Home/Directory/aws

aws Practice Questions

Page 9 of 12 (1149 total questions)

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?
View Question & Answer ➔
A company wants to connect 50 different VPCs across multiple AWS accounts in a single region to a central VPC that contains shared services. The architecture must be scalable and minimize the complexity of manageability. Which service is best?
View Question & Answer ➔
An architect is designing a VPC with a public subnet for web servers and a private subnet for databases. The database instances need to download security updates from the internet without being reachable from the internet. How should this be implemented?
View Question & Answer ➔
What is the primary benefit of using a 'VPC Endpoint' (Gateway or Interface) for services like S3 or DynamoDB?
View Question & Answer ➔
A company has two VPCs in different AWS regions and needs them to communicate using private IP addresses. Which solution provides the lowest latency and uses the AWS backbone network?
View Question & Answer ➔
An architect needs to capture information about the IP traffic going to and from network interfaces in a VPC for security analysis. Which feature should be enabled?
View Question & Answer ➔
Which VPC component is responsible for translating human-friendly domain names (e.g., example.com) to IP addresses within the VPC?
View Question & Answer ➔
What does 'Egress-Only Internet Gateway' provide in a VPC architecture?
View Question & Answer ➔
A company wants to expose a specific application running in their VPC to a customer's VPC without using VPC Peering or a VPN, and without exposing it to the public internet. Which technology should they choose?
View Question & Answer ➔
What happens if a VPC has two subnets with overlapping IP address ranges?
View Question & Answer ➔
You need stateful firewall rules at the Amazon EC2 instance level. What should you configure?
View Question & Answer ➔
Which statement correctly describes the nature of Security Groups in AWS?
View Question & Answer ➔
How do Network ACLs differ from Security Groups in terms of rule evaluation?
View Question & Answer ➔
An architect needs to block a specific IP address that is launching a DDoS attack on the web servers. Where should this block be implemented?
View Question & Answer ➔
A security group is associated with an EC2 instance. The group has an inbound rule allowing port 80 (HTTP) from 0.0.0.0/0. What happens to the outbound traffic from the instance on port 80?
View Question & Answer ➔
In a sophisticated tiered architecture, how should a database security group be configured to be most secure?
View Question & Answer ➔
A solutions architect is troubleshooting a connection issue to an EC2 instance. The security group has an inbound rule allowing SSH on port 22. What else must be checked regarding the security group to ensure the response can reach the client?
View Question & Answer ➔
To allow a fleet of web servers to communicate with a database cluster securely, which source should be used in the database security group's inbound rule?
View Question & Answer ➔
What is the maximum number of security groups that can be associated with a single network interface (ENI) by default?
View Question & Answer ➔
You need to explicitly deny traffic from a specific IP address to your Amazon EC2 instances. Can Security Groups natively handle explicit deny rules?
View Question & Answer ➔
You need stateless firewall rules at the subnet level in your Amazon VPC. What should you configure?
View Question & Answer ➔
What is the 'Default' behavior of a Network ACL created by a user (not the VPC default NACL)?
View Question & Answer ➔
When configuring a Network ACL to allow web traffic (port 80) to a subnet, what else must be configured for the connection to work correctly?
View Question & Answer ➔
Can a Network ACL be associated with multiple subnets in the same VPC?
View Question & Answer ➔
Which security layer acts as a 'second line of defense' at the subnet level in an AWS VPC?
View Question & Answer ➔
When a network packet enters a subnet, which security layer is evaluated first?
View Question & Answer ➔
A network security team wants to prevent all traffic from a specific malicious subnet (192.168.1.0/24) from reaching the entire web subnet. How should this be implemented?
View Question & Answer ➔
A developer reports that their EC2 instance can receive web traffic but cannot download updates from the internet. The security group allows all outbound traffic. What could be the issue in the Network ACL?
