NEW
Font size
WorksheetsAWS Question paper 2
Total questions: 65
Worksheet time: 2hrs 10mins
You have purchased mycoolcompany.com on Amazon Route 53 Registrar and would like the domain to point to your Elastic Load Balancer my-elb-1234567890.us-west-2.elb.amazonaws.com. Which Route 53 Record type must you use here?
CNAME
Alias
You have deployed a new Elastic Beanstalk environment and would like to direct 5% of your production traffic to this new environment. This allows you to monitor for CloudWatch metrics and ensuring that there're no bugs exist with your new environment. Which Route 53 Record type allows you to do so?
simple
weighted
latency
failover
You have updated a Route 53 Record's myapp.mydomain.com value to point to a new Elastic Load Balancer, but it looks like users are still redirected to the old ELB. What is a possible cause for this behavior?
Because of the Alias record
Because of the CNAME record
Because of the TTL
Because of the route 53 health checks
You have an application that's hosted in two different AWS Regions us-west-1 and eu-west-2. You want your users to get the best possible user experience by minimizing the response time from application servers to your users. Which Route 53 Routing Policy should you choose?
Multi - Value
Weighted
Latency
Geolocation
You have a legal requirement that people in any country but France should NOT be able to access your website. Which Route 53 Routing Policy helps you in achieving this?
Simple
Latency
MultiValue
Geolocation
You have purchased a domain on GoDaddy and would like to use Route 53 as the DNS Service Provider. What should you do to make this work?
Request for a domain transfer
Create a Private Hosted Zone and update the 3rd party Registrar NS records
Create a Public Hosted Zone and update the Route 53 NS records
Create a Public Hosted Zone and update the 3rd party Registrar NS records
Which of the following are NOT valid Route 53 Health Checks?
Health Check that monitor SQS Queue
Health Check that monitors an Endpoint
Health Check that monitors other Health Checks
Health Check that monitor CloudWatch Alarms
Your website TriangleSunglasses.com is hosted on a fleet of EC2 instances managed by an Auto Scaling Group and fronted by an Application Load Balancer. Your ASG has been configured to scale on-demand based on the traffic going to your website. To reduce costs, you have configured the ASG to scale based on the traffic going through the ALB. To make the solution highly available, you have updated your ASG and set the minimum capacity to 2. How can you further reduce the costs while respecting the requirements?
Remove the ALB and use an Elastic IP instead
Reserve two EC2 instances
Reduce the minimum capacity to 1
Reduce the minimum capacity to 0
Which of the following will NOT help us while designing a STATELESS application tier?
Store session data in Amazon RDS
Store session data in Amazon ElastiCache
Store session data in the client HTTP cookies
Store session data on EBS volumes
You want to install software updates on 100s of Linux EC2 instances that you manage. You want to store these updates on shared storage which should be dynamically loaded on the EC2 instances and shouldn't require heavy operations. What do you suggest?
Store the software updates on EBS and sync them using data replication software from one master in each AZ
Store the software updates on EFS and mount EFS as a network drive at startup
Package the software updates as an EBS snapshot and create EBS volumes for each new software update
Store the software updates on Amazon RDS
As a Solutions Architect, you're planning to migrate a complex ERP software suite to AWS Cloud. You're planning to host the software on a set of Linux EC2 instances managed by an Auto Scaling Group. The software traditionally takes over an hour to set up on a Linux machine. How do you recommend you speed up the installation process when there's a scale-out event?
Use a Golden AMI
Bootstrap using EC2 User Data
Store the application in Amazon RDS
Retrieve the application setup files from EFS
You're developing an application and would like to deploy it to Elastic Beanstalk with minimal cost. You should run it in ..................
Single Instance mode
High Availability mode
You're deploying your application to an Elastic Beanstalk environment but you notice that the deployment process is painfully slow. After reviewing the logs, you found that your dependencies are resolved on each EC2 instance each time you deploy. How can you speed up the deployment process with minimal impact?
Remove some dependencies in your code
Place the dependencies in Amazon EFS
Create a Golden AMI that contains the dependencies and use that image to launch the EC2 instances
You have a 25 GB file that you're trying to upload to S3 but you're getting errors. What is a possible solution for this?
