wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

AWS Dump Questions

Total questions: 64

Worksheet time: 37mins

Name
Class
Date
1.

Which AWS support plans provide access to AWS Incident Detection and Response at an additional cost?

a)

AWS Developer Support

b)

AWS Business Support

c)

AWS Enterprise On-Ramp Support

d)

AWS Enterprise Support

2.

Which AWS support plans provide customers with annual consultative and architectural guidance?

a)

AWS Developer Support

b)

AWS Business Support

c)

AWS Enterprise On-Ramp Support

d)

AWS Enterprise Support

3.

A company needs to connect multiple VPCs and on-premises networks through a single network connection to the AWS cloud. Which solution meets this requirement?

a)

AWS Transit Gateway

b)

AWS Direct Connect

c)

AWS VPC Peering

d)

AWS Client VPN

4.

Which actions are the responsibility of AWS under the AWS Shared Responsibility Model?

a)

Scanning AWS Service Endpoints for Vulnerabilities

b)

Enabling Encryption on an Amazon S3 Bucket

c)

Configuring Security Group Rules

d)

Encrypting Traffic on the AWS Backbone between Global and Regional AWS Facilities

5.

Which AWS service helps protect applications against Distributed Denial of Service (DDoS) attacks?

a)

AWS Firewall Manager

b)

AWS Shield

c)

Amazon Inspector

d)

AWS Config

6.

Which TWO of the following are responsibilities of customers when using AWS services?

a)

Managing physical security of AWS data centers

b)

Patching the guest operating system

c)

Patching the network infrastructure

d)

Configuring security groups

e)

Maintaining hardware components

7.

Which AWS service allows users to run code without provisioning or managing servers?

a)

Amazon EC2

b)

AWS Fargate

c)

AWS Lambda

d)

AWS Elastic Beanstalk

8.

Which service provides a virtual firewall to control inbound and outbound traffic for Amazon EC2 instances?

a)

AWS WAF

b)

AWS Shield

c)

Security Groups

d)

Network ACLs

9.

Which AWS service enables you to manage users and their access to AWS services and resources?

a)

AWS Directory Service

b)

AWS IAM

c)

Amazon Cognito

d)

AWS KMS

10.

Which service lets you set up private network connectivity between your data center and AWS?

a)

AWS VPN

b)

Amazon VPC

c)

AWS Direct Connect

d)

AWS Transit Gateway

11.

Which service allows AWS customers to define a virtual network in their AWS account?

a)

Amazon EC2

b)

Amazon VPC

c)

AWS Direct Connect

d)

AWS Lambda

12.

Which service helps detect unauthorized and malicious activity in your AWS accounts?

a)

AWS CloudTrail

b)

AWS Config

c)

Amazon Inspector

d)

Amazon GuardDuty

13.

Which AWS service makes it easier to migrate databases to AWS quickly and securely?

a)

AWS Database Migration Service (DMS)

b)

AWS Snowball

c)

Amazon RDS

d)

AWS DataSync

14.

Which AWS support plan provides a Technical Account Manager (TAM)?

a)

Developer Support

b)

Business Support

c)

Enterprise On-Ramp Support

d)

Enterprise Support

15.

A company has an AWS account. The company wants to audit its password and access key rotation details. For compliance purposes, which AWS service or tool will meet this requirement?

a)

IAM Access Analyzer

b)

AWS Artifact

c)

IAM Credential Report

d)

AWS Audit Manager

16.

A company needs to use an offline transfer strategy to move petabytes of databases, backups, and data records from on-premises to the AWS cloud. Which solution will meet this requirement with the most operational efficiency?

a)

AWS Snowball Edge Compute Optimization

b)

AWS Snowcone Devices

c)

AWS Storage Gateway

d)

AWS DataSync

17.

Which actions are the responsibility of AWS under the AWS Shared Responsibility Model?

a)

Scanning AWS services, service endpoints for vulnerabilities

b)

Enabling encryption on an Amazon S3 bucket

c)

Configuring security group rules

d)

Encrypting traffic on the AWS backbone between global and regional AWS services

18.

A company plans to deploy its application globally. The company wants to cache content at edge locations and deliver the content to users with the lowest possible latency. Which AWS service will meet these requirements?

a)

AWS Global Accelerator

b)

AWS Outposts

c)

Amazon Route 53

d)

Amazon CloudFront

19.

A company needs to identify personally identifiable information such as credit card numbers from data stored in Amazon S3. Which AWS service should the company use?

a)

Amazon Inspector

b)

AWS Shield

c)

Amazon GuardDuty

d)

Amazon Macie

20.

A company uses AWS Organizations. The company wants to apply security best practices from the AWS Well-Architected Framework to all of its AWS accounts. Which service will meet these requirements?

a)

Amazon Macie

b)

Amazon Detective

c)

AWS Control Tower

d)

AWS Secrets Manager

21.

