AWS Practice Test 1 — Questions and Answers

Question 1: If you deploy your workloads over different Availability Zones in AWS and use Amazon RDS Multi-AZ, which of the following cloud architectural principles are followed?

Implement elasticity
Decouple your components
Think parallel
Design for failure (Correct answer)

Correct answer: Design for failure

Deploying workloads across different Availability Zones (AZs) and utilizing Amazon RDS Multi-AZ are key strategies for building highly available and fault-tolerant architectures. This approach ensures that if one AZ experiences an outage, your application and database can seamlessly failover to resources in another AZ, adhering to the cloud architectural principle of 'Design for failure'.

Question 2: Which AWS service should you use to centrally manage rules and billing across different accounts?

AWS Trusted Advisors
AWS Organizations (Correct answer)
AWS Config
AWS Budgets

Correct answer: AWS Organizations

For high availability and fault tolerance, it is recommended to deploy an Application Load Balancer (ALB) across at least two Availability Zones. This configuration ensures that if one Availability Zone becomes unavailable, the ALB can continue to route traffic to healthy instances in the other active Availability Zone, maintaining application uptime.

Question 3: An international bank intends to move some of its on-premises online programs to Amazon Web Services (AWS). Which of the following is a benefit of adopting Amazon Web Services (AWS) instead of virtualized data centers?

Lower variable costs and lower upfront costs. (Correct answer)
Lower variable costs and higher upfront costs.
Higher variable costs and higher upfront costs.
Higher variable costs and lower upfront costs.

Correct answer: Lower variable costs and lower upfront costs.

The AWS Total Cost of Ownership (TCO) Calculator is a valuable tool for estimating the cost savings of migrating on-premises workloads to AWS. It allows organizations to compare the costs of running their infrastructure in their own data centers versus on AWS, providing a clear financial justification for cloud adoption. This helps in planning and budgeting for a hybrid cloud architecture.

Question 4: To design a highly available architecture, choose the minimal number of Availability Zones for your Application Load Balancer.

5
4
7
2 (Correct answer)

Correct answer: 2

For high availability, AWS recommends deploying Application Load Balancers (ALBs) across at least two Availability Zones. This ensures that if one Availability Zone experiences an outage, the ALB can continue to route traffic to healthy instances in other Availability Zones, maintaining application uptime and resilience.

Question 5: A corporation intends to use AWS to implement a hybrid cloud architecture. Which of the following methods may they use to estimate their costs? (Choose TWO)

Consolidated Billing
Cost allocation tag
AWS Total Cost of Ownership (TCO) Calculator (Correct answer)

Correct answer: AWS Total Cost of Ownership (TCO) Calculator

The AWS Total Cost of Ownership (TCO) Calculator is a crucial tool for estimating the cost savings of migrating on-premises workloads to AWS. It allows businesses to compare the expenses of running their infrastructure in their own data centers versus on AWS, providing a clear financial justification for cloud adoption. This helps in planning and budgeting for a hybrid cloud architecture.

Question 6: Which of the following can analyze your AWS setup and give recommendations for cost savings, improved system performance and reliability, or security gaps?

AWS Budgets
AWS Cost Explorer
AWS Cost Explorer
AWS Inspector
AWS Trusted Advisor (Correct answer)

Correct answer: AWS Trusted Advisor

AWS Trusted Advisor is a service that inspects your AWS environment and provides real-time guidance based on AWS best practices. It offers recommendations across five categories: cost optimization, performance, security, fault tolerance, and service limits. This makes it an invaluable tool for identifying potential issues and improving your overall AWS setup.

Question 7: Which of the following statements about the AWS Global Infrastructure components is correct?

An edge location contains multiple AWS Regions.
An Availability Zone contains edge locations.
An AWS Region contains multiple Availability Zones. (Correct answer)
An Availability Zone contains multiple AWS Regions.

Correct answer: An AWS Region contains multiple Availability Zones.

The AWS Global Infrastructure is designed for high availability and fault tolerance. An AWS Region is a geographical area that contains multiple, isolated locations known as Availability Zones. Each Availability Zone is a distinct data center with redundant power, networking, and connectivity, allowing customers to run applications across multiple zones for increased resilience.

Question 8: Which service should you choose if you need to establish a custom self-hosted database that needs to be shut down every night to save money?

Amazon EC2 instance with an EBS volume (Correct answer)
Amazon ECZ instance with an Instance Store volume
Amazon Redshift
Amazon DynamoDB

Correct answer: Amazon EC2 instance with an EBS volume

To host a custom self-hosted database that needs to be shut down nightly to save money, an Amazon EC2 instance with an EBS volume is the ideal choice. EC2 provides full control over the operating system and database software, allowing for custom configurations and manual shutdown. EBS volumes provide persistent storage that remains even when the EC2 instance is stopped, ensuring your database data is preserved.

Question 9: Which of the following companies offers a set of services to assist you in achieving specified business results linked to enterprise cloud adoption through paid engagements in a variety of specialty practice areas?