The file size limit on S3 is 5 GB
Update your bucket policy to allow the larger file
Use Multi-Part upload when uploading files larger than 5GB
Encrypt the file
You're getting errors while trying to create a new S3 bucket named "dev". You're using a new AWS Account with no S3 buckets created before. What is a possible cause for this?
You're missing IAM permissions to create an S3 bucket
S3 bucket names must be globally unique and "dev" is already taken
You have enabled versioning in your S3 bucket which already contains a lot of files. Which version will the existing files have?
1
0
-1
null
You have updated an S3 bucket policy to allow IAM users to read/write files in the S3 bucket, but one of the users complain that he can't perform a PutObject API call. What is a possible cause for this?
The S3 bucket policy must be wrong
The user is lacking permissions
The IAM user must have an explicit DENY in the attached IAM Policy
You need to contact AWS Support to lift this limit
You want the content of an S3 bucket to be fully available in different AWS Regions. That will help your team perform data analysis at the lowest latency and cost possible. What S3 feature should you use?
Amazon CloudFront Distributions
S3 Versioning
S3 Static Website Hosting
S3 Replication
You have 3 S3 buckets. One source bucket A, and two destination buckets B and C in different AWS Regions. You want to replicate objects from bucket A to both bucket B and C. How would you achieve this?
Configure replication from bucket A to bucket B, then from bucket A to bucket C
Configure replication from bucket A to bucket B, then from bucket B to bucket C
Configure replication from bucket A to bucket C, then from bucket C to bucket B
Which of the following is NOT a Glacier Deep Archive retrieval mode?
Expedited ( 1- 5 min)
Standered ( 12 hours )
Bulk ( 48 hours )
Which of the following is NOT a Glacier Flexible retrieval mode?
Instant (10 seconds)
Expedited (1 - 5 minutes)
Standard (3 - 5 hours)
Bulk (5 - 12 hours)
How can you be notified when there's an object uploaded to your S3 bucket?
S3 Select
S3 Access Logs
S3 Event Notifications
S3 Analytics
You have an S3 bucket that has S3 Versioning enabled. This S3 bucket has a lot of objects, and you would like to remove old object versions to reduce costs. What's the best approach to automate the deletion of these old object versions?
S3 Lifecycle Rules - Transition Actions
S3 Lifecycle Rules - Expiration Actions
S3 Access Logs
How can you automate the transition of S3 objects between their different tiers?
AWS Lambda
Cloud Watch events
S3 Lifecycle Rules
While you're uploading large files to an S3 bucket using Multi-part Upload, there are a lot of unfinished parts stored in the S3 bucket due to network issues. You are not using these unfinished parts and they cost you money. What is the best approach to remove these unfinished parts?
Use AWS Lambda to loop on each old/unfinished part and delete them
Request AWS Support to help you delete old/unfinished parts
Use an S3 Lifecycle Policy to automate old/unfinished parts deletion
You are looking to get recommendations for S3 Lifecycle Rules. How can you analyze the optimal number of days to move objects between different storage tiers?
S3 Inventory
S3 Analytics
S3 lifecycle rules Advisor
You are looking to build an index of your files in S3, using Amazon RDS PostgreSQL. To build this index, it is necessary to read the first 250 bytes of each object in S3, which contains some metadata about the content of the file itself. There are over 100,000 files in your S3 bucket, amounting to 50 TB of data. How can you build this index efficiently?
Use the RDS Import feature to load the data from S3 to PostgreSQL, and run a SQL query to build the index
Create an application that will traverse the S3 bucket, read all the files one by one, extract the first 250 bytes, and store that information in RDS
Create an application that will traverse the S3 bucket, issue a Byte Range Fetch for the first 250 bytes, and store that information in RDS
Create an application that will traverse the S3 bucket, use S3 Select to get the first 250 bytes, and store that information in RDS
You have a large dataset stored on-premises that you want to upload to the S3 bucket. The dataset is divided into 10 GB files. You have good bandwidth but your Internet connection isn't stable. What is the best way to upload this dataset to S3 and ensure that the process is fast and avoid any problems with the Internet connection?
