Virtual Private Cloud (VPC)

Question 1

Using a Transit Gateway to integrate a third-party service has the following benefits:

Answer 1

• Supports bidirectional traffic between your VPCs and the third-party network
• Supports all types of IP traffic (both TCP and UDP)
• Deploys a centralized traffic inspection point between your VPCs and the third-party network
• Easily scales as the number of VPCs involved in the integration changes

Question 2

The disadvantages of using a Transit Gateway solution include:

Answer 2

• This option is typically more expensive than the direct peering options.
• Overlapping CIDR blocks are not supported.
• Many third-party providers do not support this solution because they want to maintain complete control and minimize sharing components with their customers.

Question 3

What is a Virtual Private Gateway?

Answer 3

A virtual private gateway is the VPN endpoint on the Amazon side of your Site-to-Site VPN connection that can be attached to a single VPC.

Question 4

How to make an EC2 in a subnet to reach the internet

Answer 4

The network ACL associated with the subnet must allow inbound and outbound traffic on port 80 (for HTTP traffic) and port 443 (for HTTPs traffic).
A route table must contain routes from your subnet to the internet gateway.

Question 5

How does Site-to-Site VPN connection tunnels work?

Answer 5

• Each Site-to-Site VPN connection has 2 tunnels
• Traffic from the on-premises network to AWS uses both tunnels.
• Traffic from AWS to the on-premises network prefers one of the tunnels,
• Traffic from AWS automatically fail over to the other tunnel if there is a failure on the AWS side.

Question 6

Site-to-Site VPN tunnel authentication options

Answer 6

• A pre-shared key is the default authentication option / you can specify when you create a Site-to-Site VPN tunnel.
• A pre-shared key is a string that you enter when you configure your customer gateway device.
• If you do not specify a string, we auto-generate one for you.

Question 7

What is a common strategy for connecting multiple, geographically disperse VPCs and remote networks in order to create a global network transit center.

Answer 7

A transit VPC, that simplifies network management and minimizes the number of connections required to connect multiple VPCs and remote networks.

Question 8

If you launch an EC2 instance into a VPC that has an instance tenancy of dedicated:

Answer 8

the instance will always run as a Dedicated