Quiz - AWS - LearnKartS

Time is up!!

Basics

1 / 5

Which AWS service helps you create apps & allowing your applications to work even when the devices are offline?

a. Amazon cognito

b. Amazon lambda

c. Amazon Appsync

d. Amazon polly

Explanation: Amazon Cognito enables users to create apps and work even when the devices are not online. Users can synchronize data across devices so that the app experience remains consistent inspite of the device used.

2 / 5

Which service helps you to monitor your resources and applications?

a. AWS CloudWatch

b. AWS CloudMonitor

c. AWS CloudTrail

d. AWS Config

Amazon CloudWatch is a monitoring service for AWS cloud resources and the applications running on AWS

3 / 5

Which is NOT a Cloud Computing Model?

a. IaaS [Infrastructure as a service]

b. NaaS [Networking as a service]

c. PaaS [Platform as a service]

d. SaaS [Software as a service]

Networking services is a part of the infrastructure as a service and not a separate model that we have.

4 / 5

Which of the following is considered as an advantage of cloud computing where you can scale up and down in few minutes?

a. Scale quickly

b. Go global in minutes

c. Stop guessing capacity

d. Increase speed and agility

Explanation: Stop guessing capacity: Eliminate guessing on your infrastructure capacity needs. When you make a capacity decision prior to deploying an application, you often end up either sitting on expensive idle resources or dealing with limited capacity. With cloud computing, these problems go away.

5 / 5

Which AWS service lets you write, run, and debug your code with just a browser?

a. Lightsail

b. AWS Cloud9

c. AWS management console

d. AWS lambda

Explanation: AWS Cloud9 is a cloud-based integrated development atmosphere (IDE) that allows you to write, run, and right your code with simply a browser. It includes a code editor, debugger, and terminal.

Your score is

The average score is 52%

Exit

Time is up!!

Elastic Compute Cloud (EC2)

1 / 5

Emmy is a solutions architect and is responsible for architect and design of highly available application. After the initial phase, he discovers that application is facing issues until security group is updated with port 443. How much time will the application take to work properly after adding port 443 to security group?

a. It will take 60 seconds for rules to apply to all AZ’s in a region

b. It will take 2-3 minutes for rules to propagate

c. Immediately after reboot of instance belonging to that security group

d. Changes take place immediately and application should be able to respond to 443 request

Explanation: Security group filter only destination ports. Whenever a rule is added or removed, it will be applied to all instances in security group.

2 / 5

Your company is using on-premises server to process the large amount of data used in analytics purpose. They are planning to migrate the servers to AWS EC2 instances. You are working as an AWS architect and after evaluating the compute power you came to the decision to use 40 C4 EC2 instance types to manage the large amount of data. You are required to provide the best solution for this critical project where any failure will result in huge financial loss. Among the following options select the best way to limit the impact of any hardware failure in this scenario.

a. Deploy EC2 instances in partitioned placement group

b. Deploy EC2 instances without any placement group

c. Deploy EC2 instances in cluster placement group

d. Deploy EC2 instances in Spread placement group

When you deploy EC2 instances in partitioned placement group then each logical partition has its own set of racks. If a rack or hardware fails, then it may affect the multiple instances deployed in that particular rack. So, if you replicate the EC2 instances in other partitions as well then, your data will be safe. Deploying EC2 instances in the partitioned placement group are very beneficial for big data applications that required High availability and High performance.

3 / 5

Which of the following falls under AWS compute services?

a. AMI

b. Amazon EBS

c. Amazon EC2

d. Virtual Machine

Amazon EC2 is AWS primary web service which provides resizable compute capacity in the AWS cloud. It allows you to acquire compute through launching of virtual servers called Instances.