Which AWS services or features enable users to connect an on-premises network to a VPC?

a)

AWS VPN

b)

Elastic Load Balancer

c)

AWS Direct Connect

d)

Amazon CloudFront

22.

A company needs to invoke an AWS Step Functions workflow each time an Amazon EC2 instance changes to 'running'. Which AWS service can the company use to meet these requirements?

a)

Amazon SageMaker

b)

Amazon Connect

c)

Amazon EventBridge

d)

AWS Fargate

23.

A company needs a serverless data integration service to discover, prepare, and combine data for analytics. Which AWS service will meet these requirements?

a)

Amazon EMR

b)

Amazon Redshift

c)

AWS Glue

d)

AWS Step Functions

24.

A company plans to move its test workloads to Amazon EC2. The test workloads can be interrupted and are not required to start at a particular time. Which EC2 instance purchase option is most cost-effective for this use case?

a)

On-Demand Instances

b)

Spot Instances

25.

A company needs to manage multiple AWS accounts in a single unit. A company must consolidate billing for all the accounts. Which AWS service should the company use to meet these requirements?

a)

AWS Organizations

b)

AWS Resource Access Manager

c)

AWS IAM

d)

AWS Control Tower

26.

A team of researchers is going to collect data at remote locations around the world. Many locations do not have internet connectivity. The team needs to capture the data in the field and transfer it to the cloud later. Which AWS service will support this requirement?

a)

AWS Outposts

b)

AWS Transfer Family

c)

AWS Snow Family

d)

AWS Migration Hub

27.

Which of the following is a pillar of the AWS Well-Architected Framework?

a)

Redundancy

b)

Operational Excellence

c)

Availability

d)

Multi-Region

28.

A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of agility. How does AWS provide agility for users?

a)

The ability to ensure high availability by deploying workloads to multiple regions

b)

Apply Azure Go model for many services and resources

c)

The ability to transfer infrastructure management to the AWS cloud

d)

The ability to provision and deprovision resources quickly with minimal effort

29.

A company needs to encrypt data at rest in the AWS cloud by using an encryption key that the company controls. Which AWS service should the company use to meet this requirement?

a)

AWS Certificate Manager

b)

AWS Cognito

c)

AWS Key Management Service

d)

AWS Trusted Advisor

30.

Which AWS service should a cloud engineer use to view API calls to AWS services?

a)

Amazon CloudWatch

b)

AWS CloudTrail

c)

AWS Config

d)

AWS Artifact

31.

A company needs an AWS Support plan that provides programmatic case management through AWS Support API. Which plan is the most cost-effective?

a)

Developer Support Plan

b)

Basic Support Plan

c)

Business Support Plan

d)

Enterprise Support Plan

32.

Which AWS Support plan is the most economical plan that includes access to AWS Support APIs?

a)

AWS Business Support

b)

AWS Basic Support

c)

AWS Developer Support

d)

AWS Enterprise Support

33.

Which cloud concept is demonstrated by using AWS Cost Explorer?

a)

Rightsizing

b)

Reliability

c)

Resilience

d)

Modernization

34.

Which AWS service can a company use to create a private, secured, and scalable network environment in the AWS Cloud?

a)

Amazon ECS

b)

Amazon S3

c)

Amazon VPC

d)

Route Tables

35.

A. The software's data encryption is managed by a third-party vendor. B. The software has been evaluated by vendors to ensure that it will run on AWS. C. Users do not need to upgrade to newer software versions. D. Users do not need to conduct security testing on the software.

a)

The software's data encryption is managed by a third-party vendor.

b)

The software has been evaluated by vendors to ensure that it will run on AWS.

c)

Users do not need to upgrade to newer software versions.

d)

Users do not need to conduct security testing on the software.

36.

Which task is the responsibility of AWS, according to the AWS shared responsibility model?

a)

Patch AWS network devices.

b)

Set user password rules.

c)

Provide physical security for compute resources.

d)

Configure security groups.

37.

Which AWS service requires customers to be fully responsible for applying OS patches?

a)

Amazon DynamoDB

b)

AWS Lambda

c)

AWS Fargate

d)

Amazon EC2

38.

Which action should a company take to improve security in AWS accounts?

4 lines
39.

Which of the following is the best practice for securing privileged users in AWS?

a)

Require multi-factor authentication (MFA) for privileged users

b)

Remove the root user account

c)

Create an access key for the AWS account root user

d)

Create an access key for each privileged user

40.

Which AWS feature is a deployable EC2 instance template that is prepackaged with software and security requirements?

a)

Amazon EBS volume

b)

AWS CloudFormation template

c)

Amazon EBS snapshot

d)

Amazon Machine Image (AMI)

41.

Which AWS Cloud Adoption Framework (CAF) security perspective capability helps identify security misconfigurations?

a)

Identity and access management

b)

Threat detection

c)

Platform engineering

d)

Availability and continuity management

42.

