Font size
WorksheetsAWS SA Class 2
Total questions: 99
Worksheet time: 50mins
Which domain focuses on creating architectures that minimize costs while maximizing performance?
Domain 1: Design Secure Architectures
Domain 2: Design Resilient Architectures
Domain 3: Design High-Performing Architectures
Domain 4: Design Cost-Optimized Architectures
What is the objective of Domain 2 in the AWS Certified Solutions Architect Associate Exam?
Design secure workloads and applications.
Design scalable and loosely coupled architectures.
Design high-performing and elastic compute solutions.
Design cost-optimized compute solutions.
Which domain aims to design workloads and applications with security in mind?
Domain 1: Design Secure Architectures
Domain 2: Design Resilient Architectures
Domain 3: Design High-Performing Architectures
Domain 4: Design Cost-Optimized Architectures
Domain 3 of the AWS Certified Solutions Architect Associate Exam covers the design of what type of architectures?
Secure and reliable architectures
Resilient and scalable architectures
High-performing and elastic architectures
Cost-optimized and efficient architectures
What is the center of AWS's Elastic Compute Cloud (EC2) designed to replicate?
A traditional datacenter/server room
A local area network
A software development kit
A cloud storage system
Which of the following is NOT listed as a capability of leveraging the EC2 ecosystem?
Provisioning an EC2 instance with the right hardware resources
Configuring the base operating system for your application needs
Launching container workloads through ECS and EKS
Directly managing physical server hardware
What can you do to manage and leverage the EC2 instance life cycle according to the text?
Choose the best EC2 pricing model
Secure your EC2 resources using key pairs and security groups
Scale the number of instances up and down to meet changing demand using Auto Scaling
All of the above
What tools does AWS provide to support and enhance your workloads' operations?
Tools for resource monitoring and administration
Platforms for container orchestration
Both A and B
None of the above
What is an EC2 instance primarily composed of?
A virtualized and abstracted subset of a physical server
A standalone physical server
A storage device connected to a network
A software application running on a cloud platform
What will the primary storage drive of an EC2 instance come with?
A fresh and clean operating system running
Pre-installed user data
Encrypted storage data
A set of pre-configured applications
What does AMI stand for in the context of EC2?
Amazon Machine Instance
Automated Machine Image
Amazon Machine Image
Advanced Machine Instance
Which type of AMI includes various releases of Linux or Windows Servers and are optimized for specific tasks like deep learning and database operations?
Amazon Quick Start AMIs
AWS Marketplace AMIs
Community AMIs
Private AMIs
What is the purpose of AWS Marketplace AMIs?
They are created and maintained by independent vendors for general use
They are official, production-ready images supported by industry vendors
They are images created from your own instance deployments
They are used to import VMs from your local infrastructure
How many images are typically available as Community AMIs?
More than 100 images
More than 200 images
More than 300 images
More than 500 images
What is a potential reason for creating a Private AMI?
To import VMs from local infrastructure
To have a reliable, tested, and patched instance image for autoscaling
To search for an application built on a custom combination of software resources
To access images supported by industry vendors like Splunk and Trend Micro
What will happen if you try to use the ID of an AMI in one region while working from within a different region?
The AMI will be duplicated in the new region.
The deployment will succeed without any issues.
The deployment will fail.
The AMI will be automatically updated to work in the new region.
What is the responsibility of AWS customers regarding the display of charges for their AMIs?
AWS customers are responsible for setting the prices for their AMIs.
AWS customers must accept and honor the charges displayed for their AMIs.
AWS customers should negotiate the charges for their AMIs with AWS.
AWS customers are responsible for billing other customers for the use of their AMIs.
How many instance types are currently organized into families according to Table 2.1?
More than 50
More than 60
More than 70
More than 80
Which instance type family is optimized for memory according to Table 2.1?
General purpose
Compute optimized
Memory optimized
Storage optimized
What is the instance type family that is optimized for accelerated computing according to Table 2.1?
General purpose
Compute optimized
Memory optimized
Accelerated computing
Which of the following is not a type listed under the 'Compute optimized' instance family in Table 2.1?
