wayground logo

Free Printable Worksheets

NEW

Font size

S
M
L
XL
Worksheets

AWS Solutions Architect Associate - IAM and Compute

Total questions: 56

Worksheet time: 28mins

Name
Class
Date
1.

What is a proper definition of an IAM Role?

a)

IAM Users in Multiple User Groups

b)

An IAM entity that defines a password policy for IAM Users

c)

An IAM entity that defines a set of permissions for making requests to AWS services, and will be used by an AWS service.

d)

Permissions assigned to IAM Users to perform actions

2.

Which of the following is an IAM Security Tool?

a)

IAM Credentials Report

b)

IAM Root Account Manager

c)

IAM Services Report

d)

IAM Security Advisor

3.

Which answer is INCORRECT regarding IAM Users?

a)

IAM Users can belong to multiple User Groups

b)

IAM Users don't have to belong to a User Group

c)

IAM Policies can be attached directly to IAM Users

d)

IAM Users access AWS services using root account credentials

4.

Which of the following is an IAM best practice?

a)

Create several IAM Users for one physical person

b)

Don't use the root user account

c)

Share your AWS account credentials with a colleague so they can perform a task for your

d)

Do not enable MFA for easier access

5.

What are IAM Policies?

a)

A set of policies that defines how AWS accounts interact with each other

b)

JSON documents that define a set of permissions for making requests to AWS services, and can be used by IAM Users, User Groups, and IAM Roles

c)

A set of policies that define a password for IAM Users

d)

A set of policies defined by AWS that show how customers interact with AWS

6.

Which principle should you apply regarding IAM Permissions?

a)

Grant most privilege

b)

Grant more permissions if your employee asks you to

c)

Grant least privilege

d)

Restrict root account permissions

7.

What should you do to increase your root account security?

a)

Remove permissions from the root account

b)

Only access AWS services through the AWS Command Line Interface (CLI)

c)

Don't create IAM Users, only access your AWS account using the root account

d)

Enable Multi-Factor Authentication (MFA)

8.

IAM User Groups can contain IAM Users and other User Groups.

a)

True

b)

False

9.

An IAM policy consists of one or more statements. A statement in an IAM Policy consists of the following, EXCEPT:

a)

Effect

b)

Principle

c)

Version

d)

Action

e)

Resource

10.

Which EC2 Purchasing Option can provide you the biggest discount, but it is not suitable for critical jobs or databases?

a)

Convertible Reserved Instances

b)

Dedicated Hosts

c)

Spot Instances

11.

What should you use to control traffic in and out of EC2 instances?

a)

Network Access Control List (NACL)

b)

Security Groups

c)

IAM Policies

12.

How long can you reserve an EC2 Reserved Instance?

a)

1 or 3 years

b)

2 or 4 years

c)

6 months or 1 year

d)

Anytime between 1 and 3 years

13.

You would like to deploy a High-Performance Computing (HPC) application on EC2 instances. Which EC2 instance type should you choose?

a)

Storage Optimized

b)

Compute Optimized

c)

Memory Optimized

d)

General Purpose

14.

Which EC2 Purchasing Option should you use for an application you plan to run on a server continuously for 1 year?

a)

Reserved Instances

b)

Spot Instances

c)

On-Demand Instances

15.

You are preparing to launch an application that will be hosted on a set of EC2 instances. This application needs some software installation and some OS packages need to be updated during the first launch. What is the best way to achieve this when you launch the EC2 instances?

a)

Connect to each EC2 instance using SSH, then install the required software and update your OS packages manually

b)

Write a bash script that installs the required software and updates to your OS, then contact AWS Support and provide them with the script. They will run it on your EC2 instances at launch.

c)

Write a bash script that installs the required software and updates to your OS, then use this script in EC2 User Data when you launch your EC2 instances

16.

Which EC2 Instance Type should you choose for a critical application that uses an in-memory database?

a)

Compute Optimized

b)

Storage Optimized

c)

Memory Optimized

d)

General Purpose

17.

