Home/Directory/aws

aws Practice Questions

Page 8 of 12 (1149 total questions)

Can Amazon CloudFront serve content from a custom origin (like a server on-premises or a different cloud provider)?
View Question & Answer ➔
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
View Question & Answer ➔
Which AWS service provides automatic protection against common Distributed Denial of Service (DDoS) attacks for all AWS customers at no additional cost?
View Question & Answer ➔
A large enterprise needs protection against sophisticated Layer 7 DDoS attacks and requires 24/7 access to the AWS Shield Response Team (SRT). Which service should they subscribe to?
View Question & Answer ➔
What is the 'DDoS Cost Protection' benefit provided by AWS Shield Advanced?
View Question & Answer ➔
Which AWS resources can be protected by AWS Shield Advanced?
View Question & Answer ➔
An architect wants to monitor DDoS attacks in real-time. Which tool provides a dashboard for Shield Advanced customers to see ongoing events across the AWS network?
View Question & Answer ➔
By combining CloudFront, Route 53, and WAF with AWS Shield, you are building a 'Defense in Depth' strategy. What is the primary role of WAF in this stack?
View Question & Answer ➔
Which AWS service can centrally manage and deploy AWS Shield Advanced and WAF rules across multiple accounts in an AWS Organization?
View Question & Answer ➔
Is AWS Shield Advanced required to protect against 'UDP reflection' attacks?
View Question & Answer ➔
To participate in the AWS Shield Advanced 'proactive engagement', what must a customer provide?
View Question & Answer ➔
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
View Question & Answer ➔
A solutions architect is designing an encryption strategy for S3. The company wants to manage the keys in AWS but requires that the keys cannot be exported from the AWS KMS service. Which key type should be used?
View Question & Answer ➔
What is the difference between an 'Symmetric' and 'Asymmetric' KMS key?
View Question & Answer ➔
To improve security and meet compliance, a company wants to automatically rotate their Customer Managed Keys every year. How is this enabled in KMS?
View Question & Answer ➔
Which KMS feature allows you to use the same key material for data in multiple AWS regions to support disaster recovery scenarios without re-encrypting data?
View Question & Answer ➔
What is an 'Encryption Context' in AWS KMS?
View Question & Answer ➔
A company has a regulatory requirement to store keys in a dedicated single-tenant hardware security module (HSM). Which KMS feature should be used?
View Question & Answer ➔
How can an architect grant a different AWS account permission to use a KMS key for encrypting data in an S3 bucket?
View Question & Answer ➔
What is the purpose of 'Grant' in AWS KMS?
View Question & Answer ➔
What happens if you delete a KMS key?
View Question & Answer ➔
A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?
View Question & Answer ➔
A company wants to automate the extraction of data from thousands of scanned medical forms. The forms contain tables and handwriting. Which service should be used for this task?
View Question & Answer ➔
To improve accuracy for high-stakes document extraction, an architect wants to incorporate human review for a subset of the results from Amazon Textract. Which service provides this integration?
View Question & Answer ➔
What is the primary technical advantage of using Textract over traditional Optical Character Recognition (OCR) software?
View Question & Answer ➔
An architect is building a document processing pipeline. When a file is uploaded to S3, a Lambda function should trigger Textract. If the file is a 500-page PDF, which Textract API should be used?
View Question & Answer ➔
Can Amazon Textract extract data from handwritten notes in different languages?
View Question & Answer ➔
How does Textract charge for its service?
View Question & Answer ➔
Which feature of Textract allows an architect to specify exactly which information they are looking for in a document using natural language (e.g., 'What is the total amount due?')?
View Question & Answer ➔
A specialized Textract feature is available for extracting specific data points from financial documents like invoices and receipts. What is it called?
View Question & Answer ➔
To extract information from passports and driver licenses, which Textract feature should be used?
View Question & Answer ➔
You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?
View Question & Answer ➔
Which AWS service is powered by the same deep learning technologies as Amazon Alexa and is used to build conversational interfaces into any application?
View Question & Answer ➔
What are the three core components used to define a bot in Amazon Lex?
View Question & Answer ➔
A company wants to add a voice-based interface to their existing customer service portal. Users should be able to check their account balance by speaking into their browser. Which service should they choose?
View Question & Answer ➔
