Aws Test Paper 2
Aws Test Paper 2
Aws Test Paper 2
QUESTION 1
Amazon EC2 provides a repository of public data sets that can be seamlessly integrated into
AWS cloud-based applications. What is the monthly charge for using the public data sets?
A. 1 time charge of 1$ for all the datasets.
B. 1$ per dataset per month
C. 10 $ per month for all datasets
D. There is no charge for using public data sets
QUESTION 2
T
An instance can have many states that perform part of its lifecycle? Choose 3 options which
are correct states of an instance lifecycle
A. rebooting
y
B. pending
C. running
dd
D. Shutdown
QUESTION 3
In VPCs with private and public subnets, database servers should ideally be launched into:
A. The public subnet
Re
B. The private subnet
C. Either of them
D. Not recommended, they should ideally be launched outside VPC
QUESTION 4
sh
Which of the following can be used as an origin server in CloudFront? Choose 3 answers
from the options given below.
A. A webserver running on EC2
na
QUESTION 5
You have written a CloudFormation template that creates 1 elastic load balancer fronting 2
EC2 instances. Which section of the template should you edit so that the DNS of the load
A
T
QUESTION 7
A company has configured and peered two VPCs: VPC-1 and VPC-2.VPC-1 contains only
private subnets, and VPC-2 contains only public subnets. The company uses a single AWS
y
Direct Connect connection and private virtual interface to connect their on-premises
network with VPC-1. Which two methods increases the fault tolerance of the connection to
dd
VPC-1? (Choose two.)
A. Establish a hardware VPN over the internet between VPC-2 and the on-premises
network.
Re
B. Establish a hardware VPN over the internet between VPC-1 and the on-premises
network.
C. Establish a new AWS Direct Connect connection and private virtual interface in the same
region as VPC-2.
D. Establish a new AWS Direct Connect connection and private virtual interface in a
sh
QUESTION 8
Which of the following benefits does adding Multi-AZ deployment in RDS provide?
Choose 2 answers from the options given below
vi
instance from the internet. They have verified the existence of the Internet gateway and the
route tables are in place. What could be the issue?
A. It’s launched in the wrong Availability Zone
B. The AMI used to launch the instance cannot be accessed from the internet
C. The private IP is wrongly assigned
D. There is no Elastic IP Assigned
QUESTION 11
You have built an AMI. Another AWS account holder wants to use your AMI, but is not
able to access it. What could be the issue? Below is the settings of the AMI in the AWS
T
Console.
A. It is not possible to share AMI’s
C. The Owner of AMI needs to be changed
y
D. The AMI ID does not allow sharing
dd
Re
sh
QUESTION 12
A customer is running a multi-tier web application farm in a virtual private cloud (VPC)
na
that is not connected to their corporate network. They are connecting to the VPC over the
Internet to manage all of their Amazon EC2 instances running in both the public and
private subnets. They have only authorized the bastion-security-group with Microsoft
vi
Remote Desktop Protocol (RDP) access to the application instance security groups, but the
company wants to further limit administrative access to all of the instances in the VPC.
Which of the following Bastion deployment scenarios will meet this requirement?
A
A. Deploy a Windows Bastion host on the corporate network that has RDP access to all
instances in the VPC
B. Deploy a Windows Bastion host with an Elastic IP address in the public subnet and allow
SSH access to the bastion from anywhere.
C. Deploy a Windows Bastion host with an Elastic IP address in the private subnet, and
restrict RDP access to the bastion from only the corporate public IP addresses.
D. Deploy a Windows Bastion host with an auto-assigned Public IP address in the public
subnet, and allow RDP access to the bastion from only the corporate public IP addresses.
QUESTION 13
Which of the below features allows you to take backups of your EBS volumes? Choose one
answer from the options given below.
A. Volumes
B. State Manager
C. Placement Groups
D. Snapshots
QUESTION 14
A company wants to host a selection of MongoDB instances. They are expecting a high load
and want to have as low latency as possible. Which class of instances from the below list
T
should they choose from.
A. T2
B. I2
y
C. T1
D. G2
dd
QUESTION 15
Which of the below elements can you manage in the IAM dashboard?Choose 3 answers
from the options given below
A. Users
Re
B. Encryption Keys
C. Cost Allocation Reports
D. Policies
QUESTION 16
sh
What are the languages currently supported by AWS Lamda? Choose 3 answers from the
options given below
A. Node.js
na
B. Angular JS
C. Java
D. Python
vi
A
QUESTION 17
A photo-sharing service stores pictures in Amazon Simple Storage Service (S3) and allows
application sign-in using an OpenID Connectcompatible identity provider. Which AWS
Security Token Service approach to temporary access should you use for the Amazon S3
operations?
