Network connectivity options Direct Connect, VPN
Here are some commonly asked AWS Certification interview questions regarding the on Network connectivity options Direct Connect, VPN AWS
1. What is Amazon Direct Connect?
Amazon Direct Connect is a network service that provides dedicated network connections from on-premises data centers to AWS. The service enables customers to establish a dedicated network connection to AWS and bypass the public Internet.
2. What are the benefits of using Amazon Direct Connect?
The benefits of using Amazon Direct Connect include increased bandwidth, reduced network latency and increased reliability. Direct Connect also enables customers to securely connect to AWS using industry standard encryption protocols.
3. What is AWS VPN?
AWS VPN is a managed VPN service that enables customers to securely connect their on-premises infrastructure to AWS. The service uses industry standard IPsec encryption protocols and is fully managed by AWS.
4. What are the different types of VPN connections supported by AWS VPN?
AWS VPN supports two types of VPN connections: Virtual Private Gateway (VGW) connections and Customer Gateway (CGW) connections.
5. What is a Virtual Private Gateway (VGW)?
A Virtual Private Gateway (VGW) is a VPC component that provides secure communication between your VPC and your data center. The VGW acts as the VPN endpoint in the VPC and is used to route traffic between your VPC and your data center over an AWS VPN connection.
6. What is a Customer Gateway (CGW)?
A Customer Gateway (CGW) is a logical entity in the AWS VPN service that represents the VPN endpoint at the customer’s data center. The CGW acts as the VPN endpoint for your data center and is used to route traffic between your data center and AWS over an AWS VPN connection.
7. What are the different types of VPN configurations supported by AWS VPN?
AWS VPN supports two types of VPN configurations: static route-based VPN and dynamic route-based VPN.
8. What is a static route-based VPN configuration?
A static route-based VPN configuration is a VPN configuration where the routes between the VPN endpoints are specified statically. This type of configuration is useful for customers who need to manually manage the routing between their data center and AWS.
9. What is a dynamic route-based VPN configuration?
A dynamic route-based VPN configuration is a VPN configuration where the routes between the VPN endpoints are learned dynamically using Border Gateway Protocol (BGP). This type of configuration is useful for customers who want to automate the routing between their data center and AWS.
10. What is Border Gateway Protocol (BGP)?
Border Gateway Protocol (BGP) is a routing protocol that is used to exchange routing information between routers in a network. BGP is commonly used to connect different autonomous systems (AS) and is the routing protocol used by the Internet.
11. What is a VPC peering connection?
A VPC peering connection is a networking connection between two VPCs that enables communication between instances in the VPCs as if they were within the same network. VPC peering connections do not traverse the public Internet and provide a secure and scalable way to connect VPCs.
12. What are the prerequisites for creating a VPC peering connection?
The prerequisites for creating a VPC peering connection include having two VPCs in the same region and having their IP address ranges not overlap. Additionally, the VPCs must be owned by the same AWS account or by different AWS accounts that have a trusted relationship.
13. What is a transit VPC?
A transit VPC is a VPC that is used as a hub for routing traffic between multiple VPCs and on-premises data centers. The transit VPC acts as a central point of connectivity and provides a secure and scalable way to connect multiple VPCs and on-premises data centers.
14. What are the benefits of using a transit VPC?
The benefits of using a transit VPC include increased network visibility, reduced network latency, improved network security and increased network scalability. A transit VPC also enables customers to centralize network management and reduce the number of network connections required.
15. What is a VPC endpoint?
A VPC endpoint is a network component that enables communication between instances in a VPC and services in the AWS Cloud without requiring a NAT instance or VPN connection. VPC endpoints provide a secure and scalable way to access AWS services.
16. What are the different types of VPC endpoints?
Amazon Virtual Private Cloud (Amazon VPC) endpoints are virtual devices that are directly connected to your VPC, allowing communication between instances in your VPC and AWS services without requiring an internet gateway, VPN connection, or AWS Direct Connect connection. There are two types of VPC endpoints:
- Interface VPC endpoints: These are the endpoints that are launched as an Elastic Network Interface (ENI) with a private IP address in your VPC subnet.
- Gateway VPC endpoints: These are endpoints that are powered by AWS PrivateLink, which enables Amazon VPC traffic to stay within the AWS network.
Both types of VPC endpoints provide secure and private connectivity to AWS services over AWS PrivateLink, which means that the traffic does not traverse the public Internet. This provides additional security and reliability for your applications.
17. What is an interface endpoint?
An interface endpoint is a VPC endpoint that enables communication between instances in a VPC and AWS services over AWS Direct Connect or VPN. Interface endpoints use Elastic Network Interfaces (ENIs) and provide a secure and scalable way to access AWS services.