4 / 5

Your application is running on AWS, you are managing an architecture that supports AWS EC2 auto scaling to handle the load of the application. Could you please select the statement which is NOT true about AWS EC2 auto scaling?

a. When you delete auto scaling policies, CloudWatch alarm associates to it also gets deleted automatically

b. AWS EC2 auto scaling automatically add and remove instances according to the load

c. Launch configuration is required for using AWS EC2 auto scaling

d. You cannot have multiple target scaling policies for an auto scaling group

You can have multiple target scaling policies for an auto scaling group, provided that each of them uses a different metric.

5 / 5

Your development team is looking for server to test the application enhanced features. The test cases which developers are executing are reproducible and not time critical. Development team approached you to setup a server to execute the task. You need to provide the solution which is cost effective and also serve the requirement. What will you do?

a. Create dedicated host machine

b. Create reserved instance

c. Create spot instance

d. Create on-demand instance

Spot instances are used for workloads that are not time critical and are tolerant of interruption, Spot Instances offer the greatest discount.

You can specify the price they are willing to pay for a certain instance type, when the bid price is above the current Spot price, you will get the requested instances.

Your score is

The average score is 22%

Exit

Time is up!!

Identity and Access Management (IAM)

1 / 5

You are working as an AWS architect in your organization, you need to setup team of 8 developers.

You need to provide AWS console access only to consultants. Which credentials you will share with the consultants to access?

a. User ID and password

b. Access key ID and secret access key

c. Access key ID and password

d. User ID and secret access key

User ID and password are required to have AWS Console Access.

Access key ID and secret access key is required to have AWS programmatic access.

2 / 5

You are working as an AWS Architect in a product-based company. Your company is planning to use API gateway service to manage APIs for users and developers.

You have been assigned a task to segregate access rights for users and developers. Select the correct option to accomplish this task?

a. Use AWS Access keys

b. Use IAM permissions

c. Use AWS Cognito service

d. Use AWS KMS service

You must grant API developer IAM permissions to developers for creating, deploying, and managing APIs via API gateway and API caller IAM permission to users for calling a deployed APIs or to refresh the API caching.

3 / 5

Your company is planning to add a serverless component to the application hosted on AWS. Company is using lambda and SQS service. Once Lambda is triggered, a message will be send to SQS queue. How can you achieve this functionality?

a. Set IAM role with required permissions

b. Write lambda code in python

c. Set IAM group with required permissions

d. Select FIFO SQS queue

Create an IAM role for lambda to access SQS queue. So once lambda is triggered a message will be send to SQS queue.

4 / 5

Your company is planning to migrate its on-premises MySQL database to AWS. You will use AWS Database migration service (DMS) to migrate the database to AWS RDS.

Select the following options that will assign permission that determines who is allowed to manage AWS DMS resources?

a. AWS IAM policy

b. NACLs in VPC

c. AWS KMS

d. TLS connections between AWS DMS and local datacenter

IAM policies are made up of documents called policy documents. These documents are in JSON format, and they give permissions as to what a user/group/role can do.

5 / 5

Your python-based application is hosted on AWS. Your application server resides on EC2 instance which needs to connect to DynamoDB DB to save the application data. How can you create the secure connection between these services?

a. Use KMS keys

b. Use IAM Role

c. Use IAM access keys

d. Use IAM access groups

You can create IAM roles and then assign them to AWS resource. Role is a way to communicate between two different AWS services.

Your score is

The average score is 26%

Exit

Time is up!!

Simple Storage Service (S3)

1 / 5

You have stored files in S3 with CloudFront origin. You need to restrict the user access so that user cannot access the files directly from S3 bucket.

Files can only be accessed through CloudFront URL. How can you configure this?

a. Configure CloudFront web distribution to request viewers to use HTTPS to access S3 objects

b. Create Origin access identity (OAI) and associate it with CloudFront distribution

c. Using signed URL's

d. Using signed cookies

Origin access identity (OAI)is used with CloudFront distribution to restrict the user access so that user cannot access the files directly from S3 bucket.

2 / 5

You are storing your application files on Amazon S3 bucket. You need to make sure your S3 files/objects are encrypted in transition for data security.