C5a
C6g
C4
X1e
Which instance family is recommended for high-performance computing (HPC) and high-end financial, engineering, artificial intelligence workloads, and medical research?
General Purpose
Compute Optimized
Accelerated Computing
Storage Optimized
The T2 instance type is described as 'burstable'. What does this mean?
It can accumulate CPU credits when underutilized.
It has the highest CPU performance at all times.
It is optimized for memory-intensive applications.
It is the most cost-effective option for all workloads.
What does the 't2.micro' instance type offer as part of the Free Tier?
One virtual CPU (vCPU) and 1 GB of memory.
Two virtual CPUs (vCPUs) and 2 GB of memory.
One virtual CPU (vCPU) and half a gigabyte of memory.
Two virtual CPUs (vCPUs) and half a gigabyte of memory.
Which instance type would you choose for workloads that require fast read/writes and come with low-latency access to EBS storage volumes?
General Purpose
Compute Optimized
Memory Optimized
Storage Optimized
What is the primary benefit of Memory Optimized instances?
They provide a balance of compute, memory, and network resources.
They are suitable for light-use websites and various development-related services.
They are ideal for applications that process large datasets in memory.
They offer higher CPU performance during high-demand periods.
What are the three primary details to get right when configuring an environment for your EC2 instance?
Geographic region, virtual private cloud (VPC), and tenancy model
Operating system, instance size, and network speed
Security group, instance type, and storage capacity
Availability zone, instance family, and pricing model
Where are AWS servers housed and organized?
In a single centralized datacenter
In datacenters around the world organized by geographic region
In virtual datacenters only
In regional offices of AWS
What is the benefit of adding a simple VPC that doesn't incorporate a NAT gateway or VPN access?
It increases the security of your instances
It allows for better network performance
It won't cost you anything
It provides a direct connection to the internet
What is the default tenancy for an EC2 instance?
Dedicated tenancy
Shared tenancy
Isolated tenancy
Virtual tenancy
What is the risk associated with shared tenancy?
High cost
Limited instance types
Possibility of insecure interaction between instances
Overutilization of resources
What does the Dedicated Instance option ensure in an EC2 environment?
It ensures that the instance will share the server with resources owned by different customer accounts.
It ensures that the instance will run on a dedicated physical server, not sharing the server with resources owned by different customer accounts.
It ensures that the instance will have a dedicated Internet Gateway for each instance.
It ensures that the instance will automatically configure the network settings.
Which instance type is Free Tier–eligible if your AWS account is still within its first year?
t2.micro
t2.medium
t2.large
t2.nano
What should you make sure of in the Network Settings section when launching an EC2 instance?
That there's a rule permitting incoming FTP traffic.
That there's a rule permitting incoming HTTP traffic.
That there's a rule permitting incoming SSH (port 22) traffic.
That there's a rule permitting all traffic from the internet.
According to the text, what will cost you more than instances using shared tenancy?
Dedicated instances and dedicated hosts
VPN connections
Internet Gateways
Availability Zones
Before launching an instance on AWS, what are you required to select or create according to Exercise 2.1?
An instance type
A security group
A key pair
A virtual private cloud (VPC)
According to Exercise 2.1, what should you do after launching an instance and before connecting to it?
Restart the instance
Wait a minute or two until everything is running properly
Change the instance type
Stop the instance
As mentioned in Exercise 2.2, where can you find the Monitoring tab to assess the free capacity of a running instance?
In the Actions pull-down menu
On the Instances Dashboard in the EC2 console
Under Instance Settings
In the AWS CLI
What should you do if you want to change the instance type of a running instance as described in Exercise 2.2?
Select Connect from the Actions pull-down menu
Click on the Monitoring tab and choose Change Instance Type
Stop the instance and then select Change Instance Type from the Instance Settings
Restart the instance and select a new type from the EC2 dashboard
What is the final step after changing an instance type according to Exercise 2.2?
Terminate the instance
Restart the instance and confirm that it's running properly
Reconnect to the instance using SSH
Modify the instance's security group
What is the purpose of Cluster placement groups in AWS EC2?
