MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is the primary function of AWS Transit Gateway?
   a. Encrypt data at rest
   b. Connect multiple VPCs and on-premises networks through a central hub
   c. Manage individual EC2 instance security
   d. Provide DNS management services
   Answer: baws.amazon+1​
2. Which AWS service can be integrated with Transit Gateway to monitor traffic between VPCs?
   a. Amazon GuardDuty
   b. AWS Glue
   c. AWS Lambda
   d. AWS S3
   Answer: aintuitive​
3. AWS Transit Gateway acts as which type of network component?
   a. Hypervisor
   b. Regional virtual router
   c. Load balancer
   d. DNS resolver
   Answer: baws.amazon​
4. What advantage does Transit Gateway offer over VPC Peering?
   a. Static IPs for EC2
   b. Centralized routing for multiple VPCs
   c. Faster EC2 provisioning
   d. Simplified IAM policies
   Answer: bdev+1​
5. Which protocol secures VPN connections through AWS Transit Gateway?
   a. HTTPS
   b. TLS
   c. IPSec
   d. SFTP
   Answer: cwhizlabs+1​
6. AWS Transit Gateway improves security primarily through centralized:
   a. Route propagation and inspection
   b. IAM role assignments
   c. S3 bucket policies
   d. EC2 metadata updates
   Answer: aaws.amazon+1​
7. Which AWS security service can be integrated to filter traffic through Transit Gateway?
   a. AWS Network Firewall
   b. AWS CloudTrail
   c. AWS CodeBuild
   d. AWS Glue
   Answer: acloudoptimo+1​
8. Transit Gateway encryption in transit can be managed using:
   a. AWS Key Management Service (KMS)
   b. AWS Config
   c. AWS CloudFormation
   d. AWS Glue
   Answer: acloudoptimo​
9. Which of the following ensures least privilege communication control across VPCs using Transit Gateway?
   a. Default routing
   b. Security Groups and NACLs
   c. S3 bucket replication
   d. Route 53
   Answer: bintuitive​
10. To reduce operational overhead, Transit Gateway automates:
    a. DNS resolution
    b. Security group enforcement and routing
    c. Data encryption at rest
    d. IAM user auditing
    Answer: baws.amazon+1​
11. Transit Gateway can connect thousands of VPCs by acting as:
    a. Private Link endpoint
    b. Central router managed by AWS
    c. EC2 instance bridge
    d. ELB replacement
    Answer: baws.amazon​
12. AWS Network Firewall can be used in conjunction with Transit Gateway to:
    a. Inspect traffic between VPCs
    b. Create S3 event triggers
    c. Manage IAM roles
    d. Store logs
    Answer: acloudoptimo+1​
13. What AWS service captures traffic logs through Transit Gateway?
    a. VPC Flow Logs
    b. CloudWatch Logs only
    c. AWS Artifact
    d. AWS Inspector
    Answer: aintuitive​
14. Routing in Transit Gateway should be configured:
    a. Automatically with default routes
    b. Manually for specific allowed communications
    c. Using Lambda security triggers
    d. Via S3 replication
    Answer: bintuitive​
15. Which AWS integration enhances Transit Gateway for hybrid architectures?
    a. AWS Direct Connect
    b. AWS Batch
    c. AWS SageMaker
    d. AWS Workspaces
    Answer: aaws.amazon+1​
16. Which design best practice ensures availability for Transit Gateway attachments?
    a. Use multiple subnets per VPC attachment
    b. Single route per network
    c. Disable route propagation
    d. Attach multiple IAM roles
    Answer: aaws.amazon​
17. What feature allows Transit Gateway integration with SD-WAN solutions?
    a. Transit Gateway Connect
    b. AWS PrivateLink
    c. AWS Control Tower
    d. AWS Backup
    Answer: acloudoptimo​
18. Which of the following improves performance for cross-region communication via Transit Gateway?
    a. Route aggregation
    b. Transit Gateway inter-region peering
    c. NAT gateway duplication
    d. Multi-AZ Elastic IP routing
    Answer: baws.amazon+1​
19. Secure multi-account access to Transit Gateway can be achieved using:
    a. AWS Resource Access Manager (RAM)