A company wants to receive a notification via Amazon SNS when its AWS bill exceeds a certain amount. Which service should it use?

a)

AWS Budgets

b)

AWS CloudTrail

c)

AWS Cost Explorer

d)

AWS CloudFormation

43.

Which AWS service can be used to set up billing alarms and receive notifications when monthly costs exceed a predefined threshold?

a)

Amazon CloudWatch

b)

AWS Cost Explorer

c)

AWS Cost and Usage Report

d)

AWS Pricing Calculator

44.

Which AWS service provides a scalable data warehouse solution?

a)

Amazon S3

b)

Amazon DynamoDB

c)

Amazon Kinesis Data Streams

d)

Amazon Redshift

45.

Which responsibility falls on customers when using Amazon DynamoDB?

a)

Patch the operating system

b)

Provision hosts

c)

Manage database access permissions

d)

Secure the operating system

46.

Which benefits does AWS Cloud offer?

4 lines
47.

A company runs EC2 instances in a private subnet. How can they enable internet access?

a)

Gateway endpoint

b)

NAT gateway

c)

Network Load Balancer

d)

Amazon Route 53

48.

A company needs temporary credentials for an application to access AWS resources. Which AWS service provides this?

a)

AWS KMS

b)

AWS CloudHSM

c)

Amazon Cognito

d)

AWS Security Token Service (STS)

49.

What is an AWS Cloud best practice for elasticity and agility?

a)

Provision capacity based on past usage and theoretical peaks

b)

Dynamically scale to meet usage demands

c)

Build applications in a data center that grants physical access

50.

A company needs to run an application for a few hours daily. Which EC2 pricing model should they choose?

a)

EC2 Standard Reserved Instances

b)

EC2 On-Demand Instances

c)

AWS Wavelength

d)

Application Load Balancer

51.

Which AWS Well-Architected Framework pillar focuses on efficient resource allocation?

a)

Reliability

b)

Operational excellence

c)

Performance efficiency

d)

Sustainability

52.

Which AWS service allows users to deploy identical AWS resources using infrastructure templates?

a)

AWS CloudFormation

b)

AWS Directory Service

c)

Amazon Lightsail

d)

AWS CodeDeploy

53.

Which AWS service allows companies to analyze AWS spending patterns over time?

a)

AWS Pricing Calculator

b)

AWS Cost and Usage Report

c)

AWS Budgets

d)

AWS Cost Explorer

54.

Which AWS service provides a fully managed relational database?

a)

Amazon DynamoDB

b)

Amazon Redshift

c)

Amazon RDS

d)

AWS Lambda

55.

What AWS service provides secure VPN connections to an on-premises network?

a)

AWS Transit Gateway

b)

AWS Direct Connect

c)

AWS Site-to-Site VPN

d)

AWS Snowball

56.

What AWS service helps automate application deployment?

a)

AWS CodeDeploy

b)

AWS Glue

c)

Amazon SageMaker

d)

AWS Lambda

57.

Which AWS service protects applications from DDoS attacks?

a)

AWS WAF

b)

AWS Shield

c)

AWS Security Hub

d)

AWS Firewall Manager

58.

Amazon is deploying a mobile app on AWS. Thousands of users will access the app. Which AWS service should the company use to create a directory to manage sign-in for the users?

a)

Amazon Cognito

b)

Amazon S3

c)

AWS Lambda

d)

Amazon EC2

59.

Which AWS service is designed for user authentication, authorization, and user management for web and mobile apps?

a)

AWS Directory Service

b)

AWS IAM Identity Center

c)

Amazon Cognito

d)

AWS Identity and Access Management (IAM)

60.

Which option uses shared control between AWS and the customer according to the AWS Shared Responsibility Model?

a)

Configuration Management

b)

Physical and Environmental Controls

c)

Data Integrity and Authentication

d)

Identity and Access Management

61.

A company needs to block SQL injection attacks. Which AWS service or feature can meet this requirement?

a)

AWS WAF

b)

AWS Shield

c)

Network ACLs

d)

Network Groups

62.

Which AWS service or feature can a company use to apply security rules to a subnet for Amazon EC2 instances?

a)

AWS WAF

b)

AWS Shield

c)

Network ACLs

d)

Security Groups

63.

Which part of the AWS global infrastructure does Amazon CloudFront use to cache copies of content for rapid delivery to global access?

a)

Edge Locations

b)

Availability Zones

c)

AWS Regions

d)

Local Zones

64.

A company plans to migrate its application to AWS and run the application on Amazon EC2 instances. The application will have continuous usage for one year. Which EC2 instance purchasing option will meet these requirements most cost-effectively?

a)

Reserved Instances

b)

Spot Instances

c)

On-Demand Instances

d)

Dedicated Hosts