Font size
S
M
L
XL
WorksheetsAOS_EXAM_2025_REVIEW
Total questions: 58
Worksheet time: 10hrs 40mins
Name
Class
Date
1.
Q1. A company's application runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer. The application requires at least 4 instances to handle the minimum load, but occasionally needs up to 20 instances during peak hours. The company wants to optimize costs while ensuring performance. Which scaling configuration should be implemented?
a)
Set desired capacity to 20 instances
b)
Set minimum capacity to 4, desired to 8, and maximum to 20 with target tracking scaling
c)
Use only On-Demand instances with simple scaling
d)
Set minimum capacity to 20 for redundancy
2.
Q2. An application requires extremely low latency communication between EC2 instances for a distributed cache. The instances must be deployed with maximum network performance. What deployment strategy should be used? (Select TWO)
a)
Deploy instances in a cluster placement group
b)
Use enhanced networking with Elastic Network Adapter (ENA)
c)
Deploy across multiple regions for redundancy
d)
Use T3 instances for burstable performance
3.
Q3. A solutions architect needs to distribute traffic across multiple EC2 instances running a TCP-based application that requires the source IP address to be preserved. Which load balancer type should be used?
a)
Application Load Balancer with X-Forwarded-For headers
b)
Network Load Balancer
c)
Classic Load Balancer
d)
Gateway Load Balancer
4.
Q4. A company wants to launch EC2 instances that will be used for batch processing jobs. The jobs are not time-sensitive and can be interrupted. The company wants to minimize costs. Which purchasing option should be recommended?
a)
On-Demand Instances
b)
Reserved Instances
c)
Spot Instances
d)
Dedicated Hosts
5.
Q5. An application running on EC2 instances must maintain session state when instances are replaced during Auto Scaling activities. Where should session data be stored?
a)
Instance store volumes
b)
Amazon ElastiCache or DynamoDB
c)
Local application memory
d)
Amazon EBS volumes attached to specific instances
6.
Q6. A web application experiences predictable traffic spikes every Monday at 9 AM. The Auto Scaling group should scale proactively before the spike. What should be configured?
a)
Target tracking scaling policy
b)
Simple scaling policy
c)
Scheduled scaling action
d)
Step scaling policy
7.
Q7. A company needs to store backup data that must be retained for 7 years for compliance. The data is rarely accessed but must be retrievable within 12 hours when needed. Which S3 storage class provides the most cost-effective solution?
a)
S3 Standard
b)
S3 Standard-IA
c)
S3 Glacier Flexible Retrieval
d)
S3 Glacier Deep Archive
8.
Q8. An application needs a shared file system accessible by multiple Linux EC2 instances across different Availability Zones. The file system must support NFS protocol and scale automatically. What should be used?
a)
Amazon S3
b)
Amazon EBS Multi-Attach
c)
Amazon EFS
d)
Amazon FSx for Windows File Server
9.
Q9. A company stores sensitive customer data in S3. The security team requires that data must be encrypted at rest using company-managed encryption keys stored on-premises. Which encryption option meets this requirement?
a)
SSE-S3
b)
SSE-KMS
c)
SSE-C
d)
Client-side encryption with AWS SDK
10.
Q10. A Windows application running on EC2 needs a shared file system with Active Directory integration and SMB protocol support. Which AWS service should be used?
a)
Amazon EFS
b)
Amazon FSx for Windows File Server
c)
Amazon FSx for Lustre
d)
Amazon S3
11.
Q11. An application generates logs that must be stored in S3. The logs are frequently accessed for the first 30 days, infrequently accessed for the next 60 days, and rarely accessed after that but must be retained for 1 year. How should this be configured? (Select TWO)
a)
Use S3 Standard storage class initially
b)
Create a lifecycle policy to transition to S3 Standard-IA after 30 days
c)
Create a lifecycle policy to transition to S3 Glacier after 90 days
d)
Create a lifecycle policy to delete objects after 365 days
12.
Q12. A database application requires block storage with consistent IOPS performance of 20,000 IOPS. Which EBS volume type should be selected?
a)
General Purpose SSD (gp3)
b)
Provisioned IOPS SSD (io2)
c)
Throughput Optimized HDD (st1)
d)
Cold HDD (sc1)
13.
