Advance Networking in AWS Online Test

The Advance Networking in AWS test evaluates a candidate's understanding of various networking concepts and their implementation on the Amazon Web Services (AWS) platform. The test includes questions to test knowledge of VPC, subnets, route tables, internet gateways, load balancers, VPN connections, and network security. It assesses the candidate's ability to design, configure, and troubleshoot network architectures in AWS.

Get started for free

Preview questions

Screen candidates with a 30 mins test

Test duration: ~ 30 mins

Difficulty level: Moderate

Availability: Available as custom test

Questions:

15 AWS MCQs

Covered skills:

AWS Networking

VPC (Virtual Private Cloud)

Subnets

Route Tables

Internet Gateways

NAT Gateways

VPC Peering

VPN Connections

Direct Connect

Load Balancers

DNS in AWS

Network Security in AWS

Get started for free

Preview questions

Use Adaface tests trusted by recruitment teams globally

Adaface is used by 1500+ businesses in 80 countries.

Adaface skill assessments measure on-the-job skills of candidates, providing employers with an accurate tool for screening potential hires.

Use the Advance Networking in AWS Test to shortlist qualified candidates

The Advance Networking in AWS Online Test helps recruiters and hiring managers identify qualified candidates from a pool of resumes, and helps in taking objective hiring decisions. It reduces the administrative overhead of interviewing too many candidates and saves time by filtering out unqualified candidates at the first step of the hiring process.

The test screens for the following skills that hiring managers look for in candidates:

Ability to design and implement AWS VPCs
Ability to configure and manage subnets within a VPC
Ability to create and manage route tables in AWS
Ability to configure and use internet gateways in a VPC
Ability to configure and use NAT gateways in a VPC
Ability to establish and manage VPC peering connections
Ability to create and manage VPN connections in AWS
Ability to configure and use AWS Direct Connect
Ability to configure and manage load balancers in AWS
Ability to configure DNS services in AWS
Ability to implement network security measures in AWS

Get started for free

Preview questions

Screen candidates with the highest quality questions

We have a very high focus on the quality of questions that test for on-the-job skills. Every question is non-googleable and we have a very high bar for the level of subject matter experts we onboard to create these questions. We have crawlers to check if any of the questions are leaked online. If/ when a question gets leaked, we get an alert. We change the question for you & let you know.

How we design questions

These are just a small sample from our library of 15,000+ questions. The actual questions on this Advance Networking in AWS Test will be non-googleable.

