wayground logo

Free Printable Worksheets

NEW

Font size

S
M
L
XL
Worksheets

aws test quiz

Total questions: 20

Worksheet time: 23mins

Name
Class
Date
1.

Your architecture consists of an Application Load Balancer front, an Auto Scaling Group of EC2 instances, backed by an RDS database. Your security team has notified you of cross-site scripting attacks and also SQL injection attacks on the application. You have been asked to take steps to quickly mitigate these attacks. What steps should you take?

a)

Using the AWS WAF service, set up rules which block SQL injection, and cross-site scripting attacks. Associate the rules to the ALB.

b)

Use Amazon Inspector to detect these attacks and manually block the IP addresses from which these attacks come.

c)

Immediately block the offending IP addresses on the NACL.

d)

Configure Amazon GuardDuty to prevent these attacks.

2.

You work for a doctor's surgery in New York City that has thousands of patients. The patients data is stored on-premises, but the backups need to be stored on S3 in the most secure way possible. Which of the following is the most secure way of achieving this?

a)

Encrypt the data locally using your own encryption keys. Upload the data to AWS S3 using HTTP. Use AES 256 server side encryption on the S3 bucket to encrypt the bucket.

b)

Store the data on AWS Fargate and use server-side encryption to encrypt the backups.

c)

Upload the backups directly to a public S3 bucket.

d)

Encrypt the data locally using your own encryption keys. Upload the data to AWS S3 using HTTPS. Use AES 256 server-side encryption on the S3 bucket to encrypt the bucket.

3.

You have a web application running on an Amazon EC2 instance in a Virtual Private Cloud (VPC). You want to allow external users to access your web server over HTTP (port 80) while keeping your server secure. Which of the following actions should you take regarding the associated security group?

a)

Create an inbound rule in the security group that allows incoming traffic on port 80 from your office IP address.

b)

Create an inbound rule in the security group that allows incoming traffic on port 80 from 0.0.0.0/0 (any IP address).

c)

Create an outbound rule in the security group that allows outgoing traffic on port 80 to 0.0.0.0/0 (any IP address) and configure an inbound rule for responses.

d)

You do not need to add rules, by default security groups allow all inbound traffic.

4.

You are developing an application that will run on EC2 and requires secure access to a backend RDS (Relational Database Service) running on MySQL. The application needs to utilize credentials to access the RDS database while ensuring communication between the application and RDS is encrypted. What is the most secure method of doing this?

a)

Create a Lambda function which creates an IAM user for the EC2 instances running the application to use, hard code the credentials into the application. Have the Lambda function reset the password for the IAM user every 6 hours and update the code in the application. Download the certificate bundle for the AWS Region where the RDS database resides and import this into the EC2 instance used for the application. Modify the parameter group for the MySQL RDS instance to set the require_secure_transport parameter to ON.

b)

Create an IAM user with the necessary permissions to access the RDS database. Configure a credentials file on the EC2 instance running the application so the application can read the credentials from this file when needing to authenticate to the RDS database. Download the certificate bundle for the AWS Region where the RDS database resides and import this to the EC2 instance used for the application. Modify the parameter group for the Microsoft SQL Server RDS instance to set the force ssl flag to on.

c)

Enable IAM Database Authentication on the MySQL RDS instance, create an IAM Role for RDS access, and then associate the IAM role with a database user in RDS. Download the certificate bundle for the AWS Region where the RDS database resides and import this into the EC2 instance used for the application. Modify the parameter group for the MySQL RDS instance to set the require_secure_transport parameter to ON.

d)

Create an IAM User with the necessary permissions to access the RDS database. Configure a credentials file on the EC2 instance running the application, so the application can read the credentials from this file when needing to authenticate to the RDS database. Download the certificate bundle for the AWS Region where the RDS database resides and import this to the EC2 instance used for the application. Modify the parameter group for the MySQL RDS instance to set the require_secure_transport parameter to ON.

5.

A news media company is using an S3 bucket as a website to serve photos of television personalities within the company. The photos are intended to be served nationwide to local affiliates across the company, but you have found that these photos are being accessed and pirated for other websites not affiliated with the company. What can you do to stop this?

a)

Use CloudFront on the front end to serve the photos.

b)

Remove public read access from your bucket, then provide your users with presigned URLs to access the photos.

c)

Set up an RDS database to store the photos. Make users register and log in to the site.

d)

Use a Network Access Control List (NACL) to block the IP address of unauthorized users.

6.