View Question & Answer ➔
You need to monitor CPU utilization of your Amazon EC2 instances and set up alarms for automated actions. Which service should you use?
View Question & Answer ➔
Your application running on Amazon EC2 needs a central location for log aggregation and real-time analysis. Which Amazon CloudWatch capability should you use?
View Question & Answer ➔
An architect needs to be alerted if the average CPU utilization of an Auto Scaling group exceeds 70% for more than 5 minutes. Which CloudWatch component should be used?
View Question & Answer ➔
What is the difference between 'Standard' and 'High-Resolution' metrics in Amazon CloudWatch?
View Question & Answer ➔
A company wants to collect system-level metrics (such as RAM usage and disk space) from their EC2 instances that are not available by default in CloudWatch. How can this be achieved?
View Question & Answer ➔
An architect needs to search and analyze log data from thousands of EC2 instances to find the source of an application error. Which tool is most effective?
View Question & Answer ➔
What is 'CloudWatch Container Insights' used for?
View Question & Answer ➔
A solutions architect wants to automatically trigger a Lambda function whenever an EC2 instance state changes to 'terminated'. Which service should be used to route this event?
View Question & Answer ➔
What does 'Anomalies Detection' in CloudWatch do?
View Question & Answer ➔
How long does CloudWatch keep metric data by default?
View Question & Answer ➔
You need to route traffic to Amazon EC2 instances based on URL paths (e.g., '/api' vs '/static'). Which load balancer type should you use?
View Question & Answer ➔
A company has a microservices architecture and wants to route requests to different target groups based on the URL path (e.g., /orders vs /users). Which load balancer type is best suited for this?
View Question & Answer ➔
Can an Application Load Balancer direct traffic to targets in different VPCs?
View Question & Answer ➔
What is 'Sticky Sessions' (Session Affinity) in the context of an ALB?
View Question & Answer ➔
Which ALB feature allows for serverless integration by routing requests to AWS Lambda functions?
View Question & Answer ➔
A company wants to authenticate users via Google or Facebook before they can access the application behind the ALB. How can this be done at the load balancer level?
View Question & Answer ➔
What is the purpose of 'Slow Start' mode in an ALB target group?
View Question & Answer ➔
To improve security, an architect wants the web servers in the private subnet to ONLY accept traffic from the ALB. What should be done?
View Question & Answer ➔
Does an Application Load Balancer support static IP addresses (Elastic IPs)?
View Question & Answer ➔
Which ALB listener rule type allows you to return a custom error page (e.g., 404) directly from the load balancer without forwarding the request to the target?
View Question & Answer ➔
Your high-traffic application requires ultra-low latency and needs to handle millions of requests per second at the network level. Which load balancer is best?
View Question & Answer ➔
An application requires an extremely high-performance load balancer that can handle millions of requests per second with ultra-low latency for TCP traffic. Which type should be chosen?
View Question & Answer ➔
What is a key difference between how NLB and ALB handle IP addresses?
View Question & Answer ➔
Can a Network Load Balancer terminate TLS (SSL) traffic?
View Question & Answer ➔
Which feature of NLB allows the backend server to see the original client IP address and port without using X-Forwarded-For headers?
View Question & Answer ➔
How does an NLB handle a situation where an entire Availability Zone becomes unavailable?
View Question & Answer ➔
Which load balancer should you use if you need to provide a single static IP address for your application's entry point?
View Question & Answer ➔
Is 'Cross-Zone Load Balancing' enabled by default for a Network Load Balancer?
View Question & Answer ➔
Can an NLB distribute traffic to targets outside of the VPC, such as on-premises servers via AWS Direct Connect?
View Question & Answer ➔
Which load balancer feature would you use to provide a static IP address to your clients while ensuring high availability across multiple regions?
View Question & Answer ➔
A company needs to migrate a high-performance compute (HPC) workload to AWS that requires low-latency, high-throughput communication between nodes. Which networking feature should be used?
View Question & Answer ➔
