Aws Test Paper 1
Aws Test Paper 1
QUESTION 1
1. You currently have an EC2 instance hosting a web application. The number of users is
expected to increase in the coming months and hence you need to add more elasticity to your
setup. Which of the following methods can help add elasticity to your existing setup. Choose
2 answers from the options given below. Please select:
A. Setup your web app on more EC2 instances and set them behind an Elastic Load
balancer
B. Setup an Elastic Cache in front of the EC2 instance.
C. Setup your web app on more EC2 instances and use Route53 to route requests
accordingly.
D. Setup DynamoDB behind your EC2 Instances
dy
QUESTION 2
2. You are creating a Provisioned IOPS volume in AWS. The size of the volume is 8 GiB.
Which of the following are the possible values that can put for the IOPS of the volume.
Please select:
ed
A. 400
B. 500
C. 600 R
D. 1000
QUESTION 3
3. A company is hosting EC2 instances which focuses on work-loads are on non-production
h
and non-priority batch loads. Also these processes can be interrupted at any time. What is the
best pricing model which can be used for EC2 instances in this case?
as
A. Reserved Instances
B. On-Demand Instances
in
C. Spot Instances
D. Regular Instances
Av
QUESTION 4
4. You have 2 Ubuntu instances located in different subnets in the same VPC. Now to your
understanding these instances should be able to communicate with each other, but when you
try to ping from one instance to another, you get a timeout. The Route tables seem to be valid
and has the entry for the Target ‘local’ for your VPC CIDR. Which of the following could be
a valid reason for this issue. Please select:
A. The Instances are of the wrong AMI , hence you are not able to ping the instances.
B. The Security Group has not been modified for allow the required traffic.
C. The Instances don’t have Public IP, so that the ping commands can be routed
D. The Instances don’t have Elastic IP, so that the ping commands can be routed
QUESTION 5
What is the best way to move an EBS volume currently attached to an EC2 instance from one
availability zone to another? Please select:
A. Detach the volume and attach to an EC2 instance in another AZ.
B. Create a new volume in the other AZ and specify the current volume as the source.
C. Create a snapshot of the volume and then create a volume from the snapshot in the
other AZ
D. Create a new volume in the AZ and do a disk copy of contents from one volume to
another.
QUESTION 6
When it comes to API credentials, what is the best practice recommended by AWS? Please
dy
select:
A. Create a role which has the necessary and can be assumed by the EC2 instance.
B. Use the API credentials from an EC2 instance.
C. Use the API credentials from a bastion host.
ed
D. Use the API credentials from a NAT Instance.
QUESTION 7 R
You want to retrieve the Public IP addresses assigned to a running instance via the instance
metadata. Which of the below urls is valid for retrieving this data.
A. http:// 169.254.169.254/latest/meta-data/public-ipv4
B. http://254.169.254.169/latest/meta-data/public-ipv4
h
C. http://254.169.254.169/meta-data/latest/public-ipv4
D. http://169.254.169.254/meta-data/latest/public-ipv4
as
QUESTION 8
in
You are planning to use the MySQL RDS in AWS. You have a requirement to ensure that you
are available to recover from a database crash. Which of the below is not a recommended
practice when you want to fulfil this requirement. Please select:
Av
QUESTION 9
Which of the following is a valid bucket name
A. demo
B. Example
C. .example
D. demo.
QUESTION 10
Which of the following is not a feature provided by Route53? Please select:
A. Registration of Domain Names
B. Routing of internet traffic to domain resources
C. Offloading content to cache locations
D. Health check of resources
QUESTION 11
When working with API gateways in AWS, what is the type of endpoints that exposed
A. HTTP
dy
B. HTTPS
C. JSON
D. XML
ed
QUESTION 12
Which of the following verbs are supported with the API Gateway. Please select :
R
A. GET
B. POST
C. PUT
D. All of the above
h
QUESTION 13
as
Which of the following container technologies are currently supported by the AWS ECS
service? Please select:
A. Kubernetes
in
B. Docker
C. Mesosphere
D. Canonical LXD
Av
QUESTION 14
Which of the following when used alongside with the AWS Secure Token service can be
used to provide a single sign-on experience for existing users who are part of an organization
using on-premise applications. Please select:
A. OpenID Connect
B. JSON
C. SAML 2.0
D. OAuth
QUESTION 15
While performing status checks on your volume in AWS , you can see that the volume check
has a status of "insufficient-data". What can you derive from this status check. Please select:
