wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

AOS_2024_Tema2_Evaluacion_Individual

Total questions: 45

Worksheet time: 4hrs 45mins

Name
Class
Date
1.
A company is building a machine learning pipeline on AWS and is using Amazon S3 to store the training data. They need a search mechanism to quickly find and retrieve specific datasets based on metadata such as tags, creation date, and type of data. What is the most efficient solution?
a)
Use Amazon Elasticsearch Service (ES) to index and search the metadata for the training data stored in S3.
b)
Use Amazon Redshift to store the metadata and create indexes for fast querying.
c)
Use AWS Glue to create a data catalog and use AWS Athena to query the metadata in S3.
d)
Store the metadata in Amazon DynamoDB and perform queries based on the dataset tags.
2.
A company needs to migrate a legacy application from an on-premises data center to AWS. The application requires shared file storage between multiple servers for data processing. Which solution offers the best scalability and manageability for this shared file storage?
a)
Use Amazon EFS to provide shared storage for the servers.
b)
Use Amazon S3 for shared file storage across the instances.
c)
Set up Amazon FSx for Windows File Server to handle shared file storage.
d)
Migrate the file storage to Amazon EC2 instance store volumes.
3.
A company is setting up a secure file storage solution using Amazon S3 and wants to ensure that only specific users within their organization can upload or delete files. Additionally, they need to protect sensitive data using encryption. Which combination of actions should the solutions architect implement? (Select TWO)
a)
1. Use Amazon S3 Object Lock to prevent unauthorized file deletions.
b)
2. Create an IAM policy allowing only specific users to perform S3 PutObject and DeleteObject actions.
c)
3. Enable server-side encryption using AWS KMS keys (SSE-KMS).
d)
4. Use an AWS S3 Bucket Policy to allow public read access to files.
e)
5. Enable versioning on the S3 bucket.
4.

A development team needs to store logs in Amazon S3 and ensure that they are immutable for compliance reasons. The team wants to ensure that the logs cannot be deleted or overwritten for a period of 7 years. How can this be achieved using S3 features? (Select TWO)

a)
1. Enable S3 Object Lock with a retention period of 7 years.
b)
2. Enable S3 Versioning and configure MFA Delete for the bucket.
c)
3. Use a lifecycle policy to archive logs to Glacier after 7 years.
d)
4. Set up a bucket policy to deny all delete operations.
e)
5. Enable cross-region replication to a backup S3 bucket for redundancy.
5.

A financial company wants to store sensitive transaction records in Amazon S3 but needs to meet strict data access regulations. They want to ensure that all data is encrypted at rest and accessible only to their AWS environment. What actions should they take to meet these requirements? (Select TWO)

a)
1. Enable server-side encryption with Amazon S3-managed keys (SSE-S3).
b)
2. Configure bucket policies to allow access only from specific VPC endpoints.
c)
3. Use client-side encryption and manage keys within the application.
d)
4. Enable Amazon S3 Transfer Acceleration for fast data transfer.
e)
5. Use server-side encryption with AWS KMS (SSE-KMS) and specify customer-managed keys (CMKs).
6.
Case 4: An organization needs to configure an Amazon S3 bucket to automatically delete data that is no longer needed after a specific period. They also want to save on storage costs for data that is rarely accessed. Which actions will help meet these requirements? (Select TWO)
a)
1. Enable object versioning to retain historical copies of objects.
b)
2. Create a lifecycle rule to transition objects to S3 Glacier after 90 days.
c)
3. Enable multi-factor authentication (MFA) delete to prevent accidental deletions.
d)
4. Create a lifecycle rule to transition objects to S3 Standard-IA after 30 days.
e)
5. Use S3 Intelligent-Tiering for cost optimization based on access patterns.
7.