18. What is a gateway endpoint?
A gateway endpoint is a VPC endpoint that enables communication between instances in a VPC and AWS services over the Internet. Gateway endpoints use Amazon S3 and DynamoDB as the target services and provide a secure and scalable way to access AWS services.
19. What is AWS PrivateLink?
AWS PrivateLink is a network technology that enables customers to access AWS services over an Amazon VPC endpoint. PrivateLink provides a secure and scalable way to access AWS services and eliminates the exposure of data to the public Internet.
20. What is a site-to-site VPN connection?
A site-to-site VPN connection is a VPN connection between two physical locations, such as between an on-premises data center and an AWS VPC. Site-to-site VPN connections enable customers to securely connect their on-premises infrastructure to AWS.
21. What is a point-to-site VPN connection?
A point-to-site VPN connection is a VPN connection between a single client computer and a VPC. Point-to-site VPN connections enable customers to securely connect their client computers to a VPC and access resources in the VPC.
22. What is a hardware VPN connection?
A hardware VPN connection is a VPN connection that uses dedicated hardware, such as a VPN appliance, to establish a VPN connection between an on-premises data center and an AWS VPC. Hardware VPN connections provide increased network performance and reliability compared to software-based VPN connections.
23. What is a software VPN connection?
A software VPN connection is a VPN connection that uses software, such as OpenVPN, to establish a VPN connection between an on-premises data center and an AWS VPC. Software VPN connections are typically easier to set up and manage compared to hardware-based VPN connections.
24. What is a static IP address?
A static IP address is a unique IP address that is assigned to a device and does not change. Static IP addresses are typically used in networks where the IP address of a device must be known in order to communicate with the device.
25. What is a dynamic IP address?
A dynamic IP address is an IP address that is assigned to a device dynamically and may change over time. Dynamic IP addresses are typically used in networks where the IP address of a device is not critical for communication and can change without impacting network connectivity.
26. What is a public IP address?
A public IP address is an IP address that is publicly accessible and can be used to communicate with devices on the Internet. Public IP addresses are assigned by Internet Service Providers (ISPs) and are used to identify devices on the Internet.
27. What is a private IP address?
A private IP address is an IP address that is used within a private network and is not accessible from the Internet. Private IP addresses are typically used in internal networks and are not assigned by ISPs.
28. What is a CIDR block?
CIDR stands for Classless Inter-Domain Routing and is a notation used to define the range of IP addresses in a subnet. A CIDR block specifies the number of bits used for the network address and the number of bits used for the host address.
29. What is a subnet mask?
A subnet mask is a string of bits that determines which portion of an IP address represents the network address and which portion represents the host address. Subnet masks are used to divide an IP address into a network address and a host address.
30. What is a virtual private gateway?
A virtual private gateway is a logical VPN endpoint in an Amazon VPC. Virtual private gateways provide secure and scalable VPN connections between Amazon VPCs and remote networks, such as on-premises data centers.
31. What is a customer gateway?
A customer gateway is a physical or software-based VPN endpoint in a customer’s network. Customer gateways provide secure and scalable VPN connections between customer networks and Amazon VPCs.
32. What is a VPN tunnel?
A VPN tunnel is a secure and encrypted connection between two VPN endpoints. VPN tunnels are used to securely transfer data between two networks, such as between an on-premises data center and an Amazon VPC.
33. What is a VPN concentrator?
A VPN concentrator is a network device that provides secure and scalable VPN connections for remote users. VPN concentrators are typically used by large organizations to manage and control VPN connections for remote employees.
34. What is a Virtual Private Cloud (VPC)?
A Virtual Private Cloud (VPC) is a logically isolated section of the AWS Cloud where customers can launch AWS resources in a virtual network that they define. VPCs provide a secure and scalable way to isolate AWS resources from other customers and the public Internet.
35. What is VPC peering?
VPC peering is a network connection between two Amazon VPCs that enables communication between instances in the VPCs as if they were within the same network. VPC peering provides a secure and scalable way to connect multiple VPCs and share resources between them.
36. What is Direct Connect?
Amazon Direct Connect is a network service that provides dedicated network connections from customers’ on-premises data centers to AWS. Direct Connect provides a secure and reliable way to transfer data between AWS and on-premises data centers.
37. What are Direct Connect locations?
Direct Connect locations are physical facilities where customers can connect their on-premises data centers to AWS using Amazon Direct Connect. Direct Connect locations provide customers with a low-latency, high-bandwidth connection to AWS.