You have an e-commerce application with an OLTP database hosted on-premises. This application has popularity which results in its database having thousands of requests per second. You want to migrate the database to an EC2 instance. Which EC2 Instance Type should you choose to handle this high-frequency OLTP database?

a)

Compute Optimized

b)

Storage Optimized

c)

Memory Optimized

d)

General Purpose

18.

Security Groups can be attached to only one EC2 instance.

a)

True

b)

False

19.

You're planning to migrate on-premises applications to AWS. Your company has strict compliance requirements that require your applications to run on dedicated servers. You also need to use your own server-bound software license to reduce costs. Which EC2 Purchasing Option is suitable for you?

a)

Convertible Reserved Instances

b)

Dedicated Hosts

c)

Spot Instances

20.

You would like to deploy a database technology on an EC2 instance and the vendor license bills you based on the physical cores and underlying network socket visibility. Which EC2 Purchasing Option allows you to get visibility into them?

a)

Spot Instances

b)

On-Demand

c)

Dedicated Hosts

d)

Reserved Instances

21.

Spot Fleet is a set of Spot Instances and optionally ________.

a)

Reserved Instances

b)

On-Demand Instances

c)

Dedicated Hosts

d)

Dedicated Instances

22.

You have launched an EC2 instance that will host a NodeJS application. After installing all the required software and configured your application, you noted down the EC2 instance public IPv4 so you can access it. Then, you stopped and then started your EC2 instance to complete the application configuration. After restart, you can't access the EC2 instance, and you found that the EC2 instance public IPv4 has been changed. What should you do to assign a fixed public IPv4 to your EC2 instance?

a)

Allocate an Elastic IP and assign it to your EC2 instance

b)

From inside your EC2 instance OS, change network configuration from DHCP to static and assign it a public IPv4

c)

Contact AWS Support and request a fixed public IPv4 to your EC2 instance

d)

This can't be done, you can only assign a fixed private IPv4 to your EC2 instance

23.

You have an application performing big data analysis hosted on a fleet of EC2 instances. You want to ensure your EC2 instances have the highest networking performance while communicating with each other. Which EC2 Placement Group should you choose?

a)

Spread Placement Group

b)

Cluster Placement Group

c)

Partition Placement Group

24.

You have a critical application hosted on a fleet of EC2 instances in which you want to achieve maximum availability when there's an AZ failure. Which EC2 Placement Group should you choose?

a)

Cluster Placement Group

b)

Partition Placement Group

c)

Spread Placement Group

25.

Elastic Network Interface (ENI) can be attached to EC2 instances in another AZ.

a)

True

b)

False

26.

The following are true regarding EC2 Hibernate, EXCEPT:

a)

EC2 Instance Root Volume must be an Instance Store volume

b)

Supports On-Demand and Reserved Instances

c)

EC2 Instance RAM must be less than 150GB

d)

EC2 Instance Root Volume type must be an EBS volume

27.

You have just terminated an EC2 instance in us-east-1a, and its attached EBS volume is now available. Your teammate tries to attach it to an EC2 instance in us-east-1b but they can't. What is a possible cause for this?

a)

They are missing IAM permissions

b)

EBS volumes are locked to an AWS Region

c)

EBS volumes are locked to an Availability Zone

28.

You have launched an EC2 instance with two EBS volumes, Root volume type and the other EBS volume type to store the data. A month later you are planning to terminate the EC2 instance. What's the default behavior that will happen to each EBS volume?

a)

Both the root volume type and the EBS volume type will be deleted

b)

The root volume type will be deleted and the EBS volume type will not be deleted

c)

The root volume type will not be deleted and the EBS volume type will be deleted

d)

Both the root volume type and the EBS volume type will not be deleted

29.

You can use an AMI in N.Virginia Region us-east-1 to launch an EC2 instance in any AWS Region.

a)

True

b)

False

30.

Which of the following EBS volume types can be used as boot volumes when you create EC2 instances?

a)

gp2, gp3, st1, sc1

b)

gp2, gp3, io1, io2

c)

io1, io2, st1, sc1

31.

What is EBS Multi-Attach?

a)

Attach the same EBS volume to multiple EC2 instances in multiple AZs

b)

Attach multiple EBS volumes in the same AZ to the same EC2 instance

c)

Attach the same EBS volume to multiple EC2 instances in the same AZ

d)

Attach multiple EBS volumes in multiple AZs to the same EC2 instance

32.