A. All checks have passed
B. A particular check has failed only
C. All checks have failed
D. The check on the volume is still in progress.
QUESTION 16
Which of the following can constitute the term of a “Golden Image”
A. This is the basic AMI which is available in AWS.
B. This refers to an instance which has been bootstrapped.
C. This refers to an AMI that has been constructed from a customized Image.
D. This refers to a special type of Linux AMI.
dy
QUESTION 17
When designing a health check for your web application which is hosted behind an elastic
load balancer, which of the following health checks is ideal to implement
ed
Please select:
A. A TCP health check
B. A UDP health check R
C. A HTTP health check
D. A combination of TCP and UDP health checks
QUESTION 18
h
Which of the following is an example of synchronous replication which occurs in the AWS
service. Please select:
as
QUESTION 21
An application is currently configured on an EC2 instance to process messages in SQS. The
queue has been created with the default settings. The application is configured to just read
the messages once a week. It has been noticed that not all the messages are being picked by
the application. What could be the issue?
Please select:
A. The application is configured to long polling, so some messages are not being picked up
B. The application is configured to short polling, so some messages are not being picked up
C. Some of the messages have surpassed the retention period defined for the queue
D. Some of the messages don’t have the right permissions to be picked up by the
dy
application
QUESTION 22
Your application is on an EC2 instance in AWS. Users use the application to upload a file to
ed
S3. The message first goes to an SQS queue, before it is picked up by a worker process,
which fetches the object and uploads it to S3. An email is then sent on successful completion
of the upload. You notice though that you are getting numerous emails for each request,
R
when ideally you should be getting only one final email notification for each successful
upload. Which of the below could be the possible reasons for this.
Please select:
A. The application is configured for long polling so the messages are being picked up
h
multiple times.
B. The application is not deleting the messages from SQS.
as
C. The application is configured to short polling, so some messages are not being picked up
D. The application is not reading the message properly from the SQS queue.
in
QUESTION 23
You have created your own VPC and subnet in AWS. You have launched an instance in that
subnet. You have noticed that the instance is not receiving a DNS name. Which of the below
Av
QUESTION 24
You have created your own VPC and subnet in AWS. You have launched an instance in that
subnet. You have attached an internet gateway to the VPC and seen that the instance has a
public IP. The Route table is shown below
The instance still cannot be reached from the Internet. Which of the below changes need to
be made to the route table to ensure that the issue can be resolved. Please select:
A. Add the following entry to the route table – 0.0.0.0/0->Internet Gateway
B. Modify the above route table – 10.0.0.0/16 ->Internet Gateway
C. Add the following entry to the route table – 10.0.0.0/16 ->Internet Gateway
dy
D. Add the following entry to the route table - 0.0.0.0/16->Internet Gateway
QUESTION 25
ed
You wanted to have a VPC created in AWS which will host an application. The application
will just consist of web and database servers. The application just requires to be accessed
from the internet by internet users. Which of the following VPC configuration wizards
options would you use. Please select:
A.
R
VPC with a Single Public Subnet Only
B. VPC with Public and Private Subnets
C. VPC with Public and Private Subnets and Hardware VPN Access
h
D. VPC with a Private Subnet Only and Hardware VPN Access
as
QUESTION 26
Which of the following statements are true with regards to EBS Volumes. Choose 3 correct
answers from the options given below. Please select:
A. EBS Volumes are automatically replicated within that zone to prevent data loss due to
in
QUESTION 27
You are a solutions architect working for a large oil and gas company. Your company runs
their production environment on AWS and has a custom VPC. The VPC contains 3 subnets, 1
of which is public and the other 2 are private. Inside the public subnet is a fleet of EC2
instances which are the result of an autoscaling group. All EC2 instances are in the same
security group. Your company has created a new custom application which connects to
mobile devices using a custom port. This application has been rolled out to production and
you need to open this port globally to the internet. What steps should you take to do this,
and how quickly will the change occur? Please select:
A. Open the port on the existing network Access Control List. Your EC2 instances will be
able to communicate on this port after a reboot.
