Module 2 – Networking (FINAL ANSWERS)
Short Answer Questions (2 Marks Each)
21. What is Amazon VPC?
Answer: Amazon VPC is a secure, isolated virtual network where you control IP ranges, subnets,
routing, and security. It acts like your own private datacenter inside AWS.
22. What is a subnet? Public vs private.
Answer: A subnet divides a VPC into smaller networks. Public subnets allow internet access
through IGW; private subnets do not.
23. What is an Internet Gateway?
Answer: It enables resources in a VPC to connect to the internet.
24. What are Security Groups?
Answer: Security Groups are virtual firewalls that control inbound and outbound traffic of EC2
instances.
25. What is a Route Table?
Answer: A route table contains rules that determine where network traffic is directed.
26. What is AWS Route 53?
Answer: It is AWS’s DNS service used for domain registration and routing users to applications
globally.
27. What is Amazon CloudFront?
Answer: CloudFront is a CDN that delivers content faster using edge locations.
28. What is a NAT Gateway?
Answer: It allows private subnet instances to access the internet without exposing them publicly.
Long Answer Questions (3–5 Marks Each)
29. How to create a custom VPC?
Answer: To create a custom VPC, define a CIDR block like [Link]/16, then add a public and
private subnet. Attach an Internet Gateway and update the public route table to allow outbound
internet access. Create a private route table without IGW routing. Add security groups and NACLs
to control network traffic. This structure ensures secure communication and separation of
public-facing and internal components.
30. Security Groups vs Network ACLs
Answer: Security Groups operate at the instance level and are stateful, meaning return traffic is
automatically allowed. Network ACLs work at the subnet level and are stateless, requiring explicit
inbound and outbound rules. Security Groups are easier for instance-level control while NACLs
provide an additional network layer of protection. Using both ensures stronger security.
31. How to build a VPC and launch a web server?
Answer: Create a VPC with a CIDR block, then add a public subnet and attach an Internet
Gateway. Update the route table to allow [Link]/0 routing. Launch an EC2 instance in the public
subnet and enable auto-assign public IP. Configure its Security Group to allow HTTP and SSH.
Install Apache or Nginx on the instance to host a website accessible over the internet.
32. Explain VPC Peering.
Answer: VPC Peering enables two VPCs to communicate privately using AWS’s internal network. It
is useful for applications split across VPCs. Peering is non-transitive, meaning each VPC pair must
be directly peered. It improves security and reduces latency compared with VPN connections.
33. Routing policies in Route 53.
Answer: Simple routing returns one record randomly. Latency routing directs users to the Region
with lowest latency. Weighted routing splits traffic based on assigned weights. Failover routing
shifts traffic to a standby server if the primary fails. Geolocation routing directs traffic based on
user’s physical location. These policies improve performance and availability.
34. How CloudFront improves performance.
Answer: CloudFront caches content in edge locations near users, reducing latency and speeding
up delivery. It lowers load on the origin server by serving cached files. It also supports HTTPS and
security features like WAF integration. This improves both speed and reliability.
35. Multi-tier VPC architecture.
Answer: A multi-tier VPC includes a public subnet for web servers, a private subnet for application
servers, and another private subnet for databases. Security Groups restrict access between layers,
ensuring only necessary traffic flows. This design increases security, makes scaling easier, and
separates responsibilities cleanly across tiers.