A. SAML-based Identity Federation
B. Cross-Account Access
C. AWS Identity and Access Management roles
D. Web Identity Federation
QUESTION 18
A customer needs corporate IT governance and cost oversight of all AWS resources
consumed by its divisions. The divisions want to maintain administrative control of the
discrete AWS resources they consume and keep those resources separate from the resources
of other divisions. Which of the following options, when used together will support the
autonomy/control of divisions while enabling corporate IT to maintain governance and
T
cost oversight? Choose two answers from the options given below
A. Use AWS Consolidated Billing and disable AWS root account access for the child
accounts.
y
B. Enable IAM cross-account access for all corporate IT administrators in each child account.
C. Create separate VPCs for each division within the corporate IT AWS account.
dd
D. Use AWS Consolidated Billing by creating AWS Organisations tolink the divisions’
accounts to a parent corporateaccount.
E. Write all child AWS CloudTrail and Amazon CloudWatch logs to each child account’s
Amazon S3 ‘Log’ bucket
Re
QUESTION 19
In Cloudtrail, where does it store all of the logs that it creates? Chooseone answer from the
options given below.
A. A separate EC2 instance with EBS storage
sh
B. A RDS instance
C. A DynamoDB instance
D. Amazon S3
na
QUESTION 20
A company has a workflow that sends video files from their onpremise system to AWS for
transcoding. They use EC2 worker instances that pull transcoding jobs from SQS. Why is
vi
D. MX
QUESTION 22
Which of the below resources cannot be tagged in AWS
A. Images
T
B. EBS Volumes
C. Elastic IP
D. VPC
y
QUESTION 23
What is the key aspect for the below AMI image. Choose one answer from the options
dd
below
A. Since it’s a EBS volume AMI , it is special in nature
B. Since it’s a Linux based AMI , it is special in nature
Re
C. Since it’s a HVM based AMI , it is special in nature
D. Since it’s a NAT based AMI , it is special in nature
QUESTION 24
What type of monitoring for EBS volumes is available automatically in 5 minute periods at
no charge?
sh
A. Basic
B. Primary
C. Detailed
na
D. Local
QUESTION 25
There is a company website that is going to be launched in the coming weeks. There is a
vi
probability that the traffic will be quite high in the first couple of weeks. In the event of a
load failure, how can you set up DNS failover to a static website? Choose the correct answer
from the options given below.
A
A. Duplicate the exact application architecture in another region and configure DNS weight-
based routing
B. Enable failover to an on-premise data center to the application hosted there.
C. Use Route 53 with the failover option to failover to a static S3 website bucket or
CloudFront distribution.
D. Add more servers in case the application fails.
QUESTION 26
What is one of the major advantages of having a VPN in AWS?
A. You don’t have to worry about security, this is managed by AWS.
B. You can connect your cloud resources to on-premise data centers using VPN connections
C. You can provision unlimited number of S3 resources
D. None of the above
QUESTION 27
One of your instances is reporting an unhealthy system status check. However, this is not
something you should have to monitor and repair on your own. How might you automate
the repair of the system status check failure in an AWS environment? Choose the correct
answer from the options given below
A. Create CloudWatch alarms that stop and start the instance based off of status check
T
alarms
B. Write a script that queries the EC2 API for each instance status check
C. Write a script that periodically shuts down and starts instances based on certain stats.
y
D. Implement a third party monitoring tool.
dd
Re
QUESTION 28
sh
A company is running three production web server reserved EC2 instances with EBS-
backed root volumes. These instances have a consistent CPU load of 80%. Traffic is being
distributed to these instances by an Elastic Load Balancer. They also have production and
na
development Multi-AZ RDS MySQL databases. What recommendation would you make to
reduce cost in this environment without affecting availability of mission-critical systems?
Choose the correct answer from the options given below
vi
C. Use Amazon Elastic Load Balancer to serve requests to yourinstances located in the
internal subnet
D. None of the above
QUESTION 30
A company has EC2 instances running in AWS. The EC2 instances are running via an
Autoscaling solution. There is a lot of requests being lost because of the load on the
servers. The Autoscaling solution is launching new instances to take the load but there are
still some requests which are being lost. Which of the following is likely to provide the
most cost-effective solution to avoid losing recently submitted requests? Choose the correct
T
answer from the options given below
A. Use an SQS queue to decouple the application components
B. Keep one extra EC2 instance always powered on in case a spike occurs
y
C. Use larger instances for your application
D. Pre-warm your Elastic Load Balancer
dd
QUESTION 31
After migrating an application architecture from on-premise to AWS you will not be
responsible for the ongoing maintenance of packagesfor which of the following AWS
Re
services that your application uses. Choose the 2 correct answers from the options below.