Use Multi-part Upload Only
Use S3 Select & Use S3 Transfer Acceleration
Use S3 Multi-part Upload & S3 Transfer Acceleration
You would like to retrieve a subset of your dataset stored in S3 with the .csv format. You would like to retrieve a month of data and only 3 columns out of 10, to minimize compute and network costs. What should you use?
S3 Analytics
S3 Access Logs
S3 Select
S3 Inventory
A company is preparing for compliance and regulatory review on its infrastructure on AWS. Currently, they have their files stored on S3 buckets that are not encrypted, which must be encrypted as required for compliance and regulatory review. Which S3 feature allows them to encrypt all files in their S3 buckets in the most efficient and cost-effective way?
S3 Access Points
S3 Cross-Region Replication
S3 Batch Operations
S3 Lifecycle Rules
Your client wants to make sure that file encryption is happening in S3, but he wants to fully manage the encryption keys and never store them in AWS. You recommend him to use ............................
SSE-S3
SSE-KMS
SSE-C
Client-Side Encryption
A company you're working for wants their data stored in S3 to be encrypted. They don't mind the encryption keys stored and managed by AWS, but they want to maintain control over the rotation policy of the encryption keys. You recommend them to use ....................
SSE-S3
SSE-KMS
SSE-C
Client-Side Encryption
Your company does not trust AWS for the encryption process and wants it to happen on the application. You recommend them to use ....................
SSE-S3
SSE-KMS
SSE-C
Client-Side Encryption
You have a website that loads files from an S3 bucket. When you try the URL of the files directly in your Chrome browser it works, but when a website with a different domain tries to load these files it doesn't. What's the problem?
The Bucket policy is wrong
The IAM policy is wrong
CORS is wrong
Encryption is wrong
An e-commerce company has its customers and orders data stored in an S3 bucket. The company’s CEO wants to generate a report to show the list of customers and the revenue for each customer. Customer data stored in files on the S3 bucket has sensitive information that we don’t want to expose in the report. How do you recommend the report can be created without exposing sensitive information?
Use S3 Object Lambda to change the objects before they are retrieved by the report generator application
Create another S3 bucket. Create a lambda function to process each file, remove the sensitive information, and then move them to the new S3 bucket
Use S3 Object Lock to lock the sensitive information from being fetched by the report generator application
You suspect that some of your employees try to access files in an S3 bucket that they don't have access to. How can you verify this is indeed the case without them noticing?
Enable S3 Access Logs and analyze them using Athena
Restrict their IAM policies and look at CloudTail logs
Use a bucket policy
You are looking to provide temporary URLs to a growing list of federated users to allow them to perform a file upload on your S3 bucket to a specific location. What should you use?
S3 CORS
S3 pre-signed URL
S3 Bucket Policy
For compliance reasons, your company has a policy mandate that database backups must be retained for 4 years. It shouldn't be possible to erase them. What do you recommend?
Glacier Vaults with Vault Lock Policies
EFS network drives with restrictive Linux permissions
S3 with Bucket Policies
You would like all your files in an S3 bucket to be encrypted by default. What is the optimal way of achieving this?
Use a bucket policy that forces HTTPS connections
Do nothing, Amazon S3 automatically encrypt new objects using Server-Side Encryption with S3-Managed Keys (SSE-S3)
Enable Versioning
You have enabled versioning and want to be extra careful when it comes to deleting files on an S3 bucket. What should you enable to prevent accidental permanent deletions?
Use a bucket policy
Enable MFA Delete
Encrypt the files
Disable versioning
A company has its data and files stored on some S3 buckets. Some of these files need to be kept for a predefined period of time and protected from being overwritten and deletion according to company compliance policy. Which S3 feature helps you in doing this?
S3 Object Lock - Retention Governance Mode
S3 Versioning
S3 Object Lock - Retention Compliance Mode
S3 Glacier Vault Lock
Which of the following S3 Object Lock configuration allows you to prevent an object or its versions from being overwritten or deleted indefinitely and gives you the ability to remove it manually?