A media company needs to store large video files in Amazon S3 and make them available for download globally. They also need to ensure that the videos are optimized for cost based on varying levels of access and automatically managed. Some videos will be accessed frequently right after upload, but others will become less popular over time and rarely accessed. What is the most efficient way to manage the storage of these videos while keeping costs low? (Select TWO)

a)
1. Enable S3 Intelligent-Tiering to automatically optimize costs based on access patterns.
b)
2. Use Amazon S3 Glacier for all video storage to save costs.
c)
3. Use a lifecycle policy to transition videos to S3 Glacier after 30 days of upload.
d)
4. Store all videos in Amazon S3 Standard for immediate access.
e)
5. Create a lifecycle rule to transition videos to S3 Standard-IA after 30 days and to S3 Glacier after 90 days.
8.

A healthcare organization stores medical records in Amazon S3 and needs to comply with regulatory requirements that require data to be encrypted, stored securely, and only accessible by authorized users. They also need to keep an audit log of all access to the records for a period of 10 years. What are the best ways to configure this setup to ensure compliance with security and auditing requirements?

a)
1. Enable server-side encryption with AWS KMS and use customer-managed keys (SSE-KMS).
b)
2. Enable S3 Object Lock in compliance mode for 10 years to prevent deletions and modifications.
c)
3. Enable S3 bucket access logging to track access to the records.
d)
4. Use Amazon S3 Intelligent-Tiering to optimize costs based on access patterns.
e)
5. Enable cross-region replication to a backup bucket for long-term audit log storage.
9.
A company needs to store millions of small files for their application. The files must be accessed frequently, and the storage solution should be optimized for low latency and high durability. Which storage solution is best for this use case?
a)
Store the files in Amazon S3 and use Amazon CloudFront for caching.
b)
Use Amazon EBS volumes attached to EC2 instances to store the files.
c)
Store the files in Amazon S3 with Intelligent Tiering enabled.
d)
Use Amazon DynamoDB to store the files in a key-value format.
10.
A financial services company must store encrypted backups of sensitive customer data in the AWS cloud. The solution must allow the company to manage their encryption keys on-premises and comply with strict regulatory requirements. Which AWS service combination should they use?
a)
Use Amazon S3 with Server-Side Encryption and Customer-Provided Keys (SSE-C).
b)
Store the backups in Amazon EBS volumes encrypted using AWS KMS.
c)
Use Amazon CloudHSM to manage encryption keys and encrypt S3 objects.
d)
Store the backups in Amazon S3 with Server-Side Encryption and AWS KMS (SSE-KMS).
11.
A company is developing a recommendation engine that needs to analyze product metadata and customer reviews to improve user recommendations in real-time. They require a solution that allows full-text search capabilities with high availability and quick response times for users around the world.
a)
Use Amazon Elasticsearch Service (ES) to index product metadata and customer reviews, and use Amazon CloudFront for global delivery.
b)
Use Amazon S3 to store the product metadata and reviews, and use Amazon Redshift to run queries for recommendations.
c)
Use Amazon DynamoDB to store product metadata and Amazon Kinesis Data Streams to stream customer reviews in real-time.
d)
Use Amazon RDS to store product metadata and create read replicas in multiple regions.
12.
A website runs on a Microsoft Windows server in an on-premises data center. The web server is being migrated to Amazon EC2 Windows instances in multiple Availability Zones on AWS. The web server currently uses data stored in an on-premises network-attached storage (NAS) device. Which replacement to the NAS file share is MOST resilient and durable?
a)
Migrate the file share to Amazon EBS