38. What is a Direct Connect gateway?
A Direct Connect gateway is a network component that enables customers to extend their VPC network over a Direct Connect connection. Direct Connect gateways allow customers to connect their on-premises data centers to multiple VPCs in different AWS regions.
39. What is a Virtual Private Network (VPN)?
A Virtual Private Network (VPN) is a network technology that creates a secure and encrypted connection between two networks, such as between an on-premises data center and an Amazon VPC. VPNs are used to securely transfer data between networks.
40. What is an Internet Protocol Security (IPSec) VPN?
An Internet Protocol Security (IPSec) VPN is a type of VPN that uses IPSec encryption to provide secure and encrypted communication over the Internet. IPSec VPNs are widely used to securely connect remote users to corporate networks.
41. What is a SSL VPN?
Secure Sockets Layer (SSL) VPN is a type of VPN that uses SSL encryption to provide secure and encrypted communication over the Internet. SSL VPNs are widely used for remote access to corporate networks, especially for remote users who need to access corporate resources from mobile devices.
42. What is a Site-to-Site VPN?
A Site-to-Site VPN is a type of VPN that provides a secure and encrypted connection between two fixed networks, such as between an on-premises data center and an Amazon VPC. Site-to-Site VPNs are used to securely transfer data between networks.
43. What is a Remote Access VPN?
A Remote Access VPN is a type of VPN that provides secure and encrypted communication for remote users who need to access a network from a remote location. Remote Access VPNs are widely used for remote access to corporate networks, especially for remote employees who need to access corporate resources from mobile devices.
44. What is the difference between a public IP address and a private IP address?
Public IP addresses are IP addresses that are publicly accessible and can be used to communicate with devices on the Internet. Private IP addresses are IP addresses that are used within a private network and are not accessible from the Internet.
45. What is the purpose of a subnet mask in a network?
The purpose of a subnet mask in a network is to determine which portion of an IP address represents the network address and which portion represents the host address. Subnet masks are used to divide an IP address into a network address and a host address, allowing the network to be divided into smaller subnetworks.
46. What is a VPC endpoint?
A VPC endpoint is a network component that allows communication between instances in a VPC and AWS services without requiring the traffic to traverse over the public Internet. VPC endpoints are used to increase the security and reliability of data transfers between a VPC and AWS services.
47. What is a VPC peering connection?
A VPC peering connection is a network connection between two VPCs that enables instances in either VPC to communicate with each other as if they are within the same network. VPC peering connections are used to extend the network connectivity between multiple VPCs within the same AWS region.
48. What is a Network Address Translation (NAT) gateway?
A Network Address Translation (NAT) gateway is a network component that allows instances in a private subnet to communicate with the Internet or other public networks while using a public IP address assigned to the NAT gateway. NAT gateways are used to provide Internet connectivity for instances in private subnets.
49. What is a VPN connection?
A VPN connection is a secure and encrypted connection between two networks, such as between an on-premises data center and an Amazon VPC. VPN connections are used to securely transfer data between networks.
50. What is a VGW?
A VGW (Virtual Private Gateway) is a network component that is used in an AWS VPN connection to provide a secure and encrypted connection between an on-premises data center and an Amazon VPC. The VGW acts as the entry point for VPN traffic into the VPC.
51. What is the purpose of a VPN gateway?
The purpose of a VPN gateway is to provide a secure and encrypted connection between two networks. VPN gateways are used to securely transfer data between networks, such as between an on-premises data center and an Amazon VPC.
52. What is a BGP Autonomous System (AS) number?
A BGP Autonomous System (AS) number is a unique identifier assigned by a regional Internet registry (RIR) to identify a network or group of networks within the Border Gateway Protocol (BGP). The BGP AS number is used to identify the routing policy of a network and to control the propagation of routes between BGP speakers.
53. What is an Elastic IP address?
An Elastic IP address is a static IPv4 address designed for dynamic cloud computing. Elastic IP addresses are assigned to an AWS account and can be used to mask the failure of an instance or software by rapidly remapping the address to another instance in the same network.
54. What is the difference between a public subnet and a private subnet?
A public subnet is a subnet that has direct access to the Internet via a Network Address Translation (NAT) gateway or an Internet gateway, while a private subnet is a subnet that does not have direct access to the Internet. Private subnets are used to host resources that should not be directly accessible from the Internet.
55. What is the purpose of a Customer Gateway in AWS VPN?
A Customer Gateway is a network component that acts as the entry point for VPN traffic from an on-premises data center into an Amazon VPC. The Customer Gateway establishes a VPN connection with a Virtual Private Gateway (VGW) in the VPC to provide a secure and encrypted connection between the on-premises data center and the VPC.