    b. AWS Artifact
    c. AWS OpsWorks
    d. AWS Health Dashboard
    Answer: aintuitive​
20. AWS Transit Gateway reduces network complexity by removing the need for:
    a. VPN hardware
    b. Multiple VPC peering connections
    c. Route 53 private zones
    d. Manual IAM updates
    Answer: bdev+1​
21. How does Transit Gateway handle asymmetric routing?
    a. Automatically corrects routes
    b. Uses static routes only
    c. Requires manual adjustment
    d. Rejects asymmetric paths
    Answer: aaws.amazon​
22. To prevent lateral movement, routing in Transit Gateway should:
    a. Be explicitly defined per VPC
    b. Allow all peer communication
    c. Use auto-propagated routes
    d. Ignore NACLs
    Answer: aintuitive​
23. GuardDuty integration with Transit Gateway helps detect:
    a. Misconfigurations
    b. Unauthorized port scanning
    c. User inactivity
    d. IAM policy drift
    Answer: bintuitive​
24. Transit Gateway provides high availability because it is:
    a. Multi-AZ and fully managed by AWS
    b. Manual failover required
    c. Restricted to single zone
    d. Requires third-party clusters
    Answer: aaws.amazon+1​
25. Security group referencing in Transit Gateway allows sharing:
    a. Security rules across attached VPCs
    b. IAM roles
    c. NACL configurations
    d. Private endpoints
    Answer: aaws.amazon​
26. A centralized inspection VPC architecture with Transit Gateway is used for:
    a. Firewall and IDS/IPS traffic scrutiny
    b. DNS management
    c. NAT translation
    d. Lambda trigger configuration
    Answer: ablogs.cisco+1​
27. Which AWS service complements Transit Gateway for DDoS mitigation?
    a. AWS Shield
    b. AWS Config
    c. AWS CodePipeline
    d. AWS Glue
    Answer: aaws.plainenglish+1​
28. Transit Gateway routing tables primarily manage:
    a. Inter-VPC communication paths
    b. Identity mapping
    c. S3 replication routes
    d. EC2 scheduling
    Answer: aaws.amazon+1​
29. Multi-region Transit Gateways communicate using:
    a. Inter-Region Peering
    b. CloudWatch Events
    c. PrivateLink connections
    d. S3 endpoints
    Answer: acloudoptimo+1​
30. For compliance, Transit Gateway configurations should include:
    a. Encryption, auditing, and segmentation
    b. S3 transfer acceleration
    c. SQL database queries
    d. SSH session logging
    Answer: acloudoptimo​
31. How can Transit Gateway be shared securely across accounts?
    a. Resource Access Manager (RAM)
