AWS Core Infrastructure Services Flashcards
6 cards from real CCP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 AWS Core Infrastructure Services flashcards as text
Which AWS networking component acts as a virtual firewall controlling inbound and outbound traffic at the instance level?
Answer: Security Group
Security Groups act as stateful virtual firewalls at the EC2 instance level, automatically allowing return traffic for allowed outbound connections.
What is the key difference between a Security Group and a Network ACL in AWS?
Answer: Security Groups are stateful; NACLs are stateless
Security Groups are stateful (return traffic is automatically allowed), while Network ACLs are stateless (you must explicitly allow both inbound and outbound traffic).
Which AWS service distributes incoming application traffic across multiple EC2 instances, containers, or IP addresses?
Answer: Elastic Load Balancing
Elastic Load Balancing automatically distributes incoming traffic across healthy targets in one or more Availability Zones to improve availability.
Which Amazon VPC component allows instances in a private subnet to access the internet without exposing them to inbound internet traffic?
Answer: NAT Gateway
A NAT Gateway allows outbound internet access for instances in private subnets while preventing the internet from initiating connections to those instances.
Which AWS service is a globally distributed DNS service that routes end users to the nearest AWS endpoint?
Answer: Amazon Route 53
Amazon Route 53 is a highly available DNS service that translates domain names to IP addresses and supports routing policies like latency-based and geolocation routing.
Which AWS service is a content delivery network (CDN) that caches content at edge locations worldwide?
Answer: Amazon CloudFront
Amazon CloudFront caches content at over 400 edge locations globally to reduce latency and deliver content faster to end users.