Virtual Private Cloud
Security
Its all connected
IPs/CIDR
Money
EC2
100

This is the name of the Azure element similar to the AWS VPC.

What is VNet?

100

This is the network level that Network Access Control Lists (NACLs) protect?

What is subnets?

100

This is the AWS Service that allows you to connect your on premise data center to your AWS cloud VPCs without going over the public internet.

What is Direct Connect (DX)?

100

This is an example of what type of IP address:

2001:0db8:85a3:0000:0000:8a2e:0370:7334

What is IPv6?

100

This is the most expensive EC2 pricing option. 

What is On Demand?

100

You choose this based on Region, Operating System, Storage type of the root device, Architecture, and Virtualization type.


What is Amazon Machine Image (AMI)?

200

This is the name of the AWS service that acts as a Domain Name Service (DNS)?

What is Amazon Route 53?

200

These are the firewall type constructs in AWS that are stateful.  

What are security groups?

200
This is the type of gateway required for a public subnet to communicate with the internet.

What is an Internet Gateway?

200

This is the number of bits that are flexible in the following CIDR block:

10.0.0.0/32

What is 0?

200

This is the best pricing option when running fault tolerant flexible workloads.

What is spot?

200

This can be used to further initialize or customize instance configurations when the instance is launched. Architects must balance the amount of configuration they want to do in the AMI vs. this option.

What is User Data?

300

This is the type of subnet that you would put your web applications in if you were using a load balancer to route traffic to those applications.

What is a private subnet?

300

This is the AWS Well Architected Security Design Principal that you would be following if you combined IAM, NACLs and Security Groups to protect your AWS virtual cloud environment.

What is apply security at all layers?

300

This is the type of subnet that a NAT Gateway is placed in AWS.

What is a public subnet?

300

These are the type of the AWS IP addresses that can be attached to individual EC2 instances or ENIs and let you easily switch to a healthy EC2 instance if the existing instance fails.

What are Elastic IPs?

300

Reserved instances can be purchased for both 1 and this many year commitments.

What is 3?

300

This is the type of EC2 instance that you would need to use if you are running software on the instance that has license restrictions that limit you to a specific MAC address.

What is dedicated host?

400

This is the VPC side of a VPN connection if you are connecting your AWS VPC to an on prem data center using VPN.

What is a virtual private gateway?

400

This is what happens by default to all inbound traffic when using default security groups.

What is blocked?

400

This is what you use as the destination to represent the internet in routes in a route table.

What is 0.0.0.0/0?

400
This is the range of numbers that can represent the 4th octet of this CIDR block


10.8.0.X/24

What is 0 - 255

400

This is the only EC2 pricing option where you are not doing any level of guessing capacity.

What is On Demand?

400
This is the type of instance volume storage you should consider if you need to share the storage across multiple EC2 instances as the same time.

What is File Server storage - EFS or FsX depending on Linux/Windows?

500

This is what you should do with the default VPC, subnets, route tables, and security groups that are created with each new AWS account.

What is delete them?

500

This is the type of access control that can be achieved in AWS using tagging.

What is Attribute Based Access Control (ABAC)?

500

This is the element that is the target in each route that provides access to individual VPCs when using the AWS transit gateway. These are really just ENIs attached to the VPC.

What is a VPC attachment?


500

This is the number of IP addresses available for consumer use in an AWS subnet that is using the the following CIDR block: 

10.8.0.0/24

What is 251?

500

This is the AWS service that you can use for recommendations on whether or not you are cost optimized with your current instances?

What is AWS Compute Optimizer?

500

This is what happens to root volume data that is backed by an SSD EBS storage when an instance is terminated. 

What is the data is persisted?