🧐 Question
Easy Downtime and Workload EC2	Solve
ChickTok is a dating app that runs on EC2 behind an ALB. The EC2 instances run in an EC2 Auto Scaling group across multiple AZ. On every Saturday night, the app becomes atleast 5 times slower. Upon investigation, it is found that the CPU utilization reaches 100% within a matter of seconds instead of being a gradual increment. This is happening due to a batch core dating algorithm update that happens on every Saturday 9PM. ChickTok wants a solution that - Tackles the extra workload - Avoids downtime Which of the following would you recommend?
Medium EC2DataProcessing EC2 S3 Security Groups Network ACLs	Solve
You work as a Solutions Architect for a data analysis firm. The company stores large datasets on Amazon S3, and you've been tasked with setting up an Amazon EC2 instance to process this data. The EC2 instance will fetch data from S3, process it, and then write the results back to a different S3 bucket. To ensure security, the EC2 instance should not have direct internet access, and it should only be able to communicate with the S3 buckets. You've decided to place the EC2 instance in a VPC private subnet with a CIDR block of 10.0.1.0/24. The associated security group is set to deny all inbound traffic and allow all outbound traffic. Which additional configuration should you make to enable the EC2 instance to access the S3 buckets while complying with the security requirements? A: Modify the Network ACL of the subnet to allow outbound connections to the IP range of the S3 service. B: Assign a Public IP to the EC2 instance and update the security group to allow inbound and outbound traffic to S3. C: Add a NAT Gateway in the private subnet and update the route tables to direct S3 traffic to the NAT Gateway. D: Create an S3 VPC Gateway Endpoint and update the route tables for the private subnet to direct S3 traffic to the VPC Endpoint. E: Create a VPN connection from the VPC to the S3 buckets.
Medium Orderly Restoration of RDS with Transaction Logs RDS Transaction Logs Point-in-time recovery	Solve
You work as a database manager for a fintech company that uses an AWS RDS PostgreSQL instance. The company abides by stringent data security standards, which require minimal data loss in the event of database failures or accidental data modifications. Unexpectedly, an operation that updates a significant number of records in a crucial transaction table is mistakenly run. You discover that this operation occurred at 12:45 PM. Your RDS PostgreSQL instance is configured to perform automated backups every day at 1:00 AM, with transaction logs being backed up every 5 minutes. Furthermore, there is a manual DB snapshot taken at 11:00 AM on the same day. To restore the database with minimal data loss, considering the sequence and order of log application, which of the following steps should you execute? A: Restore from the manual DB snapshot at 11:00 AM, then perform a point-in-time recovery to 12:45 PM. B: Perform a point-in-time recovery to 12:45 PM. C: Restore from the last automated backup at 1:00 AM, then apply all transaction logs until 12:45 PM. D: Restore from the manual DB snapshot at 11:00 AM, then apply transaction logs from 11:00 AM to 12:45 PM. E: Perform a point-in-time recovery to 11:00 AM, then apply transaction logs from 11:00 AM to 12:45 PM.
Medium Push Notifications Dynamic DB AWS Mobile Push	Solve
Flowlife is a tips iOS app that is running on AWS with ~10 million users in the US. Users can post tips about a particular place (restaurants, businesses etc) and other users can search for the tips in the app. Flowlife wants to implement location based alerts on their iOS app. Users will receive relevant tips in proximity to their location. For maximum user engagement and relevant tips, the tips must be in the low minute count. Which of the following solutions is cost effective?
Medium SecureEC2Setup EC2 Security Groups VPC	Solve
As an AWS Cloud Engineer for a financial institution, you're setting up an EC2 instance in a VPC to host a web application that handles sensitive financial data. The EC2 instance is placed in a private subnet and associated with a security group that only allows inbound HTTPS (port 443) traffic from the internet. You have an Application Load Balancer (ALB) in a public subnet, which forwards incoming traffic to the EC2 instance. However, during the testing phase, you find that the web application on the EC2 instance is not reachable from the internet, but works fine from within the VPC. What could be the reason for this? A: The security group should allow inbound traffic from the ALB's security group, not the internet. B: The ALB should be in the private subnet, not the public subnet. C: EC2 instances hosting sensitive data cannot be reached through an ALB. D: The ALB and EC2 instance must be in the same subnet.

