Networking and content delivery
Practise only this domain. 81 questions with explanations, 20 at a time.
Start this domainSample questions
- A Route 53 health check marks an endpoint unhealthy. What does Route 53 do with the DNS record?Easy
- Which statement describes a functional difference between an internet gateway and a NAT gateway?Easy
- A CloudFront distribution uses an ALB in us-east-1 as its only origin, and users in Europe and Asia report slow first loads. What improves performance for those users?Easy
- A transit gateway connects production, development, and shared-services VPCs. Development must never reach production, while both need shared services. How should this be built?Hard
- A company wants to attach a third-party SD-WAN appliance to a transit gateway using GRE and BGP, with more throughput than a Site-to-Site VPN tunnel provides. Which attachment type should it use?Hard
- Route 53 weighted records with 50/50 weights are sending almost all traffic to one version. What is the likely cause?Medium
- VPC Flow Logs record REJECT entries for traffic that is supposed to be allowed. What should you examine?Medium
- A multiplayer game backend uses TCP across several Regions. Players in some countries see slow connections because their resolvers cache DNS answers, and failover takes minutes. Which capability addresses this and is absent from latency-based DNS routing?Medium
- A Java service needs about four minutes to reach full throughput after launch because its caches and JIT compiler warm up. Each new instance should receive a growing share of requests once it passes health checks. Which target group setting does this?Medium
- A central security account must collect VPC flow logs from dozens of accounts in one organization. The logs must land in an S3 bucket in the security account and be encrypted with a KMS key that the security account owns. Which destination satisfies this?Medium
- A TCP service behind a Network Load Balancer writes access logs showing every connection from the balancer's own node addresses. Host firewall rules on the backend instances filter by the real caller address and are now rejecting legitimate users. Which target group setting resolves both symptoms?Hard
- An application load balancer returns sporadic 503 responses right after each release. The on-call engineer suspects a security group or network ACL is blocking responses from the instances back to the balancer. Which tool should the engineer run first to check that path?Medium