wayground logo

Free Printable Worksheets

NEW

Font size

S
M
L
XL
Worksheets

AWS Question paper 2

Total questions: 65

Worksheet time: 2hrs 10mins

Name
Class
Date
1.

You have purchased mycoolcompany.com on Amazon Route 53 Registrar and would like the domain to point to your Elastic Load Balancer my-elb-1234567890.us-west-2.elb.amazonaws.com. Which Route 53 Record type must you use here?

a)

CNAME

b)

Alias

2.

You have deployed a new Elastic Beanstalk environment and would like to direct 5% of your production traffic to this new environment. This allows you to monitor for CloudWatch metrics and ensuring that there're no bugs exist with your new environment. Which Route 53 Record type allows you to do so?

a)

simple

b)

weighted

c)

latency

d)

failover

3.

You have updated a Route 53 Record's myapp.mydomain.com value to point to a new Elastic Load Balancer, but it looks like users are still redirected to the old ELB. What is a possible cause for this behavior?

a)

Because of the Alias record

b)

Because of the CNAME record

c)

Because of the TTL

d)

Because of the route 53 health checks

4.

You have an application that's hosted in two different AWS Regions us-west-1 and eu-west-2. You want your users to get the best possible user experience by minimizing the response time from application servers to your users. Which Route 53 Routing Policy should you choose?

a)

Multi - Value

b)

Weighted

c)

Latency

d)

Geolocation

5.

You have a legal requirement that people in any country but France should NOT be able to access your website. Which Route 53 Routing Policy helps you in achieving this?

a)

Simple

b)

Latency

c)

MultiValue

d)

Geolocation

6.

You have purchased a domain on GoDaddy and would like to use Route 53 as the DNS Service Provider. What should you do to make this work?

a)

Request for a domain transfer

b)

Create a Private Hosted Zone and update the 3rd party Registrar NS records

c)

Create a Public Hosted Zone and update the Route 53 NS records

d)

Create a Public Hosted Zone and update the 3rd party Registrar NS records

7.

Which of the following are NOT valid Route 53 Health Checks?

a)

Health Check that monitor SQS Queue

b)

Health Check that monitors an Endpoint

c)

Health Check that monitors other Health Checks

d)

Health Check that monitor CloudWatch Alarms

8.

Your website TriangleSunglasses.com is hosted on a fleet of EC2 instances managed by an Auto Scaling Group and fronted by an Application Load Balancer. Your ASG has been configured to scale on-demand based on the traffic going to your website. To reduce costs, you have configured the ASG to scale based on the traffic going through the ALB. To make the solution highly available, you have updated your ASG and set the minimum capacity to 2. How can you further reduce the costs while respecting the requirements?

a)

Remove the ALB and use an Elastic IP instead

b)

Reserve two EC2 instances

c)

Reduce the minimum capacity to 1

d)

Reduce the minimum capacity to 0

9.

Which of the following will NOT help us while designing a STATELESS application tier?

a)

Store session data in Amazon RDS

b)

Store session data in Amazon ElastiCache

c)

Store session data in the client HTTP cookies

d)

Store session data on EBS volumes

10.

You want to install software updates on 100s of Linux EC2 instances that you manage. You want to store these updates on shared storage which should be dynamically loaded on the EC2 instances and shouldn't require heavy operations. What do you suggest?

a)

Store the software updates on EBS and sync them using data replication software from one master in each AZ

b)

Store the software updates on EFS and mount EFS as a network drive at startup

c)

Package the software updates as an EBS snapshot and create EBS volumes for each new software update

d)

Store the software updates on Amazon RDS

11.

As a Solutions Architect, you're planning to migrate a complex ERP software suite to AWS Cloud. You're planning to host the software on a set of Linux EC2 instances managed by an Auto Scaling Group. The software traditionally takes over an hour to set up on a Linux machine. How do you recommend you speed up the installation process when there's a scale-out event?

a)

Use a Golden AMI

b)

Bootstrap using EC2 User Data

c)

Store the application in Amazon RDS

d)

Retrieve the application setup files from EFS

12.

You're developing an application and would like to deploy it to Elastic Beanstalk with minimal cost. You should run it in ..................

a)

Single Instance mode

b)

High Availability mode

13.

You're deploying your application to an Elastic Beanstalk environment but you notice that the deployment process is painfully slow. After reviewing the logs, you found that your dependencies are resolved on each EC2 instance each time you deploy. How can you speed up the deployment process with minimal impact?

a)

Remove some dependencies in your code

b)

Place the dependencies in Amazon EFS

c)

Create a Golden AMI that contains the dependencies and use that image to launch the EC2 instances

14.

