Skip to content

Episode 31: AWS SAA-C03 VPC & Networking - Quick Revision + 13 Exam Questions | TechTalkWithBalu

September 28, 2026 · 33 min

Show notes

🎁 Free SAA-C03 cheat sheet for this series - link at the bottom.


New format! A 3-minute VPC revision to jog your memory, then 13 networking exam questions with full answers - and why every wrong option is wrong.


🆕 THE FORMAT

🧠 Quick revision first (skip it if you know it cold)

📝 Then 13 networking scenario questions

⏱️ A pause after each to lock in YOUR answer

✅ The answer + WHY it's right

❌ WHY each wrong option is wrong


Because on the real exam, eliminating the plausible-but-wrong options is the whole game.


🧠 QUICK REVISION COVERS

• Public vs private subnets (it's all in the route table)

• Internet Gateway vs NAT Gateway

• Route tables

• Security Groups (stateful) vs NACLs (stateless)

• VPC endpoints (gateway vs interface)

• VPC peering vs Transit Gateway


📋 THE 13 QUESTIONS TEST

• NAT gateway (IPv4 private-subnet outbound)

• Network ACL (subnet-level deny rules)

• Multi-AZ NAT gateway high availability

• VPC peering (two VPCs, simplest)

• Application Load Balancer path-based routing

• Direct Connect (dedicated private link)

• Security group (stateful return traffic)

• Direct Connect resilience (DX + VPN backup)

• Egress-only internet gateway (IPv6 outbound)

• PrivateLink (private access to a third-party service)

• Route 53 failover routing (active-passive)

• VPC Flow Logs (capture network traffic)

• Global Accelerator (non-cacheable, static anycast IPs)


⚡ THE CORE SKILL

So many networking questions come down to ONE distinction:

• IPv4 vs IPv6

• Stateful (SG) vs stateless (NACL)

• One VPC (peering) vs many (Transit Gateway)

• Cacheable (CloudFront) vs non-cacheable (Global Accelerator)

• Public internet (VPN) vs AWS backbone (Direct Connect)


Spot which distinction the question is testing, and the answer falls out.


💡 KEY DISTINCTIONS DRILLED

• NAT gateway (IPv4) vs egress-only IGW (IPv6)

• Security group (stateful) vs NACL (stateless, can deny)

• VPC peering (2 VPCs) vs Transit Gateway (many)

• Direct Connect (private, consistent) vs VPN (over internet)

• Route 53 failover vs latency vs weighted vs geolocation

• CloudFront (caching) vs Global Accelerator (backbone, static IPs)


🎓 SCORING

Got 9+ right (~70%)? Your networking is in good shape. Missed some? Networking is heavily tested - now you know exactly where to focus.


🎧 First in the new topic-challenge format! Databases, security, storage & more coming.


📚 Subscribe to keep testing yourself right up to exam day.


━━━━━━━━━━━━━━━━━━━━

📚 FREE STUDY HELP FOR SAA-C03

━━━━━━━━━━━━━━━━━━━━


✅ Free cheat sheet pack - one page per exam domain, incl. NAT gateway vs egress-only IGW and security groups vs NACLs. No catch.

👉 https://payhip.com/b/Zv5hd


🎯 Want more practice like today's questions?

104 scenario questions that explain why the right answer is right AND why every wrong option is wrong. Works on your phone or laptop.

👉 https://payhip.com/b/CLvcu

🏷️ Listeners get 20% off with code PASS

━━━━━━━━━━━━━━━━━━━━


#AWS #SAAC03 #VPC #Networking #PracticeExam #SolutionsArchitect #AWSCertification #ExamPrep


⭐ 5-star rating if this helps your prep

All episodes of AWS Solutions Architect exam prep

Settings

Display

Language

Decides which stations you see first on the home page.

History

Recently played stations and episodes and your latest searches are only stored in this browser.

Notifications

A short notice when a podcast you follow has a new episode. Turn off single podcasts with the bell on their page.

Account

Save favorites – in the app and on the website.

Keyboard shortcuts

/
Open search
Space
Play or pause
← →
In the player: back 15 s, forward 30 s (episodes) · in a row: next tile
↑ ↓
In a row: target within the tile
Home / End
In a row: first or last tile
Esc
Close window or menu
?
This overview
Now playing

Go to station page

Play next

    Add episodes with “Play next” – they play after the current episode.