To separate instances physically across distinct hardware racks and availability zones
To associate instances within a single availability zone for low-latency network interconnectivity
To associate instances with each other, placing them in a single “partition” to ensure no two instances share physical hardware
To spread your instances across the infrastructure to create a profile that is optimal for most use cases
What is the main benefit of using Spread placement groups?
They provide low-latency network interconnectivity
They allow instances to share physical hardware
They reduce the risk of failure-related data or service loss by spreading instances across distinct hardware racks and availability zones
They enable instances to be associated with each other in a single partition
What distinguishes Partition placement groups from other types of placement groups?
Instances in Partition placement groups are spread across distinct hardware racks and availability zones
Instances in Partition placement groups are placed within a single availability zone
Instances in Partition placement groups are associated with each other in a single partition, ensuring no two instances share physical hardware
Instances in Partition placement groups allow for low-latency network interconnectivity between them
Which EC2 instance pricing model is most flexible and allows you to control how much you pay by stopping and starting your instances according to your need?
Reserved instance model
On-demand model
Spot instance model
Dedicated host model
If you plan to use EC2 instances 24/7 for more than a year, which pricing model should you consider for a significant discount?
On-demand model
Reserved instance model
Spot instance model
Dedicated host model
What is the cost per hour for a t2.micro instance using the on-demand pricing model?
$0.0116
$1.14
$43.80
$102.00
What is the cost per year for a g3.4xlarge instance using the reserve (three-year term) pricing model?
$5,089.56
$9,986.40
$43.80
$102.00
According to the text, what can save a lot of money when purchasing instances for workloads that can withstand unexpected disruption?
Purchasing instances on Amazon's spot market
Always using on-demand instances
Using reserve instances for a three-year term
Launching instances using the AMI and launch template you specified
What happens when the instance's per-hour rate rises above your maximum bid in Amazon's spot market?
The instance will keep running until you stop it
The instance will be launched using the AMI and launch template you specified
The instance will keep running until the workload completes
The instance will shut down
What is a suggested strategy for an online store to cover normal customer demand and also handle unusually high demand?
Purchase one or two reserved instances to cover normal demand and use autoscaling to launch on-demand instances during high demand
Only use on-demand instances to cover all types of demand
Use spot market instances exclusively for all demand
Purchase as many reserved instances as possible to cover all demand
What happens to the data on the primary storage when an EC2 instance is terminated?
The data is automatically backed up to another storage service.
The data is preserved if it is on an Elastic Block Store (EBS) volume set to persist.
The data is transferred to a new instance automatically.
The data remains accessible for 30 days before deletion.
If you stop an EC2 instance and start it again, what is likely to change?
The instance type
The associated security group
The assigned IP address
The EBS volume data
What should you allocate and associate with your EC2 instance if you need a predictable IP address?
A new instance store volume
A dynamic IP address
An elastic IP address
A security group
What can AWS resource tags help you with?
Increasing the compute power of your resources
Labeling and organizing your resources
Automatically terminating unused resources
Backing up your EC2 instances
According to the sample key/value tagging convention shown in Table 2.3, what value is associated with the key 'production-server' for a security group?
server1
server2
security-group1
There is no associated value for security groups.
What is the purpose of applying tags to resources in AWS according to the text?
To improve the visibility of resources, manage them effectively, and avoid costly errors
To limit the number of instances a user can launch
To attach Elastic Block Store volumes to instances
To increase the physical storage space of the servers
How many VPCs are you allowed per region in an AWS account by default?
500
5,000
50
500,000
What can you do if the service limits of an AWS account are insufficient for your needs?
You can do nothing as the limits are fixed
You can request AWS to raise your ceiling for a particular service
You must delete some of your resources to free up space
You can only wait for AWS to increase the limits in the next update
What are AWS volumes described as in the documentation?
Independent physical drives
Virtualized spaces carved out of larger physical drives
Unlimited storage areas
Single-instance storage units
Can an Elastic Block Store (EBS) volume be attached to more than one instance at a time?