Select the methods to encrypt S3 objects in transition?

a. Using SSL/TLS certificates

b. Using client-side encryption method

c. Using customer provided keys

d. Using AWS Key management service

Encryption in Transit is achieved by SSL/TLS - it's https secured encryption. e.g.-> https://awsamazon.com, data in transit to amazon s3 is secured.

3 / 5

Your call center support application is hosted on AWS which produces audio recordings. These recording will be accessed only once or twice in a month for auditing purpose but at the same time this data is very critical for company and needs high availability. Which storage option you will select from the following?

a. AWS S3 Glacier

b. AWS S3 standard IA

c. AWS S3 one zone IA

d. AWS S3 standard

AWS S3 standard IA is S3 Infrequently accessed storage for data that is accessed less frequently but required rapid when needed. Data in AWS S3 IA is stored in multiple facilities across locations, and you can retrieve the data within seconds.

4 / 5

Your organization has migrated E-commerce application on AWS 2 months back. Application is producing large size log files for each day.

Application development team has set up a script which purges the 10 days logs from application server and stores in S3 standard bucket.

Organization seeks spike in logs storage cost. Organization is looking for cost effective archival storage which store all logs and can be retrieved within few minutes whenever required. Which option is best suited in this scenario?

a. Standard Glacier

b. Bulk Glacier

c. Expedited Glacier

d. AWS S3 one zone IA

Expedited Glacier will be best suited for this scenario as this is one of the types of AWS Glacier which is data archive service.

It is very cheap in costing and restores data within few minutes.

5 / 5

Your organization's big data application hosted on AWS uses large data sets which requires cost effective external storage in AWS. These datasets are reproducible but needs to be kept for testing record and are used once in two months. As a solution architect which solution you will provide?

a. AWS S3 IA

b. AWS S3 standard

c. AWS S3 Glacier

d. AWS S3 one zone IA

AWS S3 one zone Infrequently accessed is a lower cost storage option for infrequently accessed data but do not require the multiple availability zone data resilience.

You can store data inside AWS S3 one zone IA which can be easily re-creatable.

Your score is

The average score is 20%

Exit

Time is up!!

Database

1 / 5

Your organization application is hosted on AWS which allows users to upload the images to a S3 bucket. These images are picked by EC2 instance for
processing and placed in to another S3 bucket. You need a storage for storing the images metadata. Among the following options what can be the best
suited data store in this scenario?

a. AWS SQS

b. AWS Glacier

c. AWS Redshift

d. AWS DynamoDB

DynamoDB is fast and flexible NOSQL database service for all application needs consistency, single-digit millisecond latency at any scale. It is best, lightweight
ad durable storage option for metadata. It is fully managed database and supports both JSON documents and key-value data models. It is great fit for mobile, web,
gaming, IOT and many other applications. It is stored on SSD storage hence fast. DynamoDB is spread across 3 geographical distinct data centers.

2 / 5

Your company is planning to use Amazon RDS service to host application database. This will be a production database and is required to have high availability. Select the best solution to achieve this requirement?

a. Use Multi-AZ for the RDS instance to ensure that a secondary database is created in another region

b. Use Read Replica feature to create another instance of the DB in another Availability Zone

c. Use Read Replica feature to create another instance of the DB in another region

d. Use Multi-AZ for the RDS instance to ensure that a secondary database is created in another Availability Zone

Amazon RDS Multi AZ deployments provide enhanced availability and durability for database instances making them best fit for production database workloads.
Multi AZ feature allows high availability only across Availability Zones but not in regions.

3 / 5

You are working as a solution architect in Ecommerce company. Your database is residing on single instance of MySQL RDS.
After few days your database server started facing performance issue. Suggest a solution to rectify this problem?

a. Use Elasticache service

b. Use CloudFront with database

c. Enables Multi-AZ for database.

d. User load balancer with database

Elasticache is a web service which makes easy to deploy, operate and scale an in-memory cache in a cloud.
It improves the performance of web application by allowing you to retrieve information from fast, managed, in-memory cache.