In an Amazon Lex bot, how do you perform the actual backend logic (e.g., checking a database for a user's balance)?
View Question & Answer ➔
Which AWS service is most commonly used together with Amazon Lex to create a complete, AI-powered contact center solution?
View Question & Answer ➔
Does Amazon Lex support multi-turn conversations (e.g., the bot asking follow-up questions until it has all the details)?
View Question & Answer ➔
A bot needs to ensure it only accepts a valid city name from the user. What is the best way to implement this in Lex?
View Question & Answer ➔
How can an architect improve a Lex bot's performance if it frequently fails to understand user requests?
View Question & Answer ➔
Can you export an Amazon Lex bot to run on an edge device without an internet connection?
View Question & Answer ➔
Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?
View Question & Answer ➔
A data science team needs a fully managed service to build, train, and deploy machine learning models at scale. Which service is designed for this?
View Question & Answer ➔
What is 'Amazon SageMaker Ground Truth' used for?
View Question & Answer ➔
A team wants to quickly start experimenting with machine learning without configuring their own Jupyter notebooks. Which SageMaker feature provides a web-based IDE for ML?
View Question & Answer ➔
To reduce costs for training large machine learning models, which EC2 instance feature should a solutions architect recommend using with SageMaker?
View Question & Answer ➔
Which SageMaker feature helps an architect automatically find the best version of a machine learning model by running multiple training jobs with different parameters?
View Question & Answer ➔
For low-latency real-time predictions, what is the best deployment option in SageMaker?
View Question & Answer ➔
An architect needs to run a machine learning model on an edge device (like a factory camera) with very limited resources. Which service can optimize the model for specific hardware?
View Question & Answer ➔
What is the purpose of 'SageMaker Model Monitor'?
View Question & Answer ➔
Which SageMaker feature allows business analysts to build ML models and make predictions using a visual interface without writing any code?
View Question & Answer ➔
You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?
View Question & Answer ➔
What is the primary function of AWS CodeBuild in a CI/CD pipeline?
View Question & Answer ➔
Which YAML-formatted file is used to define the build commands and runtime settings for an AWS CodeBuild project?
View Question & Answer ➔
An architect wants to ensure that a CodeBuild project has access to resources inside a private VPC, such as an RDS database for integration testing. How should the project be configured?
View Question & Answer ➔
To speed up subsequent builds, which CodeBuild feature allows for the reuse of dependencies (like Maven or npm packages)?
View Question & Answer ➔
Which AWS security feature allows an architect to grant a CodeBuild project permission to pull an image from a private ECR repository?
View Question & Answer ➔
Does AWS CodeBuild charge you for the time your build project is idle and not running any builds?
View Question & Answer ➔
An architect is designing a multi-account CI/CD pipeline using AWS CodePipeline. CodeBuild is used for the build stage. Where are the resulting build artifacts typically stored so they can be accessed by the deployment stage in another account?
View Question & Answer ➔
Can you use custom Docker images to run your builds in AWS CodeBuild?
View Question & Answer ➔
What is the purpose of the 'Phases' section in a CodeBuild buildspec file?
View Question & Answer ➔
Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?
View Question & Answer ➔
Which AWS service provides 'Infrastructure as Code' capabilities, allowing you to model and provision AWS resources using JSON or YAML templates?
View Question & Answer ➔
An architect wants to deploy the same CloudFormation template across hundreds of AWS accounts and multiple regions within an organization. Which feature should be used?
View Question & Answer ➔
What is the 'Drift Detection' feature in AWS CloudFormation used for?
View Question & Answer ➔
How can an architect prevent a CloudFormation stack from failing its entire deployment if a single resource fails to create?
View Question & Answer ➔
What is the primary purpose of 'Nested Stacks' in CloudFormation?
View Question & Answer ➔
An architect needs to perform an 'update' to a CloudFormation stack. They want to see exactly which resources will be created, modified, or deleted before applying the change. Which feature should be used?
View Question & Answer ➔
To protect critical resources (like a production database) from accidental deletion during a CloudFormation stack update or deletion, what should the architect use?
View Question & Answer ➔
In a CloudFormation template, which section is used to define the logical relationships between resources (e.g., ensuring a database exists before a web server starts)?
View Question & Answer ➔
