wayground logo

Free Printable Worksheets

NEW

Font size

S
M
L
XL
Worksheets

Cloud Riders Of Rohan

Total questions: 16

Worksheet time: 9mins

Name
Class
Date
1.

You want to centrally manage security checks across several AWS accounts. Which AWS service can you use?

a)

Macie

b)

Cloudtrail

c)

Security Hub

d)

Detective

2.

Anycompany plans to use a cloud storage service to temporarily store its log files. The number of files to be stored is still unknown, but it only needs to be kept for 12 hours.

a)

Amazon S3 Standard

b)

Amazon S3 Glacier Deep Archive

c)

Amazon S3 One Zone-IA

d)

Amazon S3 Standard-IA

3.

Your VPC needs to connect with the internet. Which VPC component can help?

a)

NAT Gateways

b)

Network ACL

c)

NAT Instances

d)

Internet Gateway

4.

Which service provides recommendations based on best practices for users to follow?

a)

Inspector

b)

Security Hub

c)

Config

d)

Trusted Advisor

5.

A company launched a cryptocurrency mining server on a Reserved EC2 instance in the us-east-1 region’s private subnet that uses IPv6. Due to the financial data that the server contains, the system should be secured to prevent any unauthorized access and to meet regulatory compliance requirements.

a)

Internet Gateway

b)

NAT instances

c)

NAT Gateway

d)

Egress-only Internet gateway

6.

A manufacturing company launched a new type of IoT sensor. The sensor will be used to collect large streams of data records. You need to create a solution that can ingest and analyze the data in real-time with millisecond response times.

Which of the following is the best option that you should implement in this scenario?

a)

Ingest the data using Amazon Kinesis Data Streams and create an AWS Lambda function to store the data in Amazon DynamoDB.

b)

Ingest the data using Amazon Kinesis Data Firehose and create an AWS Lambda function to store the data in Amazon DynamoDB.

c)

Ingest the data using Amazon Kinesis Data Streams and create an AWS Lambda function to store the data in Amazon Redshift.

d)

Ingest the data using Amazon Simple Queue Service and create an AWS Lambda function to store the data in Amazon Redshift.

7.

A company needs two VPCs to communicate with each other. What can they use?

a)

VPC Endpoints

b)

Internet Gateway

c)

AWS Direct Connect

d)

VPC Peering

8.

A Solutions Architect is working for a financial company. The manager wants to have the ability to automatically transfer obsolete data from their S3 bucket to a low-cost storage system in AWS.

What is the best solution that the Architect can provide to them?

a)

Use Amazon SQS

b)

Use an EC2 instance and a scheduled job to transfer the obsolete data from their S3 location to Amazon S3 Glacier

c)

Use Lifecycle Policies in S3 to move obsolete data to Glacier

d)

Use CloudEndure Migration

9.

A company plans to launch an application that tracks the GPS coordinates of delivery trucks in the country. The coordinates are transmitted from each delivery truck every five seconds. You need to design an architecture that will enable real-time processing of these coordinates from multiple consumers. The aggregated data will be analyzed in a separate reporting application.

Which AWS service should you use for this scenario?

a)

Amazon Kinesis

b)

Amazon Appstream

c)

AWS Data Pipeline

d)

Amazon Simple Que Service

10.

Which service tests the network accessibility of EC2 instances and automates security vulnerability assessments?

a)

Config

b)

Trusted Advisor

c)

Inspector

d)

Systems Manager

11.

A company intends to give each of its developers a personal AWS account through AWS Organizations. To enforce regulatory policies, preconfigured AWS Config rules will be set in the new accounts. A solutions architect must see to it that developers are unable to remove or modify any rules in AWS Config.

Which solution meets the objective with the least operational overhead

a)

Use an IAM Role in the new accounts with an attached IAM trust relationship to disable the access of the root user to AWS Config.

b)

Add the developers' AWS account to an organization unit (OU). Attach a service control policy (SCP) to the OU that restricts access to AWS Config.

c)

Configure an AWS Config rule in the root account to detect if changes to the new account’s Config rules are made.

d)

Set up an AWS Control Tower in the root account to detect if there were any changes to the new account’s AWS Config rules. Attach an IAM trust relationship to the IAM User of each developer which prevents any changes in AWS Config.

12.

An application that records weather data every minute is deployed in a fleet of Spot EC2 instances and uses a MySQL RDS database instance. Currently, there is only one RDS instance running in one Availability Zone. You plan to improve the database to ensure high availability by synchronous data replication to another RDS instance.

Which of the following performs synchronous data replication in RDS?

a)

RDS Read Replica

b)

RDS DB instance running as a Multi-AZ deployment

c)

DynamoDB Read Replica

d)

CloudFront running as a Multi-AZ deployment

13.

Which type of firewall is stateless, has both ALLOW and DENY rules and operates at the subnet level?

a)

Network Access Control List (NACL)

b)

Security Groups

c)

Web Application Firewall (WAF)

d)

Route Table

14.

Your Private subnets need to connect to the internet while still remaining private. Which VPC component should you use?

a)

Internet Gateway

b)

Security Group

c)

Nat Instances

d)

NAT Riders of Rohan

e)

NAT Gateway

15.

A game development company operates several virtual reality (VR) and augmented reality (AR) games which use various RESTful web APIs hosted on their on-premises data center. Due to the unprecedented growth of their company, they decided to migrate their system to AWS Cloud to scale out their resources as well to minimize costs.

Which of the following should you recommend as the most cost-effective and scalable solution to meet the above requirement?

a)

Host the APIs in a static S3 web hosting bucket behind a CloudFront web distribution.

b)

Set up a micro-service architecture with ECS, ECR, and Fargate.

c)

Use AWS Lambda and Amazon API Gateway.

d)

Use a Spot Fleet of Amazon EC2 instances, each with an Elastic Fabric Adapter (EFA) for more consistent latency and higher network throughput. Set up an Application Load Balancer to distribute traffic to the instances.

16.

In a startup company you are working for, you are asked to design a web application that requires a NoSQL database that has no limit on the storage size for a given table. The startup is still new in the market and it has very limited human resources who can take care of the database infrastructure.

Which is the most suitable service that you can implement that provides a fully managed, scalable and highly available NoSQL service?

a)

Redshift

b)

DynamoDB

c)

Amazon Neptune

d)

Amazon Aurora