NEW
Font size
WorksheetsAWS basics
Total questions: 15
Worksheet time: 9mins
The full form of AWS EC2 is ___
Elastic Compute Capacity
Elastic Cloud Compute
Elastic Compute Cloud
Elastic Compute 2
Which AWS networking service enables a company to create a virtual network within AWS?
EC2
S3
RDS
VPC
Which of the following is an AWS responsibility under the AWS shared responsibility model?
Configuring third-party applications
Maintaining physical hardware
Securing application access and data
Managing security patches and upgrades of guest operating systems
How would a system administrator add an additional layer of login security to a user's AWS Management Console?
Use Amazon Cloud Directory
Audit AWS Identity and Access Management (IAM) roles
Enable multi-factor authentication (MFA)
Enable AWS CloudTrail
Which service can identify the user that made the API call when an Amazon EC2 instance is terminated?
AWS VPC
AWS CloudTrail
AWS IAM
AWS API
What best describes the “Principle of Least Privilege”? Choose the correct answer from the options given below.
All users should have the same baseline permissions granted to them to use basic AWS services.
Users should be granted permission to access only resources they need to do their assigned job.
Users should submit all access requests in written form so that there is a paper trail of who needs access to different AWS resources.
Users should always have a little more permission than they need.
An organization runs a public facing e-commerce website using several EC2 instances inside a VPC using three subnets, one for Development, one for Test, and one for Production. The Security team has some concerns about the VPC configuration. It requires restricting communication across the EC2 instances using Security Groups.
Which among the following is the correct and best way to restrict the communication?
Whitelist all internet traffic for all the 3 instances
Whitelist inbound connection from office ips for Development and Test instances.
Whitelist all internet traffic for Production instance.
Whitelist inbound connection from office ips for Development, Test and Production instances.
Whitelist only HTTP and HTTPS inbound internet traffic for Production instance.
Restrict all inbound traffic from internet to all 3 instances
Which of the following databases is not supported by AWS RDS service?
MongoDB
MySQL
Oracle
Microsoft SQL server
Which of the following is region-based AWS service?
AWS EC2
AWS VPC
AWS Subnet
AWS IAM
Which service allows a customer to whitelist incoming and outgoing traffic to its EC2 instance?
SSH
Security Groups
Subnets
AWS IAM
A company wants to launch a social media website quickly and asks its Devops engineers to make it publicly accessible. The engineer quickly spins up the server in private subnet and configures the website. Even though the service is up and running in EC2 server, users cant seem to reach the website and they get website not reachable errors.
As a Devops Engineer, what would be your next step to make the website available to the internet users?
This is not possible in AWS. So give up all hopes and move to other cloud provider :(
Launch the EC2 server in public subnet, whitelist EC2 server's http/https ports to the internet
Launch the EC2 server in private subnet again, whitelist EC2 server's http/https ports to office ips only
Launch the EC2 server in private subnet in different region
Which one of the following is the way in which we can access and interact with AWS resources
By using AWS SDK
By visiting AWS data centers
Getting physical access to the resources
By using on-premises servers
Where is the credentials file stored when you configure AWS CLI with Secret Key and Access key?
~/.aws/access-key
~/.aws/credentials
~/.credentials
~/.ssh/id_rsa
Which of the following is NOT true in regards to S3 bucket
S3 is a object storage
You can make a S3 bucket public if you plan to host static website
My S3 bucket name must be unique globally
I can create S3 bucket in a Subnet
Choose the correct order which shows the correct steps to get an EC2 server running
Create VPC -> Create Subnet -> Create EC2
Create Subnet -> Create VPC -> Create EC2
Create VPC -> Create EC2 -> Create Subnet
Create Region -> Create AZ -> Create VPC -> Create EC2
