://www.gdcramban.in/MCQ/networkmcq.pdf
38. https://www.whizlabs.com/blog/aws-vpc-interview-questions/
39. https://nitizsharma.com/questions-and-answers-for-subnetting/
40. https://www.youtube.com/watch?v=NIU8tM654m4