Retention Governance Mode
Retention Compliance Mode
Legal Hold
You have a CloudFront Distribution that serves your website hosted on a fleet of EC2 instances behind an Application Load Balancer. All your clients are from the United States, but you found that some malicious requests are coming from other countries. What should you do to only allow users from the US and block other countries?
Use CloudFront Geo Restriction
Use Origin Access Control
Set up a security group and attach it to your CloudFront Distribution
Use a Route 53 Latency record and attach it to CloudFront
You have a static website hosted on an S3 bucket. You have created a CloudFront Distribution that points to your S3 bucket to better serve your requests and improve performance. After a while, you noticed that users can still access your website directly from the S3 bucket. You want to enforce users to access the website only through CloudFront. How would you achieve that?
Send an email to your clients and tell them to not use the S3 endpoint
Configure your CloudFront Distribution and create an Origin Access Control (OAC), then update your S3 Bucket Policy to only accept requests from your CloudFront Distribution.
Use S3 Access Points to redirect clients to CloudFront
What does this S3 bucket policy do?
{
"Version": "2012-10-17",
"Id": "Mystery policy",
"Statement": [{
"Sid": "What could it be?",
"Effect": "Allow",
"Principal": {
"Service": "cloudfront.amazonaws.com"
},
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::examplebucket/*",
"Condition": {
"StringEquals": {
"AWS:SourceArn": "arn:aws:cloudfront::123456789012:distribution/EDFDVBD6EXAMPLE"
}
}
}]
}
Forces GetObject request to be encrypted if coming from CloudFront
Only allows the S3 bucket content to be accessed from your CloudFront Distribution
Only allows GetObject type of request on the S3 bucket from anybody
A WordPress website is hosted in a set of EC2 instances in an EC2 Auto Scaling Group and fronted by a CloudFront Distribution which is configured to cache the content for 3 days. You have released a new version of the website and want to release it immediately to production without waiting for 3 days for the cached content to be expired. What is the easiest and most efficient way to solve this?
Open a support ticket with AWS Support to remove the CloudFront Cache
CloudFront Cache Invalidation
EC2 Cache Invalidation
A company is deploying a media-sharing website to AWS. They are going to use CloudFront to deliver the content with low latency to their customers where they are located in both US and Europe only. After a while there a huge costs for CloudFront. Which CloudFront feature allows you to decrease costs by targeting only US and Europe?
CloudFront Cache Invalidation
CloudFront Price Classes
CloudFront Cache Behavior
Origin Access Control
A company is migrating a web application to AWS Cloud and they are going to use a set of EC2 instances in an EC2 Auto Scaling Group. The web application is made of multiple components so they will need a host-based routing feature to route to specific web application components. This web application is used by many customers and therefore the web application must have a static IP address so it can be whitelisted by the customers’ firewalls. As the customers are distributed around the world, the web application must also provide low latency to all customers. Which AWS service can help you to assign a static IP address and provide low latency across the globe?
AWS Global Accelerator + Application Load Balancer
Amazon CloudFront
Network Load Balancer
Application Load Balancer
You need to move hundreds of Terabytes into Amazon S3, then process the data using a fleet of EC2 instances. You have a 1 Gbit/s broadband. You would like to move the data faster and possibly processing it while in transit. What do you recommend?
Use your network
Use Snowcone
Use AWS Data Migration
Use Snowball Edge
You want to expose virtually infinite storage for your tape backups. You want to keep the same software you're using and want an iSCSI compatible interface. What do you use?
AWS Snowball
AWS Storage Gateway - Tape Gateway
AWS Storage Gateway - Volume Gateway
AWS Storage Gateway - S3 File Gateway
Your EC2 Windows Servers need to share some data by having a Network File System mounted on them which respects the Windows security mechanisms and has integration with Microsoft Active Directory. What do you recommend?
Amazon FSx for Windows (File Server)
Amazon EFS
Amazon FSx for Lustre
S3 File Gateway
You have hundreds of Terabytes that you want to migrate to AWS S3 as soon as possible. You tried to use your network bandwidth and it will take around 3 weeks to complete the upload process. What is the recommended approach to using in this situation?