You have a 25 GB file that you're trying to upload to S3 but you're getting errors. What is a possible solution for this?

a)

The file size limit on S3 is 5 GB

b)

Update your bucket policy to allow the larger file

c)

Use Multi-Part upload when uploading files larger than 5GB

d)

Encrypt the file

15.

You're getting errors while trying to create a new S3 bucket named "dev". You're using a new AWS Account with no S3 buckets created before. What is a possible cause for this?

a)

You're missing IAM permissions to create an S3 bucket

b)

S3 bucket names must be globally unique and "dev" is already taken

16.

You have enabled versioning in your S3 bucket which already contains a lot of files. Which version will the existing files have?

a)

1

b)

0

c)

-1

d)

null

17.

You have updated an S3 bucket policy to allow IAM users to read/write files in the S3 bucket, but one of the users complain that he can't perform a PutObject API call. What is a possible cause for this?

a)

The S3 bucket policy must be wrong

b)

The user is lacking permissions

c)

The IAM user must have an explicit DENY in the attached IAM Policy

d)

You need to contact AWS Support to lift this limit

18.

You want the content of an S3 bucket to be fully available in different AWS Regions. That will help your team perform data analysis at the lowest latency and cost possible. What S3 feature should you use?

a)

Amazon CloudFront Distributions

b)

S3 Versioning

c)

S3 Static Website Hosting

d)

S3 Replication

19.

You have 3 S3 buckets. One source bucket A, and two destination buckets B and C in different AWS Regions. You want to replicate objects from bucket A to both bucket B and C. How would you achieve this?

a)

Configure replication from bucket A to bucket B, then from bucket A to bucket C

b)

Configure replication from bucket A to bucket B, then from bucket B to bucket C

c)

Configure replication from bucket A to bucket C, then from bucket C to bucket B

20.

Which of the following is NOT a Glacier Deep Archive retrieval mode?

a)

Expedited ( 1- 5 min)

b)

Standered ( 12 hours )

c)

Bulk ( 48 hours )

21.

Which of the following is NOT a Glacier Flexible retrieval mode?

a)

Instant (10 seconds)

b)

Expedited (1 - 5 minutes)

c)

Standard (3 - 5 hours)

d)

Bulk (5 - 12 hours)

22.

How can you be notified when there's an object uploaded to your S3 bucket?

a)

S3 Select

b)

S3 Access Logs

c)

S3 Event Notifications

d)

S3 Analytics

23.

You have an S3 bucket that has S3 Versioning enabled. This S3 bucket has a lot of objects, and you would like to remove old object versions to reduce costs. What's the best approach to automate the deletion of these old object versions?

a)

S3 Lifecycle Rules - Transition Actions

b)

S3 Lifecycle Rules - Expiration Actions

c)

S3 Access Logs

24.

How can you automate the transition of S3 objects between their different tiers?

a)

AWS Lambda

b)

Cloud Watch events

c)

S3 Lifecycle Rules

25.

While you're uploading large files to an S3 bucket using Multi-part Upload, there are a lot of unfinished parts stored in the S3 bucket due to network issues. You are not using these unfinished parts and they cost you money. What is the best approach to remove these unfinished parts?

a)

Use AWS Lambda to loop on each old/unfinished part and delete them

b)

Request AWS Support to help you delete old/unfinished parts

c)

Use an S3 Lifecycle Policy to automate old/unfinished parts deletion

26.

You are looking to get recommendations for S3 Lifecycle Rules. How can you analyze the optimal number of days to move objects between different storage tiers?

a)

S3 Inventory

b)

S3 Analytics

c)

S3 lifecycle rules Advisor

27.

You are looking to build an index of your files in S3, using Amazon RDS PostgreSQL. To build this index, it is necessary to read the first 250 bytes of each object in S3, which contains some metadata about the content of the file itself. There are over 100,000 files in your S3 bucket, amounting to 50 TB of data. How can you build this index efficiently?

a)

Use the RDS Import feature to load the data from S3 to PostgreSQL, and run a SQL query to build the index

b)

Create an application that will traverse the S3 bucket, read all the files one by one, extract the first 250 bytes, and store that information in RDS

c)

Create an application that will traverse the S3 bucket, issue a Byte Range Fetch for the first 250 bytes, and store that information in RDS

d)

Create an application that will traverse the S3 bucket, use S3 Select to get the first 250 bytes, and store that information in RDS

28.

