Practice Tests and Exam Preparation
What makes a subnet public in AWS VPC?
Answer: Route to Internet Gateway
A subnet is public when its route table has a route to an Internet Gateway (0.0.0.0/0 → IGW).
What is the key difference between Security Groups and Network ACLs?
Answer: Stateful vs Stateless
Security Groups are stateful (return traffic automatically allowed), NACLs are stateless (must configure both directions).
Does VPC Peering support transitive routing?
Answer: No
VPC Peering is one-to-one connection with no transitive routing. Use Transit Gateway for hub-and-spoke connectivity.