AWS Storage Gateway - Volume Gateway
S3 Multi-part Upload
AWS Snowball Edge
AWS Data Migration Service
You have a large dataset stored in S3 that you want to access from on-premises servers using the NFS or SMB protocol. Also, you want to authenticate access to these files through on-premises Microsoft AD. What would you use?
AWS Storage Gateway - Volume Gateway
AWS Storage Gateway - S3 File Gateway
AWS Storage Gateway - Tape Gateway
AWS Data Migration Service
You are planning to migrate your company's infrastructure from on-premises to AWS Cloud. You have an on-premises Microsoft Windows File Server that you want to migrate. What is the most suitable AWS service you can use?
Amazon FSx for Windows (File Server)
AWS Storage Gateway - S3 File Gateway
AWS Managed Microsoft AD
You would like to have a distributed POSIX compliant file system that will allow you to maximize the IOPS in order to perform some High-Performance Computing (HPC) and genomics computational research. This file system has to easily scale to millions of IOPS. What do you recommend?
EFS with Max. IO enabled
Amazon FSx for Lustre
Amazon S3 mounted on the EC2 instances
EC2 Instance Store
Which deployment option in the FSx file system provides you with long-term storage that's replicated within AZ?
Scratch file system
Persistent file system
Which of the following protocols is NOT supported by AWS Transfer Family?
File Transfer Protocol (FTP)
File Transfer Protocol over SSL (FTPS)
Transport Layer Security (TLS)
Secure File Transfer Protocol (SFTP)
A company uses a lot of files and data which is stored in an FSx for Windows File Server storage on AWS. Those files are currently used by the resources hosted on AWS. There’s a requirement for those files to be accessed on-premises with low latency. Which AWS service can help you achieve this?
S3 File Gateway
FSx for Windows File Server On-Premises
FSx File Gateway
Volume Gateway
A Solutions Architect is working on planning the migration of a startup company from on-premises to AWS. Currently, their infrastructure consists of many servers and 30 TB of data hosted on a shared NFS storage. He has decided to use Amazon S3 to host the data. Which AWS service can efficiently migrate the data from on-premises to S3?
AWS Storage Tape Gateway
Amazon EBS
AWS Transfer Family
AWS DataSync
Which AWS service is best suited to migrate a large amount of data from an S3 bucket to an EFS file system?
AWS SnowBall
AWS DataSync
AWS Transfer Family
AWS backup
A Machine Learning company is working on a set of datasets that are hosted on S3 buckets. The company decided to release those datasets to the public to be useful for others in their research, but they don’t want to configure the S3 bucket to be public. And those datasets should be exposed over the FTP protocol. What can they do to do the requirement efficiently and with the least effort?
Use AWS Transfer Family
Create an EC2 instance with an FTP server installed then copy the data from S3 to the EC2 instance
Use AWS Storage Gateway
Copy the data from S3 to an EFS file system, then expose them over the FTP protocol
Amazon FSx for NetApp ONTAP is compatible with the following protocols, EXCEPT ………………
NFS
SMB
FTP
ISCSI
Which AWS service is best suited when migrating from an on-premises ZFS file system to AWS?
Amazon FSx for OpenZFS
Amazon FSx for NetApp ONTAP
Amazon FSX for Windows File Server
Amazon FSx for Luster
A company is running Amazon S3 File Gateway to host their data on S3 buckets and is able to mount them on-premises using SMB. The data currently is hosted on S3 Standard storage class and there is a requirement to reduce the costs for S3. So, they have decided to migrate some of those data to S3 Glacier. What is the most efficient way they can use to move the data to S3 Glacier automatically?
Create a Lambda function to migrate data to S3 Glacier and periodically trigger it every day using Amazon EventBridge
Use S3 Batch Operations to loop through S3 files and move them to S3 Glacier every day
Use S3 Lifecycle Policy
Use AWS DataSync to replicate data to S3 Glacier every day
Configure S3 File Gateway to send the data to S3 Glacier directly
You have on-premises sensitive files and documents that you want to regularly synchronize to AWS to keep another copy. Which AWS service can help you with that?
AWS Database Migration Service
Amazon EFS
AWS DataSync