Yes, to an unlimited number of instances
No, it can be attached to no more than a single instance at a time
Yes, but only to two instances at a time
No, EBS volumes cannot be attached to instances
What is the maximum IOPS/volume that io1 can deliver?
3,000 IOPS/volume
64,000 IOPS/volume
500 IOPS/volume
256,000 IOPS/volume
Which EBS volume type is designed for large data stores where quick access isn't important?
EBS-Provisioned IOPS SSD
EBS General-Purpose SSD
HDD Volumes
io2 Block Express
How much throughput can io2 Block Express provide?
1,000 MB/s per volume
500 IOPS/GB
4,000 MB/s throughput
250 MB/s per TB
What is the cost per GB per month for the sc1 volume type?
$0.015/GB-month
$0.045/GB-month
$0.10/GB-month
$0.05/GB-month
What does IOPS stand for in the context of EBS volumes?
Input/Output Per Second
Input/Output Performance Service
Input/Output Provisioned Speed
Input/Output Operations Per Second
What can EBS volumes be used to generate aside from being attached to other instances?
A) AMIs from snapshots
B) Physical hard drives
C) Additional EC2 instances
D) Network configurations
What must be done before generating an AMI image directly from a running instance-attached EBS volume?
A) The instance must be rebooted
B) The EBS volume must be detached
C) The instance must be shut down
D) The EBS volume must be encrypted
What is the characteristic of instance store volumes that differentiates them from EBS volumes?
A) They are included in the price of the instance itself
B) They are encrypted by default
C) They can be attached to multiple instances
D) They are persistent storage options
What happens to the data on an instance store volume when the instance it is attached to is shut down?
A) The data is backed up to EBS
B) The data is permanently lost
C) The data is archived for later retrieval
D) The data is transferred to another instance
Which of the following is a reason why one might choose to use an instance store volume over an EBS volume?
A) For long-term data retention
B) For data that is disposable
C) For storing sensitive information
D) For automatic data encryption
Which Amazon service is mentioned as a less expensive way to store large data sets that don't need to survive a system failure or reboot?
Amazon EBS
Amazon EC2
Amazon S3
Amazon AMIs
What is the default nature of the public IP address assigned to an EC2 instance?
It is static and survives reboots.
It is ephemeral and does not survive reboots.
It is an elastic IP with no additional cost.
It allows direct connection to the Internet without a subnet.
What is the range of the private IP address for the 10.0.0.0 network?
10.0.0.0 to 10.255.255.255
172.16.0.0 to 172.31.255.255
192.168.0.0 to 192.168.255.255
10.0.0.1 to 10.255.255.254
Which of the following is not a private IP address range?
10.0.0.0 to 10.255.255.255
172.16.0.0 to 172.31.255.255
192.168.0.0 to 192.168.255.255
172.32.0.0 to 172.64.255.255
What is the IP address used to access the instance metadata for an EC2 instance?
192.168.1.1
169.254.169.254
127.0.0.1
10.0.0.1
Which command can be used to retrieve the available metadata from an EC2 instance?
curl http://127.0.0.1/latest/meta-data/
curl http://169.254.169.254/latest/meta-data/
wget http://169.254.169.254/latest/meta-data/
ssh http://169.254.169.254/latest/meta-data/
What type of information can be obtained by adding a trailing slash (/) to the curl command for EC2 instance metadata?
It returns the previous version of the metadata.
It provides further sublevels of information.
It resets the metadata to default values.
It encrypts the metadata output.
Which of the following is a piece of data that can be retrieved from the EC2 instance metadata?
ami-id
cpu-usage
disk-space
user-password
What is the primary role of an EC2 security group?
To provide a set of credentials for user authentication
To act as a firewall that controls incoming and outgoing traffic
To assign permissions to perform actions on specified AWS resources
To translate network addresses for instances in the cloud
By default, what does a security group do to incoming traffic?
Allows all incoming traffic and denies all outgoing traffic
Denies all incoming traffic and allows all outgoing traffic
Monitors incoming traffic without denying or allowing it
Allows only traffic from authenticated users
What can you define in a security group to control traffic?