B. Open the port on the existing network Access Control List. Your EC2 instances will be
able to communicate over this port immediately.
C. Open the port on the existing security group. Your EC2 instances will be able to
communicate over this port immediately.
D. Open the port on the existing security group. Your EC2 instances will be able to
communicate over this port as soon as the relevant Time To Live (TTL) expires.
QUESTION 29
You are creating a number of EBS Volumes for your EC2 instances. You are concerned on the
backups of the EBS Volumes. Which of the below is a way to backup the EBS Volumes
dy
Please select:
A. Configure Amazon Storage Gateway with EBS volumes as the data source and store the
backups on premise through the storage gateway
B. Write a cronjob that uses the AWS CLI to take a snapshot of production EBS volumes.
ed
C. Use a lifecycle policy to back up EBS volumes stored on Amazon S3 for durability
D. Write a cronjob on the server that compresses the data and then copy it to Glacier
QUESTION 31
R
You have a set of IIS Servers running on EC2 Instances. You want to collect and process the
log files generated from the IIS Servers. Which of the below services is ideal to run in this
scenario
h
Please select :
as
A. Amazon S3 for storing the log files and Amazon EMR for processing the log files
B. Amazon S3 for storing the log files and EC2 Instances for processing the log files
C. Amazon EC2 for storing and processing the log files
in
D. Amazon DynamoDB to store the logs and EC2 for running custom log analysis scripts
QUESTION 32
Av
You are trying to configure Cross Region Replication for your S3 bucket. But you are not able
to select the option of Cross Region Replication and is disabled.
Which of the below could be the possible reasons for this?
Please select:
QUESTION 33
What is the amount of temp space is allocated to you when using Lambda functions per
invocation.
Please select:
A. 256 MB
B. 512 MB
C. 2 GiB
D. 16 GiB
QUESTION 34
You have a requirement to create a subnet in an AWS VPC which will host around 20 hosts.
This subnet will be used to host web servers. Which of the below could be the possible
CIDR block allocated for the subnet Please select:
A. 10.0.1.0/27
dy
B. 10.0.1.0/28
C. 10.0.1.0/29
D. 10.0.1.0/30
ed
QUESTION 35
You run a website which hosts videos and you have two types of members, premium fee
paying members and free members. All videos uploaded by both your premium members
R
and free members are processed by a fleet of EC2 instances which will poll SQS as videos are
uploaded. However you need to ensure that your premium fee paying members videos have
a higher priority than your free members. How do you design SQS?
h
Please select:
A. SQS allows you to set priorities on individual items within the queue, so simply set the
as
SQS queue.
C. SQS would not be suitable for this scenario. It would be much better to use SNS to
encode the videos.
Av
D. Use SNS to notify when a premium member has uploaded a video and then process that
video accordingly.
QUESTION 36
Which of the following services natively encrypts data at rest within an AWS region?
(Choose two.)
Please select :
A. AWS Storage Gateway
B. Amazon DynamoDB
C. Amazon CloudFront
D. Amazon Glacier
QUESTION 37
Your EC2 instances are configured to run behind an Amazon VPC. You have assigned two
web servers instances to an Elastic Load Balancer. However, the instances and the ELB are
not reachable via URL to the elastic load balancer serving the web app data from the EC2
instances. What could be done to resolve this issue. Please select :
A. Attach an Internet gateway to the VPC and route it to the subnet
B. Add an elastic IP address to the instance
C. Use Amazon Elastic Load Balancer to serve requests to your instances located in the
internal subnet
D. Recreate the instances again
dy
QUESTION 38
You want to ensure that you keep a check on the Active Volumes, Active snapshots and
Elastic IP addresses you use so that you don’t go beyond the service limit. Which of the
ed
below services can help in this regard?
Please select :
A. AWS Cloudwatch R
B. AWS EC2
C. AWS Trusted Advisor
D. AWS SNS
h
QUESTION 39
You are building an automated transcription service in which Amazon EC2 worker instances
as
process an
uploaded audio file and generate a text file. You must store both of these files in the same
durable storage until the text file is retrieved. You do not know what the storage capacity
in
QUESTION 40
You are an AWS Administrator for your company. The company currently has a set of AWS
resources hosted in a particular region. You have been requested by your supervisor to create
a script which could create duplicate resources in another region incase of a disaster. Which
of the below AWS services could help fulfil this requirement.