You would like to encrypt an unencrypted EBS volume attached to your EC2 instance. What should you do?

a)

Create an EBS snapshot of your EBS volume. Copy the snapshot and tick the option to encrypt the copied snapshot. Then, use the encrypted snapshot to create a new EBS volume

b)

Select your EBS volume, choose Edit Attributes, then tick the Encrypt using KMS option

c)

Create a new encrypted EBS volume, then copy data from your unencrypted EBS volume to the new EBS volume

d)

Submit a request to AWS Support to encrypt your EBS volume

33.

You have a fleet of EC2 instances distributes across AZs that process a large data set. What do you recommend to make the same data to be accessible as an NFS drive to all of your EC2 instances?

a)

EBS

b)

EFS

c)

Instance Store

34.

You would like to have a high-performance local cache for your application hosted on an EC2 instance. You don't mind losing the cache upon the termination of your EC2 instance. Which storage mechanism do you recommend as a Solutions Architect?

a)

EBS

b)

EFS

c)

Instance Store

35.

You are running a high-performance database that requires an IOPS of 310,000 for its underlying storage. What do you recommend?

a)

EBS gp2 drive

b)

EBS io1 drive

c)

EC2 Instance Store

d)

EBS io2 Block Express drive

36.

Scaling an EC2 instance from r4.large to r4.4xlarge is called ________.

a)

Horizontal Scalability

b)

Vertical Scalability

37.

Running an application on an Auto Scaling Group that scales the number of EC2 instances in and out is called ________.

a)

Horizontal Scalability

b)

Vertical Scalability

38.

Elastic Load Balancers provide a ________.

a)

Static IPv4 we can use in our application

b)

Static DNS name we can use in our application

c)

Static IPv6 we can use in our application

39.

You are running a website on 10 EC2 instances fronted by an Elastic Load Balancer. Your users are complaining about the fact that the website always asks them to re-authenticate when they are moving between website pages. You are puzzled because it's working just fine on your machine and in the Dev environment with 1 EC2 instance. What could be the reason?

a)

Your website must have an issue when hosted on multiple EC2 instances

b)

The EC2 instances log out users as they can't see their IP addresses instead, they receive ELB IP addresses

c)

The Elastic Load Balancer does not have Sticky Sessions enabled

40.

You are using an Application Load Balancer to distribute traffic to your website hosted on EC2 instances. It turns out that your website only sees traffic coming from private IPv4 addresses which are in fact your Application Load Balancer's IP addresses. What should you do to get the IP address of clients connected to your website?

a)

Modify your website's frontend so that users send their IP in every request

b)

Modify your website's backend to get the client IP address from the X-Forwarded-For header

c)

Modify your website's backend to get the client IP address from the X-Forwarded-Port header

d)

Modify your website's backend to get the client IP address from the X-Forwarded-Proto header

41.

You hosted an application on a set of EC2 instances fronted by an Elastic Load Balancer. A week later, users begin complaining that sometimes the application just doesn't work. You investigate the issue and found that some EC2 instances crash from time to time. What should you do to protect users from connecting to the EC2 instances that are crashing?

a)

Enable ELB Health Checks

b)

Enable ELB Stickiness

c)

Enable SSL Termination

d)

Enable Cross-Zone Load Balancing

42.

You are working as a Solutions Architect for a company and you are required to design an architecture for a high-performance, low-latency application that will receive millions of requests per second. Which type of Elastic Load Balancer should you choose?

a)

Application Load Balancer

b)

Classic Load Balancer

c)

Network Load Balancer

43.

Application Load Balancers support the following protocols, EXCEPT:

a)

HTTP

b)

HTTPS

c)

TCP

d)

WebSocket

44.

Application Load Balancers can route traffic to different Target Groups based on the following, EXCEPT:

a)

Client's Location (Geography)

b)

Hostname

c)

Request URL Path

d)

Source IP Address

45.

Registered targets in a Target Groups for an Application Load Balancer can be one of the following, EXCEPT:

a)

EC2 Instances

b)

Network Load Balancer

c)

Private IP Addresses

d)

Lambda Functions

46.