Group behavior by setting policies to allow or block specific traffic types
Permissions to perform actions on specified AWS resources
Network address translation settings for instances
Key pairs for SSH access to instances
What is the purpose of IAM roles in AWS?
To control traffic at the instance level
To provide network access control lists (NACLs)
To give permissions to perform actions on specified services or resources within an AWS account
To act as a firewall for EC2 instances
What can an IAM role be assigned to?
Only to users within your AWS account
Only to EC2 instances within your AWS account
A limited number of entities, including users and other resources
Unlimited entities, as long as they are within your AWS account
Why might you need to configure an EC2 instance without a public IP address?
To increase the Internet connectivity speed
To allow the instance to receive security patches and software updates
To limit its exposure to the network
To manually launch and maintain an instance
What are the two ways AWS provides to give your private instance access to the Internet without allowing access to it from the Internet?
NAT instance and NAT service
NAT gateway and NAT service
NAT instance and NAT gateway
NAT service and Internet gateway
What is the advantage of using a NAT gateway over a NAT instance?
A NAT gateway incurs monthly charges
A NAT gateway requires manual launching and maintenance
A NAT gateway is a managed service that doesn't require manual launching and maintenance
A NAT gateway allows direct Internet connectivity
What should you do to ensure properly secured sessions when initiating remote login sessions on your running instances?
Use a public key for authentication
Initiate over unencrypted plain-text connections
Generate a key pair and save the public key to your EC2 server
Connect directly without a key pair
For a Linux AMI, what does the private key file allow you to do?
Increase the speed of your Internet connection
Retrieve the password for authentication
Open an SSH session
Launch and maintain an instance
For a Windows AMI, how do you use the private key file?
To open an SSH session
To retrieve the password you'll need to authenticate into your instance
To increase the Internet connectivity speed
To manually launch and maintain an instance
What is the purpose of EC2 Auto Scaling?
To automatically configure security groups and user data for instances
To avoid application failure and recover from instances that fail or get terminated
To create new instances manually with specific configuration parameters
To manage the network traffic for EC2 instances
What does a launch configuration in EC2 Auto Scaling do?
It allows you to change settings after creation
It is used to manually provision an instance
It automatically configures the instances it launches with basic configuration parameters and scripts
It is a new feature that AWS is currently developing
Can you modify a launch configuration after you create it in EC2 Auto Scaling?
Yes, at any time
Yes, but only within the first 24 hours
No, you have to create an entirely new launch configuration
No, but you can modify it using launch templates
What is the difference between launch configurations and launch templates in EC2 Auto Scaling?
Launch templates are not versioned, whereas launch configurations are
Launch configurations are more versatile than launch templates
Launch templates are versioned and allow changes after creation, while launch configurations do not
Launch configurations can be used for spinning up one-off EC2 instances, but launch templates cannot
What additional capabilities do launch templates offer over launch configurations?
They can only be used with EC2 Auto Scaling
They are not versioned and cannot be changed after creation
They can be used for spinning up one-off EC2 instances or even creating a spot fleet
They require manual provisioning of each instance
What is the first step in creating a launch template for an EC2 instance according to Exercise 2.5?
Click the Create Launch Template button.
In the EC2 Dashboard, click Launch Templates.
Give the launch template a name such as MyTemplate.
Select the AMI of one of the Ubuntu Server LTS AMIs.
What should you ensure about the AMI when selecting it for the launch template in Exercise 2.5?
It should be the 32-bit x86 architecture.
It should be the 64-bit ARM architecture.
It should be the 64-bit x86 architecture and not 64-bit ARM.
It should be the latest version of any AMI.
Which Instance Type is recommended to select in Exercise 2.5?
Select t2.large.
Select t2.micro.
Select t2.nano.
Select t2.small.
What command is included in the User Data to install Apache2 on the instance in Exercise 2.5?
apt-get install -y apache2
apt-get update
echo "Welcome to my website" > index.html
cp index.html /var/www/html
What action should be taken after the instance boots, according to Exercise 2.5?
Terminate the instance.
Browse to its public IP address to see a web page that says "Welcome to my website."
Click the Launch Instance From This Template link again.
Select a different Source Template Version.