You have a large dataset stored on-premises that you want to upload to the S3 bucket. The dataset is divided into 10 GB files. You have good bandwidth but your Internet connection isn't stable. What is the best way to upload this dataset to S3 and ensure that the process is fast and avoid any problems with the Internet connection?

a)

Use Multi-part Upload Only

b)

Use S3 Select & Use S3 Transfer Acceleration

c)

Use S3 Multi-part Upload & S3 Transfer Acceleration

29.

You would like to retrieve a subset of your dataset stored in S3 with the .csv format. You would like to retrieve a month of data and only 3 columns out of 10, to minimize compute and network costs. What should you use?

a)

S3 Analytics

b)

S3 Access Logs

c)

S3 Select

d)

S3 Inventory

30.

A company is preparing for compliance and regulatory review on its infrastructure on AWS. Currently, they have their files stored on S3 buckets that are not encrypted, which must be encrypted as required for compliance and regulatory review. Which S3 feature allows them to encrypt all files in their S3 buckets in the most efficient and cost-effective way?

a)

S3 Access Points

b)

S3 Cross-Region Replication

c)

S3 Batch Operations

d)

S3 Lifecycle Rules

31.

Your client wants to make sure that file encryption is happening in S3, but he wants to fully manage the encryption keys and never store them in AWS. You recommend him to use ............................

a)

SSE-S3

b)

SSE-KMS

c)

SSE-C

d)

Client-Side Encryption

32.

A company you're working for wants their data stored in S3 to be encrypted. They don't mind the encryption keys stored and managed by AWS, but they want to maintain control over the rotation policy of the encryption keys. You recommend them to use ....................

a)

SSE-S3

b)

SSE-KMS

c)

SSE-C

d)

Client-Side Encryption

33.

Your company does not trust AWS for the encryption process and wants it to happen on the application. You recommend them to use ....................

a)

SSE-S3

b)

SSE-KMS

c)

SSE-C

d)

Client-Side Encryption

34.

You have a website that loads files from an S3 bucket. When you try the URL of the files directly in your Chrome browser it works, but when a website with a different domain tries to load these files it doesn't. What's the problem?

a)

The Bucket policy is wrong

b)

The IAM policy is wrong

c)

CORS is wrong

d)

Encryption is wrong

35.

An e-commerce company has its customers and orders data stored in an S3 bucket. The company’s CEO wants to generate a report to show the list of customers and the revenue for each customer. Customer data stored in files on the S3 bucket has sensitive information that we don’t want to expose in the report. How do you recommend the report can be created without exposing sensitive information?

a)

Use S3 Object Lambda to change the objects before they are retrieved by the report generator application

b)

Create another S3 bucket. Create a lambda function to process each file, remove the sensitive information, and then move them to the new S3 bucket

c)

Use S3 Object Lock to lock the sensitive information from being fetched by the report generator application

36.

You suspect that some of your employees try to access files in an S3 bucket that they don't have access to. How can you verify this is indeed the case without them noticing?

a)

Enable S3 Access Logs and analyze them using Athena

b)

Restrict their IAM policies and look at CloudTail logs

c)

Use a bucket policy

37.

You are looking to provide temporary URLs to a growing list of federated users to allow them to perform a file upload on your S3 bucket to a specific location. What should you use?

a)

S3 CORS

b)

S3 pre-signed URL

c)

S3 Bucket Policy

38.

For compliance reasons, your company has a policy mandate that database backups must be retained for 4 years. It shouldn't be possible to erase them. What do you recommend?

a)

Glacier Vaults with Vault Lock Policies

b)

EFS network drives with restrictive Linux permissions

c)

S3 with Bucket Policies

39.

You would like all your files in an S3 bucket to be encrypted by default. What is the optimal way of achieving this?

a)

Use a bucket policy that forces HTTPS connections

b)

Do nothing, Amazon S3 automatically encrypt new objects using Server-Side Encryption with S3-Managed Keys (SSE-S3)

c)

Enable Versioning

40.

You have enabled versioning and want to be extra careful when it comes to deleting files on an S3 bucket. What should you enable to prevent accidental permanent deletions?

a)

Use a bucket policy

b)

Enable MFA Delete

c)

Encrypt the files

d)

Disable versioning

41.

A company has its data and files stored on some S3 buckets. Some of these files need to be kept for a predefined period of time and protected from being overwritten and deletion according to company compliance policy. Which S3 feature helps you in doing this?

a)

S3 Object Lock - Retention Governance Mode

b)

S3 Versioning

c)

S3 Object Lock - Retention Compliance Mode

d)

S3 Glacier Vault Lock

42.

Which of the following S3 Object Lock configuration allows you to prevent an object or its versions from being overwritten or deleted indefinitely and gives you the ability to remove it manually?

a)

Retention Governance Mode

b)

Retention Compliance Mode

c)

Legal Hold

43.