For compliance purposes, you would like to expose a fixed static IP address to your end-users so that they can write firewall rules that will be stable and approved by regulators. What type of Elastic Load Balancer would you choose?

a)

Application Load Balancer with an Elastic IP attached to it

b)

Network Load Balancer

c)

Classic Load Balancer

47.

You want to create a custom application-based cookie in your Application Load Balancer. Which of the following you can use as a cookie name?

a)

AWSALBAPP

b)

APPUSERC

c)

AWSALBTG

d)

AWSALB

48.

You have a Network Load Balancer that distributes traffic across a set of EC2 instances in us-east-1. You have 2 EC2 instances in us-east-1b AZ and 5 EC2 instances in us-east-1e AZ. You have noticed that the CPU utilization is higher in the EC2 instances in us-east-1b AZ. After more investigation, you noticed that the traffic is equally distributed across the two AZs. How would you solve this problem?

a)

Enable Cross-Zone Load Balancing

b)

Enable Sticky Sessions

c)

Enable ELB Health Checks

d)

Enable SSL Termination

49.

Which feature in both Application Load Balancers and Network Load Balancers allows you to load multiple SSL certificates on one listener?

a)

TLS Termination

b)

Server Name Indication (SNI)

c)

SSL Security Policies

d)

Host Headers

50.

You have an Application Load Balancer that is configured to redirect traffic to 3 Target Groups based on the following hostnames: users.example.com, api.external.example.com, and checkout.example.com. You would like to configure HTTPS for each of these hostnames. How do you configure the ALB to make this work?

a)

Use an HTTP to HTTPS redirect rule

b)

Use a security group SSL certificate

c)

Use Server Name Indication (SNI)

51.

You have an application hosted on a set of EC2 instances managed by an Auto Scaling Group that you configured both desired and maximum capacity to 3. Also, you have created a CloudWatch Alarm that is configured to scale out your ASG when CPU Utilization reaches 60%. Your application suddenly received huge traffic and is now running at 80% CPU Utilization. What will happen?

a)

Nothing

b)

The desired capacity will go up to 4 and the maximum capacity will stay at 3

c)

The desired capacity will go up to 4 and the maximum capacity will stay at 4

52.

You have an Auto Scaling Group fronted by an Application Load Balancer. You have configured the ASG to use ALB Health Checks, then one EC2 instance has just been reported unhealthy. What will happen to the EC2 instance?

a)

The ASG will keep the instance running and restart the application

b)

The ASG will detach the EC2 instance and leave it running

c)

The ASG will terminate the EC2 instance and launch a new one

53.

Your boss asked you to scale your Auto Scaling Group based on the number of requests per minute your application makes to your database. What should you do?

a)

Create a CloudWatch custom metric then create a CloudWatch Alarm on this metric to scale your ASG

b)

You politely tell him it's impossible

c)

Enable Detailed Monitoring then create a CloudWatch Alarm to scale your ASG

54.

An application is deployed with an Application Load Balancer and an Auto Scaling Group. Currently, you manually scale the ASG and you would like to define a Scaling Policy that will ensure the average number of connections to your EC2 instances is around 1000. Which Scaling Policy should you use?

a)

Simple Scaling Policy

b)

Step Scaling Policy

c)

Target Tracking Policy

d)

Scheduled Scaling Policy

55.

You have an ASG and a Network Load Balancer. The application on your ASG supports the HTTP protocol and is integrated with the Load Balancer health checks. You are currently using the TCP health checks. You would like to migrate to using HTTP health checks, what do you do?

a)

Migrate to an Application Load Balancer

b)

Migrate the health check to HTTP

56.

You have a website hosted in EC2 instances in an Auto Scaling Group fronted by an Application Load Balancer. Currently, the website is served over HTTP, and you have been tasked to configure it to use HTTPS. You have created a certificate in ACM and attached it to the Application Load Balancer. What you can do to force users to access the website using HTTPS instead of HTTP?

a)

Send an email to all customers to use HTTPS instead of HTTP

b)

Configure the Application Load Balancer to redirect HTTP to HTTPS

c)

Configure the DNS record to redirect HTTP to HTTPS