wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

Test-dump65

Total questions: 65

Worksheet time: 3hrs 15mins

Name
Class
Date
1.
Your company has decided to use AWS S3 to store archived data that is required for regulatory compliance but is not accessed otherwise. However, when it is required, it must be produced within 24 hours. Which S3 storage type would be the most cost-effective choice to meet these requirements?
a)

S3 One Zone-Infrequent Access

b)

S3 Glacier

c)

S3 Standard-Infrequent Access

d)

S3 Glacier Deep

2.
In order to use the AWS CLI, what is required, regardless of the platform you are using to originate your CLI commands? (Choose two)
a)

Outbound access on port 443

b)

Access/secret key

c)

Root user credentials

d)

MFA

e)

AWS access gateway

3.
You have an enterprise support plan in AWS and have an upcoming disaster recovery drill that you need AWS involvement in. Which AWS support resource would you reach out to for this?
a)

AWS technical account manager

b)

AWS Professional Services

c)

AWS DR engineers

d)

AWS consulting services

4.
When versioning is enabled within the S3 service, at what level is it controlled?
a)

Region

b)

Object

c)

Bucket

d)

Availability Zone

5.
Amazon Aurora is a database service that incorporates two popular databases that are widely used by software packages. Which two databases are part of Aurora?
a)

Microsoft SQL Server

b)

Oracle

c)

MySQL

d)

MariaDB

e)

PostgreSQL

6.
The AWS Free Tier has three different categories of free services. Which of the following is not a category of the Free Tier?
a)

Trials

b)

Always free

c)

12-months free

d)

Free scaling

7.
You need to store data objects in S3 that will be infrequently requested, but when they are requested, you need to have immediate response and high availability. Which S3 storage class would be the most cost-effective to use for this requirement?
a)

S3 Standard

b)

S3 Standard-Infrequent Access

c)

S3 Intelligent-Tiering

d)

S3 One Zone-Infrequent Access

8.
Under the developer service plan, you receive different guarantees of support time response for both general guidance issues and system problems. Which combination of response times is associated with the developer support plan?
a)

24 hours for general guidance, 12 hours for system problems

b)

48 hours for general guidance, 24 hours for system problems

c)

12 hours for general guidance, 6 hours for system problems

d)

12 hours for general guidance, 1 hour for system problems

9.
AWS Edge allows for ultra-low-latency access to data through a network of locations throughout the world and specializing in a few services. Which of the following AWS services use Edge? (Choose )?
a)

Lightsail

b)

DynamoDB

c)

AWS Storage Gateway

d)

CloudFront

e)

Route 53

10.
Which AWS service would be considered an Infrastructure as a Service offering?
a)

Lightsail

b)

AppStream

c)

EC2

d)

Elastic Beanstalk

11.
In order to add resources to your system, there is a cost in the form of required downtime or starts to services. With this assumption, what is your system said to be?
a)

Scalable

b)

Elastic

c)

Expandable

d)

Redundant

12.
Your data center has become unreliable and slow in terms of Internet connectivity due to a natural disaster. You have decided it is time to move all data into AWS and retire your data center to prevent this problem from happening again. With the problems of unreliability and slowness, which AWS service would facilitate moving this large amount of data into AWS?
a)

AWS Snowcone

b)

AWS Snowmobile

c)

AWS Snowball

d)

AWS Snowplow

13.
What is the minimum duration of usage of an AWS service for billing purposes?
a)

One month

b)

One day

c)

No minimum

d)

One billing cycle

14.
Which AWS service would be used by developers for packaging deployment packages for application code?
a)

CodeCommit

b)

CodeDeploy

c)

CodeBuild

d)

CodeCompile

15.
What types of reserved instances are available on AWS? (Choose )?
a)

Standard

b)

Conforming

c)

Scalable

d)

Convertible

e)

Flexible

16.
Which AWS service allows you to purchase reserved instances?
a)

S3

b)