AWS Professional Services (Correct answer)
Concierge Support
AWS Technical Account Manager
AWS Enterprise Support

Correct answer: AWS Professional Services

AWS Professional Services is a global team of experts that helps enterprises achieve specific business outcomes related to cloud adoption. They offer paid engagements in various specialty practice areas, providing guidance and hands-on support for designing, architecting, building, migrating, and managing workloads on AWS. This service is distinct from support plans, focusing on project-based strategic assistance.

Question 10: You need to host a new Microsoft SQL Server database for a current project. Should you use two AWS services to achieve this requirement?

Amazon Aurora
Amazon Relational Database Service (Amazon RDS)
Amazon Redshift
Amazon EC2 (Correct answer)

Correct answer: Amazon EC2

To host a Microsoft SQL Server database, you can use Amazon EC2. EC2 allows you to provision a Windows Server instance, install SQL Server yourself, and have full control over the database and underlying operating system. While Amazon RDS also supports SQL Server, EC2 provides the flexibility to manage the database entirely yourself, which might be preferred depending on specific requirements.

Question 11: Which of the following Amazon EC2 instance purchasing choices allows you to leverage your existing server-bound software licenses to help you meet compliance requirements and save money?

On-Demand Instance
Dedicated Instance
Reserved Instance
Dedicated Host (Correct answer)

Correct answer: Dedicated Host

A Dedicated Host is a physical EC2 server dedicated for your use, allowing you to bring your existing server-bound software licenses (like Windows Server or SQL Server) to AWS. This helps meet compliance requirements and can save money by leveraging existing investments. Other instance types like On-Demand or Reserved Instances typically use shared tenancy or don't offer the same license portability.

Question 12: Select any options that you want to utilize to strengthen the security of your IAM users.

Enable incoming traffic via Security Groups.
Block incoming traffic via Network ACL.
Enable Multi-Factor Authentication (MFA).
Configure a strong password policy for your users. (Correct answer)

Correct answer: Configure a strong password policy for your users.

Strengthening the security of IAM users involves implementing robust authentication practices. Configuring a strong password policy ensures users create complex, hard-to-guess passwords, reducing the risk of unauthorized access. While Multi-Factor Authentication (MFA) is also crucial for enhanced security, a strong password policy is a foundational step in securing IAM users.

Question 13: Which service keeps track of all actions made through the AWS Management Console, AWS SDKs, command-line tools, and other AWS services?

AWS Infrastructure Event Management
AWS Config
AWS CloudTrail (Correct answer)
Amazon CloudWatch

Correct answer: AWS CloudTrail

AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. It records all API calls and actions made through the AWS Management Console, AWS SDKs, command-line tools, and other AWS services. This provides a detailed history of activity within your account, helping you track changes, troubleshoot issues, and maintain security.

Question 14: You're creating a new cloud architecture in AWS for a mission-critical application that requires high availability. Which of the following patterns should be used to fulfill this requirement?

Deploy an Amazon E02 Spot Fleet with a diversified allocation strategy.
Adopt a monolithic application architecture.
Make sure that each component of the application has high bandwidth and low- latency network connectivity using ENIs.
Use multiple Availability Zones to ensure that the application can handle the failure of any single component. (Correct answer)

Correct answer: Use multiple Availability Zones to ensure that the application can handle the failure of any single component.

For mission-critical applications requiring high availability, deploying across multiple Availability Zones (AZs) is a fundamental best practice. Each AZ is an isolated location within a Region, designed to be independent of failures in other AZs. By distributing application components across multiple AZs, your application can remain operational even if one AZ experiences an outage, ensuring fault tolerance and high availability.

Question 15: For their application, a FANG company is currently using an On-Demand E02 instance, which they aim to convert to a Reserved E02 instance to save money. If the application being hosted will be used for more than three years, which of the following is the most cost-effective option?

All Upfront Convertible Reserved Instance pricing for a 1-year term.
All Upfront, Standard Reserved Instance pricing for a 3-year term. (Correct answer)
C)No Upfront Standard Reserved Instance pricing for a 1-year term that is renewed every year
No Upfront Convertible Reserved Instance pricing for a 3-year term.

Correct answer: All Upfront, Standard Reserved Instance pricing for a 3-year term.

For an application used for more than three years, the most cost-effective option for Reserved Instances is typically an 'All Upfront' payment for a '3-year term.' 'All Upfront' offers the largest discount, and a 'Standard' Reserved Instance provides the highest discount for a consistent workload. A 3-year term provides a greater discount than a 1-year term, making it the most economical choice for long-term, stable usage.

Question 16: Which of the following options below is solely the responsibility of the client under the AWS shared responsibility model?

Patching of the host operating system
Awareness &Training
Zone Security (Correct answer)
Configuration Management

Correct answer: Zone Security

Under the AWS shared responsibility model, AWS is responsible for the security *of* the cloud, while the customer is responsible for security *in* the cloud. 'Zone Security,' which refers to the security within your specific virtual private cloud, subnets, and instances, falls under the customer's responsibility. This includes configuring security groups, network ACLs, and ensuring proper access controls for your resources.