You have a CloudFront Distribution that serves your website hosted on a fleet of EC2 instances behind an Application Load Balancer. All your clients are from the United States, but you found that some malicious requests are coming from other countries. What should you do to only allow users from the US and block other countries?

a)

Use CloudFront Geo Restriction

b)

Use Origin Access Control

c)

Set up a security group and attach it to your CloudFront Distribution

d)

Use a Route 53 Latency record and attach it to CloudFront

44.

You have a static website hosted on an S3 bucket. You have created a CloudFront Distribution that points to your S3 bucket to better serve your requests and improve performance. After a while, you noticed that users can still access your website directly from the S3 bucket. You want to enforce users to access the website only through CloudFront. How would you achieve that?

a)

Send an email to your clients and tell them to not use the S3 endpoint

b)

Configure your CloudFront Distribution and create an Origin Access Control (OAC), then update your S3 Bucket Policy to only accept requests from your CloudFront Distribution.

c)

Use S3 Access Points to redirect clients to CloudFront

45.

What does this S3 bucket policy do?

{

    "Version": "2012-10-17",

    "Id": "Mystery policy",

    "Statement": [{

        "Sid": "What could it be?",

        "Effect": "Allow",

        "Principal": {

           "Service": "cloudfront.amazonaws.com"

        },

        "Action": "s3:GetObject",

        "Resource": "arn:aws:s3:::examplebucket/*",
        "Condition": {
            "StringEquals": {
                "AWS:SourceArn": "arn:aws:cloudfront::123456789012:distribution/EDFDVBD6EXAMPLE"
            }
        }

    }]

}

a)

Forces GetObject request to be encrypted if coming from CloudFront

b)

Only allows the S3 bucket content to be accessed from your CloudFront Distribution

c)

Only allows GetObject type of request on the S3 bucket from anybody

46.

A WordPress website is hosted in a set of EC2 instances in an EC2 Auto Scaling Group and fronted by a CloudFront Distribution which is configured to cache the content for 3 days. You have released a new version of the website and want to release it immediately to production without waiting for 3 days for the cached content to be expired. What is the easiest and most efficient way to solve this?

a)

Open a support ticket with AWS Support to remove the CloudFront Cache

b)

CloudFront Cache Invalidation

c)

EC2 Cache Invalidation

47.

A company is deploying a media-sharing website to AWS. They are going to use CloudFront to deliver the content with low latency to their customers where they are located in both US and Europe only. After a while there a huge costs for CloudFront. Which CloudFront feature allows you to decrease costs by targeting only US and Europe?

a)

CloudFront Cache Invalidation

b)

CloudFront Price Classes

c)

CloudFront Cache Behavior

d)

Origin Access Control

48.

A company is migrating a web application to AWS Cloud and they are going to use a set of EC2 instances in an EC2 Auto Scaling Group. The web application is made of multiple components so they will need a host-based routing feature to route to specific web application components. This web application is used by many customers and therefore the web application must have a static IP address so it can be whitelisted by the customers’ firewalls. As the customers are distributed around the world, the web application must also provide low latency to all customers. Which AWS service can help you to assign a static IP address and provide low latency across the globe?

a)

AWS Global Accelerator + Application Load Balancer

b)

Amazon CloudFront

c)

Network Load Balancer

d)

Application Load Balancer

49.

You need to move hundreds of Terabytes into Amazon S3, then process the data using a fleet of EC2 instances. You have a 1 Gbit/s broadband. You would like to move the data faster and possibly processing it while in transit. What do you recommend?

a)

Use your network

b)

Use Snowcone

c)

Use AWS Data Migration

d)

Use Snowball Edge

50.

You want to expose virtually infinite storage for your tape backups. You want to keep the same software you're using and want an iSCSI compatible interface. What do you use?

a)

AWS Snowball

b)

AWS Storage Gateway - Tape Gateway

c)

AWS Storage Gateway - Volume Gateway

d)

AWS Storage Gateway - S3 File Gateway

51.

Your EC2 Windows Servers need to share some data by having a Network File System mounted on them which respects the Windows security mechanisms and has integration with Microsoft Active Directory. What do you recommend?

a)

Amazon FSx for Windows (File Server)

b)

Amazon EFS

c)

Amazon FSx for Lustre

d)

S3 File Gateway

52.

You have hundreds of Terabytes that you want to migrate to AWS S3 as soon as possible. You tried to use your network bandwidth and it will take around 3 weeks to complete the upload process. What is the recommended approach to using in this situation?

a)

AWS Storage Gateway - Volume Gateway

b)

S3 Multi-part Upload

c)

AWS Snowball Edge

d)

AWS Data Migration Service

53.