EC2

c)

Lightsail

d)

CloudWatch

17.
Route 53 can dynamically return different answers to DNS queries based on different circumstances within the AWS infrastructure. Which of the following are circumstances that can be configured with Route 53 to give dynamic responses? (Choose )?
a)

Geographic location

b)

Incoming port

c)

Latency of systems

d)

Size of transfer request

e)

ACL rules

18.
Three types of load balancing are used under Elastic Load Balancing. Which of the following is not one of the three types?
a)

Application load balancer

b)

Network load balancer

c)

Dynamic load balancer

d)

Classic load balancer

19.
As part of an external audit, you need to provide a list of all users and the access they have within your AWS account. Which report from the IAM console would you generate to provide the auditors this information?
a)

Credential report

b)

User report

c)

IAM report

d)

Account audit report

20.
Which of the following statements best describes Software as a Service?
a)

The cloud customer is responsible for deploying and configuring virtual machines based upon a managed image.

b)

The cloud customer gets access to a fully managed service via subscription versus installed locally

c)

The cloud customer gives the user a fully managed platform where only the specific software needed by the user is loaded.

d)

The cloud provider establishes a network and virtualization infrastructure where virtual machines are loaded as software for users

21.
The data your application hosts has strict regulatory requirements that you must meet. Which component of the AWS infrastructure would you be most focused on when deploying resources?
a)

Availability Zones

b)

Regions

c)

Edge services

d)

VPC

22.
Which of the following technologies would be used as a security protection for data in transit?
a)

VPC

b)

VPN

c)

ACLs

d)

Security groups

e)

TLS

23.
When looking at the AWS Management Console, you are not seeing services that you have provisioned. Which of the following could be a reason why?
a)

You have not paid for them

b)

Your account requires new access keys

c)

You have not selected the correct region

d)

The console does not show reserved instances

24.
You have a rule in a security group that allows HTTPS requests into an EC2 instance. Which statement is true about how the security policy applies to responses to the request?
a)

The response will be blocked without a corresponding rule allowing it

b)

A corresponding ACL must be present to allow the response

c)

Security groups automatically have the same rules for inbound and outbound requests

d)

Security groups will automatically allow traffic that is a response to an allowed request, regardless of what the rules specify

25.
Savings plans on AWS offer deep discounts over on-demand pricing based on a commitment for future purchase. Which service is not covered by savings plans?
a)

S3

b)

EC2

c)

Lambda

d)

Fargate

26.
The AWS monthly billing allows for the export and downloading of data. Which format is offered to download your billing data?
a)

JSON

b)

XML

c)

QuickBooks

d)

CSV

27.

AWS Budgets offers a variety of different planning templates to help users

track service consumption and charges. Which of the following are types of

budget reports offered? (Choose two)

a)

Storage budgets

b)

Usage budgets

c)

Overage budgets

d)

Virtualization budgets

e)

Savings plans coverage budgets

28.

You need to be able to quickly verify if data objects in AWS are identical. Which type of algorithm would allow you to quickly and easily accomplish this?

a)

Tokenization

b)

Hashing

c)

Obfuscation

d)

Encryption

29.

You want to run a dynamic website in AWS but do not want to be responsible for deploying or maintaining any servers or software beyond your own application code. Which of the following AWS services would allow you to accomplish this? (Choose two)

a)

Lightsail

b)

Lambda

c)

CloudFront

d)

CloudTrail

e)

EC2

30.