What is the 'Condition' section in a CloudFormation template typically used for?
View Question & Answer ➔
Which IAM policy type is used to set the maximum permissions that an identity-based policy can grant to an IAM user or role?
View Question & Answer ➔
Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What AWS IAM feature should you use?
View Question & Answer ➔
A company uses AWS Organizations and wants to ensure that NO user in any account can delete S3 buckets, regardless of their individual IAM permissions. What should be used?
View Question & Answer ➔
What is the recommended way to grant an EC2 instance permission to call other AWS services (like S3 or DynamoDB)?
View Question & Answer ➔
Which IAM feature allows an architect to verify which permissions in a policy are actually being used by an entity, helping to implement the 'principle of least privilege'?
View Question & Answer ➔
A company wants to allow employees to log into the AWS Management Console using their existing corporate credentials from Microsoft Active Directory. Which service is required?
View Question & Answer ➔
When multiple policies are applied to a user (e.g., an SCP, a Permissions Boundary, and an Identity-based Policy), when is a request finally allowed?
View Question & Answer ➔
What is 'IAM Access Analyzer' used for?
View Question & Answer ➔
An architect needs to create a temporary link that allows an external consultant to download a specific file from S3 without creating an IAM user for them. Which feature is best?
View Question & Answer ➔
Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Amazon EC2 instance type is optimized for this?
View Question & Answer ➔
An application consists of an Auto Scaling group of EC2 instances behind an ALB. During a traffic spike, the instances are reaching 100% CPU, but the Auto Scaling group is not adding more instances quickly enough. Which configuration change would improve responsiveness?
View Question & Answer ➔
A company wants to run a legacy application that requires a fixed physical server for licensing reasons and must be able to withstand the failure of an entire Availability Zone. Which EC2 feature meets the licensing need?
View Question & Answer ➔
Which EC2 Hibernate feature is most valuable for an application with a very long initialization phase?
View Question & Answer ➔
An architect is selecting an EC2 instance for a memory-intensive SAP HANA database. Which instance family should be preferred?
View Question & Answer ➔
A solutions architect needs to cost-effectively run a batch processing workload that can be interrupted at any time and resumed later. Which purchasing option provides the highest savings?
View Question & Answer ➔
What is the purpose of an EC2 'Placement Group' with the 'Spread' strategy?
View Question & Answer ➔
An architect needs to perform an emergency patch on a fleet of EC2 instances without allowing any new connections during the process. How can this be achieved with an ALB?
View Question & Answer ➔
What integrated feature of EC2 allows an architect to run a custom script when an instance is launched for the first time (e.g., to install a web server)?
View Question & Answer ➔
A company wants to ensure they have enough EC2 capacity during a specific holiday weekend for their e-commerce app. Which option guarantees capacity without a long-term commitment to a specific instance family?
View Question & Answer ➔
Your application requires persistent block storage that survives Amazon EC2 instance termination. Which service should you use?
View Question & Answer ➔
You need to create a backup of your Amazon EBS volume for disaster recovery. What feature should you use?
View Question & Answer ➔
A company needs an EBS volume with the highest possible performance for a high-intensity database workload. They require consistent sub-millisecond latency and 50,000 IOPS. Which volume type is best?
View Question & Answer ➔
In an architecture requiring high availability, can a single EBS volume be attached to two EC2 instances in different Availability Zones at the same time?
View Question & Answer ➔
A solutions architect wants to create a backup of an EBS volume that is stored redundantly across multiple Availability Zones. Which feature should be used?
View Question & Answer ➔
What is the primary benefit of the 'gp3' EBS volume type over the older 'gp2' type?
View Question & Answer ➔
A database server is reaching its EBS volume storage limit. Which feature of EBS allows for increasing the size of a volume without any downtime or detaching the volume?
View Question & Answer ➔
Is it possible to encrypt an existing unencrypted EBS volume while it is attached to a running EC2 instance?
View Question & Answer ➔
Which EBS feature should be enabled to significantly speed up the 'first-read' performance of an EBS volume restored from a large snapshot?
View Question & Answer ➔
A big data application performs massive sequential reads and writes. Which EBS volume type provides the best price-per-throughput for this use case?
View Question & Answer ➔