Question 17: A company wants to launch a new system on AWS, but they don't have anyone on staff with AWS experience. Which of the following can assist the business in designing, architecting, building, migrating, and managing workloads and applications on AWS?

AWS Partner Network Consulting Partners (Correct answer)
AWS Marketplace
Technical Account Management
AWS Partner Network Technology Partners

Correct answer: AWS Partner Network Consulting Partners

AWS Partner Network (APN) Consulting Partners are professional services firms that help customers design, architect, build, migrate, and manage their workloads and applications on AWS. These partners have expertise in AWS services and can provide valuable assistance to companies lacking in-house AWS experience. They offer a range of services from strategic planning to implementation and ongoing management.

Question 18: Which Amazon Web Services (AWS) services can be used to host virtual servers?

AWS EBS
AWS CloudWatch
AWS EC2 (Correct answer)
AWS S3

Correct answer: AWS EC2

Amazon Elastic Compute Cloud (EC2) is a web service that provides resizable compute capacity in the cloud. It allows users to launch virtual servers, known as instances, with various operating systems and configurations. This makes EC2 the primary service for hosting virtual servers and running custom applications on AWS.

Question 19: Your boss has given you the task of building a system that is made up of several interconnected microservices. Which AWS product do you think you'd utilize to encourage loose coupling between them?

AWS SQS (Correct answer)
AWS IAM
AWS CloudTrail
AWS Bean Stalk

Correct answer: AWS SQS

AWS Simple Queue Service (SQS) is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications. By using SQS, microservices can communicate asynchronously by sending and receiving messages through a queue, promoting loose coupling and improving system resilience. This prevents direct dependencies and allows services to operate independently.

Question 20: What service would you recommend if I wanted to run a relational database on Amazon Web Services while leaving the operating system to Amazon?

AWS EC2
AWS RDS (Correct answer)
AWS DynamoDB
AWS RedShift

Correct answer: AWS RDS

Amazon Relational Database Service (RDS) is a managed service that makes it easy to set up, operate, and scale a relational database in the cloud. With RDS, AWS handles the underlying operating system patching, backups, and other administrative tasks, allowing you to focus on your application and data. This provides a balance of control and convenience for relational databases.

Question 21: Which instance type would be the best fit for your company's needs to host certain servers for a four-month period?

Spot instances
No Upfront costs
On demand instances (Correct answer)
Partial Upfront costs

Correct answer: On demand instances

For hosting servers for a short, defined period like four months, On-Demand instances are the most suitable choice. They offer flexibility with no long-term commitments or upfront payments, allowing you to pay only for the compute capacity you use by the hour or second. While Spot Instances are cheaper, their unpredictable termination makes them unsuitable for servers that need to run consistently for a specific duration.

Question 22: In terms of AWS and its users, what is the shared responsibility modal?

The client is responsible for hardware maintenance and upgrades
AWS and their clients share the responsibility between them. (Correct answer)
AWS is responsible for identify access management
AWS are responsible for the maintenance of the user’s data

Correct answer: AWS and their clients share the responsibility between them.

The AWS shared responsibility model defines what AWS is responsible for and what the customer is responsible for regarding security and compliance. AWS is responsible for the security *of* the cloud (the infrastructure), while the customer is responsible for security *in* the cloud (their data, applications, and configurations). This model clearly outlines the division of responsibilities to ensure a secure cloud environment.

Question 23: What service would you recommend if I wanted to host a relational database on AWS while keeping as much control as possible over the database's hosting?

AWS EC2 (Correct answer)
AWS RDS
AWS DynamoDB
AWS RedShift

Correct answer: AWS EC2

If you want to host a relational database on AWS while maintaining maximum control over the database's hosting, Amazon EC2 is the best option. With EC2, you provision a virtual server, install your chosen database software, and manage the operating system, database configuration, and all administrative tasks yourself. This provides the highest level of customization and control, unlike managed services like RDS.

Question 24: Which service is best for Java,.Net, Docker, Python, and Node.js developers who want to quickly deploy their code to the cloud?

AWS DynamoDB
AWS RDS
AWS EC2 Elastic Cloud Compute
AWS Elastic Bean Stalk (Correct answer)

Correct answer: AWS Elastic Bean Stalk

AWS Elastic Beanstalk is an easy-to-use service for deploying and scaling web applications and services developed with various programming languages and platforms, including Java, .NET, Docker, Python, and Node.js. It handles the deployment, capacity provisioning, load balancing, auto-scaling, and application health monitoring, allowing developers to focus solely on their code rather than infrastructure management.

Question 25: What AWS service could you utilize to help protect your production system from DoS attacks?

IAM
AWS Shield (Correct answer)
AWS CloudTrail
Multi Factor Authentication

Correct answer: AWS Shield

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. It provides always-on detection and automatic inline mitigations that minimize application downtime and latency. AWS Shield comes in two tiers: Standard, which is automatically included for all AWS customers, and Advanced, which offers enhanced protection and cost savings.

AWS Practice Test 1

If you deploy your workloads over different Availability Zones in AWS and use Amazon RDS Multi-AZ, which of
the following cloud architectural principles are followed?