Q13. A company needs a MySQL database with automatic failover and minimal downtime during maintenance. Which RDS configuration provides this?
a)
Single-AZ deployment with automated backups
b)
Multi-AZ deployment
c)
Read replica in different region
d)
Single instance with manual snapshots
14.
Q14. An application needs a NoSQL database with single-digit millisecond latency, automatic scaling, and serverless operation. Which service should be used?
a)
Amazon RDS for MySQL
b)
Amazon DynamoDB
c)
Amazon Redshift
d)
Amazon ElastiCache
15.
Q15. A data analytics team needs to run complex queries on terabytes of historical data stored in a data warehouse. Query performance is the primary concern. Which AWS service is best suited?
a)
Amazon RDS for PostgreSQL
b)
Amazon DynamoDB
c)
Amazon Redshift
d)
Amazon Aurora
16.
Q16. An RDS PostgreSQL database experiences high read load from reporting queries. The primary database performance is impacted. What is the most cost-effective solution to offload read traffic?
a)
Upgrade to a larger RDS instance
b)
Create a Read Replica
c)
Enable Multi-AZ deployment
d)
Implement application-level caching
17.
Q17. A company needs to cache frequently accessed data from a database to reduce latency and database load. The cache should support complex data structures like sorted sets. Which service should be used?
a)
Amazon ElastiCache for Redis
b)
Amazon ElastiCache for Memcached
c)
Amazon DynamoDB DAX
d)
Amazon CloudFront
18.
Q18. A global application needs a database that can handle reads and writes from multiple regions with sub-second replication. Which database solution provides this capability?
a)
Amazon RDS with Multi-AZ
b)
Amazon Aurora Global Database
c)
DynamoDB with cross-region replication
d)
Amazon RDS with cross-region read replicas
19.
Q20. An application must block traffic from specific countries for compliance reasons. Which AWS service provides the easiest way to implement geographic restrictions?
a)
Security Groups
b)
Network ACLs
c)
AWS WAF with geo-blocking rules
d)
VPC Flow Logs
20.
Q21. Two VPCs in different AWS regions need to communicate privately. What is the best solution for this inter-region VPC connectivity?
a)
VPC Peering
b)
AWS PrivateLink
c)
Internet Gateway
d)
NAT Gateway
21.
Q22. A company wants to provide a fixed IP address for their Application Load Balancer for whitelisting by client firewalls. What should be implemented?
a)
Use an Elastic IP address
b)
Use AWS Global Accelerator
c)
Use a Network Load Balancer instead
d)
Configure static IP in Route 53
22.
Q23. EC2 instances in a private subnet need to download software updates from the internet without exposing the instances to inbound traffic. Which components are required? (Select TWO)
a)
NAT Gateway in public subnet
b)
Internet Gateway attached to VPC
c)
Elastic IP for each EC2 instance
d)
VPC Endpoint for Amazon S3
23.
Q24. A solutions architect needs to provide private connectivity between an on-premises data center and AWS with consistent network performance and dedicated bandwidth. Which service should be used?
a)
Site-to-Site VPN
b)
AWS Direct Connect
c)
VPC Peering
d)
AWS PrivateLink
24.
Q25. An application running on EC2 needs to access an S3 bucket. What is the most secure way to grant access?
a)
Store AWS credentials in the application code
b)
Create an IAM role and attach it to the EC2 instance
c)
Store credentials in an EC2 user data script
d)
Use root account credentials
25.
Q26. A company needs to rotate database credentials automatically every 30 days and integrate with RDS. Which service should be used?
a)
AWS Systems Manager Parameter Store
b)
AWS Secrets Manager
c)
AWS KMS
d)
Amazon S3 with encryption
26.
Q27. A security audit requires logging all API calls made within an AWS account across all regions. Which service provides this capability?
a)
Amazon CloudWatch Logs
b)
AWS CloudTrail
c)
VPC Flow Logs
d)
AWS Config
27.
Q28. A company needs to ensure S3 buckets are never publicly accessible across the entire AWS organization. What should be implemented?
a)
Enable S3 Block Public Access at organization level
b)
Create IAM policies for each bucket
c)
Use S3 bucket policies to deny public access
d)
Enable S3 versioning
28.
