AWS Practice Test (LinkedIn Skills Assessment) | Practice Test / Quiz / MCQs

1. When designing a serverless web application using Lambda, what key concept must you factor into your design?

Lambda does not use servers, so it can only return the same request to every user.Serverless web applications run within the web browser of the user, so you will need to store any data the user changes directly in a database.Lambda is stateless, so it won't remember who a user is in between requests.Lambda only allows you to write functions in JavaScript.

2. You have an analytics suite that produces reports about the usage patterns of your web application. After completing your migration to AWS and using Application Load Balancer to balance the load across your web application, your marketing department noticed that location-based reports on the web traffic only show traffic originating from a single location. What is the problem?

Application Load Balancer does not preserve the original source IP address. The analytics software needs to be configured to look at the 'X-Forwarded-For' HTTP request header for the correct source IP address.Application Load Balencer has to be configured to retain the source IP address of the traffic it is forwarding. Create a policy that enables ProxyProtocol support and attach it to the ALB using the AWS CLI.Use a Classic Load Balancer, not Application Load Balancer.Configure the web server EC2 instances to only have private IP addresses. The public IP addresses of the instances are being recorded into the web server logs, bug only ALB should have a public interface and it will route traffic to instances via the private interface.

3. Your database is an RDS instance running SQL Server with Multi-AZ replication and you have several older .NET console utilities that perform database operations every 15 seconds. When the cluster has to switch the primary database server to the secondary AZ, the .NET utilities start to report connection failures to the database although other applications are able to access the database. How do you correct this problem?

Use the RDS console to force a reboot of the database instance so that the primary server becomes the master server again.The server running the .NET utilities is caching the DNS lookup on the database cluster address. Flush the DNS cache of the server and force the C# utilities to open new connections to the database.The NET utilities need to change the SQL Server endpoint in the connection strings to read from the secondary database server using a try/catch.A.NET application will retain the IP address of a connection string until the host machine is rebooted.

4. What is the best practice for creating a highly available PostgreSQL database in RDS that can sustain the loss of a single AWS region?

PostgreSQL cannot be replicated across regions. Restore the database backups from an S3 bucket and repoint your database connections to the new instance.Create Read Replicas in other AWS regions. You can designate a new master database from any of the read replicas until the regional failure is resolved.Verify that your instance is configured for Multi-AZ support. Database changes will be automatically synced to another region in the event of a failure and RDS will automatically select a new master until the regional failure is resolved.Create Read Replicas in other AWS regions. Ensure read operations against the database occur on an available Read Replica, and send write operations to another region if you need to promote a Read Replica to a standalone database if the master is down.

5. Your application is sending 50,000 emails through SES each day. Since you must maintain a low bounce rate to avoid being put on probation, what simple system do you architect to automatically process hard bounces?

Send all emails through SES with a custom reply-to header. Configure SES to listen for events on this email address and flag any email address that replies to this account as a bounced message and remove it from your email list.Configure SES to no longer send to email addresses that are on your bounce list.Configure SES to send the logs of all delivery attempts through Kinesis Firehose. Process each event and look for bounce types and remove these emails from your list.Configure SES to send all bounce events to an SNS topic. Create a Lambda function that processes each hard bounce event and automatically flags that account as a bounce in your application to prevent further sending attempts.

6. You are migrating an on-premise RabbitMQ cluster into AWS. Which migration path should you choose for ease of both maintenance and deployment?

Rewrite the parts of your application that use RabbitMQ to use SQS.Rewrite the parts of your application that use RabbitMQ to use Amazon MQ.Launch a RabbitMQ cluster with EC2 instances using a supported AMI.Rewrite the parts of your application that use RabbitMQ to use Kinesis.

8. You have replicated the infrastructure that serves the backend API for your web application across regions to better serve your customers in the US and the EU. What is the best way to direct your web application at the nearest data center?

Purchase a country domain extension and direct your users to the correct site, such as example.com and example.coHave your front-end application test the latency between each data center and use the data center that is responding the fastest.Use Route 53 with geolocation lookups to direct traffic between the two regions.Create a WAF redirection rule that redirects traffic at the EU data center if the source IP comes from certain countries.

10. What privilege is specific to the AWS root account, and cannot be granted to another IAM user on the account?

Create a new hosted zone in Route 53.Modify the billing details.Delete the AWS account.Revoke the AdministratorAccess role or grant it to another IAM user.

11. A new developer has been added to the team and you have been asked to provide access to the organization's AWS account. What is the best practice for granting access?

Give the new developer the IAM login that is assigned to the development team. This IAM user should already include all of the policies that a developer would need.Do not give the new developer access to the AWS console. Using the IAM user that is assigned to the development group, generate a new set of access keys and label these with the name of the developer.Create a IAM user for the new developer. Assign the new developer the a developer group you already created for the other developers.Create a IAM user for the new developer. Manually assign policies to the new IAM user account.

