AWS Practice Test (LinkedIn Skills Assessment) | Practice Test / Quiz / MCQs

1. If a single instance has failed to launch within 24 hours due to some issues during a set up of Auto-scaling. Then what will happen to the Auto-Scaling condition?

Auto Scaling will continue to launch the instance for straight 3 daysAuto Scaling will remove the scaling processIn a separate region Auto Scaling will start an instanceThe Auto Scaling group will be automatically terminated.

2. When you launch an instance into a dedicated-tenancy VPC, what happens?

Your instance launch fails, but AWS prompts you to launch a new one with the tenancy attribute set to dedicatedYour instance is automatically a Dedicated instance, regardless of the instance's specific tenancy attributeYou receive an error message notifying you that you must set your instance's tenancy attribute to dedicatedYour instance launch fails immediately

4. For your AWS root account, you have generated a random password of the maximum allowed length and included special characters. Which additional steps should you take to secure your AWS root account?

Create an IAM role for the account administrator with the highest privileges and do not use the root account in day-today operations. Enable two-factor authentication on the root accountCreate IAM accounts for your administrators and attach the AdministratorAccess policy to their accounts. Disable the root account in the user settings.Create an AM role for the account administrator with the highest privileges. Do not store the root password, but when the root account is needed reset the password on the root account via email confirmation and repeat this procedure.Store your randomly generated password in your organizational secrets database using a service such as 1Password or LastPass, and only grant access to this secret to the DevOps team.

5. What AWS Batch job parameter can you specify to prevent an unsuccessful job from being stuck in a loop?

The number of automated job retriesAn AWS Batch job agentThe duration of job timeoutA resource expenditure cap

7. An EC2 instance running a WordPress site keeps getting hacked, even though you have restored the server several times and have patched WordPress. What AWS service can help you detect and prevent further attacks?

Security AdvisorCloudWatchGuardDutyShield

8. You are tasked with supporting users of a mobile app. The app allows users to view content (e.g., images) but only upload images if they are logged in to the app via Cognito. Which option would require the least amount of development time and provide the highest security to prevent non-authenticated users from posting content?

Switch API access keys at run-time based on the user's log in state.Create a Cognito Identity Pool with roles for both authorized and unauthorized user and appropriate permissions on those roles.Expose an API Gateway for public use to fetch content and a second API for writing content requiring an auth token.Set policies on the database table (DynamoDB or RDS) for user permissions.

9. You have several on-premise servers and would like to store your offsite backups on AWS. What fully managed backup service can you use to ship your backups to AWS?

Sync files directly to S3 with the AWS CLI.Use the RDS console to force a reboot of the database instance so that the primary server becomes the master server again.Use Storage Gateway.Windows Server 2016 supports S3 as a target when using storage replicas.

10. What does the statement body of this S3 bucket policy do?\n{\n \"Sid\": \"bucketpolicy1\",\n \"Effect\": \"Allow\",\n \"Principal\": \"*\",\n \"Action\": \"s3:GetObject\",\n \"Resource\": \"arn:aws:s3:::userreports/*\",\n \"Condition\": {\n \"IpAddress\": { \"aws:SourceIp\": \"68.249.108.0/24\" },\n \"NotIpAddress\": { \"aws:SourceIp\": \"68.249.108.128/32\" }\n }\n}

bucketpolicy1 allows any user coming from the IP range of 68.249.108.0 to 68.249.108.255 to access objects in the userreports bucket-except anyone coming from the IP of 68.249.108.128.bucketpolicy1 allows any user coming from the IP range of 68.249.108.0 to access objects in the userreports bucket and denies access to 68.249.108.128.bucketpolicy1 allows any user to perform any action on the objects in the userreports bucket - except anyone coming from the IP of 68.249.108.128.bucketpolicy1 allows any user to perform any action on the objects in the userreports bucket, but limits the objects to read-only permissions for anyone coming from 68.249.108.0 to 68.249.108.255 - except 68.249.108.128.

11. Application Load Balancer can route traffic to several different target groups based upon several conditions. Which of these use cases is not supported by Application Load Balancer?

A path of /signup* can be routed to a target group for a Lambda function that processes new user registrations.A request with a HTTP header of X-Requested-With: staging can be routed to a target group for an ECS service in your staging environment.An Http POST query string of ? action=createuser can be routed to a target group for an ECS service.Source IPs matching 192.0.2.0/24 on a listener port of 1433 can be routed to a target group for an RDS for SQL Server cluster.