b)
Migrate the file share to AWS Storage Gateway
c)
Migrate the file share to Amazon FSx for Windows File Server
d)
Migrate the file share to Amazon Elastic File System (Amazon EFS)
13.
A company has 500 TB of data in an on-premises file share that needs to be moved to Amazon S3 Glacier. The migration must not saturate the company’s low-bandwidth internet connection, and the migration must be completed within a few weeks. What is the MOST cost-effective solution?
a)
Create an AWS Direct Connect connection and migrate the data straight into Amazon Glacier
b)
Order 7 AWS Snowball appliances and select an S3 Glacier vault as the destination. Create a bucket policy to enforce a VPC endpoint
c)
Use AWS Global Accelerator to accelerate upload and optimize usage of the available bandwidth
d)
Order 7 AWS Snowball appliances and select an Amazon S3 bucket as the destination. Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier
14.
An application running on Amazon EC2 needs to regularly download large objects from Amazon S3. How can performance be optimized for high-throughput use cases?
a)
Issue parallel requests and use byte-range fetches
b)
Use Amazon S3 Transfer acceleration
c)
Use Amazon CloudFront to cache the content
d)
Use AWS Global Accelerator
15.
A website runs on a Microsoft Windows server in an on-premises data center. The web server is being migrated to Amazon EC2 Windows instances in multiple Availability Zones on AWS. The web server currently uses data stored in an on-premises network-attached storage (NAS) device. Which replacement to the NAS file share is MOST resilient and durable?
a)
Migrate the file share to Amazon EBS
b)
Migrate the file share to AWS Storage Gateway
c)
Migrate the file share to Amazon FSx for Windows File Server
d)
Migrate the file share to Amazon Elastic File System (Amazon EFS)
16.
An e-commerce application is serving static assets (images, CSS, and JS files) stored in Amazon S3 to a global user base. The application needs to optimize read performance and reduce latency for end-users.
a)
Enable S3 Transfer Acceleration
b)
Use Amazon CloudFront to cache the content
c)
Store the assets in multiple S3 buckets across regions
d)
Use AWS Global Accelerator to route traffic
17.
A company wants to share files stored in an Amazon S3 bucket with external partners. The data should remain secure and only authorized partners should have access to specific files. What’s the best approach?
a)
Create a signed URL for file access
b)
Make the S3 bucket public
c)
Set bucket policies to allow access from specific IP addresses
d)
Use Amazon Cognito for access control
18.
A company needs to back up 20TB of on-premises data into Amazon S3 every week. The data should be transferred securely and efficiently to the cloud. What is the best solution?
a)
Use AWS Snowball
b)
Use AWS Storage Gateway
c)
Use S3 Transfer Acceleration
d)
Use an AWS Direct Connect connection
19.
A company stores temporary files in Amazon S3 that only need to be retained for 30 days. After 30 days, the files should be automatically deleted to optimize storage costs. What’s the best way to manage this?
a)
Use S3 Object Lock
b)
Enable S3 Lifecycle Policies
c)
Move objects to Glacier after 30 days
d)
Manually delete expired objects using Lambda
20.
A company wants to ensure that its critical application data stored in Amazon S3 is highly available and durable. The data should remain accessible even if an entire AWS region becomes unavailable. What’s the best solution?
a)
Enable S3 Cross-Region Replication
b)
Store data in multiple S3 buckets in the same region
c)
Use S3 Glacier for cross-region backups
d)
Use S3 Intelligent-Tiering
21.
A company frequently updates files stored in Amazon S3, and they need the ability to recover previous versions of these files in case of accidental deletion or modification. Which feature should they enable?
a)
S3 Object Lock
b)
S3 Versioning
c)
S3 Lifecycle Policies
d)
S3 Glacier for older versions
22.