AWS OpsWorks provides managed instances of popular automation and configuration tools. Which popular utilities are available within OpsWorks? (Choose 2)

a)

Git

b)

SVN

c)

Puppet

d)

CVS

e)

Chef

31.
AWS offers the ability to download or export many reports within the Management Console that you can then use for local processing or importing into other tools. Which data format is offered to export the data from the Management Console?
a)

CSV

b)

JSON

c)

XML

d)

SQL

32.
You suspect one of your employees has been violating company policy with the use of AWS services under your account for personal use. Which AWS service would be valuable to investigate their activities?
a)

CloudTrail

b)

CloudWatch

c)

CloudAudit

d)

CloudLog

33.
Rather than using your on-premises VDI solutions, which AWS service could be leveraged to provide your users the same functionality while removing your need to maintain and support a hardware infrastructure?
a)

AppStream

b)

WorkSpaces

c)

WorkLink

d)

AWS DaaS

34.
Your company wants to split budgets out in multiple ways in order to gain insight into costs by department and projects. Which AWS tool under the Billing Dashboard will allow easy implementation of this?
a)

Cost centers

b)

Cost graphs

c)

Cost categories

d)

Cost codes

35.
AWS incorporates a variety of robust security services to counter common types of web attacks. Which type of attack is the AWS Shield service designed to protect against?
a)

Cross-site scripting

b)

SQL injection

c)

Brute force

d)

Distributed Denial of Service

36.
You need to provide application access to a subset of users to test and verify functionality but do not want them to see production data. What type of data de-identification process would you use for this?
a)

Static masking

b)

Dynamic masking

c)

PII masking

d)

Sensitivity masking

37.
What is the easiest method to implement encryption at rest within S3 from the perspective of the user?
a)

Client-side encryption using keys generated by AWS

b)

Server-side encryption using your own keys

c)

Server-side encryption using keys generated by AWS

d)

Client-side encryption using your own keys

38.
With consolidated billing you can merge multiple accounts into a single bill and leverage the combined resources for discounts on AWS services. Which of the following is not a cost that receives discounts under consolidated billing?
a)

EC2

b)

Support plans

c)

Lambda

d)

Fargate

39.
The AWS Marketplace offers images from vendors that are full packages for their products that can be deployed within AWS. Costs for Marketplace offerings have two components. Which of the following are the price components? (Choose two)
a)

S3 costs

b)

EC2 costs

c)

Support costs

d)

Licensing costs

e)

Professional services costs

40.
Your company has decided to retire their on-premises data warehouse and move to a similar solution in AWS for increased capacity and lower costs. Which AWS service would you explore for this initiative?
a)

Redshift

b)

Aurora

c)

DynamoDB

d)

RDS

41.
Which type of service offerings pushes the responsibility for configuration and operations to AWS and leaves the customer only responsible for loading their data?
a)

Unmanaged

b)

Regulated

c)

Managed

d)

Offloaded

42.
When users are created via the IAM console, what can be used to assign granular levels of access within a service?
a)

Groups

b)

Roles

c)

ACLs

d)

Settings

43.
A system is able to keep functioning when some portions of it experience an outage of resources. What concept refers to this ability?
a)

Availability

b)

Resiliency

c)

Redundancy

d)

Elasticity

44.
AWS allows for resources to be added to a system without any downtime or interruption to services. What is this concept called?
a)

Elasticity

b)

Scalability

c)

Expandability

d)

Portability

45.
Which component of AWS Systems Manager provides a consolidated view of data from sources such as CloudTrail and CloudWatch to help with the investigation of operational issues?
a)

Explorer

b)

AppConfig

c)

Systems Manager

d)

OpsCenter

46.
Security groups and access control lists (ACLs) are two means of applying security rules within AWS. Which of the following statements is true?
a)

Security groups and ACLs can both be applied to subnets and instances

b)

Security groups apply to instances; ACLs apply to subnets

c)

Security groups apply to subnets; ACLs apply to instances

d)

Security groups and ACLs are only used on subnets

47.
To help manage versioning in AWS S3, the service provides automation tools, called actions, to handle how versions are stored and when they are removed from the system. Which of the following are the types of actions available? (Choose two)
a)

Archive

b)

Transition

c)

Delete

d)

Rotate

e)

