Quiz
AWS 1
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (50)
1A user is performing a web request to change the storage class of an S3 object. Which request header should the user use?
- Ax-amz-metadata-directive
- Bx-amz-object-class
- Cx-amz-storage-class
- Dx-amz-object-attribute
2Which of the below mentioned statements is true with respect to the AWS EC2?
- AThe user has to use only the Elastic IP with an instance store backed AMI instance.
- BThe private IP address and public IP address for an instance are not directly mapped to each other.
- CThe instance launched from an instance store backed AMI will always have a fixed public DNS for the life of the instance.
- DThe instance launched from an EBS backed AMI will always have a fixed public DNS for the life of the instance.
3A user has hosted a static website with the AWS S3 bucket. The user wants all the requesters to pay while they view the website. How can the user configure this?
- AIt is not possible to configure requester pays when S3 static website hosting is enabled.
- BIt is not possible to configure requester pays for AWS S3.
- CThe user should enable Devpay on the bucket.
- DThe user should enable the requester pays option for the bucket.
4A user has enabled static website hosting for the AWS S3 bucket. Which of the below mentioned statements is not true?
- AIt returns an XML-formatted error response.
- BIt does not support SSL connections.
- CIt supports redirection.
- DIt supports Get and HEAD requests.
5A user has created a bucket named Cloudacademy.com. The user is trying to access the bucket with the URL:http://cloudacademy.s3.amazonaws.com What will it return?
- AIt will ask the user to provide the bucket access credentials.
- BIt will return an error.
- CIf the bucket is public then it will show the list of all the objects of the bucket.
- DThe listing of the bucket.
6A user is creating a bucket policy to allow access to some user. Which of the below mentioned options is not a valid resource name as a part of the bucket policy?
- Aarn:aws-cn:s3:us-west-1::*
- Barn:aws-cn:s3:::*
- Carn:aws:s3:::cloudacademy/*
- Darn:aws:s3:::cloudacademy/user/${aws:username}/
7An account owner is trying to create a policy for an IAM user. Which of the below mentioned options is not a valid ARN to use with the policy?
- Aarn:aws:iam::123456789012:federated-user/cloud
- Barn:aws:iam::123456789012:user/cloud
- Carn:aws:sts::123456789012:federated-user/cloud
- Darn:aws:iam::123456789012:user/division_abc/subdivision_xyz/cloud
8An account owner has created an IAM user with the name cloudacademy. The account owner wants to give EC2 access of only the US West region to that IAM user. How can the owner configure this?
- ACreate an IAM policy and define the region in the condition.
- BWhile creating a policy provide the region as a part of the resources.
- CIt is not possible to provide access based on the region.
- DCreate an IAM user in the US West region and give access to EC2.
9A user has launched one EC2 instance in the US East region and one in the US West region. The user has launched an RDS instance in the US East region. How can the user configure access from both the EC2 instances to RDS?
- AConfigure the security group of both instances in the ingress rule of the RDS security group.
- BConfigure the security group of the US East region to allow traffic from the US West region’s instance and configure the RDS security group’s ingress rule for the US East EC2 group.
- CIt is not possible to access RDS of the US East region from the US West region.
- DConfigure the US West region’s security group to allow a request from the US East region’s instance and configure the RDS security group’s ingress rule for the US East EC2 group.
10A user has launched a website on an EC2-Classic instance with Apache. If the user wants to access a DB hosted on another instance how will he allow traffic to access the DB securely from the source webserver instance?
- AOpen the outbound traffic on the DB port from the webserver instance to connect to the DB instance IP.
- BOpen the inbound DB port on the Webserver instance for the DB server Instance IP.
- COpen port 0.0.0.0/0 in the DB instance security group for the DB port.
- DConfigure the DB instance security group where it will allow traffic on the DB port from the webserver instance security group.
11A user has configured two security groups which allow traffic as given below:
1: SecGrp1:
Inbound on port 80 for 0.0.0.0/0
Port 22 for 0.0.0.0/0
2: SecGrp2:
Inbound on port 22 for 10.10.10.1/32
If both the security groups are associated with the same instance, which of the below mentioned statements is true?- AIt allows inbound traffic on both port 22 and 80 for everyone.
- BIt is not possible to create the security group with conflicting rules. AWS will reject the request.
- CIt is not possible to have more than one security group assigned to a single instance.
- DIt allows inbound traffic on port 22 for IP 10.10.10.1 and for everyone else on port 80.
12A user has launched a dedicated EBS backed instance with EC2. Where will the EBS of the instance be created?
- AOn the same tenant hardware.
- BAWS does not allow a dedicated EBS backed instance launch.