A website runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The website’s DNS records are hosted in Amazon Route 53 with the domain name pointing to the ALB. A solution is required for displaying a static error page if the website becomes unavailable. Which configuration should a solutions architect use to meet these requirements with the LEAST operational overhead?

a)
Create a Route 53 alias record for an Amazon CloudFront distribution and specify the ALB as the origin. Create custom error pages for the distribution
b)
Create a Route 53 active-passive failover configuration. Create a static website using an Amazon S3 bucket that hosts a static error page. Configure the static website as the passive record for failover
c)
Create a Route 53 weighted routing policy. Create a static website using an Amazon S3 bucket that hosts a static error page. Configure the record for the S3 static website with a weighting of zero. When an issue occurs increase the weighting
d)
Set up a Route 53 active-active configuration with the ALB and an Amazon EC2 instance hosting a static error page as endpoints. Route 53 will only send requests to the instance if the health checks fail for the ALB
23.

A company plans to migrate its static website from an on-premises data center to AWS. The site should load quickly for users around the world, and the solution should be cost-effective. What should a Solution Architect do to accomplish this?

a)
Copy website content to an Amazon S3 bucket and replicate it across multiple AWS regions
b)
Copy website content to an Amazon S3 bucket and configure Amazon CloudFront with the bucket as the source
c)
Copy website content to an Amazon EC2 instance and use Amazon Route 53 with geolocation routing policies
d)
Copy website content to multiple EC2 instances in different AWS Regions and use geolocation policies on Route 53
24.

A company is using tiered storage in its data center for a high-performance computing (HPC) application. They need high-performance storage for periodic application execution and inexpensive cold storage to retain data. What combination of solutions should a solution architect recommend? (Select TWO)

a)
Amazon S3 for Cold Data Storage
b)
Amazon EFS for Cold Data Storage
c)
Amazon S3 for High Performance Storage
d)
Amazon FSx for Lustre for High Performance Storage
25.

An application on Amazon EC2 needs to regularly download large objects from Amazon S3. How can you optimize performance for high-performance use cases?

a)
Make parallel requests and use byte-range fetches
b)
Use Amazon S3 Transfer Acceleration
c)
Use Amazon CloudFront to cache content
d)
Use AWS Global Accelerator
26.

An organization needs to ensure that deleted Amazon S3 objects can be restored immediately for 30 days, and that after this period, the objects can be restored in 24 hours up to a total of 180 days. How can this be achieved simply and cost-effectively? (Select TWO)

a)
Enable object versioning in the Amazon S3 bucket
b)
Create a lifecycle rule to transfer non-current versions to GLACIER after 30 days
c)
Enable deletion protection with multi-factor authentication (MFA)
d)
Create a lifecycle rule to transfer non-current versions to STANDARD_IA after 30 days
27.

A solution architect has created a new AWS account and needs to secure root user access. What combination of actions will accomplish this? (Select TWO)

a)
Ensure the root user uses a strong password
b)
Enable multi-factor authentication (MFA) for the root user
c)
Store the root user's access keys in an encrypted Amazon S3 bucket
d)
Delete the root user's account
28.
A company runs an internal browser-based application. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. The Auto Scaling group scales up to 20 instances during work hours, but scales down to 2 instances overnight. Staff are complaining that the application is very slow when the day begins, although it runs well by midmorning. How should the scaling be changed to address the staff complaints and keep costs to a minimum?
a)
Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens
b)
Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown period
c)
Implement a target tracking action triggered at a lower CPU threshold, and decrease the cooldown period
d)
Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens
29.
A company needs to store backups of their on-premises databases. These backups are large and need to be stored cost-effectively in the cloud. The backups will rarely be accessed, but they must be available for immediate retrieval when needed. Which is the MOST cost-effective storage class in Amazon S3 for this use case?
a)
S3 Standard
b)
S3 Intelligent-Tiering
c)
S3 Glacier Instant Retrieval
d)
S3 Glacier Deep Archive
30.
A company is concerned about accidentally deleting important data from their S3 bucket. They want to ensure that all versions of an object are preserved, even if objects are deleted. Which S3 feature should they enable?
a)
S3 Transfer Acceleration
b)
S3 Cross-Region Replication
c)
S3 Object Lock
d)
S3 Versioning
31.
A company wants to ensure that its objects in an S3 bucket are automatically moved to cheaper storage classes as they age. What should the company use to accomplish this?
a)
S3 Lifecycle Policies
b)
S3 Intelligent-Tiering
c)
S3 Object Lock
d)
S3 Versioning
32.
A company is hosting a static website using Amazon S3. They want to ensure that the website is only accessible over HTTPS for security purposes. What should they do?
a)
Enable S3 Transfer Acceleration
b)
Use an Amazon CloudFront distribution with an SSL certificate
c)
Enable S3 Versioning
d)
Configure the S3 bucket policy to allow HTTP traffic only
33.
A media company needs to deliver large files stored in S3 to users all over the world. The company wants to reduce the latency and speed up the download times. What can they do to achieve this?
a)
Use S3 Multipart Upload
b)
Enable S3 Transfer Acceleration
c)
Enable S3 Versioning
d)
Enable S3 Cross-Region Replication
34.

