3.5 Identify AWS network services.
Objective 3.5 sits in Cloud Technology and Services, which carries 34% of the Cloud Practitioner exam. The questions below are original, written from the official objective title above, and each explanation cites the AWS page it rests on.
Objective title verbatim from the official objectives. AWS exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
Inbound HTTPS is allowed by a network ACL, but the responses leaving the subnet are dropped. What explains that?
The concept
A packet filter either remembers the conversations it has seen or it does not. That single property decides whether you write one rule per flow or two, and it is the commonest surprise inside a subnet.
Why this answer
With nothing remembered about the request, the reply is judged on its own against the outbound rules. Permitting the inbound port still leaves the ephemeral ports the reply goes out on to deal with.
- ASecurity groups and network ACLs are evaluated independently at different layers. Neither one cancels out the decision of the other.
- Correct. Allowing specific inbound traffic on a network ACL does not automatically allow the responses to that traffic.
- CNumbering sets evaluation order, lowest first. A high number can be shadowed by an earlier rule, but it never switches a rule off.
- DA gateway governs whether the subnet can reach the internet at all. The request already arrived, so routing is plainly working.
Now you: objective 3.5 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
An EC2 instance makes an outbound API call. Its security group has no inbound rule covering the reply. Does the response arrive?
Sample question 2 of 3
Two of six web servers behind a load balancer start failing health checks. What does Elastic Load Balancing do with them?
Sample question 3 of 3
A firm needs consistent throughput between its own data centre and AWS, off the public internet. Which service provides that?
That’s 3 of the full Cloud Practitioner bank.
Keep going free: 10 questions per certification in bank practice, with no account.
Continue practicingRead the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.