- CNot on the same tenant hardware.
- DThe user can specify where the EBS will be created.
13Which of the below mentioned instance types provides a better dedicated IO with EBS?
- AEBS enhanced instance.
- BEBS optimized instance.
- CPIOPS.
- DEBS dedicated instance.
14A user has launched 5 EC2 instances inside a placement group. The user first stopped three instances and then started them after 60 minutes. Which of the below mentioned statements is true?
- AThe user cannot start / stop instances inside the placement group.
- BAll running instances will still be a part of the same placement group.
- CThe EBS backed instances can never be launched within the placement group.
- DThe new instance may be a part of the placement group if there is available capacity at EC2 or else they will run independently.
15A user has launched a Windows instance. The user did not attach the key-pair with the instance while launching. How can the user connect to the same instance?
- ALogin with the Administrator and generate a key-pair using RDP.
- BThe user can login if the Windows Admin password is known.
- CThe user can never login to that instance.
- DAttach the security key once the instance is launched.
16A user has lost a key-pair file for the EBS backed Linux instance. If the user wants to connect to it, how can he connect?
- AIf the user knows the Linux user name / password the key-pair is not required again.
- BIt is not possible to connect to the instance without a key-pair.
- CDownload the key-pair again from the AWS console and connect to the instance.
- DRemove the root volume, attach to another instance and generate / modify the key files.
17A user has lost a key-pair file for the Instance store backed Linux instance. If the user wants to connect to it, how can he connect?
- ARemove the root volume, attach to another instance and generate / modify the key files.
- BDownload the key-pair again from the AWS console and connect to the instance.
- CIt is not possible to connect to the instance without a key-pair.
- DIf the user knows the Linux user name / password the key-pair is not required again.
18Which of the below mentioned APIs is not available while creating a key-pair with AWS EC2?
- Aec2-import-keypair
- BNew-EC2KeyPair
- Cec2-upload-keypair
- Dec2-create-keypair
19A user has mounted an EBS volume to a Windows instance. Which of the below mentioned options allows the user to unmount the volume from that instance?
- AFrom Disk management, delete the external drive.
- BFrom the command line run the command: “umount -d <Device name>”.
- CFrom Disk management, remove the mount point.
- DFrom Disk management, format the volume.
20A user has created three EBS snapshots on 3 consecutive days. If the Day-1 snapshot refers to blocks “A-B-C”, Day 2 has modified the “B” block as well a newly added “D” block while Day-3 has “modified “B” from the previous day and a newly added “E” block.
If the user deletes the snapshot of Day-2, what will happen?- AIt will remove the snapshot of Day-2 and the user will lose the contents of Blocks-“B” and “D”.
- BDelete the block which was referred as modified “B” as well newly created “D” of Day 2.
- CIt will delete the block which was referred as modified “B” of Day 2.
- DNothing. The user cannot delete the snapshot as it is being referred in other blocks.
21A user has created an EBS volume from an existing snapshot. The data is being loaded lazily from S3 to the volume. If the user tries to access the data of the volume which is not yet loaded, what will happen?
- AThe data is not loaded lazily. Volume is available only when the whole data is loaded.
- BThe user cannot access the data until all the data is loaded.
- CThe volume downloads the data from S3 so that the user can access it.
- DThe volume throws error when the data required is not found and asks the user to try after sometime.
22A user has attached an EBS volume with an EBS optimized instance. The volume performs at the 16KB I/O chunk, what is the maximum IOPS that a user can provision to get the optimum output?
- A4000
- B1000
- C5000
- D2000
23A user has defined an AutoScaling termination policy to first delete the instance with the nearest billing hour. AutoScaling has launched 3 instances in the US-East-1A region and 2 instances in the US-West-1B region. One of the instances in the US-East-1B region is running nearest to the billing hour. Which instance will AutoScaling terminate first while executing the termination action?
- ARandom instance from US-East-1B.
- BInstance with the nearest billing hour in US-East-1A.
- CRandom Instance from US-East-1A.
- DInstance with the nearest billing hour in US-East-1B.
24A user has defined an AutoScaling termination policy to first delete the oldest instance. AutoScaling has launched 2 instances in the US-East-1A region and 2 instances in the US-West-1B region. One of the instances in the US-East-1B region is running nearest to the billing hour while the instance in the US-East-1A region is the oldest one. Which instance will AutoScaling terminate first while executing the termination action?
- ADeletes the oldest instance from US-EAST-1AB.
- BDeletes the instance from US-East-1B which is nearest to the running hour.
- CRandomly selects the AZ and then terminates the oldest instance.
- DDeletes the oldest instance from US-EAST-1A.