Q29. An application requires encryption keys to be managed with customer control over key rotation and usage policies. Which service provides this?
a)
AWS managed keys in KMS
b)
Customer managed keys in AWS KMS
c)
AWS Secrets Manager
d)
S3-managed encryption keys
29.
Q30. A company needs to enable MFA for IAM users accessing AWS Console and require MFA deletion for S3 objects. What should be configured? (Select TWO)
a)
Enable MFA for AWS Console sign-in
b)
Enable S3 versioning with MFA Delete
c)
Use AWS Organizations SCPs
d)
Configure IAM password policies
30.
Q31. A company wants to run Docker containers without managing the underlying EC2 infrastructure. Which ECS launch type should be used?
a)
EC2 launch type
b)
Fargate launch type
c)
External launch type
d)
Lambda container launch type
31.
Q32. A microservices application running on EKS needs a service mesh for traffic management, observability, and security. Which AWS service provides this?
a)
AWS App Mesh
b)
Amazon ECS
c)
AWS Fargate
d)
AWS Lambda
32.
Q33. Container images need to be stored securely with vulnerability scanning and image signing. Which service should be used?
a)
Docker Hub
b)
Amazon ECR with image scanning
c)
Amazon S3
d)
AWS Artifact
33.
Q34. An ECS task needs to access AWS services securely without embedding credentials. What should be configured?
a)
Store credentials in environment variables
b)
Create an IAM task role
c)
Use EC2 instance profile only
d)
Embed credentials in container image
34.
Q35. A batch processing application runs sporadically and needs Kubernetes orchestration. The company wants to minimize costs when jobs are not running. What should be implemented?
a)
EKS with always-on worker nodes
b)
EKS with Fargate for batch jobs
c)
ECS with EC2 launch type
d)
Lambda functions instead of containers
35.
Q36. Multiple ECS services need to share configuration data and secrets. Where should this data be stored?
a)
Environment variables in task definitions
b)
AWS Systems Manager Parameter Store or Secrets Manager
c)
S3 buckets
d)
DynamoDB tables
36.
Q37. An application needs to trigger an alert when the average CPU utilization of an EC2 Auto Scaling group exceeds 80% for 5 minutes. What should be configured?
a)
CloudWatch alarm with metric and SNS notification
b)
CloudTrail event
c)
AWS Config rule
d)
Lambda function polling EC2 metrics
37.
Q38. A company needs to collect application logs from multiple EC2 instances, analyze them in real-time, and store them long-term. Which solution should be used? (Select TWO)
a)
CloudWatch Logs with log groups
b)
Create a lifecycle policy to archive logs to S3 Glacier
c)
VPC Flow Logs
d)
AWS X-Ray
38.
Q39. A solutions architect needs to monitor custom application metrics like order processing time. How should custom metrics be sent to CloudWatch?
a)
CloudWatch automatically collects all application metrics
b)
Use CloudWatch PutMetricData API
c)
Enable detailed monitoring on EC2
d)
Use CloudTrail logs
39.
Q40. A microservices application needs distributed tracing to identify performance bottlenecks across services. Which service should be used?
a)
Amazon CloudWatch Logs
b)
AWS X-Ray
c)
AWS CloudTrail
d)
VPC Flow Logs
40.
Q41. A company needs to automatically remediate security group changes that allow unrestricted SSH access (0.0.0.0/0 on port 22). What should be implemented?
a)
AWS Config rule with automatic remediation using SSM Automation
b)
CloudWatch alarm with Lambda function
c)
CloudTrail with manual review
d)
Security Groups are immutable
41.
Q42. An application needs to monitor memory utilization on EC2 instances. How should this be implemented?
a)
Memory metrics are automatically available in CloudWatch
b)
Install CloudWatch agent on EC2 instances
c)
Enable detailed monitoring
d)
Use AWS Systems Manager
42.
Q43. A company needs to migrate 100 TB of data from an on-premises data center to S3. The internet connection is limited to 100 Mbps. What is the most efficient migration method?
a)
Use AWS DataSync over internet
b)
Order AWS Snowball devices
c)
Direct upload to S3
d)
Use AWS Transfer Family
43.