An organization wants to store backups in S3. The backups must be instantly retrievable if needed but should not incur costs for frequent access. Which S3 storage class is best?
View Question & Answer ➔
A company is launching a website that will have a high volume of traffic from users globally. They want to ensure high availability and protect against SQL injection. Which combination of services should be used?
View Question & Answer ➔
Which AWS service would you use to create a 'Private Cloud' connection between your on-premises data center and AWS that does NOT go over the public internet?
View Question & Answer ➔
You are hosting a static website on Amazon S3 and want to use a custom domain name (e.g., www.example.com). Which service should you use to manage your DNS records?
View Question & Answer ➔
A startup wants to quickly build a web application and doesn't want to manage any underlying infrastructure including servers, scaling, or load balancing. Which service is most appropriate?
View Question & Answer ➔
Which AWS service provides a searchable catalog of your data assets and can automatically discover the schema of your data stored in S3?
View Question & Answer ➔
An architect is designing an application that requires highly available MySQL storage that can automatically scale its storage capacity up to 128 TiB. Which service should they choose?
View Question & Answer ➔
Your company needs to orchestrate a complex workflow of multiple Lambda functions and manual approval steps. Which service is designed for this?
View Question & Answer ➔
An application consists of multiple EC2 instances in an Auto Scaling group. The architect wants to ensure that the application remains available even if an entire AWS Region fails. What is the best strategy?
View Question & Answer ➔
Which AWS service is used to create and manage 'Golden Images' of Amazon EC2 instances through an automated pipeline?
View Question & Answer ➔
A company wants to identify which of their thousands of S3 buckets are public or have sensitive data like PII. Which service should they use?
View Question & Answer ➔
An architect is designing a decoupling strategy for an application where messages must be processed exactly once and in the order they are received. Which SQS queue type should be used?
View Question & Answer ➔
Which AWS service provides cost-optimization recommendations by analyzing your historical resource usage and finding idle or underutilized resources?
View Question & Answer ➔
An organization needs to migrate an on-premises NFS file share to AWS. The file share is accessed by multiple Linux instances. Which service provides a managed NFS mount in the cloud?
View Question & Answer ➔
Which AWS tool can be used to visualize and analyze the dependencies and costs of your AWS resources across multiple accounts and regions?
View Question & Answer ➔
Your High Performance Computing (HPC) workload requires low network latency between Amazon EC2 instances. What feature should you use?
View Question & Answer ➔
Your company has a regulatory requirement to keep all infrastructure changes recorded in a log for at least 7 years. Which service records every API call made in your AWS account?
View Question & Answer ➔
An architect is designing an application that requires a database with flexible schema and the ability to handle millisecond response times at massive scale. Which service is the best fit?
View Question & Answer ➔
A team wants to run their Docker-based application on AWS without managing any EC2 instances or clusters. Which 'serverless compute' service for containers should they use?
View Question & Answer ➔
You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?
View Question & Answer ➔
A large enterprise is migrating to AWS and wants to implement a centralized governance model across 100+ AWS accounts. They need to enforce a policy that prevents any account from disabling CloudTrail or deleting S3 buckets that store audit logs. Which solution is most appropriate?
View Question & Answer ➔
Which AWS service provides an automated way to detect that an EC2 instance in a public subnet has been compromised and is communicating with an known malicious command-and-control server?
View Question & Answer ➔
An enterprise wants to enforce a rule that all EC2 instances must be launched with a specific set of tags for cost allocation. How can they implement this 'Tagging Enforcement' to prevent non-compliant resources from even being created?
View Question & Answer ➔