25Which of the below mentioned commands allows the user to modify the desired capacity for the AutoScaling group?
- Aas-update-desired-capacity
- Bas-modify-desired-capacity
- Cas-change-desired-capacity
- Das-set-desired-capacity
26A user is configuring AutoScaling with CLI. Which of the below mentioned adjustment types is not supported by the AutoScaling policy as a part of the command? (e.g. adjustment=50 Type=???).
- ADesiredCapacity
- BExactCapacity
- CPercentChangeInCapacity
- DChangeInCapacity
27The user has created multiple AutoScaling groups. The user is trying to create a new AS group but it fails. How can the user know that he has reached the AS group limit specified by AutoScaling in that region?
- ARun the command: as-describe-account-limits
- BRun the command: as-describe-group-limits
- CRun the command: as-list-account-limits
- DRun the command: as-max-account-limits
28A user has stored an object in RRS. The object is lost due to an internal AWS failure. What will AWS return when someone queries the object?
- AAWS will serve the object from backup.
- BThe object cannot be lost as RRS is highly durable.
- C405 Method Not Allowed error.
- D404 Object Not Found error.
29A user has created an AWS AMI. The user wants the AMI to be available only to his friend and not anyone else. How can the user manage this?
- AShare the AMI with the community and setup the approval workflow before anyone launches it.
- BShare the AMI with a friend’s AWS account ID.
- CIt is not possible to share the AMI with the selected user.
- DShare the AMI with a friend’s AWS login ID.
30A user is sharing the AWS AMI with selected users. Will the new user be able to create a volume from the shared AMI?
- AYes, always.
- BNo, never.
- CYes, provided the owner has given the launch instance permission.
- DYes, provided the owner has given the create volume permission.
31An AMI owner has shared his AMI with another user. The other user wants to search the AMI from the AWS console. Which search criteria should the user apply in the console?
- AProvide only the AMI ID.
- BProvide the AMI ID and search for “Shared with me”.
- CProvide the AMI ID and search for community images.
- DProvide the AMI ID and search for private images.
32A user is launching a new EBS backed instance. How can the user set it up so that the root EBS volume mounted to the instance does not get deleted when the instance is terminated?
- AEnable the termination protection on the instance with modify-instance-termination.
- BEnable the termination protection on the instance with modify-instance-attribute.
- CSet the a instance attribute deleteontermination value to “true”.
- DSet the instance attribute deleteontermination value to “false”.
33A user has launched an EBS backed instance. Can the user configure the instance, so that future instances will have ephermal storage while creating the AMI?
- AYes, always.
- BNo.
- CYes, provided the AMI is instance store backed.
- DYes, provided the future instances are not micro size.
34A user has launched an EC2 instance under the free usage tier. The user wants to create 2 large instances by creating the AMI from the same instance. Can the large instances automatically have ephermal storage attached with them?
- ANo, the AMI created from the micro instance can never have ephermal storage.
- BYes, provided the user configured to have ephermal storage during the AMI creation.
- CYes, but while creating the AMI save it instance store backed.
- DNo, The EBS backed instance can never have ephermal storage.
35A user has created a bucket and is trying to access the object using the public URL of the object. Which of the below mentioned statements is false for accessing the object using the REST API endpoint?
- AIt supports the redirect request.
- BIt supports all the object and bucket functions with REST.
- CIt returns the response in an XML format.
- DIt supports the SSL connection.
36An IAM user is trying to perform an action on an object belonging to some other root account’s bucket. Which of the below mentioned options will AWS S3 not verify?
- APermission provided by the parent of the IAM user.
- BThe object owner has provided access to the IAM user.
- CPermission provided by the bucket owner to the IAM user.
- DPermission provided by the parent of the IAM user on the bucket.
37A user had defined an IAM policy similar to the one given below on a bucket:
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::12112112:user/test"
},
"Action": [
"s3:GetBucketLocation",
"s3:ListBucket",
"s3:GetObject"
],
"Resource": [
"arn:aws:s3:::cloudacademy"
]
}
]
}
What will this do?- AIt will result in an error saying invalid policy statement.
- BIt will allow all the IAM users of the account ID 12112112 to perform GetBucketLocation, ListBucket and GetObject on bucket cloudacademy.
- CAllows the user test of the AWS account ID 12112112 to perform GetBucketLocation, ListBucket and GetObject on the bucket cloudacademy.
- DIt will create an IAM policy for the user test.
38A root account has created an IAM group and defined the policy as:
"Statement": [
{
"Effect": "Allow"
"Action": ["iam:ChangePassword"],
"Resource": ["arn:aws:iam::123123123123:user/${aws:username}"]
},
{
"Effect": "Allow",
"Action": ["iam:GetAccountPasswordPolicy"],
"Resource": ["*"]
}
]
What will this policy do?- AAllow this group to view the password policy of all the users added only to that group.