	🧐 Question	🔧 Skill
	Easy Downtime and Workload EC2	2 mins AWS	Solve
ChickTok is a dating app that runs on EC2 behind an ALB. The EC2 instances run in an EC2 Auto Scaling group across multiple AZ. On every Saturday night, the app becomes atleast 5 times slower. Upon investigation, it is found that the CPU utilization reaches 100% within a matter of seconds instead of being a gradual increment. This is happening due to a batch core dating algorithm update that happens on every Saturday 9PM. ChickTok wants a solution that - Tackles the extra workload - Avoids downtime Which of the following would you recommend?
	Medium EC2DataProcessing EC2 S3 Security Groups Network ACLs	2 mins AWS	Solve
You work as a Solutions Architect for a data analysis firm. The company stores large datasets on Amazon S3, and you've been tasked with setting up an Amazon EC2 instance to process this data. The EC2 instance will fetch data from S3, process it, and then write the results back to a different S3 bucket. To ensure security, the EC2 instance should not have direct internet access, and it should only be able to communicate with the S3 buckets. You've decided to place the EC2 instance in a VPC private subnet with a CIDR block of 10.0.1.0/24. The associated security group is set to deny all inbound traffic and allow all outbound traffic. Which additional configuration should you make to enable the EC2 instance to access the S3 buckets while complying with the security requirements? A: Modify the Network ACL of the subnet to allow outbound connections to the IP range of the S3 service. B: Assign a Public IP to the EC2 instance and update the security group to allow inbound and outbound traffic to S3. C: Add a NAT Gateway in the private subnet and update the route tables to direct S3 traffic to the NAT Gateway. D: Create an S3 VPC Gateway Endpoint and update the route tables for the private subnet to direct S3 traffic to the VPC Endpoint. E: Create a VPN connection from the VPC to the S3 buckets.
	Medium Orderly Restoration of RDS with Transaction Logs RDS Transaction Logs Point-in-time recovery	3 mins AWS	Solve
You work as a database manager for a fintech company that uses an AWS RDS PostgreSQL instance. The company abides by stringent data security standards, which require minimal data loss in the event of database failures or accidental data modifications. Unexpectedly, an operation that updates a significant number of records in a crucial transaction table is mistakenly run. You discover that this operation occurred at 12:45 PM. Your RDS PostgreSQL instance is configured to perform automated backups every day at 1:00 AM, with transaction logs being backed up every 5 minutes. Furthermore, there is a manual DB snapshot taken at 11:00 AM on the same day. To restore the database with minimal data loss, considering the sequence and order of log application, which of the following steps should you execute? A: Restore from the manual DB snapshot at 11:00 AM, then perform a point-in-time recovery to 12:45 PM. B: Perform a point-in-time recovery to 12:45 PM. C: Restore from the last automated backup at 1:00 AM, then apply all transaction logs until 12:45 PM. D: Restore from the manual DB snapshot at 11:00 AM, then apply transaction logs from 11:00 AM to 12:45 PM. E: Perform a point-in-time recovery to 11:00 AM, then apply transaction logs from 11:00 AM to 12:45 PM.
	Medium Push Notifications Dynamic DB AWS Mobile Push	3 mins AWS	Solve
Flowlife is a tips iOS app that is running on AWS with ~10 million users in the US. Users can post tips about a particular place (restaurants, businesses etc) and other users can search for the tips in the app. Flowlife wants to implement location based alerts on their iOS app. Users will receive relevant tips in proximity to their location. For maximum user engagement and relevant tips, the tips must be in the low minute count. Which of the following solutions is cost effective?
	Medium SecureEC2Setup EC2 Security Groups VPC	2 mins AWS	Solve
As an AWS Cloud Engineer for a financial institution, you're setting up an EC2 instance in a VPC to host a web application that handles sensitive financial data. The EC2 instance is placed in a private subnet and associated with a security group that only allows inbound HTTPS (port 443) traffic from the internet. You have an Application Load Balancer (ALB) in a public subnet, which forwards incoming traffic to the EC2 instance. However, during the testing phase, you find that the web application on the EC2 instance is not reachable from the internet, but works fine from within the VPC. What could be the reason for this? A: The security group should allow inbound traffic from the ALB's security group, not the internet. B: The ALB should be in the private subnet, not the public subnet. C: EC2 instances hosting sensitive data cannot be reached through an ALB. D: The ALB and EC2 instance must be in the same subnet.