Please select :
A. AWS Elastic Beanstalk
B. AWS SQS
C. AWS Cloudformation
D. AWS SNS
QUESTION 41
What are bastion hosts? Please select:
A. They are instances in the public subnet which are used as a jump server to resources
within other subnets.
B. They are instances in the private subnet which are used as a jump server to resources
within other subnets.
C. They are instances in the public subnet which are used to host web resources that can be
accessed by users.
D. They are instances in the private subnet which are used to host web resources that can
dy
be accessed by users.
QUESTION 42
You have several AWS reserved instances in your account. They have been running for some
ed
time, but now need to be shutdown since they are no longer required. The data is still
required for future purposes. Which of the below possible 2 steps can be taken.
Please select:
A.
R
Convert the instance to on-demand instances
B. Sell the instances on the AWS Reserved Instance Marketplace
C. Take snapshots of the EBS volumes and terminate the instances
h
D. Convert the instance to spot instances
as
QUESTION 43
You have an EC2 Instance in a particular region. This EC2 Instance has a preconfigured
software running on it. You have been requested to create a disaster recovery solution incase
in
the instance in the region fails. Which of the following is the best solution. Please select:
A. Create a duplicate EC2 Instance in another AZ. Keep it in the shutdown state. When
required , bring it back up.
Av
B. Backup the EBS data volume. If the instance fails , bring up a new EC2 instance and
attach the volume.
C. Store the EC2 data on S3. If the instance fails , bring up a new EC2 instance and restore
the data from S3.
D. Create an AMI of the EC2 Instance and copy it to another region
QUESTION 45
Amazon’s Redshift uses which block size for its columnar storage
Please select:
A. 2KB
B. 8KB
C. 16KB
D. 32KB
E. 1024KB
QUESTION 46
You working in the media industry and you have created a web application where users will
be able to upload photos they create to your website. This web application must be able to
call the S3 API in order to be able to function. Where should you store your API credentials
whilst maintaining the maximum level of security.
Please select:
A. Save the API credentials to your php files.
B. Don’t save your API credentials. Instead create a role in IAM and assign this role to an
dy
EC2 instance when you first create it.
C. Save your API credentials in a public Github repository.
D. Pass API credentials to the instance using instance userdata.
ed
QUESTION 47
You are a systems administrator and you need to monitor the health of your production
environment. You decide to do this using Cloud Watch, however you notice that you cannot
R
see the health of every important metric in the default dash board. Which of the following
metrics do you need to design a custom cloud watch metric for, when monitoring the health
of your EC2 instances?
Please select:
h
A. CPU Usage
B. Memory usage
as
QUESTION 48
In order for an EC2 instance to be accessed from the internet, which of the following are
required. Choose 3 answers from the options given below Please select:
Av
QUESTION 49
You are IOT sensors to monitor the number of bags that are handled at an airport. The data
gets sent back to a Kinesis stream with default settings. Every alternate day, the data from the
stream is sent to S3 for processing. But you notice that S3 is not receiving all of the data that
is being sent to the Kinesis stream. What could be the reason for this. Please select:
A. The sensors probably stopped working on some days hence data is not sent to the
stream.
QUESTION 51
You are defined the following Network ACL for your subnet.
dy
What will be the outcome when a workstation of IP 20.202.20.252 tries to access your subnet.
Please select :
A. The request will be allowed
ed
B. The request will be denied
C. The request will be allowed initially and then denied
D. The request will be denied initially and then allowed
R
QUESTION 52
Which procedure for backing up relational database on EC2 that is using a set of RAIDed
EBS volumes for storage minimizes the time during which the database cannot be written to
h
and results in a consistent backup?
A. 1. Detach EBS volume, 2. Start EBS snapshot of volumes, 3. Re-attach EBS volumes
as
Resume disk
Av
QUESTION 53
You are a solutions architect working for a company. They store their data on S3, however
recently an someone accidentally deleted some critical files in S3. You’ve been asked to
prevent this from happening in the future. What options below can prevent this?