A. Elastic Beanstalk
B. RDS
C. DynamoDB
D. EC2
sh
na
vi
A
QUESTION 32
What is the difference between an availability zone and an edge location? Choose the
correct answer from the options below
A. Edge locations are used as control stations for AWS resources
B. An edge location is used as a link when building load balancingbetween regions
C. An availability zone is an Amazon resource within an AWS region;an edge location will
deliver cached content to the closest location toreduce latency
T
D. Enable S3 Encryption
QUESTION 34
What is an AWS service which can help protect web applications from common security
y
threats from the outside world? Choose one answer from the options below
A. NAT
dd
B. WAF
C. SQS
D. SES
QUESTION 35
Re
Your supervisor asks you to create a decoupled application whose process includes
dependencies on EC2 instances and servers located in your company’s on-premises data
center. Which of these are you
least likely to recommend as part of that process? Choose the correct answer from the
sh
options below:
A. SQS polling from an EC2 instance deployed with an IAM role
B. An SWF workflow
na
An EC2 instance retrieves a message from an SQS queue, begins processing the message,
then crashes. What happens to the message? Choose the correct answer from the options
below:
A
A. Before the message visibility timeout expires, the messagebecomes available for
processing by other EC2 instances
B. It will remain in the queue and still assigned to same EC2 instances when instances
become online within visibility timeout.
C. The message is deleted and becomes duplicated when the EC2 instance comes online
QUESTION 37
You are running an instance store based instance. You shutdown and then start the instance.
You then notice that the data which you have saved earlier is no longer available. What
might be the cause of this? Choose the correct answer from the options below
T
A. The volume was not big enough to handle all of the processingdata
B. The EC2 instance was using EBS backed root volumes, which are ephemeral and only
live for the life of the instance
y
C. The EC2 instance was using instance store volumes, which are ephemeral and only live
for the life of the instance
dd
D. The instance might have been compromised
QUESTION 38
You have been told that you need to set up a bastion host by your manager in the cheapest,
Re
most secure way, and that you should be the only person that can access it via SSH. Which
of the following setups would satisfy your manager's request? Choose the correct answer
from the options below
A. A small EC2 instance and a security group which only allows access on port 22 via your
IP address
sh
B. A large EC2 instance and a security group which only allows access on port 22 via your
IP address
C. A large EC2 instance and a security group which only allows access on port 22
na
D. A small EC2 instance and a security group which only allows access on port 22
QUESTION 39
Which of the following are Invalid VPC peering configurations? Choose 3 answers from
vi
C. Make the EC2 instance shareable among other regions through IAM permissions
D. None of the above
QUESTION 41
In order to establish a successful site-to-site VPN connection from your on-premise network
to the VPC (Virtual Private Cloud), which of the following needs to be configured outside
of the VPC? Choose the
correct answer from the options below
A. The main route table to route traffic through a NAT instance
B. A public IP address on the customer gateway for the on-premisenetwork
T
C. A dedicated NAT instance in a public subnet
D. An Elastic IP address to the Virtual Private Gateway
y
dd
Re
QUESTION 42
You have 5 CloudFormation templates. Each template has been defined for a specific
purpose. What determines the cost of using the CloudFormation templates? Choose the
sh
QUESTION 43
Does S3 provide read-after-write consistency for new objects? Choose the correct answer
from the options below
A
not have a copy of the keys stored anywhere else. How can you obtain a new copy of the
keys that you had stored on HSM? Choose the correct answer from the options below
A. You cannot; the keys are lost if you did not have a copy.
B. Contact AWS Support; your incident will be routed to the teamthat supports AWS
CloudHSM and a copy of the keys will be sent to youafter verification
C. Restore a snapshot of the HSM
D. You can still connect via CLI; use the command 'get-clientconfiguration' and you can get a
copy of the keys
QUESTION 45
T
What service from AWS can help manage the budgets for all resources in AWS? Choose one
answer from the options below
A. Cost Explorer
y
B. Cost Allocation Tags
C. AWS Budgets
dd
D. Payment History
QUESTION 46
A customer wants to leverage Amazon Simple Storage Service (S3) and Amazon Glacier as
part of their
Re
backup and archive infrastructure. T he customer plans to use thirdparty software to
support this integration. Which approach will limit the access of the third party software to
only the Amazon S3 bucket named “company-backup”?
A. A custom bucket policy limited to the Amazon S3 API in the Amazon Glacier archive
sh
“company-backup”
B. A custom bucket policy limited to the Amazon S3 API in“company-backup”
C. A custom IAM user policy limited to the Amazon S3 API for the Amazon Glacier
na
archive “companybackup”.
