Home/Directory/aws

aws Practice Questions

Page 12 of 12 (1149 total questions)

You are migrating a monolithic application to microservices and want to use a tool that allows you to route traffic to the new microservices incrementally while the rest of the monolith remains on-premises or in EC2. Which AWS service simplifies this 'Strangler Fig' pattern?
View Question & Answer ➔
Scenario: You are designing a data lake and want to ensure that if sensitive PII data (like Social Security numbers) is discovered in an S3 bucket, it is automatically 'masked' or redacted before it's processed. Solution ?
View Question & Answer ➔
Scenario: You are designing a data lake and want to move objects from a standard S3 bucket to S3 Glacier Deep Archive after 1 year of no access. Solution ?
View Question & Answer ➔
Your organization is hosting a globally available application. You want to route users to the closest healthy endpoint while automatically failing over to a secondary region if the primary region's health check fails. Which Route 53 routing policy and configuration should you use?
View Question & Answer ➔
Scenario: To minimize the latency for users worldwide, you decide to use a database that provides 'Single-digit millisecond' performance for both reads and writes with global replication. Solution ?
View Question & Answer ➔
Scenario: You are designing a globally distributed application and want to ensure that traffic is routed only to healthy regions. If a region's health check fails, users should be automatically redirected. Solution ?
View Question & Answer ➔
Your organization is migrating a high-performance database cluster that requires extremely low-latency network communication and high throughput (up to 100 Gbps) between nodes. Which EC2 instance feature and VPC configuration should you use?
View Question & Answer ➔
An enterprise wants to ensure that all their AWS CloudTrail logs are protected from being tampered with or deleted, even if their administrative accounts are compromised. Which feature provides the strongest protection for log integrity?
View Question & Answer ➔
To improve the security of a multi-account AWS environment, an architect wants to ensure that users can ONLY perform 'Delete' operations on production resources during a pre-authorized maintenance window. Which combination of services enables this time-based access control?
View Question & Answer ➔
An organization wants to analyze the cost and usage of their AWS environment for the last 12 months with the ability to forecast future spending for the next 12 months. Which tool should they use?
View Question & Answer ➔
An organization following the 'Zero Trust' model wants to ensure that access to their internal web apps is granted only if the user is authenticated via their enterprise IdP AND their device is company-managed. Which AWS service provides this integrated evaluation?
View Question & Answer ➔
Which AWS service allows you to centrally manage and enforce security best practices across all your AWS accounts by providing a set of 'Service Control Policies' (SCPs) that act as 'Guardrails'?
View Question & Answer ➔
You are designing a disaster recovery solution for a global application that requires an RTO of less than 1 hour and an RPO of less than 1 minute. The database is Amazon Aurora. Which architecture is most appropriate?
View Question & Answer ➔
Which AWS networking service allows you to create a high-performance, private backbone to connect multiple on-premises sites and VPCs, effectively replacing a traditional MPLS network?
View Question & Answer ➔
Your High Performance Computing (HPC) workload requires low network latency between Amazon EC2 instances. What feature should you use?
View Question & Answer ➔
To protect against L7 DDoS attacks that target your Application Load Balancer by sending requests that mimic legitimate browser traffic, which WAF feature is most effective?
View Question & Answer ➔
An organization is migrating their legacy on-premises Windows workload to AWS and needs a managed file storage service that supports the NTFS protocol and integrates with their AWS Managed Microsoft AD. Which service should they choose?
View Question & Answer ➔
Which AWS machine learning service allows you to automatically identify and redact sensitive information (PII) from text data without buildling custom models?
View Question & Answer ➔
A financial services company has migrated its core application to two AWS regions: us-west-2 (Oregon) and eu-west-1 (Ireland). They want to route global users to the closest region using Amazon Route 53. However, due to compliance reasons, they need to route 80% of traffic originating from South America to the Oregon region, even though Ireland is physically closer to some Eastern parts of South America. What is the most effective Route 53 configuration to achieve this?