An enterprise wants to migrate its on-premises Microsoft Active Directory to AWS. They want a managed solution that integrates with Amazon RDS for SQL Server and allows them to use their existing AD tools. Which service should they choose?
View Question & Answer ➔
To improve the security of your AWS environment, you want to identify any IAM roles that have not been used in the last 90 days across all your accounts. Which AWS feature provides this information?
View Question & Answer ➔
An enterprise wants to enable 'Workload Identity' for their Amazon EKS clusters so that pods can assume specific IAM roles without needing to manage static AWS credentials inside the cluster. Which feature provides this?
View Question & Answer ➔
Which AWS service provides a unified view of security alerts and compliance status across multiple AWS accounts and security services like GuardDuty, Inspector, and IAM Access Analyzer?
View Question & Answer ➔
A financial firm needs to ensure that their database is compliant with data residency requirements specifying that data must never leave a specific AWS region. How can they enforce this at the organization level?
View Question & Answer ➔
An enterprise wants to ensure that all their AWS accounts follow a strict security baseline. They want to automate the setup of new accounts with pre-configured VPCs, IAM roles, and logging. Which AWS service is specifically designed to orchestrate this multi-account environment setup?
View Question & Answer ➔
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
View Question & Answer ➔
You need to grant developers read-only access to Amazon S3 buckets without giving them access to other services. What's the best approach using AWS IAM?
View Question & Answer ➔
An organization is migrating a 2 PB data archive from an on-premises Hadoop cluster to Amazon S3. They have a 1 Gbps internet connection and a 100 Mbps direct link. Bandwidth is limited and they need the migration to finish within 4 weeks. What is the most feasible way to migrate ?
View Question & Answer ➔
A fintech startup wants to ensure that no developer can accidentally grant public access to S3 buckets containing sensitive customer data. They want an automated way to detect AND automatically remediate this at the organization level. How should they implement this?
View Question & Answer ➔
Your application uses Amazon S3 to store millions of small objects. You find that the costs for 'GET' and 'PUT' requests are higher than the storage costs. What is the most effective way to reduce the overall request costs for these small objects?
View Question & Answer ➔
A large biotech firm needs to move 500 TB of genomic data to S3. They want to ensure they don't exceed their 1 Gbps Direct Connect limit during business hours but want the transfer to be as fast as possible at night. Which tool integrates this scheduling and bandwidth control natively?
View Question & Answer ➔
A team of data analysts is using Amazon Athena to query data in S3. You notice that query costs are rising rapidly because they are performing 'full scans' of large CSV files. What is the most effective architectural change to reduce query costs and improve performance?
View Question & Answer ➔
An organization wants to optimize their S3 storage costs for a bucket with millions of objects where the access patterns are unknown and constantly changing. They want a solution that automatically moves data between frequent and infrequent access tiers without any performance impact or operational overhead. Which S3 storage class is best?
View Question & Answer ➔
A financial services client requires their data in S3 to be redundant across two different geographical regions. They also need to ensure that any object deleted in the source bucket is NOT deleted in the destination bucket to protect against accidental mass deletion. How should they configure S3 Replication?
View Question & Answer ➔
A manufacturing company needs to store petabytes of sensor data. The data is rarely accessed but must be available within minutes if a request is made. Which S3 storage class provides the best balance of cost and retrieval speed for this use case?
View Question & Answer ➔
A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?
View Question & Answer ➔
You are designing a disaster recovery solution for a mission-critical SQL Server database running on Amazon RDS. The business requirements specify a Recovery Time Objective (RTO) of 30 minutes and a Recovery Point Objective (RPO) of 5 minutes. Which RDS feature should you use?
View Question & Answer ➔