Please select :
A. Make sure you provide signed URL's to all users.
B. Enable S3 versioning and Multifactor Authentication (MFA) on the bucket.
C. Use S3 Infrequently Accessed storage to store the data on.
D. Create an IAM bucket policy that disables deletes.
QUESTION 54
You run an automobile reselling company that has a popular online store on AWS. The
application site behind an Auto Scaling group and required new instances of Auto scaling
group to identify their puclic and private Ip addresses. How can you achieve this?
A. By using Ipconfig for windows or ifconfig for linux
B. By using a cloud watch metric
C. using a curl or Get command to get the latest meta-data from
http://169.254.169.254/latest/meta-data/
D. using a curl or Get command to get the latest meta-data from
http://169.254.169.254/latest/user-data/
QUESTION 55
You are the solution architect for a company. The company has a requirement to deploy an
dy
application which will need to have session management in place. Which of the following
services can be used for session management accordingly?
Please select :
A. AWS Storage Gateway, Elasticache & ELB
ed
B. ELB, Elasticache & RDS
C. Cloudwatch, RDS & DynamoDb
D. RDS, DynamoDB & Elasticache. R
QUESTION 56
You are working for an Enterprise and have been asked to get a support plan in place from
AWS.
1) 24x7 access to support
h
2) Access to the full set of Trusted Advisor checks
Which of the following would meet these requirements ensuring that cost is kept at a
as
minimum
Please select :
A. Basic
in
B. Developer
C. Business
D. Enterprise
Av
QUESTION 57
Which of the following is incorrect with regards to Private IP addresses?
Please select :
A. In Amazon EC2 classic, the private IP addresses are only returned to Amazon EC2 when
the instance is stopped or terminated
B. In Amazon VPC, an instance retains its private IP addresses when the instance is
stopped.
C. In Amazon VPC, an instance does NOT retain its private IP addresses when the instance
is stopped.
D. In Amazon EC2 classic, the private IP address is associated exclusively with the instance
for its lifetime
QUESTION 58
Which of the following are best practices for monitoring your EC2 Instances
Please select :
A. Create and implement a monitoring plan that collects monitoring data from all of the
parts in your AWS solution
B. Automate monitoring tasks as much as possible
C. Check the log files on your EC2 instances
D. All of the above
QUESTION 59
For which of the following use cases are Simple Workflow Service (SWF) and Amazon EC2
dy
an appropriate solution? Choose two answers from the options given below
A. using as an endpoint to collect thousands of data points per hour from a distributed fleet of
sensors
ed
B. managing a multi-step and multi-decision checkout process of an e-commerce website.
C. Orchestrating the execution of distributed and auditable business process.
D. Using as an SNS endpoint to trigger execution of video transcoding jobs
R
QUESTION 60
You work for a major news network in Europe. They have just released a new app which
allows users to report on events as and when they happen using their mobile phone. Users
h
are able to upload pictures from the app and then other users will be able to view these pics.
Your organization expects this app to grow very quickly, essentially doubling it’s user base
as
every month. The app uses S3 to store the media and you are expecting sudden and large
increases in traffic to S3 when a major news event takes place as people will be uploading
content in huge numbers). You need to keep your storage costs to a minimum however and it
in
does not matter if some objects are lost. Which storage media should you use to keep costs as
low as possible?
Please select :
Av
Answers:
1. A and C
2. A
3. C
4. B
5. C
6. A
7. A
8. B
9. A
10. C
11. B
12. D
13. B
14. C
15. D
dy
16. C
17. C
18. B
19. A
ed
20. B and C
21. C
22. D R
23. C
24. A
25. B
26. A, C and D
h
27. C
28. A
as
29. B
30. A, B and D
31. A
in
32. B
33. B
34. A
Av
35. B
36. A and D
37. A
38. C
39. C
40. C
41. A
42. B and C
43. D
44. A
45. E
46. B
47. B
48. A, C and D
49. C
50. B
51. A
52. E
53. B
54. C
55. D
56. C
57. C
58. D
dy
59. B and C
60. B
ed
R
h
as
in
Av