- BAllow this group to view the password policy of all the IAM users.
- CAllow all the users of IAM to modify their password.
- DAllow this group to view the password policy and modify the password of all the IAM users.
39A user has hosted an application on EC2. The user wants to configure EC2 to send requests for DB to the MySQL RDS on port 3306. However, RDS returns the response on port 3372. How can the user configure this?
- AConfigure outbound port for RDS as 3372 using VPC.
- BConfigure RDS my.conf file, which returns data on 3372.
- CPort 3372 is reserved for PostgreSQL. Try another port in the outbound traffic of the security group.
- DIt is not possible to configure the outbound port for RDS.
40A user is configuring MySQL RDS with PIOPS. What should be the minimum size of DB storage provided by the user?
- A5 GB
- B50 GB
- C100 GB
- D1 TB
41A user is configuring MySQL RDS with PIOPS. What should be the minimum PIOPS that the user should provision?
- A2000
- B1000
- C500
- D200
42A user is trying to provision IOPS for a MySQL RDS instance. What should be the minimum instance size recommended by AWS for the 100 GB storage and 1000 IOPS to achieve optimal performance?
- Adb.m3.2xlarge
- Bdb.m1.large
- Cdb.m1.medium
- Ddb.m1.xlarge
43A user has configured RDS with MySQL. The user has setup the maintenance window of 12:00 AM with the duration as 30 minutes on every Sunday. The user has configured to have an automated backup at 12:30 AM every day for 30 minutes. What will AWS RDS do in this case?
- AOn Sunday it will start a backup at 12 AM and will start maintenance as soon as the backup is complete.
- BIt will result in a conflict and not allow to launch the instance.
- CTake an automated backup at 12:30 daily except on Sunday and perform maintenance at 12:00 AM on Sunday.
- DTake an automated backup at 12:30 every day and perform maintenance at 12:00 AM on Sunday.
44A user has launched two EC2 instances in the same region with separate security groups. How can the user define that he wants both instances to communicate internally on any port in the security group?
- AAllow inbound on port 0-65535 in each instance security group for the security group of the other instance.
- BIn the first instance allow inbound on port 0-65535 for the security group of the second instance.
- CBy default each instance can talk to the other instance in the same region. It is not required to the configure security group.
- DIn the second instance allow inbound on port 0-65535 for the security group of the first instance.
45A user has launched an EBS optimized instance with EC2. Which of the below mentioned options is the correct statement?
- AThe attached EBS will have better IO capacity.
- BIt will be launched on dedicated hardware in VPC.
- CIt provides additional dedicated capacity for EBS IO.
- DThe user will have a PIOPS based EBS volume.
46A user has launched 10 EC2 instances inside a placement group. Which of the below mentioned statements is true with respect to the placement group?
- AAll instances must be in the same AZ.
- BAll instances can be across multiple regions.
- CThe placement group cannot have more than 5 instances.
- DAll instances must be in the same region.
47A user is trying to detach the EBS volume from an instance. Which of the below mentioned options is not the right API to detach a volume from an instance?
- Adismount-EC2Volume
- Bec2-dismount-volume
- Cec2-detach-volume
- Ddetach-volume
48When a user is accessing an EBS for the first time there can be a huge reduction in the I/O. How can the user avoid this?
- AUse a higher instance size which gives better I/O.
- BUse PIOPS to increase the I/O first time.
- CPre-warm the EBS volumes as per the requirement.
- DThere is no decrease in the I/O performance the first time and the user can use it as it is.
49A user has enabled AutoScaling with ELB. The ELB has enabled connection drainage. If Auto Scaling wants to terminate an instance, what will it do?
- AIt initiates the termination process, ELB will wait till the inflight requests are completed.
- BIt will mark the instance deregistering and ELB will wait until the connection drainage timeout period.
- CIt will wait for the inflight requests to complete before terminating.
- DAutoScaling cannot work with ELB if connection drainage is enabled.
50AutoScaling is configured with 3 AZs. Each zone has 5 instances running. If AutoScaling wants to terminate an instance based on the policy action, which instance will it terminate first?
- ATerminate the first launched instance.
- BTerminate the instance from the AZ which does not have a high AWS load.
- CRandomly select the instance for termination.
- DTerminate the instance from the AZ which has instances running near to the billing hour.
Information
- Description
- Quiz on AWS 1, created by K H on 04/05/2015.
- Author
- K H
- Language
- English
- Views
- 31
- Rating
- No ratings yet Rate this quiz