D. A custom IAM user policy limited to the Amazon S3 API in “company-backup”
vi
A
QUESTION 47
Currently you're helping design and architect a highly available application. After building
the initial environment, you've found that part of your application does not work correctly
until port 443 is added to the security group. After adding port 443 to the appropriate
security group, how much time will it take before the changes are applied and the
application begins working correctly? Choose the correct answer from the options below
A. Generally, it takes 2-5 minutes in order for the rules to propagate
T
A. Amazon RDS
B. Amazon EMR
C. Amazon EC2
y
D. DynamoDB
QUESTION 49
dd
Besides regions and their included availability zones, which of the following is another
"regional" data center location used for content distribution? Choose the correct answer
from the options below
A. Edge Location
Re
B. Front Location
C. Backend Location
D. Cloud Location
QUESTION 50
sh
What are the main benefits of IAM groups? Choose 2 answers from the options below
A. Ability to create custom permission policies.
B. Allow for EC2 instances to gain access to S3.
na
API Access Keys are required to make programmatic call to AWS from which of the
following? Choose the 3 correct answers from the options below
A. Windows PowerShell
A
QUESTION 52
A customer is leveraging Amazon Simple Storage Service in eu-west-1 to store static content
for a web-based property. The customer is storing objects using the Standard Storage class.
Where are the customers objects replicated?
A. A single facility in eu-west-1 and a single facility in eu-central-1
T
B. A single facility in eu-west-1 and a single facility in us-east-1
C. Multiple facilities in eu-west-1
D. A single facility in eu-west-1
y
QUESTION 53
How are Network access rules evaluated? Choose the correct answer from the options
dd
below
A. Rules are evaluated by rule number, from highest to lowest, and executed immediately
when a matching allow/deny rule is found.
Re
B. All rules are evaluated before any traffic is allowed or denied.
C. Rules are evaluated by rule number, from lowest to highest, and executed immediately
when a matching allow/deny rule is found.
D. Rules are evaluated by rule number, from lowest to highest, and executed after all rules
are checked for conflicting allow/deny rules.
sh
QUESTION 54
A company is building a two-tier web application to serve dynamic transaction-based
content. The data tier is leveraging an Online Transactional Processing (OLTP) database.
na
What services should you leverage to enable an elastic and scalable web tier?
A. Elastic Load Balancing, Amazon EC2, and Auto Scaling
B. Elastic Load Balancing, Amazon RDS with Multi-AZ, and Amazon S3
vi
What are three attributes of DynamoDB? Choose the 3 correct answers from the options
below
A. Used for data warehousing
B. A NoSQL database platform
C. Uses key-value store
D. Fully-managed
QUESTION 56
If you cannot connect to your Ec2 instance via remote desktop, and you have already
verified the instance has a public IP and the Internet gateway and route tables are in place,
what should you check next? Choose one answer from the options given below
A. Adjust the security group to allow traffic from port 22
B. Adjust the security group to allow traffic from port 3389
C. Restart the instance since there might be some issue with the instance
D. Create a new instance since there might be some issue with the instance
T
y
dd
QUESTION 57
What database service should you choose if you need petabyte-scale data warehousing?
Choose the correct answer from the options below
A. DynamoDB
Re
B. ElastiCache
C. RDS
D. Redshift
QUESTION 58
sh
Which feature in AWS allows 2 VPC’s to talk to each other? Choose one answer from the
options given below
A. VPC Connection
na
B. VPN Connection
C. Direct Connect
D. VPC Peering
vi
QUESTION 59
In AWS Security Groups what are the 2 types of rules you can define? Select 2 options.
A. Inbound
A
B. Transitional
C. Bi-Directional
D. Outbound
QUESTION 60
When using the following AWS services, which should be implemented in multiple
Availability Zones for high availability solutions? Choose 2 answers
A. Amazon DynamoDB
B. Amazon Elastic Compute Cloud (EC2)
C. Amazon Elastic Load Balancing
ANSWERS:
1D
T
2A,B &C
3 B
4 A,B & C
y
5C
6A
dd
7 B and C
8 A and D
9 B,C and D
10 D
Re
11 B
12 D
13 D
14 B
sh
15 A,B and D
16 A,C and D
17 D
na
18 B and D
19 D
20 D
vi
21 B
22 C
23 D
A
24 A
25 C
26 B
27 A
28 B
29 A
30 A
31 B and C
32 C
33 B,C and D
34 B
35 C
36 B
37 C
38 A
39 A,B and C
40 B
41 B
T
42 D
43 A
44 A
y
45 C
46 D
dd
47 C
48 B and C
49 A
50 C and D
Re
51 A,C and D
52 C
53 C
54 A
sh
55 B,C and D
56 B
57 D
na
58 D
59 A and D
60 B and C
vi
A