	🧐 Question	🔧 Skill	💪 Difficulty	⌛ Time
	Downtime and Workload EC2	AWS	Easy	2 mins	Solve
ChickTok is a dating app that runs on EC2 behind an ALB. The EC2 instances run in an EC2 Auto Scaling group across multiple AZ. On every Saturday night, the app becomes atleast 5 times slower. Upon investigation, it is found that the CPU utilization reaches 100% within a matter of seconds instead of being a gradual increment. This is happening due to a batch core dating algorithm update that happens on every Saturday 9PM. ChickTok wants a solution that - Tackles the extra workload - Avoids downtime Which of the following would you recommend?
	EC2DataProcessing EC2 S3 Security Groups Network ACLs	AWS	Medium	2 mins	Solve
You work as a Solutions Architect for a data analysis firm. The company stores large datasets on Amazon S3, and you've been tasked with setting up an Amazon EC2 instance to process this data. The EC2 instance will fetch data from S3, process it, and then write the results back to a different S3 bucket. To ensure security, the EC2 instance should not have direct internet access, and it should only be able to communicate with the S3 buckets. You've decided to place the EC2 instance in a VPC private subnet with a CIDR block of 10.0.1.0/24. The associated security group is set to deny all inbound traffic and allow all outbound traffic. Which additional configuration should you make to enable the EC2 instance to access the S3 buckets while complying with the security requirements? A: Modify the Network ACL of the subnet to allow outbound connections to the IP range of the S3 service. B: Assign a Public IP to the EC2 instance and update the security group to allow inbound and outbound traffic to S3. C: Add a NAT Gateway in the private subnet and update the route tables to direct S3 traffic to the NAT Gateway. D: Create an S3 VPC Gateway Endpoint and update the route tables for the private subnet to direct S3 traffic to the VPC Endpoint. E: Create a VPN connection from the VPC to the S3 buckets.
	Orderly Restoration of RDS with Transaction Logs RDS Transaction Logs Point-in-time recovery	AWS	Medium	3 mins	Solve
You work as a database manager for a fintech company that uses an AWS RDS PostgreSQL instance. The company abides by stringent data security standards, which require minimal data loss in the event of database failures or accidental data modifications. Unexpectedly, an operation that updates a significant number of records in a crucial transaction table is mistakenly run. You discover that this operation occurred at 12:45 PM. Your RDS PostgreSQL instance is configured to perform automated backups every day at 1:00 AM, with transaction logs being backed up every 5 minutes. Furthermore, there is a manual DB snapshot taken at 11:00 AM on the same day. To restore the database with minimal data loss, considering the sequence and order of log application, which of the following steps should you execute? A: Restore from the manual DB snapshot at 11:00 AM, then perform a point-in-time recovery to 12:45 PM. B: Perform a point-in-time recovery to 12:45 PM. C: Restore from the last automated backup at 1:00 AM, then apply all transaction logs until 12:45 PM. D: Restore from the manual DB snapshot at 11:00 AM, then apply transaction logs from 11:00 AM to 12:45 PM. E: Perform a point-in-time recovery to 11:00 AM, then apply transaction logs from 11:00 AM to 12:45 PM.
	Push Notifications Dynamic DB AWS Mobile Push	AWS	Medium	3 mins	Solve
Flowlife is a tips iOS app that is running on AWS with ~10 million users in the US. Users can post tips about a particular place (restaurants, businesses etc) and other users can search for the tips in the app. Flowlife wants to implement location based alerts on their iOS app. Users will receive relevant tips in proximity to their location. For maximum user engagement and relevant tips, the tips must be in the low minute count. Which of the following solutions is cost effective?
	SecureEC2Setup EC2 Security Groups VPC	AWS	Medium	2 mins	Solve
As an AWS Cloud Engineer for a financial institution, you're setting up an EC2 instance in a VPC to host a web application that handles sensitive financial data. The EC2 instance is placed in a private subnet and associated with a security group that only allows inbound HTTPS (port 443) traffic from the internet. You have an Application Load Balancer (ALB) in a public subnet, which forwards incoming traffic to the EC2 instance. However, during the testing phase, you find that the web application on the EC2 instance is not reachable from the internet, but works fine from within the VPC. What could be the reason for this? A: The security group should allow inbound traffic from the ALB's security group, not the internet. B: The ALB should be in the private subnet, not the public subnet. C: EC2 instances hosting sensitive data cannot be reached through an ALB. D: The ALB and EC2 instance must be in the same subnet.

Test candidates on core Advance Networking in AWS Hiring Test topics

AWS Networking: AWS Networking refers to the various services and features provided by Amazon Web Services for creating and managing a network infrastructure in the cloud. It includes a wide range of components such as VPC, subnets, route tables, internet gateways, and more, which allow users to build scalable and secure networks within the AWS ecosystem.

VPC (Virtual Private Cloud): VPC, or Virtual Private Cloud, is a service offered by AWS that allows users to create their own isolated virtual network in the cloud. It provides complete control over network settings, including IP address ranges, subnets, routing tables, and network gateways, enabling organizations to design and configure customized networking environments for their applications and resources.

Subnets: Subnets are smaller divisions of IP address ranges within a VPC. They help in organizing and managing different segments of a network, allowing users to distribute their resources across multiple subnets for enhanced security and fault tolerance. By setting up subnets, users can isolate components of their infrastructure and control traffic flow between them.

Route Tables: Route tables serve as a set of rules that determine how network traffic is directed within a VPC. They define the paths for inbound and outbound traffic, specifying which subnets to route the traffic to and which internet gateways or virtual private gateways to use. Proper configuration of route tables is important for efficient routing of network traffic between various resources in the network.

Internet Gateways: Internet Gateways are a vital component of a VPC that allows traffic to flow between the VPC and the internet. They act as a gateway for outbound traffic, enabling resources within the VPC to access the internet, and also as a target for inbound traffic coming from the internet into the VPC. Internet Gateways provide connectivity and enable communication between the resources in the VPC and external networks.