You have a large dataset stored in S3 that you want to access from on-premises servers using the NFS or SMB protocol. Also, you want to authenticate access to these files through on-premises Microsoft AD. What would you use?

a)

AWS Storage Gateway - Volume Gateway

b)

AWS Storage Gateway - S3 File Gateway

c)

AWS Storage Gateway - Tape Gateway

d)

AWS Data Migration Service

54.

You are planning to migrate your company's infrastructure from on-premises to AWS Cloud. You have an on-premises Microsoft Windows File Server that you want to migrate. What is the most suitable AWS service you can use?

a)

Amazon FSx for Windows (File Server)

b)

AWS Storage Gateway - S3 File Gateway

c)

AWS Managed Microsoft AD

55.

You would like to have a distributed POSIX compliant file system that will allow you to maximize the IOPS in order to perform some High-Performance Computing (HPC) and genomics computational research. This file system has to easily scale to millions of IOPS. What do you recommend?

a)

EFS with Max. IO enabled

b)

Amazon FSx for Lustre

c)

Amazon S3 mounted on the EC2 instances

d)

EC2 Instance Store

56.

Which deployment option in the FSx file system provides you with long-term storage that's replicated within AZ?

a)

Scratch file system

b)

Persistent file system

57.

Which of the following protocols is NOT supported by AWS Transfer Family?

a)

File Transfer Protocol (FTP)

b)

File Transfer Protocol over SSL (FTPS)

c)

Transport Layer Security (TLS)

d)

Secure File Transfer Protocol (SFTP)

58.

A company uses a lot of files and data which is stored in an FSx for Windows File Server storage on AWS. Those files are currently used by the resources hosted on AWS. There’s a requirement for those files to be accessed on-premises with low latency. Which AWS service can help you achieve this?

a)

S3 File Gateway

b)

FSx for Windows File Server On-Premises

c)

FSx File Gateway

d)

Volume Gateway

59.

A Solutions Architect is working on planning the migration of a startup company from on-premises to AWS. Currently, their infrastructure consists of many servers and 30 TB of data hosted on a shared NFS storage. He has decided to use Amazon S3 to host the data. Which AWS service can efficiently migrate the data from on-premises to S3?

a)

AWS Storage Tape Gateway

b)

Amazon EBS

c)

AWS Transfer Family

d)

AWS DataSync

60.

Which AWS service is best suited to migrate a large amount of data from an S3 bucket to an EFS file system?

a)

AWS SnowBall

b)

AWS DataSync

c)

AWS Transfer Family

d)

AWS backup

61.

A Machine Learning company is working on a set of datasets that are hosted on S3 buckets. The company decided to release those datasets to the public to be useful for others in their research, but they don’t want to configure the S3 bucket to be public. And those datasets should be exposed over the FTP protocol. What can they do to do the requirement efficiently and with the least effort?

a)

Use AWS Transfer Family

b)

Create an EC2 instance with an FTP server installed then copy the data from S3 to the EC2 instance

c)

Use AWS Storage Gateway

d)

Copy the data from S3 to an EFS file system, then expose them over the FTP protocol

62.

Amazon FSx for NetApp ONTAP is compatible with the following protocols, EXCEPT ………………

a)

NFS

b)

SMB

c)

FTP

d)

ISCSI

63.

Which AWS service is best suited when migrating from an on-premises ZFS file system to AWS?

a)

Amazon FSx for OpenZFS

b)

Amazon FSx for NetApp ONTAP

c)

Amazon FSX for Windows File Server

d)

Amazon FSx for Luster

64.

A company is running Amazon S3 File Gateway to host their data on S3 buckets and is able to mount them on-premises using SMB. The data currently is hosted on S3 Standard storage class and there is a requirement to reduce the costs for S3. So, they have decided to migrate some of those data to S3 Glacier. What is the most efficient way they can use to move the data to S3 Glacier automatically?

a)

Create a Lambda function to migrate data to S3 Glacier and periodically trigger it every day using Amazon EventBridge

b)

Use S3 Batch Operations to loop through S3 files and move them to S3 Glacier every day

c)

Use S3 Lifecycle Policy

d)

Use AWS DataSync to replicate data to S3 Glacier every day

e)

Configure S3 File Gateway to send the data to S3 Glacier directly

65.

You have on-premises sensitive files and documents that you want to regularly synchronize to AWS to keep another copy. Which AWS service can help you with that?

a)

AWS Database Migration Service

b)

Amazon EFS

c)

AWS DataSync