← PreviousPage 9 of 12Next →

aws Practice Questions

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

A company wants to connect 50 different VPCs across multiple AWS accounts in a single region to a central VPC that contains shared services. The architecture must be scalable and minimize the complexity of manageability. Which service is best?

An architect is designing a VPC with a public subnet for web servers and a private subnet for databases. The database instances need to download security updates from the internet without being reachable from the internet. How should this be implemented?

What is the primary benefit of using a 'VPC Endpoint' (Gateway or Interface) for services like S3 or DynamoDB?

A company has two VPCs in different AWS regions and needs them to communicate using private IP addresses. Which solution provides the lowest latency and uses the AWS backbone network?

An architect needs to capture information about the IP traffic going to and from network interfaces in a VPC for security analysis. Which feature should be enabled?

Which VPC component is responsible for translating human-friendly domain names (e.g., example.com) to IP addresses within the VPC?

What does 'Egress-Only Internet Gateway' provide in a VPC architecture?

A company wants to expose a specific application running in their VPC to a customer's VPC without using VPC Peering or a VPN, and without exposing it to the public internet. Which technology should they choose?

What happens if a VPC has two subnets with overlapping IP address ranges?

You need stateful firewall rules at the Amazon EC2 instance level. What should you configure?

Which statement correctly describes the nature of Security Groups in AWS?

How do Network ACLs differ from Security Groups in terms of rule evaluation?

An architect needs to block a specific IP address that is launching a DDoS attack on the web servers. Where should this block be implemented?

A security group is associated with an EC2 instance. The group has an inbound rule allowing port 80 (HTTP) from 0.0.0.0/0. What happens to the outbound traffic from the instance on port 80?

In a sophisticated tiered architecture, how should a database security group be configured to be most secure?

A solutions architect is troubleshooting a connection issue to an EC2 instance. The security group has an inbound rule allowing SSH on port 22. What else must be checked regarding the security group to ensure the response can reach the client?

To allow a fleet of web servers to communicate with a database cluster securely, which source should be used in the database security group's inbound rule?

What is the maximum number of security groups that can be associated with a single network interface (ENI) by default?

You need to explicitly deny traffic from a specific IP address to your Amazon EC2 instances. Can Security Groups natively handle explicit deny rules?

You need stateless firewall rules at the subnet level in your Amazon VPC. What should you configure?

What is the 'Default' behavior of a Network ACL created by a user (not the VPC default NACL)?

When configuring a Network ACL to allow web traffic (port 80) to a subnet, what else must be configured for the connection to work correctly?

Can a Network ACL be associated with multiple subnets in the same VPC?

Which security layer acts as a 'second line of defense' at the subnet level in an AWS VPC?

When a network packet enters a subnet, which security layer is evaluated first?

A network security team wants to prevent all traffic from a specific malicious subnet (192.168.1.0/24) from reaching the entire web subnet. How should this be implemented?

A developer reports that their EC2 instance can receive web traffic but cannot download updates from the internet. The security group allows all outbound traffic. What could be the issue in the Network ACL?

You need to monitor CPU utilization of your Amazon EC2 instances and set up alarms for automated actions. Which service should you use?

Your application running on Amazon EC2 needs a central location for log aggregation and real-time analysis. Which Amazon CloudWatch capability should you use?

An architect needs to be alerted if the average CPU utilization of an Auto Scaling group exceeds 70% for more than 5 minutes. Which CloudWatch component should be used?

What is the difference between 'Standard' and 'High-Resolution' metrics in Amazon CloudWatch?

A company wants to collect system-level metrics (such as RAM usage and disk space) from their EC2 instances that are not available by default in CloudWatch. How can this be achieved?

An architect needs to search and analyze log data from thousands of EC2 instances to find the source of an application error. Which tool is most effective?

What is 'CloudWatch Container Insights' used for?

A solutions architect wants to automatically trigger a Lambda function whenever an EC2 instance state changes to 'terminated'. Which service should be used to route this event?

What does 'Anomalies Detection' in CloudWatch do?

How long does CloudWatch keep metric data by default?

You need to route traffic to Amazon EC2 instances based on URL paths (e.g., '/api' vs '/static'). Which load balancer type should you use?

A company has a microservices architecture and wants to route requests to different target groups based on the URL path (e.g., /orders vs /users). Which load balancer type is best suited for this?

Can an Application Load Balancer direct traffic to targets in different VPCs?

What is 'Sticky Sessions' (Session Affinity) in the context of an ALB?

Which ALB feature allows for serverless integration by routing requests to AWS Lambda functions?

