Amazon Web Services (AWS) Quiz | Practice Test / Quiz / MCQs

1. You created a Windows EC2 instance with a public IP address and installed SQL Server. When attempting to connect to SQL Server from SQL Server Enterprise Manager on your local computer, the Windows EC2 instance is unable to establish a connection to the server. What is the first thing you should check?

Verify that you are connecting to the instance using a user that is not sa.Check the policies within Windows Firewall.Check the routing tables for the VPC.Verify that the assigned security groups allow TCP port 1433 traffic from your current IP address.

2. What is the best practice for creating a highly available PostgreSQL database in RDS that can sustain the loss of a single AWS region?

Create Read Replicas in other AWS regions. Ensure read operations against the database occur on an available Read Replica, and send write operations to another region if you need to promote a Read Replica to a standalone database if the master is down.PostgreSQL cannot be replicated across regions. Restore the database backups from an S3 bucket and repoint your database connections to the new instance.Verify that your instance is configured for Multi-AZ support. Database changes will be automatically synced to another region in the event of a failure and RDS will automatically select a new master until the regional failure is resolved.Create Read Replicas in other AWS regions. You can designate a new master database from any of the read replicas until the regional failure is resolved.

4. You are creating a DynamoDB table to store all movies that have been released since 1938. Your application will allow users to search by movie title and see the details of that film. Given the sample below showing the movie data that you will be importing, what is the best set of keys to apply to this table?
'''json
{
'title': 'The Avengers',
'year': 2012,
'cast': ['Mark Ruffalo', 'Robert Downey, Jr.'],
'genres': ['Action']
}

The primary key should be a partition key of the title field.The primary key should be the title field and the partition key should be the genres field.The primary key should be created as a completely unique value, such a sequential numerical list of movie IDs. The partition key should be title field for fast lookup.The primary key should be a composite key comprised of a partition key on the title field and a sort key on the year field.

5. When creating a new RDS instance, what does the Multi-AZ option do?

creates a highly available database cluster that will host your database cluster in at least two regionsreplicates backups of your database to S3 and makes them available across regions to prevent against any data losscreates another database instance in another region and keeps a hot standby active to failover to during regional failurescreates a second passive database instance within the same region that will become the primary database during a failover

6. Application Load Balancer can route traffic to several different target groups based upon several conditions. Which of these use cases is not supported by Application Load Balancer?

A path of /signup\* can be routed to a target group for a Lambda function that processes new user registrations.An Http POST query string of ? action=createuser can be routed to a target group for an ECS service.Source IPs matching 192.0.2.0/24 on a listener port of 1433 can be routed to a target group for an RDS for SQL Server cluster.A request with a HTTP header of X-Requested-With: staging can be routed to a target group for an ECS service in your staging environment.

7. For your AWS root account, you have generated a random password of the maximum allowed length and included special characters. Which additional steps should you take to secure your AWS root account?

Create IAM accounts for your administrators and attach the AdministratorAccess policy to their accounts. Disable the root account in the user settings.Store your randomly generated password in your organizational secrets database using a service such as 1Password or LastPass, and only grant access to this secret to the DevOps team.Create an IAM role for the account administrator with the highest privileges and do not use the root account in day-today operations. Enable two-factor authentication on the root accountCreate an AM role for the account administrator with the highest privileges. Do not store the root password, but when the root account is needed reset the password on the root account via email confirmation and repeat this procedure.

8. When using an ECS cluster with EC2 instances, what maintenance tasks should you perform on the EC2s?

ECS clusters do not use EC2 instances.Refresh the cluster with instances built from the latest ECS AMI.The instances created by ECS do not have patches that need to be applied; however, you should make sure your containers contain any important security updates.You should not directly manipulate the EC2 instances created by ECS. AWS will automatically update these instances.

9. the outbound rules of a security group only allow traffic going to 0.0.0.0/0 on TCP Port 22 (SSH) and TCP port 3306 (MySQL). Review the inbound rules listed in the image below. What is the most important issue to fix with this security group configuration, for an Ubuntu EC2 instance acting as a web server?
(https://user-images.githubusercontent.com/8637045/112515574-c077e780-8d6c-11eb-96a6-11f27a0547cf.png' >

The incoming SSH port should not be open to the public. Limit SSH to a single IP address or IP range of controlled addressed, or use a VPN to access the VPC for this server.The outbound rules do not allow for HTTP traffic to leave the instance, so inbound HTTP requests will fail because the clients will never get HTTP responses.The all incoming TCP ports are exposed, which overrides the HTTP and SSH rules and exposes all TCP ports to the public internet.The outbound rules block UDP port 53, so the server will not be able to resolve any DNS lookups.

10. What does a VPC do?

creates a secure tunnel between two networkscreates a cloud-based network to interconnect a set of virtual servers and appliancescreates a private network that is completely isolated from the public internet.creates a shared storage plane for application data to be shared across multiple instances.

11. You have a VPC that has a public and private subnet. There is a NAT gateway in the public subnet that allows instances in the private subnet to access the internet without having public exposure outside of the VPC. What should the routing tables be for the private subnet?

C'''Destination 1: 10.0.0.0/24, Target 1: subnet-1948ba2;Destination 2: 0.0.0.0/0, Target 2: nat-09b4832D'''Destination 1: 10.0.0.0/16, Target 1: vpc-12bd09ac2;Destination 2: 0.0.0.0/0, Target 2: igw-b2ff47d6'''A'''Destination 1: 10.0.0.0/16, Target 1: local;Destination 2: 0.0.0.0/0, Target 2: nat-09b4832B'''Destination 1: 10.0.0.0/24, Target 1: local;Destination 2: 0.0.0.0/0, Target 2: igw-b2ff47d6

12. Your application performance management (APM) system can read the status of your CloudWatch monitors and perform scripted actions. When the CloudWatch metric StatusCheckFailed enters a failed state (a value of 1), you would like your APM to automatically repair the instance. Which script do you use?