Expire

48.
Under the AWS Shared Responsibility Model and an IaaS implementation, which of the following areas of responsibility reside with the customer? (Choose two)
a)

Application code

b)

Operating system

c)

Virtualization

d)

Storage

e)

Networking

49.
The use of multifactor authentication is imperative to protect accounts with administrative access, especially the root user for your AWS account. Along with a password, which of the following could be used to fulfill multifactor requirements?
a)

PIN

b)

Question/answer challenge

c)

One-time use code

d)

Date of birth

50.
Rather than creating accounts with passwords in AWS, your corporate policies require you to use your internal credentials via federation with AWS. Which technology could you use to establish federated authentication with AWS?
a)

JSON

b)

HTTPS

c)

RADIUS

d)

SAML

51.
When adding new users in IAM, you want to be able to assign a set of capabilities to them and keep them uniform between those users. Which feature of IAM would you use to accomplish this?
a)

Groups

b)

Labels

c)

Roles

d)

Sets

52.
Which core concept of cloud computing most relates to the cost-savings benefits you can realize through AWS offerings?
a)

Broad network access

b)

On-demand self-service

c)

Metered service

d)

Resource pooling

53.
Which AWS support plan is the lowest level that gives 24/7 access to support?
a)

Free

b)

Business

c)

Enterprise

d)

Developer

54.
Your company has decided for the first time to start using AWS services for storage. As a precondition, your CEO has demanded assurances that you can quickly remove data from AWS should the need arise. Which core concept of cloud computing would this pertain to?
a)

Portability

b)

Reversibility

c)

Interoperability

d)

Removability

55.
The Trust Advisor can flag AWS services that you have provisioned but are inactive or being used below the level for which they are configured. Which area of Trust Advisor would you explore to find this report?
a)

Performance

b)

Service limits

c)

Cost optimization

d)

Security

56.
You want to do a compliance check with your configurations against best practices. Which AWS service would you use to accomplish this?
a)

Trusted Advisor

b)

IAM dashboard

c)

AWS Management Console

d)

AWS System Manager

57.
You need to offer easy access to your AWS systems from anywhere, but you do not want to deal with many of the problems of BYOD and the security issues associated with it. Which AWS service would you investigate to accomplish this?
a)

OpsWorks

b)

Lambda

c)

Aurora

d)

WorkSpaces

58.
When using the AWS Virtual Private Cloud to span between AWS resources and your on-premises resources, what type of cloud deployment are you using?
a)

Public

b)

Community

c)

Private

d)

Hybrid

59.
Which concept of cloud computing refers to the ability of a system to easily move between different cloud providers?
a)

Interoperability

b)

Portability

c)

Moveability

d)

Transferability

60.
Which AWS database service does not use SQL and is highly optimized for key-value data storage?
a)

DynamoDB

b)

Aurora

c)

Redshift

d)

CloudFront

61.
Which component of the AWS Management Console allows a user to access the shell and CLI for managing EC2 instances without the use of keys or exposing ports?
a)

Run command

b)

Distributor

c)

Systems Manager

d)

Automation

62.
An academic institution has a suite of software packages that it wants to make available to students but does not want to distribute software or be responsible for the support of it on student devices. Which AWS service would be the easiest and most cost-effective means to accomplish this?
a)

WorkSpaces

b)

AppStream

c)

WorkLink

d)

VirtualApp

63.
Which AWS security service would allow you to apply processing rules to web traffic based upon the contents or type of request?
a)

AWS Shield

b)

Route 53

c)

AWS WAF

d)

AWS Inspector

64.
Which AWS storage service is used by EC2 instances for high-throughput data operations?
a)

S3

b)

AWS Storage Gateway

c)

Elastic Block Storage

d)

AWS Snow

65.
You want to use a set of configurations within your code that will use the same key value on all systems but have different values based upon the specific system. Which AWS tool allows you to do this?
a)

Parameter store

b)

State manager

c)

Distributor

d)

Automation