You work for a real estate company that hosts some production services on AWS. Unfortunately, a junior system administrator leaves a CSV file containing Personally Identifiable Information (PII) about the businesses customers on a public S3 bucket. You need to prevent this from happening in the future. What AWS service uses machine learning (ML) and pattern matching to discover and protect PII?

a)

Amazon GuardDuty

b)

Amazon Macie

c)

AWS Shield

d)

AWS CloudTrail

7.

Jessica is a Database Administrator who has been given the task to migrate all the team Oracle databases running on on-premises virtual machines to the AWS cloud. During the migration efforts, it was requested that she find an automated way to convert to using an Amazon Aurora PostgreSQL database instead of Oracle as well as replicating any ongoing transactions during the migration itself.

Which AWS service configurations would Jessica use in this scenario?

a)

Manually convert the Oracle database to PostgreSQL on-premises. Use AWS MGN to migrate the server to the AWS cloud. Then, create an AWS DMS task to replicate data changes only and configure the source as the on-premises PostgreSQL database VM and the target as the Amazon EC2 instance running PostgreSQL.

b)

Use the Amazon Aurora Serverless migration conversion tool to easily convert to a PostgreSQL database during the migration.

c)

Create a new AWS DMS task using the Migrate existing data and replicate ongoing changes (CDC) option to migrate to AWS while capturing changed data.

d)

Use the AWS DMS SCT to enable CDC on the migration task so that changed data is captured during the migration efforts.

8.

A small financial technology company has decided to migrate all infrastructure to AWS. They do not have the budget to properly plan and refactor their infrastructure to fit AWS, so they have decided simply to lift-and-shift everything for now. The CEO and CTO have required that all on-premises applications and infrastructure be moved into AWS by end of year, and they will refactor at a later date.

Which solution is the best fit for their migration needs?

a)

Use AWS DMS to migrate all infrastructure to AWS. Then use the AWS SCT to automatically refactor applications to make the best use of the AWS services.

b)

Use AWS MGN to automate the process of lifting and shifting all infrastructure to AWS.

c)

Use AWS MGN to automate the process of lifting and shifting all infrastructure to AWS, and enable the 'Refactor During Migration' option to automatically refactor applications to make the best use of the AWS service.

d)

Use AWS DMS to migrate all infrastructure to AWS.

9.

You work for a medium-sized retail outlet that uses a payment processing system with a backend on AWS. Recently, you had an outage and you need to provision some AWS services locally on-site at each retail branch. This will consist of a small application that will process the transaction on-site and then transmit the processed transaction to the AWS backend when there is internet connectivity. If there is no connectivity, it will wait until there is and then transmit the transaction. You need to design a solution that will bring AWS on-site to the retail locations. The solution needs to account for the small physical space available in some of the stores. Which AWS service would achieve this?

a)

AWS Outposts servers

b)

Amazon S3 File Gateway

c)

AWS Storage Gateway

d)

AWS Outposts rack

10.

Your company has decided to begin migration efforts from on-premises data centers to the AWS cloud. Currently, the data centers host several virtual machines, including vSphere VMs and Hyper-V VMs. You have been asked to find the easiest and most efficient method of migrating all the VMs to AWS as Amazon EC2 AMIs, while also minimizing the potential downtime.

Which AWS service is the best fit for this?

a)

Enable AWS DMS to incrementally perform migrations of all VMs in the data center.

b)

Use AWS Refactor Service (AWS RFS) to incrementally perform migrations of all VMs in the data center.

c)

Start the process via AWS Migration Hub to incrementally perform migrations of all VMs in the data center to AWS as AMIs for Amazon EC2.

d)

Leverage the AWS Application Migration Service to incrementally perform migrations of all VMs in the data center to AWS as AMIs for Amazon EC2.

11.

You are decoupling your infrastructure and decide to implement an SQS queue as part of the overall architecture to make your web application more resilient. You need to create an SQS queue that allows your messages to be processed exactly once and in order. Which SQS queue should you choose?

a)

SQS standard queue

b)

SQS FIFO queue

c)

SQS dead-letter queue

d)

SQS LIFO queue

12.

A company has an Auto Scaling group of EC2 instances hosting their retail sales application. Any significant downtime for this application can result in large losses of profit. Therefore, the architecture also includes an Application Load Balancer and an RDS database in a Multi-AZ deployment. The company has a very aggressive Recovery Time Objective (RTO) in case of disaster. How long will a failover of an RDS database typically complete?

a)

Almost instantly

b)

Within an hour

c)

Under 10 minutes

d)

One to two minutes.

13.