    b. AWS Certificate Manager
    c. AWS Backup Vault
    d. AWS CodeCommit
    Answer: aintuitive​
32. What component ensures data privacy between connected VPCs?
    a. SSL/TLS encryption
    b. NACL replications
    c. IAM policies
    d. VPN bypass
    Answer: aintuitive​
33. AWS recommends using Transit Gateway attachments in which type of subnets?
    a. Dedicated small subnets
    b. Large public subnets
    c. Multi-AZ default subnets
    d. Elastic Load Balancer subnets
    Answer: aaws.amazon​
34. AWS’s centralized hub for network monitoring with Transit Gateway is:
    a. Amazon CloudWatch
    b. AWS Backup
    c. AWS Glue
    d. Route 53
    Answer: acloudoptimo+1​
35. Which AWS service can encrypt communications for apps integrated through Transit Gateway?
    a. AWS ACM
    b. AWS Backup
    c. AWS Lambda
    d. AWS Config
    Answer: aintuitive​
36. What ensures resilience in a Transit Gateway architecture?
    a. Multi-AZ deployment
    b. Static IP routing
    c. Single subnet mapping
    d. DNS over HTTPS
    Answer: aaws.amazon​
37. What AWS documentation provides blueprints for designing Transit Gateway environments?
    a. AWS VPC Best Practices Guide
    b. AWS Organizations Overview
    c. CloudTrail Setup Guide
    d. EC2 Cost Optimization Whitepaper
    Answer: aaws.amazon+1​
38. Which component can automate inspection of traffic through Transit Gateway?
    a. Network Firewall
    b. Kinesis Stream
    c. Lambda Access Key Auditor
    d. CodeDeploy Agent
    Answer: acloudoptimo+1​
39. What auditing tool helps verify secure Transit Gateway configurations?
    a. AWS Config
    b. AWS Snowball
    c. AWS Batch
    d. AWS Lightsail
    Answer: acloudoptimo​
40. Which encryption method ensures protection for cross-account Transit Gateway connectivity?
    a. IPsec
    b. SSH
    c. AES only
    d. XOR
    Answer: awhizlabs+1​
41. To reduce cost and complexity, Transit Gateway eliminates:
    a. Full mesh VPC peering
    b. NAT gateway needs
    c. DNS traffic
    d. IAM credentials
    Answer: adev+1​
42. What does centralized routing through Transit Gateway enable?
    a. Simplified security management
    b. Reduced EC2 billing
    c. Lambda scaling
    d. VPC detachment
    Answer: aaws.amazon+1​
43. Automatic failover testing in Transit Gateway environments should be:
    a. Regularly verified
    b. Avoided for cost
    c. Performed only in production
    d. Disabled by default
    Answer: acliffsnotes​
44. AWS Transit Gateway supports which compliance features?
    a. Logging, audits, and encryption enforcement
    b. User password rotation
    c. S3 bucket replication only
    d. IAM federation only
    Answer: acloudoptimo​
45. Transit Gateway achieves simplified hybrid connectivity using:
    a. Integration with Direct Connect and VPNs
    b. Lambda functions
    c. CloudFormation templates
    d. CodeBuild pipelines
    Answer: aaws.amazon+1​
46. To block malicious traffic across VPCs, deploy:
    a. AWS Network Firewall on Transit Gateway
    b. S3 Lifecycle rules
    c. AWS Backup Policies
    d. AWS CodePipeline
    Answer: acloudoptimo+1​
47. Encryption keys for traffic between VPCs are managed through:
    a. AWS KMS
    b. EC2 console
    c. Route 53
    d. AWS CLI only
    Answer: acloudoptimo​
48. Large organizations use Transit Gateway primarily for:
    a. Centralized multi-VPC connectivity and governance
    b. Application deployment
    c. IAM federation
    d. Code optimization
    Answer: aaws.amazon+1​
49. Regular audits and reviews of Transit Gateway configurations help maintain:
    a. Security and compliance alignment
    b. Network throughput gains
    c. EC2 pricing discounts
    d. Lambda concurrency
    Answer: acliffsnotes+1​
50. Transit Gateway fundamentally contributes to cybersecurity by:
    a. Centralizing, encrypting, and inspecting inter-network traffic
    b. Managing cloud billing
    c. Creating DNS records
    d. Storing data in S3
    Answer: aaws.amazon+2​

1. https://docs.aws.amazon.com/prescriptive-guidance/latest/integrate-third-party-services/architecture-3.html
2. https://docs.aws.amazon.com/vpc/latest/tgw/how-transit-gateways-work.html
3. https://intuitive.cloud/blog/securing-multi-vpc-connectivity-with-aws-transit-gateway
4. https://dev.to/imsushant12/interview-questions-on-aws-networking-vpc-subnets-and-security-groups-40g7
5. https://www.whizlabs.com/blog/aws-security-specialty-exam-questions/
6. https://campus.barracuda.com/product/cloudgenfirewall/doc/100369349/aws-reference-architecture-transit-gateway-with-attached-vpn-gateway-using-cloudgen-firewall/
7. https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network-infrastructure/transit-gateway.html
8. https://www.cloudoptimo.com/blog/mastering-aws-transit-gateway-architecture-use-cases-and-best-practices/
9. https://aws.amazon.com/transit-gateway/features/
10. https://docs.aws.amazon.com/vpc/latest/tgw/tgw-best-design-practices.html
11. https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-security-group-referencing-for-aws-transit-gateway/
12. https://blogs.cisco.com/security/building-a-scalable-security-architecture-on-aws-with-cisco-secure-firewall-and-aws-transit-gateway
13. https://aws.plainenglish.io/aws-transit-gateway-101-how-it-works-and-when-to-use-it-65c4369bcdb6
14. https://www.cliffsnotes.com/study-notes/20159027
15. https://tutorialsdojo.com/aws-certified-security-specialty-scs-c01-scs-c02-sample-exam-questions/
16. https://cyberenlightener.com/?page_id=644
17. https://aws.amazon.com/blogs/security/encryption-in-transit-over-external-networks-aws-guidance-for-nydfs-and-beyond/
18. https://levelblue.com/blogs/security-essentials/introduction-to-the-purpose-of-aws-transit-gateway
19. https://www.reddit.com/r/aws/comments/ywau1e/transit_gateway_security_recommendations/
20. https://docs.aws.amazon.com/solutions/latest/network-orchestration-aws-transit-gateway/security.html