Cloud Networking Questions and Answers

Q: A virtual private cloud provides

Correct answer: an isolated network with a chosen rangeA virtual private cloud is a logically isolated section of the provider’s network in which the tenant chooses the address range and then divides it into subnets, attaches route tables and gateways, and controls what may enter and leave. The isolation is enforced by the provider’s network fabric rather than by separate physical cabling, which is what makes it possible to create one in seconds.

Q: VPC peering connects two virtual private clouds so that

Correct answer: each can reach the other privatelyPeering establishes a private route between two VPCs so that instances address each other by their private addresses, with traffic staying on the provider’s network. Neither becomes part of the other, and their address ranges must not overlap - if they do, the routes are ambiguous and the peering cannot be created.

A virtual private cloud provides

A.an isolated network with a chosen range
B.a shared network used by all the tenants
C.a physical network cable to the site
D.a single public address for the tenant

Answer: A

Correct answer: an isolated network with a chosen range

A virtual private cloud is a logically isolated section of the provider’s network in which the tenant chooses the address range and then divides it into subnets, attaches route tables and gateways, and controls what may enter and leave. The isolation is enforced by the provider’s network fabric rather than by separate physical cabling, which is what makes it possible to create one in seconds.

Discuss in Forum

A subnet in a virtual private cloud is usually

A.exactly the same as a security group
B.confined to one availability zone
C.spread across every zone in the region
D.global across all of the regions

Answer: B

Placing resources in subnets across zones is how a deployment survives the loss of one. A subnet spanning zones would defeat the isolation the zones provide. Each subnet lives in one zone only. Spreading across zones is deliberate.

Discuss in Forum

Assertion (A): A highly available deployment places subnets in at least two availability zones.
Reason (R): A subnet lives in one zone, so a single subnet deployment fails with that zone.

A.A is true but R is false
B.A is false but R is true
C.Both A and R are true, and R is the correct explanation of A
D.Both A and R are true, but R is not the correct explanation of A

Answer: C

Correct answer: Both A and R are true, and R is the correct explanation of A

Both are true and the reason is the constraint that forces the practice. A subnet is bound to a single availability zone, so everything in it shares that zone’s fate. Spreading subnets across two or more zones, with the load balancer and the database replica following, is what allows the deployment to survive the loss of one - and it is why zone count, not instance count, sets the resilience.

Discuss in Forum

Match each networking construct with what it does.
List I
A. Route table
B. Internet gateway
C. NAT gateway
D. Security group
List II
1. allows outbound traffic from private subnets only
2. decides where traffic leaving a subnet goes
3. a stateful firewall attached to an instance
4. allows two way traffic with the public internet

A.A-4, B-2, C-1, D-3
B.A-2, B-4, C-3, D-1
C.A-3, B-1, C-4, D-2
D.A-2, B-4, C-1, D-3

Answer: D

The distinction between the two gateways is what makes a subnet public or private. A subnet is private precisely because its route table sends traffic to the NAT rather than the internet gateway. Routes decide the character.

Discuss in Forum

A subnet is described as public when its route table

A.sends outbound traffic to an internet gateway
B.sends all of its traffic out to a NAT gateway
C.has no routes configured at all
D.contains only private addresses in it

Answer: A

Nothing about the addresses makes a subnet public or private, only the route. A private subnet reaches the internet outbound through a NAT and cannot be reached inbound. Addresses do not decide it. The route table is what determines the character.

Discuss in Forum

Assertion (A): Instances in a private subnet can still reach the internet for updates.
Reason (R): A NAT gateway allows outbound connections while blocking inbound ones.

A.A is false but R is true
B.Both A and R are true, and R is the correct explanation of A
C.Both A and R are true, but R is not the correct explanation of A
D.A is true but R is false

Answer: B

Correct answer: Both A and R are true, and R is the correct explanation of A

Both are true and the reason is the mechanism. A NAT gateway sits in a public subnet and translates outbound connections from private instances, so those instances can fetch packages and reach APIs while remaining unreachable from outside. The asymmetry is the point: connections initiated inward have no translation entry to match and are simply dropped.

Discuss in Forum

A security group differs from a network access control list in that a security group is

A.applied across a whole subnet at once
B.unable to filter traffic by port
C.stateful, allowing return traffic
D.stateless, requiring explicit return rules

Answer: C

The access control list is stateless and applies at the subnet boundary, so return traffic needs its own rule. Forgetting that is a common cause of connections that open but never reply. State is what distinguishes the two.

Discuss in Forum

Consider the following statements about security groups and access control lists.
1. Security groups are stateful and attach to instances.
2. Access control lists are stateless and attach to subnets.
3. Both allow explicit deny rules.

A.3 only
B.1 only
C.All of them
D.1 and 2 only

Answer: D

The first two are correct. The third holds only for the access control list, since a security group has allow rules and denies everything not matched. Attachment point differs as well. One sits at the instance and one at the subnet.

Discuss in Forum

Assertion (A): A network access control list requires rules for both directions of a connection.
Reason (R): It is stateless and does not track that an outbound connection was established.

A.Both A and R are true, and R is the correct explanation of A
B.Both A and R are true, but R is not the correct explanation of A
C.A is true but R is false
D.A is false but R is true

Answer: A

Correct answer: Both A and R are true, and R is the correct explanation of A

Both are true and the reason is the cause. A network ACL is stateless, so it evaluates each packet on its own and knows nothing of the connection it belongs to - which means the return traffic needs its own rule, typically permitting the ephemeral port range. A security group is stateful and does track the connection, so allowing the inbound request is enough for the reply to leave. Confusing the two is the most common cause of traffic being silently dropped.

Discuss in Forum

10.

VPC peering connects two virtual private clouds so that

A.one becomes a subnet of the other one
B.each can reach the other privately
C.they share a single common address range
D.traffic travels over the public internet

Answer: B

Correct answer: each can reach the other privately

Peering establishes a private route between two VPCs so that instances address each other by their private addresses, with traffic staying on the provider’s network. Neither becomes part of the other, and their address ranges must not overlap - if they do, the routes are ambiguous and the peering cannot be created.

Discuss in Forum

Loading…

Topics

Other Subjects

Tags: Cloud Networking Questions and Answers || Cloud Networking MCQ Questions and Answers || Cloud Networking GK Questions and Answers || Cloud Networking GK MCQ Questions || Cloud Networking Multiple Choice Questions and Answers || Cloud Networking GK || GK on Cloud Networking || Cloud Computing Questions and Answers || Cloud Computing MCQ Questions and Answers || Cloud Computing GK Questions and Answers || GK on Cloud Computing

Cloud Networking Questions and Answers

Topics

Other Subjects

About Us

Stay informed about all important Dates & Notifications