B'''aws ec2 reboot-instances --instance-ids i-0b263919b6498b123A'''aws ec2 stop-instances --instance-ids i-0b263919b6498b123aws ec2 start-instances --instance-ids i-0b263919b6498b123C'''aws ec2 reboot-instances --instance-ids i-0b263919b6498b123wait 30aws ec2 start-instance --instance-ids i-0b263919b6498b123D'''aws ec2 reboot-instances --instance-ids i-0b263919b6498b123aws ec2 start-instances --instance-ids i-0b263919b6498b123'''

14. What happens to a SQL Server RDS instance if the databases increase in size and go over the allocated space?

RDS will automatically increase the allocated space by 10% and will send the AWS root account an email with resolution steps. Allocate more space to avoid overage charges.RDS will automatically increase the allocated space by 5% and will continue to allocate new space up to 50% of the orginal allocated space. When storage space has increase 50%, RDS will automatically stop the instance to preserve data integrity.SQL Server will close all existing connections to the databases and attempt to shrink its log files to reclaim storage space.The database instance will report a STORAGE_FULL status and become inaccessible if the instance does not have enough remaining storage to operate. Allocate more space to the instance.

15. Your database is an RDS instance running SQL Server with Multi-AZ replication and you have several older .NET console utilities that perform database operations every 15 seconds. When the cluster has to switch the primary database server to the secondary AZ, the .NET utilities start to report connection failures to the database although other applications are able to access the database. How do you correct this problem?

The server running the .NET utilities is caching the DNS lookup on the database cluster address. Flush the DNS cache of the server and force the C# utilities to open new connections to the database.A.NET application will retain the IP address of a connection string until the host machine is rebooted.Use the RDS console to force a reboot of the database instance so that the primary server becomes the master server again.The NET utilities need to change the SQL Server endpoint in the connection strings to read from the secondary database server using a try/catch.

16. To comply with auditing requirements of some compliance standards, which AWS tool can be enabled to maintain an audit log of access and changes to your AWS infrastructure?

GuardDutyAWS Audit and Compliance ToolCloudWatchCloudTrail

17. You are going to host an application that uses a MySQL database. Which database should you select if you don't want to manage scaling or database administration tasks?

RedshiftLaunch an AMI image from the marketplace containing a preconfigured MySQL server.AuroraRDS for MySQL

18. What is wrong with the third incoming security group rule, which allows all traffic from sg-269afc5e to go to an Ubuntu EC2 instance configured as a web server?

There is nothing wrong with this security group rule. Assuming that sg-269afc5e is applied to other resources that are properly secured, this rule allows all traffic to pass through that is also assigned security group sg-269afc5e.The instance was launched with the default security group, but there is no way for an administrator to SSH into the instance. Add another rule that allows for SSH access from a secured source, such as a single IP or a range of managed IP addresses.All traffic on all ports is being denied into this instance, which overwrites the HTTP rule and makes it redundant.All traffic on all ports are allowed into this instance. This exposes the instance to all public internet traffic and overwrites the incoming HTTP rule.

19. You have a large amount of files on your network-attached storage array that must be archived and maintained for a period of 10 years due to industry regulations. This data will be infrequently accessed but must be kept What is the best AWS service for storing this data?

EFSOEBSSnowballS3 Glacier

20. You have recently launched your new web product and are expecting 1,000 new users each month. However, you have just received word from the CEO that your product will be featured at an upcoming conference covered by several media outlets, and this could lead to 20,000 new users over the next week. How do you plan for a sudden increase in traffic?

Use Auto Scaling groups to create more front-end servers when the CloudWatch metrics for CPU usage on a single instance rise above 80% for five minutes.Take an AMI image of a front-end server to save your configuration and then add more servers to your cluster pror to the conference. Remove the servers from the cluster after the spike from the conference.Test to determine your throughput and how many users you can support. Develop a scaling plan for your front end, microservices, and database based on CloudWatch metrics that align with the tested bottlenecks.Replicate your infrastructure across two regions. You will harden the application to a regional failure and you will double your capacity.

22. A new developer has been added to the team and you have been asked to provide access to the organization's AWS account. What is the best practice for granting access?

Create a IAM user for the new developer. Manually assign policies to the new IAM user account.Do not give the new developer access to the AWS console. Using the IAM user that is assigned to the development group, generate a new set of access keys and label these with the name of the developer.Create a IAM user for the new developer. Assign the new developer the a developer group you already created for the other developers.Give the new developer the IAM login that is assigned to the development team. This IAM user should already include all of the policies that a developer would need.

23. You have a T2 EC2 instance that is critical to your infrastructure. How would you monitor the most important metric for this instance?

Use CloudWatch to put monitors on the remaining CPU credits. If you run out of CPU credit the instance will be stopped.Turn on CloudWatch Auto Recovery and put monitors on the System Status and Instance Status checks for the instance to notify you when either is in alarm.

24. When sending a large volume of email through SES, what is the most important set of metrics to monitor?

your complaint and bounce ratessending volume over the past 15 minutes and over one day to watch for billing spikesclicks and deliveriesopens and clicks

25. Can you lose the public IP address associated with your EC2 instance?

Yes, you can lose it if you stop and start the instance.Yes, you can lose it when you edit the instance properties and release the IP address.Yes, you can lose it if you reboot the instance.No, you will never lose the public IP address for your instance.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know? Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com