12. Which of the following is recommended when you want to analyze Access Logs of a single stream more quickly and accurately for a given period?

Combine all the log files you receive for a given period into one file.Compare log files with Amazon CloudWatch results.Check all the log files you receive for a given period one by one.Analyze all the log files line by line.

13. You have 14 on-premise web servers, 4 database servers, 6 servers using GIS software, 3 file servers, and 4 development servers. What considerations should you take into account when migrating these servers into AWS?

The only way to transfer large amounts of database data up to AWS is via S3, which can have a slow upload speed. Plan for this delay and cost in your migration plan.AWS does not have a way to separate billing for compute costs, so you will need to design a way to split the budget between departments.New AWS accounts are limited to 20 on-demand EC2 instances. Submit a request to increase your rate limits before starting a migration.Software licensing costs are always included in services such as RDS, so factor the loss of use of your on-premise licenses in your budget.

15. Where is the best place to store database backups on an EC2 instance that is configured as a database server?

EBS volume attached to the instancean S3 bucket, synced with the database backups via a script that calls the AWS CLIinstance attached to the instanceinstance storage, with a script that replicates the database backups to another instance in a different availability zone.

16. You are migrating a 200 GB database from an on-premise SQL Server to RDS for SQL Server. The database needs to have minimal downtime during the migration. What is the best practice for migrating this database?

Detach the SQL Server database during the migration. Take a backup of the database and use SQ with Accelerated Transfer to upload the backups to S3. Restore the backups to the RDS instance.Use the Import and Export wizard within SQL Server Enterprise Manager to create an export task and export the tables to the RDS instance.Close all existing connections to the SQL Server database and use Database Migration Service to transfer the data to RDS.Use Database Migration Service to replicate the database to RDS and keep it in sync during the migration. Repoint your applications to use the new RDS endpoint.

17. What is the best practice for creating a highly available PostgreSQL database in RDS that can sustain the loss of a single AWS region?

Create Read Replicas in other AWS regions. Ensure read operations against the database occur on an available Read Replica, and send write operations to another region if you need to promote a Read Replica to a standalone database if the master is down.PostgreSQL cannot be replicated across regions. Restore the database backups from an S3 bucket and repoint your database connections to the new instance.Verify that your instance is configured for Multi-AZ support. Database changes will be automatically synced to another region in the event of a failure and RDS will automatically select a new master until the regional failure is resolved.Create Read Replicas in other AWS regions. You can designate a new master database from any of the read replicas until the regional failure is resolved.

19. What does this small section of a CloudFormation template do?\nFlowLog:\n Type: AWS::EC2::FlowLog\n Properties:\n DeliverLogsPermissionArn: !GetAtt IamRole.Arn\n LogGroupName: FlowLogsGroup\n ResourceId: !Ref LogVpcId\n ResourceType: VPC\n TrafficType: ALL

It logs all of the network traffic within a VPC except Instance IDs defined by LogVpcID and logs it to the CloudWatch FlowLogsGroup log group.It writes the VPC network flow logs to the CloudWatch FlowLogsGroup log group. You could use this to inspect the network connections of your VPC.It logs all of the DNS requests made by resources within a VPC and logs them to the CloudWatch FlowLogsGroup. Use this to diagnose DNS lookup errors within your environment.It logs all the network traffic going to and from a single EC2 instance into the CloudWatch FlowLogsGroup log group. You could use this to inspect suspicious network traffic coming into an EC2 instance.

21. What does it cost to launch an EC2 instance from the AWS Marketplace?

Each image has its own pricing that could either be free, or include charges for software licensing costs. You will also pay for the instance the image runs onAll images in the AWS Marketplace contain only open-source software with no additional fees and are created by other AWS users. You will pay only for the instance size you select.You can only launch images that were created by other users on your AWS account, so you pay only for the instance size you select and the S3 storage costs for the base image.All images in the AWS Marketplace incur additional hourly fees in addition to the charges from the instance size you select.

22. You have replicated the infrastructure that serves the backend API for your web application across regions to better serve your customers in the US and the EU. What is the best way to direct your web application at the nearest data center?

Create a WAF redirection rule that redirects traffic at the EU data center if the source IP comes from certain countries.Purchase a country domain extension and direct your users to the correct site, such as example.com and example.coUse Route 53 with geolocation lookups to direct traffic between the two regions.Have your front-end application test the latency between each data center and use the data center that is responding the fastest.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know? Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com