A company wants to authenticate users via Google or Facebook before they can access the application behind the ALB. How can this be done at the load balancer level?

What is the purpose of 'Slow Start' mode in an ALB target group?

To improve security, an architect wants the web servers in the private subnet to ONLY accept traffic from the ALB. What should be done?

Does an Application Load Balancer support static IP addresses (Elastic IPs)?

Which ALB listener rule type allows you to return a custom error page (e.g., 404) directly from the load balancer without forwarding the request to the target?

Your high-traffic application requires ultra-low latency and needs to handle millions of requests per second at the network level. Which load balancer is best?

An application requires an extremely high-performance load balancer that can handle millions of requests per second with ultra-low latency for TCP traffic. Which type should be chosen?

What is a key difference between how NLB and ALB handle IP addresses?

Can a Network Load Balancer terminate TLS (SSL) traffic?

Which feature of NLB allows the backend server to see the original client IP address and port without using X-Forwarded-For headers?

How does an NLB handle a situation where an entire Availability Zone becomes unavailable?

Which load balancer should you use if you need to provide a single static IP address for your application's entry point?

Is 'Cross-Zone Load Balancing' enabled by default for a Network Load Balancer?

Can an NLB distribute traffic to targets outside of the VPC, such as on-premises servers via AWS Direct Connect?

Which load balancer feature would you use to provide a static IP address to your clients while ensuring high availability across multiple regions?

A company needs to migrate a high-performance compute (HPC) workload to AWS that requires low-latency, high-throughput communication between nodes. Which networking feature should be used?

An organization wants to store backups in S3. The backups must be instantly retrievable if needed but should not incur costs for frequent access. Which S3 storage class is best?

A company is launching a website that will have a high volume of traffic from users globally. They want to ensure high availability and protect against SQL injection. Which combination of services should be used?

Which AWS service would you use to create a 'Private Cloud' connection between your on-premises data center and AWS that does NOT go over the public internet?

You are hosting a static website on Amazon S3 and want to use a custom domain name (e.g., www.example.com). Which service should you use to manage your DNS records?

A startup wants to quickly build a web application and doesn't want to manage any underlying infrastructure including servers, scaling, or load balancing. Which service is most appropriate?

Which AWS service provides a searchable catalog of your data assets and can automatically discover the schema of your data stored in S3?

An architect is designing an application that requires highly available MySQL storage that can automatically scale its storage capacity up to 128 TiB. Which service should they choose?

Your company needs to orchestrate a complex workflow of multiple Lambda functions and manual approval steps. Which service is designed for this?

An application consists of multiple EC2 instances in an Auto Scaling group. The architect wants to ensure that the application remains available even if an entire AWS Region fails. What is the best strategy?

Which AWS service is used to create and manage 'Golden Images' of Amazon EC2 instances through an automated pipeline?

A company wants to identify which of their thousands of S3 buckets are public or have sensitive data like PII. Which service should they use?

An architect is designing a decoupling strategy for an application where messages must be processed exactly once and in the order they are received. Which SQS queue type should be used?

Which AWS service provides cost-optimization recommendations by analyzing your historical resource usage and finding idle or underutilized resources?

An organization needs to migrate an on-premises NFS file share to AWS. The file share is accessed by multiple Linux instances. Which service provides a managed NFS mount in the cloud?

Which AWS tool can be used to visualize and analyze the dependencies and costs of your AWS resources across multiple accounts and regions?

Your High Performance Computing (HPC) workload requires low network latency between Amazon EC2 instances. What feature should you use?

Your company has a regulatory requirement to keep all infrastructure changes recorded in a log for at least 7 years. Which service records every API call made in your AWS account?

An architect is designing an application that requires a database with flexible schema and the ability to handle millisecond response times at massive scale. Which service is the best fit?

A team wants to run their Docker-based application on AWS without managing any EC2 instances or clusters. Which 'serverless compute' service for containers should they use?

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?