← PreviousPage 8 of 12Next →

aws Practice Questions

Can Amazon CloudFront serve content from a custom origin (like a server on-premises or a different cloud provider)?

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Which AWS service provides automatic protection against common Distributed Denial of Service (DDoS) attacks for all AWS customers at no additional cost?

A large enterprise needs protection against sophisticated Layer 7 DDoS attacks and requires 24/7 access to the AWS Shield Response Team (SRT). Which service should they subscribe to?

What is the 'DDoS Cost Protection' benefit provided by AWS Shield Advanced?

Which AWS resources can be protected by AWS Shield Advanced?

An architect wants to monitor DDoS attacks in real-time. Which tool provides a dashboard for Shield Advanced customers to see ongoing events across the AWS network?

By combining CloudFront, Route 53, and WAF with AWS Shield, you are building a 'Defense in Depth' strategy. What is the primary role of WAF in this stack?

Which AWS service can centrally manage and deploy AWS Shield Advanced and WAF rules across multiple accounts in an AWS Organization?

Is AWS Shield Advanced required to protect against 'UDP reflection' attacks?

To participate in the AWS Shield Advanced 'proactive engagement', what must a customer provide?

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

A solutions architect is designing an encryption strategy for S3. The company wants to manage the keys in AWS but requires that the keys cannot be exported from the AWS KMS service. Which key type should be used?

What is the difference between an 'Symmetric' and 'Asymmetric' KMS key?

To improve security and meet compliance, a company wants to automatically rotate their Customer Managed Keys every year. How is this enabled in KMS?

Which KMS feature allows you to use the same key material for data in multiple AWS regions to support disaster recovery scenarios without re-encrypting data?

What is an 'Encryption Context' in AWS KMS?

A company has a regulatory requirement to store keys in a dedicated single-tenant hardware security module (HSM). Which KMS feature should be used?

How can an architect grant a different AWS account permission to use a KMS key for encrypting data in an S3 bucket?

What is the purpose of 'Grant' in AWS KMS?

What happens if you delete a KMS key?

A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?

A company wants to automate the extraction of data from thousands of scanned medical forms. The forms contain tables and handwriting. Which service should be used for this task?

To improve accuracy for high-stakes document extraction, an architect wants to incorporate human review for a subset of the results from Amazon Textract. Which service provides this integration?

What is the primary technical advantage of using Textract over traditional Optical Character Recognition (OCR) software?

An architect is building a document processing pipeline. When a file is uploaded to S3, a Lambda function should trigger Textract. If the file is a 500-page PDF, which Textract API should be used?

Can Amazon Textract extract data from handwritten notes in different languages?

How does Textract charge for its service?

Which feature of Textract allows an architect to specify exactly which information they are looking for in a document using natural language (e.g., 'What is the total amount due?')?

A specialized Textract feature is available for extracting specific data points from financial documents like invoices and receipts. What is it called?

To extract information from passports and driver licenses, which Textract feature should be used?

You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?

Which AWS service is powered by the same deep learning technologies as Amazon Alexa and is used to build conversational interfaces into any application?

What are the three core components used to define a bot in Amazon Lex?

A company wants to add a voice-based interface to their existing customer service portal. Users should be able to check their account balance by speaking into their browser. Which service should they choose?

In an Amazon Lex bot, how do you perform the actual backend logic (e.g., checking a database for a user's balance)?

Which AWS service is most commonly used together with Amazon Lex to create a complete, AI-powered contact center solution?

