What value in a packet dictates the priority of the packet in a QoS enabled network?
D
The Differentiated Services Code Point value, or DSCP, is used to label packets on QoS enabled networks for prioritization.
What is the IPv6 subnet CIDR used by a VPC?
B
A VPC will always use /56 as its CIDR
What is the name of the label applied to packets to allow routers to know where to forward in an MPLS network?
C
Forward Equivalency Class is how routers know where to send packets.
What port and protocol is used by DNS?
D
DNS uses port 53 and either TCP or UDP depending on what type of DNS message is being sent.
Which port range must be allowed through a NACL to ensure all return traffic is successful?
A
1024 גˆ’ 65,535 is the full "ephemeral port" range.
To allow all traffic to access an instance in "Subnet 1" that uses "Security Group 1", what two options need to be configured? (Choose two.)
AB
You must allow traffic through the NACL and through the Security Group to access the instance. If there is not an Outbound allow setup in the NACL, you may need to set that, but an outbound rule for Security Group 1 is not necessary as security groups are stateful.
You have created a custom VPC. What are two things you may need to do in order to SSH directly into your instance? (Choose two.)
CD
Public IP addresses are not enabled by default in a custom VPC. An Internet Gateway is also required.
Which of these addresses cannot be given to an EC2 instance in your VPC?
B
10.0.0.3 is reserved by AWS for future use.
Which ports must you allow for HTTP and HTTPS traffic?
D
80 and 443 are the ports for HTTP and HTTPS, respectively.
If you have one VPC peered with two VPCs with overlapping CIDRs, which route will be more preferred?
C
10.1.1.5/32. The most specific route is preferred.