Practice questions
Questions 1-10 are based on the AWS architecture shown in Figure 7.15. There is a cloud admin in company ABC, which has 10,000 EC2 instances in its AWS cloud. The diagram shows the three VPCs in the cloud admin account. All networks are configured correctly. The cloud admin created an EC2 role, R3, that can access the S3 bucket named B3 in us-east-1. EC2-1 has a security group named sg. Subnet1 has a network access control list named nacl:
Figure 7.15 – AWS Networking Architecture
1. They are looking for a place to securely store a connection string to RDS1. What do you suggest?
A. EBS
B. Parameter store
C. DynamoDB
D. RDS
2. They couldn’t ping EC2-1 from their home laptop, and he found the following in the AWS VPC flow log:
2 123456789010 eni-1235b8ca123456789 204.0.113.12 173.31.16.139 0 0 1 4 336 1432917027 1432917142 ACCEPT OK
2 123456789010 eni-1235b8ca123456789 173.31.16.139 204.0.113.12 0 0 1...