View Question & Answer ➔
An enterprise uses Amazon Route 53 Private Hosted Zones (PHZs) inside a VPC for name resolution of database endpoints. The main database is hosted in us-east-1, and a replica is in us-west-2. On-premises datacenters resolve endpoints using Route 53 Inbound Resolvers. They want to set up an active-passive failover for the database endpoint (db.corp.internal) using Route 53. What configuration must they implement to ensure proper failover resolution for both VPC resources and on-premises users?
View Question & Answer ➔
An online booking platform runs on a multi-region active-active architecture across us-east-1 and us-west-2. To prepare for disaster recovery, they want to implement a mechanism that can shift 100% of traffic away from a compromised region within 1 minute. They want to avoid automatic failover due to risk of split-brain, preferring a manual but rapid, centralized trigger that updates DNS. Which AWS capability is designed for this exact use case?
View Question & Answer ➔
A security architect wants to prevent data exfiltration via DNS tunneling from EC2 instances running in a VPC. The instances use the default VPC DNS resolver (AmazonProvidedDNS). The architect needs to block outbound DNS queries to known malicious domains and dynamic DNS hosts, while allowing access to internal domains and AWS endpoints. What is the most operationally efficient way to implement this?
View Question & Answer ➔
You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?
View Question & Answer ➔
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
View Question & Answer ➔
You need to grant developers read-only access to Amazon S3 buckets without giving them access to other services. What's the best approach using AWS IAM?
View Question & Answer ➔
A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?
View Question & Answer ➔
Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?
View Question & Answer ➔
You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?
View Question & Answer ➔
Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?
View Question & Answer ➔
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
View Question & Answer ➔
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
View Question & Answer ➔
A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?
View Question & Answer ➔
You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?
View Question & Answer ➔
Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?
View Question & Answer ➔
You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?
View Question & Answer ➔
Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?
View Question & Answer ➔
Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What AWS IAM feature should you use?
View Question & Answer ➔
Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Amazon EC2 instance type is optimized for this?
View Question & Answer ➔
Your application requires persistent block storage that survives Amazon EC2 instance termination. Which service should you use?
View Question & Answer ➔
You need to create a backup of your Amazon EBS volume for disaster recovery. What feature should you use?
View Question & Answer ➔
You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?
View Question & Answer ➔
You need stateful firewall rules at the Amazon EC2 instance level. What should you configure?
View Question & Answer ➔
You need to explicitly deny traffic from a specific IP address to your Amazon EC2 instances. Can Security Groups natively handle explicit deny rules?
View Question & Answer ➔
You need stateless firewall rules at the subnet level in your Amazon VPC. What should you configure?
View Question & Answer ➔
You need to monitor CPU utilization of your Amazon EC2 instances and set up alarms for automated actions. Which service should you use?
View Question & Answer ➔
Your application running on Amazon EC2 needs a central location for log aggregation and real-time analysis. Which Amazon CloudWatch capability should you use?
View Question & Answer ➔
You need to route traffic to Amazon EC2 instances based on URL paths (e.g., '/api' vs '/static'). Which load balancer type should you use?
View Question & Answer ➔
Your high-traffic application requires ultra-low latency and needs to handle millions of requests per second at the network level. Which load balancer is best?
View Question & Answer ➔
Your High Performance Computing (HPC) workload requires low network latency between Amazon EC2 instances. What feature should you use?
View Question & Answer ➔