13. What does this small section of a CloudFormation template do?\nFlowLog:\n Type: AWS::EC2::FlowLog\n Properties:\n DeliverLogsPermissionArn: !GetAtt IamRole.Arn\n LogGroupName: FlowLogsGroup\n ResourceId: !Ref LogVpcId\n ResourceType: VPC\n TrafficType: ALL

It logs all of the network traffic within a VPC except Instance IDs defined by LogVpcID and logs it to the CloudWatch FlowLogsGroup log group.It writes the VPC network flow logs to the CloudWatch FlowLogsGroup log group. You could use this to inspect the network connections of your VPC.It logs all of the DNS requests made by resources within a VPC and logs them to the CloudWatch FlowLogsGroup. Use this to diagnose DNS lookup errors within your environment.It logs all the network traffic going to and from a single EC2 instance into the CloudWatch FlowLogsGroup log group. You could use this to inspect suspicious network traffic coming into an EC2 instance.

14. Application Load Balancer can route traffic to several different target groups based upon several conditions. Which of these use cases is not supported by Application Load Balancer?

A path of /signup* can be routed to a target group for a Lambda function that processes new user registrations.An Http POST query string of ? action=createuser can be routed to a target group for an ECS service.Source IPs matching 192.0.2.0/24 on a listener port of 1433 can be routed to a target group for an RDS for SQL Server cluster.A request with a HTTP header of X-Requested-With: staging can be routed to a target group for an ECS service in your staging environment.

15. How do you assign an Elastic IP to several EC2 instances?

In the EC2 dashboard, click on EC2 instance. Under Actions, select networking > Manage IP Addresses. click to add a new IP address and type in the address of the Elastic IP. Repeat the process for each EC2 instance you want to assign this Elastic IP to.Use the AWS CLI and pass in several '--instance-id' options to hte aws ec2 assosiate-address command.In the VPC dashboard, click Elastic IPs. Select the Elastic IP and click Associate Address. Select each EC2 instance you wish to assign this address to.An elastic IP cannot be assigned to multiple EC2 instances. It can only be assosiated to a single EC2 instance.

16. You are creating a DynamoDB table to store all movies that have been released since 1938. Your application will allow users to search by movie title and see the details of that film. Given the sample below showing the movie data that you will be importing, what is the best set of keys to apply to this table?\n{\n \"title\": \"The Avengers\",\n \"year\": 2012,\n \"cast\": [\"Mark Ruffalo\", \"Robert Downey, Jr.\"],\n \"genres\": [\"Action\"]\n}

The primary key should be the title field and the partition key should be the genres field.The primary key should be a composite key comprised of a partition key on the title field and a sort key on the year field.The primary key should be created as a completely unique value, such a sequential numerical list of movie IDs. The partition key should be title field for fast lookup.The primary key should be a partition key of the title field.

18. You want to make your public API quickly accessible from all regions. What is the best way to do this?

Create a private API gateway endpoint for each region.Create a single API gateway endpoint in a central region.Create edge-optimized API gateway endpoints and deploy them to a CloudFront network.Create a regional API gateway endpoint for each region.

19. Can you lose the public IP address associated with your EC2 instance?

Yes, you can lose it if you reboot the instance.Yes, you can lose it if you stop and start the instance.Yes, you can lose it when you edit the instance properties and release the IP address.No, you will never lose the public IP address for your instance.

21. You have four front-end web servers behind a load balancer, which use NFS to access another EC2 instance that resizes and stores images for the front-end application. What security group policies should be assigned to these servers?

Front-end web servers should allow HTTPS. Assign another group to all of the instances that allows all traffic to pass between instances using that group.Assign Elastic IPs to all of the instances and create a group that allows all traffic to pass between each of the fiveCreate a security group that allows inbound NFS, HTTP, and HTTPS traffic from all IP addresses. Apply this group to all of the servers.Create a security group that allows inbound HTTP and HTTPS traffic from all IP addresses and apply this to the web servers. Create a second security group for the NFS filestore that allows outbound NFS traffic to the private IP range of the front-end web Elastic IP addresses and allow all inbound HTTPS traffic.

23. If a single instance has failed to launch within 24 hours due to some issues during a set up of Auto-scaling. Then what will happen to the Auto-Scaling condition?

The Auto Scaling group will be automatically terminated.In a separate region Auto Scaling will start an instanceAuto Scaling will continue to launch the instance for straight 3 daysAuto Scaling will remove the scaling process

24. How do you connect via SSH to a Linux EC2 instance with an EBS volume if you lost your key pair?

Stop the instance and create an AMI image. Launch the image using a new key pair.You can not connect to this EC2 instance. The key pair is displayed only one time. If you lose it, you have lost all access to this instance. Connect the EBS volume to another instance to recover your files.Contact AWS support. A support specialist can remotely restore access to your instance and send you a new key pair.Attach the EBS volume to a temporary instance launched with a new key pair, and overwrite ~/.ssh/authorized_keys using the same file from the new instance.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | What Should We Know? Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com