A company is planning a migration for a high-performance computing (HPC) application and associated data from an on-premises data center to the AWS Cloud. The company uses tiered storage on premises with hot high-performance parallel storage to support the application during periodic runs of the application, and more economical cold storage to hold the data when the application is not actively running. Which combination of solutions should a solutions architect recommend to support the storage needs of the application? (Select TWO).

a)
Amazon S3 for cold data storage
b)
Amazon EFS for cold data storage
c)
Amazon S3 for high-performance parallel storage
d)
Amazon FSx for Lustre for high-performance parallel storage
e)
Amazon FSx for Windows for high-performance parallel storage
35.

A company runs an internal browser-based application. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. The Auto Scaling group scales up to 20 instances during work hours but scales down to 2 instances overnight. Staff are complaining that the application is very slow when the day begins, although it runs well by midmorning. How should the scaling be changed to address the staff complaints and keep costs to a minimum?

a)
Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens.
b)
Implement a step scaling action triggered at a lower CPU threshold and decrease the cooldown period.
c)
Implement a target tracking action triggered at a lower CPU threshold and decrease the cooldown period.
d)
Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens.
36.

A company needs to migrate its development, test, and production environments to AWS. Its applications use a relational database in an on-premises environment and require high levels of security, including network segmentation and detailed access control. The company also needs constant connectivity between the on-premises environment and AWS with low latency to ensure quick access to internal systems.

a)
Implement Amazon RDS in AWS with VPN and use EC2 for applications, keeping the databases on-premises.
b)
Use Amazon EC2 for the applications and set up AWS Direct Connect to connect to the on-premises environment, using the local databases.
c)
Implement Amazon EC2 for both applications and databases and use AWS Shield for network security.
d)
Use Amazon VPC Peering to connect AWS and the on-premises environment, migrating the database to Amazon Aurora.
37.

A company has an application running on virtual machines in its on-premises data center. The company plans to migrate the application to AWS to take advantage of elasticity and reduce infrastructure costs. The application has strict security requirements, and sensitive data must remain on-premises. The application also requires a transactional database with low latency and a fast connection to the data center. What architecture should a solutions architect implement to meet these requirements?

a)
Use Amazon EC2 instances for the application, set up an AWS Direct Connect connection, and keep the transactional database on-premises.
b)
Use Amazon RDS for the database and EC2 instances for the application, along with AWS VPN for a secure connection to the on-premises data center.
c)
Use AWS Lambda to host the application logic, Amazon DynamoDB for the database, and replicate the data to the on-premises environment.
d)
Use Amazon EC2 instances in a multi-AZ configuration for the application, with Amazon RDS in a multi-region configuration for the database.
38.

A company wants to migrate its monolithic web application to AWS. The service has high demand during the day but low demand at night. Users rely on the availability of the application, and the company wants to reduce infrastructure costs while maintaining scalability and high availability. Data storage needs to comply with regional compliance standards, so it cannot be stored outside the specific region

a)
Migrate the application to Amazon EC2 with auto-scaling and use Amazon RDS in a single availability zone for the database.
b)
Use Amazon ECS with AWS Fargate for the application, implementing auto-scaling, and Amazon RDS in a Multi-AZ configuration for the database.
c)
Migrate the application to Amazon EC2 and use Amazon S3 to store sensitive data.
d)
S3 One Zone-IA
e)
Use AWS Lambda for the application, with DynamoDB as the database, and replicate the data across multiple regions.
39.

Access Control for Public Content A company wants to host public documents (such as brochures and product manuals) on Amazon S3. The content should be accessible to everyone without any restrictions, but no one should be able to modify the documents. Which of the following options should be used to achieve this?

a)
Enable S3 Bucket Versioning to prevent modifications
b)
Configure the S3 bucket to Block Public Access
c)
Use an S3 Bucket Policy to allow public read access and deny write access
d)
Use S3 Object Lock in Governance mode to prevent modifications
40.