4 / 5

Your company is using redshift cluster to store their data warehouse. There is a requirement from internal IT security team to encrypt the data in
REDSHIFT database. Select the correct ways to achieve this task? (SELECT 2)

a. use SSL/TLS for data encryption

b. encrypt the EBS volume

c. use KMS customer default master key

d. use HSM to manage top level encryption keys

Amazon REDSHIFT uses a hierarchy of encryption keys to encrypt the database. You must either use AWS KMS (key management service) or HSM (Hardware security
model) to manage the top-level encryption keys in this hierarchy.

5 / 5

Your organization is hosting an application in AWS. Application contains EC2 instances hosting web servers and AWS RDS as database server.
You noticed that load on AWS RDS increased and due to which response time of application increased. How you can improve the application
database response time? (Choose 2)

a. Use Auto Scaling

b. Use ElastiCache in front of your Amazon RDS

c. Use SQS to cache the database queries

d. Create Amazon DB Read Replicas

Amazon RDS Read Replicas provide enhanced performance and durability for database (DB) instances.
This replication feature makes it easy to elastically scale out beyond the capacity constraints of a single DB Instance for read-heavy database workloads.
Amazon ElastiCache is a web service that makes it easy to deploy, operate, and scale an in-memory data store or cache in the cloud.

Your score is

The average score is 80%

Exit

Time is up!!

SQS, SNS, Kinesis, ELB, EBS, EFS

1 / 5

You are using AWS SNS service to send the notifications to your subscribers.
Among the give options which of the following is NOT an item of message attribute in AWS SNS?

a. name

b. message ID

c. Type

d. value

Name, type, and value are message attributes of AWS SNS, these items must not be null. In addition, the message body also should not be empty/null. All parts of message attribute, including name, type and value are included in the message size restriction which is 256kb.

2 / 5

Your organization is planning to set up online gaming application that will be streaming the data every second. You need to choose an AWS service which can collect the data and analyse it on real time. Which AWS service you will select to complete this task?

a. AWS SQS

b. AWS Kinesis

c. AWS Lambda

d. AWS SNS

AWS Kinesis is an AWS service that collects, process and analyse real-time streaming data so you can get timely insights and reach quickly to new information. Data will be analysed in real time and processed without any delay.

3 / 5

Select the statement which is incorrect with respect to EBS volume encryption?

a. Encrypts all snapshots created from the volume

b. Encrypts data at rest inside the volume

c. Encrypts all data moving between the volume and the instance

d. Encrypted EBS volumes are supported on all instance types

Amazon EBS encryption offers a simple encryption solution for your EBS volumes without the need to build, maintain and secure your own key management infrastructure. When you create an encrypted EBS volume and attach it to a supported instance type, the following types of data are encrypted:
• Data at rest inside the volume
• All data moving between the volume and the instance
• All snapshots created from the volume
• All volumes created from those snapshots
Encryption operations occur on the servers that host EC2 instances, ensuring the security of both data at rest and data in transit between an instance and its attached EBS storage.

4 / 5

You are working on IOT application which is hosted on AWS. Data collected from IOT sensors are sent to Kinesis stream with default settings.
Every alternate day, data from stream is sent to S3 for processing. It was noticed that S3 is not receiving all the data sent from Kinesis stream.
You are working on root cause, what can be the reason for this?

a. Default retention period for kinesis stream is 24 hours

b. IOT sensors stopped working for some time

c. IOT data cannot be handled by Kinesis streams

d. S3 cannot store data for more than one day

The time from when a record is added to when it is no longer accessible is called the retention period. A Kinesis data stream stores records from 24 hours by default, up to 168 hours. Modify the retention period to 48 hours to fix the issue.

5 / 5

Can we use AWS SNS notification to trigger lambda function?

a. True

b. False

Yes, we can select AWS SNS notification from lambda triggers list to invoke lambda functions with AWS SNS notification service.

Your score is

The average score is 0%

Exit