Does Amazon Lex support multi-turn conversations (e.g., the bot asking follow-up questions until it has all the details)?

A bot needs to ensure it only accepts a valid city name from the user. What is the best way to implement this in Lex?

How can an architect improve a Lex bot's performance if it frequently fails to understand user requests?

Can you export an Amazon Lex bot to run on an edge device without an internet connection?

Your data science team needs a fully managed environment to build, train, and deploy custom machine learning models using TensorFlow. Which platform provides these end-to-end MLOps capabilities?

A data science team needs a fully managed service to build, train, and deploy machine learning models at scale. Which service is designed for this?

What is 'Amazon SageMaker Ground Truth' used for?

A team wants to quickly start experimenting with machine learning without configuring their own Jupyter notebooks. Which SageMaker feature provides a web-based IDE for ML?

To reduce costs for training large machine learning models, which EC2 instance feature should a solutions architect recommend using with SageMaker?

Which SageMaker feature helps an architect automatically find the best version of a machine learning model by running multiple training jobs with different parameters?

For low-latency real-time predictions, what is the best deployment option in SageMaker?

An architect needs to run a machine learning model on an edge device (like a factory camera) with very limited resources. Which service can optimize the model for specific hardware?

What is the purpose of 'SageMaker Model Monitor'?

Which SageMaker feature allows business analysts to build ML models and make predictions using a visual interface without writing any code?

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

What is the primary function of AWS CodeBuild in a CI/CD pipeline?

Which YAML-formatted file is used to define the build commands and runtime settings for an AWS CodeBuild project?

An architect wants to ensure that a CodeBuild project has access to resources inside a private VPC, such as an RDS database for integration testing. How should the project be configured?

To speed up subsequent builds, which CodeBuild feature allows for the reuse of dependencies (like Maven or npm packages)?

Which AWS security feature allows an architect to grant a CodeBuild project permission to pull an image from a private ECR repository?

Does AWS CodeBuild charge you for the time your build project is idle and not running any builds?

An architect is designing a multi-account CI/CD pipeline using AWS CodePipeline. CodeBuild is used for the build stage. Where are the resulting build artifacts typically stored so they can be accessed by the deployment stage in another account?

Can you use custom Docker images to run your builds in AWS CodeBuild?

What is the purpose of the 'Phases' section in a CodeBuild buildspec file?

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

Which AWS service provides 'Infrastructure as Code' capabilities, allowing you to model and provision AWS resources using JSON or YAML templates?

An architect wants to deploy the same CloudFormation template across hundreds of AWS accounts and multiple regions within an organization. Which feature should be used?

What is the 'Drift Detection' feature in AWS CloudFormation used for?

How can an architect prevent a CloudFormation stack from failing its entire deployment if a single resource fails to create?

What is the primary purpose of 'Nested Stacks' in CloudFormation?

An architect needs to perform an 'update' to a CloudFormation stack. They want to see exactly which resources will be created, modified, or deleted before applying the change. Which feature should be used?

To protect critical resources (like a production database) from accidental deletion during a CloudFormation stack update or deletion, what should the architect use?

In a CloudFormation template, which section is used to define the logical relationships between resources (e.g., ensuring a database exists before a web server starts)?

What is the 'Condition' section in a CloudFormation template typically used for?

Which IAM policy type is used to set the maximum permissions that an identity-based policy can grant to an IAM user or role?

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What AWS IAM feature should you use?

A company uses AWS Organizations and wants to ensure that NO user in any account can delete S3 buckets, regardless of their individual IAM permissions. What should be used?

What is the recommended way to grant an EC2 instance permission to call other AWS services (like S3 or DynamoDB)?

Which IAM feature allows an architect to verify which permissions in a policy are actually being used by an entity, helping to implement the 'principle of least privilege'?

A company wants to allow employees to log into the AWS Management Console using their existing corporate credentials from Microsoft Active Directory. Which service is required?

When multiple policies are applied to a user (e.g., an SCP, a Permissions Boundary, and an Identity-based Policy), when is a request finally allowed?

What is 'IAM Access Analyzer' used for?