A static website currently runs in a company’s on-premises data center. The company plan to migrate the website to AWS. The website must load quickly for global users and the solution must also be cost-effective. What should a solutions architect do to accomplish this?

a)
Copy the website content to an Amazon S3 bucket. Configure the bucket to serve static webpage content. Replicate the S3 bucket to multiple AWS Regions
b)
Copy the website content to an Amazon S3 bucket. Configure the bucket to serve static webpage content. Configure Amazon CloudFront with the S3 bucket as the origin
c)
Copy the website content to an Amazon EC2 instance. Configure Amazon Route 53 geolocation routing policies to select the closest origin
d)
Copy the website content to multiple Amazon EC2 instances in multiple AWS Regions. Configure AWS Route 53 geolocation routing policies to select the closest region
41.

Enabling Cross-Region Replication A company operates in multiple regions and wants to ensure that critical data stored in its Amazon S3 bucket is replicated across regions for disaster recovery purposes. The company wants to automatically replicate all objects from its primary region to a backup region. Which of the following features should the company use to achieve cross-region replication?

a)
S3 Transfer Acceleration
b)
S3 Cross-Region Replication (CRR)
c)
S3 Lifecycle Policies
d)
S3 Glacier
42.

Real-Time Data Analytics Pipeline A financial services company is looking to establish a robust data analytics pipeline that allows for real-time processing of transaction data to quickly identify trends, anomalies, and risks. This solution needs to integrate seamlessly with existing systems and provide both historical insights and real-time analytics capabilities.

a)
Use Amazon Kinesis Data Streams for real-time ingestion of transaction data, enabling continuous processing of data as it arrives.
b)
Store processed data in Amazon Redshift for complex queries and analytics, facilitating reporting on trends over time.
c)
Implement AWS Glue for ETL processes, ensuring data is transformed and prepared for analysis in an automated manner.
d)
Use Amazon S3 for storing historical data, allowing for cost-effective long-term storage and enabling the use of Amazon Athena for ad-hoc querying.
43.

Version Control for Data in Amazon S3 A company needs to store documents in Amazon S3 and ensure that any accidental deletions or overwrites can be easily recovered. They also need to track changes made to the objects over time. Which feature of Amazon S3 should the company use to meet this requirement?

a)
Implement S3 Object Lock to prevent deletions and ensure data retention, but without version tracking for historical changes.
b)
Enable S3 Versioning to maintain multiple versions of an object, allowing recovery from accidental deletions or overwrites, while also tracking changes over time.
c)
Use S3 Replication to create copies of objects in another bucket for backup, which does not directly prevent accidental changes to the primary objects.
d)
Set up S3 Lifecycle Policies to manage object storage based on age, but this feature does not provide version control or recovery from deletions.
44.

Securing Sensitive Data in Amazon S3 A financial institution is storing sensitive customer data in Amazon S3. Due to strict compliance requirements, the data must be encrypted both at rest and in transit. Additionally, the company needs to control access to specific users and services. Which combination of options should be implemented to meet these requirements? (Select TWO)

a)
Use Amazon S3 Bucket Policies to control access
b)
Enable Server-Side Encryption (SSE) for encryption at rest
c)
Enable S3 Transfer Acceleration to secure data in transit
d)
Use S3 Object Versioning to encrypt data in transit
e)
Use AWS IAM Policies to restrict access to the bucket
45.

An organization is implementing a real-time analytics solution for large volumes of data on AWS. The company needs the data to be processed and available immediately for analysis in dashboards. The system must also support fault tolerance and high availability.

a)
Use Amazon Redshift to process the data and Amazon CloudWatch to display the results in dashboards.
b)
Use Amazon Kinesis Data Streams to ingest the data, AWS Lambda to process the data, and Amazon DynamoDB to store it.
c)
Implement an Amazon EMR cluster to process the data and Amazon Elasticsearch to display processed data in real-time.
d)
Use Amazon Kinesis Data Firehose to process the data and Amazon RDS in a Multi-AZ configuration to store it.