NAT Gateways: NAT Gateways, or Network Address Translation Gateways, provide a means for resources within a private subnet in a VPC to access the internet while remaining protected from direct exposure. They act as an intermediary between the private subnets and the internet, translating the private IP addresses into public ones to enable bidirectional network communication.

VPC Peering: VPC Peering allows the connection of multiple VPCs in AWS, enabling secure communication between them as if they were within the same network. It provides a way to share network resources, such as routing tables, security groups, and subnets, across multiple VPCs, allowing users to create a virtual network topology that spans multiple regions or accounts.

VPN Connections: VPN Connections in AWS enable users to establish secure and encrypted connections between their on-premises networks and their VPCs in the cloud. They provide a secure communication channel over the internet, allowing for secure access to resources in the VPC as if they were locally connected to the on-premises network. VPN Connections are important for hybrid cloud setups and for extending on-premises networks into the AWS cloud.

Direct Connect: Direct Connect is a service offered by AWS that provides dedicated network connections between on-premises data centers and AWS data centers. It bypasses the public internet, offering a more secure, reliable, and low-latency connection for transferring data between the organizations' network infrastructure and their resources in the AWS cloud. Direct Connect is crucial for enterprises with high bandwidth requirements or stringent security and compliance needs.

Load Balancers: Load Balancers in AWS distribute incoming network traffic across multiple resources, such as EC2 instances, containers, or IP addresses, to ensure proper load distribution and high availability of applications. They help in scaling and managing the load on resources, improving overall application performance and fault tolerance. Load Balancers can be configured to distribute traffic based on various algorithms, such as round-robin, least connections, or IP hash, among others.

DNS in AWS: DNS in AWS refers to the Domain Name System services provided by Amazon Web Services. It allows users to manage and resolve domain names to their corresponding IP addresses, enabling access to resources in the AWS cloud through human-readable domain names. DNS services in AWS include Route 53, which offers highly available and scalable DNS management, allowing users to configure DNS records, set up health checks, and perform domain registration.

Network Security in AWS: Network Security in AWS encompasses various features and tools provided by Amazon Web Services for securing network resources and preventing unauthorized access. This includes security groups, network access control lists (ACLs), web application firewalls (WAFs), and more. Network Security in AWS is essential for protecting sensitive data, preventing attacks, and ensuring the integrity and availability of applications and resources.

Get started for free

Preview questions

Make informed decisions with actionable reports and benchmarks

View sample scorecard

Screen candidates in 3 easy steps

Pick a test from over 500+ tests

The Adaface test library features 500+ tests to enable you to test candidates on all popular skills- everything from programming languages, software frameworks, devops, logical reasoning, abstract reasoning, critical thinking, fluid intelligence, content marketing, talent acquisition, customer service, accounting, product management, sales and more.

Invite your candidates with 2-clicks

Make informed hiring decisions

Get started for free

Preview questions

Try the most advanced candidate assessment platform

ChatGPT Protection

Non-googleable Questions

Web Proctoring

IP Proctoring

Webcam Proctoring

MCQ Questions

Coding Questions

Typing Questions

Personality Questions

Custom Questions

Ready-to-use Tests

Custom Tests

Custom Branding

Bulk Invites

Public Links

ATS Integrations

Multiple Question Sets

Custom API integrations

Role-based Access

Priority Support

GDPR Compliance

Pick a plan based on your hiring needs

The most advanced candidate screening platform.
14-day free trial. No credit card required.

From

$15

per month (paid annually)

View pricing plans

With Adaface, we were able to optimise our initial screening process by upwards of 75%, freeing up precious time for both hiring managers and our talent acquisition team alike!

Brandon Lee, Head of People, Love, Bonito

It's very easy to share assessments with candidates and for candidates to use. We get good feedback from candidates about completing the tests. Adaface are very responsive and friendly to deal with.

Kirsty Wood, Human Resources, WillyWeather

We were able to close 106 positions in a record time of 45 days! Adaface enables us to conduct aptitude and psychometric assessments seamlessly. My hiring managers have never been happier with the quality of candidates shortlisted.

Amit Kataria, CHRO, Hanu

We evaluated several of their competitors and found Adaface to be the most compelling. Great library of questions that are designed to test for fit rather than memorization of algorithms.

Swayam Narain, CTO, Affable