← PreviousPage 12 of 12

aws Practice Questions

You are migrating a monolithic application to microservices and want to use a tool that allows you to route traffic to the new microservices incrementally while the rest of the monolith remains on-premises or in EC2. Which AWS service simplifies this 'Strangler Fig' pattern?

Scenario: You are designing a data lake and want to ensure that if sensitive PII data (like Social Security numbers) is discovered in an S3 bucket, it is automatically 'masked' or redacted before it's processed. Solution ?

Scenario: You are designing a data lake and want to move objects from a standard S3 bucket to S3 Glacier Deep Archive after 1 year of no access. Solution ?

Your organization is hosting a globally available application. You want to route users to the closest healthy endpoint while automatically failing over to a secondary region if the primary region's health check fails. Which Route 53 routing policy and configuration should you use?

Scenario: To minimize the latency for users worldwide, you decide to use a database that provides 'Single-digit millisecond' performance for both reads and writes with global replication. Solution ?

Scenario: You are designing a globally distributed application and want to ensure that traffic is routed only to healthy regions. If a region's health check fails, users should be automatically redirected. Solution ?

Your organization is migrating a high-performance database cluster that requires extremely low-latency network communication and high throughput (up to 100 Gbps) between nodes. Which EC2 instance feature and VPC configuration should you use?

An enterprise wants to ensure that all their AWS CloudTrail logs are protected from being tampered with or deleted, even if their administrative accounts are compromised. Which feature provides the strongest protection for log integrity?

To improve the security of a multi-account AWS environment, an architect wants to ensure that users can ONLY perform 'Delete' operations on production resources during a pre-authorized maintenance window. Which combination of services enables this time-based access control?

An organization wants to analyze the cost and usage of their AWS environment for the last 12 months with the ability to forecast future spending for the next 12 months. Which tool should they use?

An organization following the 'Zero Trust' model wants to ensure that access to their internal web apps is granted only if the user is authenticated via their enterprise IdP AND their device is company-managed. Which AWS service provides this integrated evaluation?

Which AWS service allows you to centrally manage and enforce security best practices across all your AWS accounts by providing a set of 'Service Control Policies' (SCPs) that act as 'Guardrails'?

You are designing a disaster recovery solution for a global application that requires an RTO of less than 1 hour and an RPO of less than 1 minute. The database is Amazon Aurora. Which architecture is most appropriate?

Which AWS networking service allows you to create a high-performance, private backbone to connect multiple on-premises sites and VPCs, effectively replacing a traditional MPLS network?

Your High Performance Computing (HPC) workload requires low network latency between Amazon EC2 instances. What feature should you use?

To protect against L7 DDoS attacks that target your Application Load Balancer by sending requests that mimic legitimate browser traffic, which WAF feature is most effective?

An organization is migrating their legacy on-premises Windows workload to AWS and needs a managed file storage service that supports the NTFS protocol and integrates with their AWS Managed Microsoft AD. Which service should they choose?

Which AWS machine learning service allows you to automatically identify and redact sensitive information (PII) from text data without buildling custom models?

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

You need to grant developers read-only access to Amazon S3 buckets without giving them access to other services. What's the best approach using AWS IAM?

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What AWS IAM feature should you use?

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Amazon EC2 instance type is optimized for this?

Your application requires persistent block storage that survives Amazon EC2 instance termination. Which service should you use?

You need to create a backup of your Amazon EBS volume for disaster recovery. What feature should you use?

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

You need stateful firewall rules at the Amazon EC2 instance level. What should you configure?

You need to explicitly deny traffic from a specific IP address to your Amazon EC2 instances. Can Security Groups natively handle explicit deny rules?

You need stateless firewall rules at the subnet level in your Amazon VPC. What should you configure?

You need to monitor CPU utilization of your Amazon EC2 instances and set up alarms for automated actions. Which service should you use?

Your application running on Amazon EC2 needs a central location for log aggregation and real-time analysis. Which Amazon CloudWatch capability should you use?

You need to route traffic to Amazon EC2 instances based on URL paths (e.g., '/api' vs '/static'). Which load balancer type should you use?

Your high-traffic application requires ultra-low latency and needs to handle millions of requests per second at the network level. Which load balancer is best?

Your High Performance Computing (HPC) workload requires low network latency between Amazon EC2 instances. What feature should you use?