You have a solution that is hosted in US-West-1 consisting of a custom VPC, 20 EC2 instances, RDS instances, an Application Load Balancer, and an Auto Scaling group. Unfortunately, the entire Region goes down for a few hours and your business suffers a large loss of revenue. Your manager decides he wants scripted infrastructure so that, if a Region goes down, you will be able to run a script in another Region and create a copy of your environment, including all the custom VPC configurations. What AWS service should you use?

a)

Amazon Cloud Backup Provisioning Service (ACBPS)

b)

CloudFormation

c)

Lambda

d)

AWS Elastic Beanstalk

14.

You have an EC2 instance in an Auto Scaling group that is currently a t2.micro. It was a test/dev server; however, the process of introducing clients to "test" the software and having processes which were bypassed internally has resulted in a system that is now running a key production workload for the business. You have already reconfigured the Auto Scaling group metrics to scale horizontally, but due to the additional use cases this application is being used for, the instance size also now needs increasing to cope with the additional processing power and memory allocation needed by each client. Analyzing the metrics has identified that a t2.2xlarge instance size would balance cost and performance for this application. How can you achieve this without incurring downtime in the application in the simplest way possible?

a)

Create a new launch template with the t2.2xlarge instance type and update the Auto Scaling group.

b)

Create a new Auto Scaling group and attach the t2.2xlarge instance type.

c)

Delete the EC2 instance, create a new EC2 instance, and reinstall all the software. Repeat this process for every server in the Auto Scaling group.

d)

Edit the EC2 instances and change the instance type to t2.2xlarge so there is no downtime.

15.

A web application for a travel company is hosted in EC2. The EC2 instances consume messages from an SQS queue related to vacation bookings. After processing a booking, an SNS topic is triggered to automatically send an email notification to the operations team. Last night, the operations team received email notifications for seven unique orders. Over the span of the next three hours, without any new bookings being made, they received a total of 28 notifications. What could be causing this behavior?

a)

The web application has been set up with short polling so not enough messages are being consumed.

b)

You have set up permissions incorrectly in SQS so that the web application does not have access to the SQS queue.

c)

The web application is not deleting the messages from the SQS queue after successfully processing them.

d)

The web application has been set up with long polling so too many messages are being consumed.

16.

Your company is currently building out a second AWS region. Following best practices, they've been using CloudFormation to make the migration easier. They've run into a problem with the template though. Whenever the template is created in the new region, it's still referencing the AMI in the old region. What is the best solution to automatically select the correct AMI when the template is deployed in the new region?

a)

Create a condition in the template to automatically select the correct AMI ID.

b)

Update the AMI in the old region, as AMIs are universal.

c)

Create a Parameter section in the template. Whenever the template is run, fill in the correct AMI ID.

d)

Create a mapping in the template. Define the unique AMI value per region.

17.

You work at a small startup with a very strict budget. Recently, they experienced a surge of demand on their web frontend servers, which triggered an auto scaling event. The auto scaling wasn't configured correctly, and it did not scale down after the surge, resulting in a very large bill at the end of the month. You need to find a way to alert the founders when your AWS bill reaches a certain threshold, and you need to do this as cost-effectively and efficiently as possible. What is the best way to achieve this?

a)

Repetitively hit F5 on the AWS billing page.

b)

Create a billing alarm in CloudWatch for the specified amount.

c)

Use Lambda to monitor your AWS bill and then trigger an SNS notification when your bill hits a certain level.

d)

Use AWS Trusted Advisor to create an automatic alert.

18.

You work for an advertising company that delivers high-resolution images and movies to customers across the globe. You are migrating the application to AWS, and you need to be able to deliver large media files to your end users as quickly as possible in the most cost-effective method possible. What is the best way to achieve this?

a)

Use DynamoDB Accelerator (DAX) as a CDN to serve the content globally.

b)

Use S3 with CloudFront.

c)

Build your own CDN network with hundreds of servers across the globe and use Route53 to use geo-routing to connect the users to their closest CDN node.

d)

Upload the files to EFS and use EC2 to serve the content to your customers around the world.

19.

A development team is experimenting with AWS Lambda. They want to use a completely serverless application with a few other serverless resources included, but due to resource constraints, they cannot design it from the ground up. Because of this, they want to leverage an application stack that someone has potentially already created.

What would be the most cost-effective way to accomplish this?

a)

Find and deploy an Amazon EC2 AMI from the AWS Marketplace.

b)

Create a simple CloudFormation template.

c)

Find and deploy a published app via the AWS Serverless Application Repository.

d)

Use AWS Proton to completely design and deploy their solution.

20.

You work for an insurance company that is designing a new application. The application will need a relational database on the backend that automatically starts up, shuts down, and scales capacity up or down based on your application's needs. You need this database to be as cost-effective as possible. Which database should you choose?

a)

Aurora Serverless

b)

DynamoDB

c)

NeptuneDB

d)

RDS