Q44. A database migration from on-premises Oracle to Amazon Aurora requires minimal downtime and continuous replication during migration. Which service should be used?
a)
AWS DataSync
b)
AWS Database Migration Service (DMS)
c)
AWS Snowball
d)
AWS Transfer Family
44.
Q45. A company wants to migrate VMware virtual machines to AWS. Which service provides the easiest migration path?
a)
AWS Application Migration Service
b)
AWS DataSync
c)
AWS Database Migration Service
d)
AWS Transfer Family
45.
Q46. An on-premises application uses NFS file shares that need to be migrated to AWS with minimal changes to the application. Which solution should be used?
a)
Migrate to Amazon S3
b)
Use AWS Storage Gateway File Gateway
c)
Migrate to Amazon EBS
d)
Use AWS DataSync to migrate to EC2 instance storage
46.
Q47. A company needs to continuously synchronize files between on-premises NAS and Amazon EFS. Which service automates this task?
a)
AWS Snowball Edge
b)
AWS DataSync
c)
AWS Transfer Family
d)
S3 Transfer Acceleration
47.
Q49. A serverless application needs to process uploaded images automatically when they are uploaded to an S3 bucket. What should be configured?
a)
CloudWatch Events to poll S3
b)
S3 event notification to trigger Lambda function
c)
EC2 instance to monitor S3
d)
Step Functions to check S3 periodically
48.
Q50. A Lambda function processes messages from an SQS queue but occasionally fails. Failed messages should be retried and eventually sent to a dead-letter queue after 3 attempts. What should be configured?
a)
Configure Lambda dead-letter queue
b)
Configure SQS dead-letter queue with redrive policy
c)
Use Step Functions for retry logic
d)
Increase Lambda timeout
49.
Q51. An application built with multiple Lambda functions needs orchestration with error handling, parallel execution, and conditional logic. Which service should be used?
a)
Amazon SQS
b)
Amazon SNS
c)
AWS Step Functions
d)
Amazon EventBridge
50.
Q52. A REST API needs to be created quickly with authentication, request throttling, and caching capabilities. Which service should be used?
a)
Amazon CloudFront
b)
Amazon API Gateway
c)
Application Load Balancer
d)
Amazon Route 53
51.
Q53. A Lambda function needs to access resources in a private VPC subnet. What must be configured? (Select TWO)
a)
Configure Lambda VPC settings with subnet IDs
b)
Attach security group to Lambda function
c)
Create Internet Gateway in VPC
d)
Enable public IP for Lambda
52.
Q54. A serverless application receives variable traffic with occasional bursts. Lambda functions are being throttled during spikes. What should be implemented?
a)
Increase Lambda concurrent execution limit
b)
Add SQS queue to buffer requests
c)
Switch to EC2 instances
d)
Reduce Lambda timeout
53.
Q55. A company has steady-state workload that runs 24/7 for the next 3 years. Which EC2 pricing model provides maximum cost savings?
a)
On-Demand Instances
b)
3-year Standard Reserved Instances
c)
Spot Instances
d)
Savings Plans
54.
Q56. A development team launches multiple EC2 instances for testing but often forgets to terminate them. What should be implemented to control costs?
a)
AWS Budgets with alerts
b)
AWS Cost Explorer
c)
AWS Trusted Advisor
d)
Instance Scheduler with Lambda
55.
Q57. A company wants to analyze AWS costs and identify cost-saving opportunities. Which tool provides cost optimization recommendations?
a)
AWS Cost Explorer
b)
AWS Trusted Advisor
c)
AWS Budgets
d)
CloudWatch
56.
Q58. An S3 bucket contains millions of objects with varying access patterns. The company wants to optimize costs automatically. Which storage class should be used?
a)
S3 Standard
b)
S3 Intelligent-Tiering
c)
S3 One Zone-IA
d)
S3 Glacier
57.
Q59. A company wants to receive alerts when monthly AWS costs exceed $10,000. What should be configured?
a)
CloudWatch alarm on billing metrics
b)
AWS Budgets with alert notifications
c)
Cost Explorer reports
d)
Trusted Advisor checks
58.
Q60. A company has multiple AWS accounts and wants to consolidate billing and take advantage of volume discounts. What should be implemented?
a)
AWS Cost Explorer
b)
AWS Organizations with consolidated billing
c)
AWS Budgets
d)
Multiple billing accounts
Reset
