CompTIA Cloud+ Networking and Connectivity 1 — Questions and Answers
Question 1: What is the primary purpose of a Virtual Private Cloud (VPC)?
- To provide a logically isolated network environment in the cloud (Correct answer)
- To virtualize physical servers in a data center
- To create a backup copy of an on-premises network
- To enable multi-cloud connectivity between providers
Correct answer: To provide a logically isolated network environment in the cloud
A VPC provides a logically isolated section of the cloud where you can launch resources within a virtual network you define.
Question 2: Which type of subnet in a VPC allows instances to communicate directly with the internet?
- Private subnet
- Internal subnet
- Public subnet (Correct answer)
- Isolated subnet
Correct answer: Public subnet
A public subnet has a route to an internet gateway, allowing instances with public IP addresses to communicate directly with the internet.
Question 3: What is the key difference between a Security Group and a Network ACL (NACL) in cloud networking?
- Security Groups are stateful, while NACLs are stateless (Correct answer)
- Security Groups operate at the subnet level, NACLs at the instance level
- Security Groups only support inbound rules, NACLs support both directions
- Security Groups are free while NACLs incur additional costs
Correct answer: Security Groups are stateful, while NACLs are stateless
Security Groups are stateful (return traffic is automatically allowed), while NACLs are stateless (return traffic must be explicitly permitted).
Question 4: A company needs to distribute incoming web traffic across multiple cloud instances for high availability. Which service should they deploy?
- Auto Scaling Group
- Load Balancer (Correct answer)
- Content Delivery Network
- DNS Round Robin only
Correct answer: Load Balancer
A load balancer distributes incoming traffic across multiple backend instances, ensuring high availability and improved application performance.
Question 5: Which routing protocol is standard for exchanging routes between autonomous systems in hybrid cloud and internet environments?
- OSPF
- RIP
- BGP (Correct answer)
- EIGRP
Correct answer: BGP
Border Gateway Protocol (BGP) is the standard inter-AS routing protocol used on the internet and in hybrid cloud connections such as Direct Connect and ExpressRoute.
Question 6: What is the purpose of a NAT Gateway in a cloud VPC?
- To translate domain names to IP addresses for cloud instances
- To allow private subnet instances to reach the internet without exposing them publicly (Correct answer)
- To connect two VPCs together using private IP addresses
- To provide a dedicated private circuit from on-premises to the cloud
Correct answer: To allow private subnet instances to reach the internet without exposing them publicly
A NAT Gateway lets instances in private subnets initiate outbound internet connections while blocking unsolicited inbound connections from the internet.
Question 7: Which cloud networking feature allows two VPCs to communicate using private IP addresses without traffic traversing the public internet?
- VPN Gateway
- Internet Gateway
- VPC Peering (Correct answer)
- Transit Gateway
Correct answer: VPC Peering
VPC Peering creates a direct private network connection between two VPCs, enabling resources in each VPC to communicate using private IP addresses.
CompTIA Cloud+ Networking and Connectivity 1
What is the primary purpose of a Virtual Private Cloud (VPC)?