Sample Questions and Answers
Which AWS service allows you to define and provision infrastructure using code?
AWS Elastic Beanstalk
B. AWS CloudFormation
C. AWS CodeDeploy
D. AWS OpsWorks
Answer: B
Explanation: AWS CloudFormation enables you to model and set up your Amazon Web Services resources so that you can spend less time managing those resources and more time focusing on your applications.
How can you ensure that a Lambda function automatically rolls back if a deployment fails?
Use AWS CloudTrail
B. Enable automatic rollback in AWS CodeDeploy
C. Configure Amazon CloudWatch alarms
D. Implement manual approvals in AWS CodePipeline
Answer: B
Explanation: AWS CodeDeploy supports automatic rollback for Lambda deployments if a specified CloudWatch alarm is triggered or if the deployment fails.
What AWS service provides a managed environment for running containerized applications without managing servers?
Amazon EC2
B. AWS Fargate
C. AWS Lambda
D. Amazon S3
Answer: B
Explanation: AWS Fargate is a serverless compute engine for containers that works with both Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS), allowing you to run containers without managing servers.
Which AWS service helps you monitor and audit actions taken on your AWS resources?
AWS CloudTrail
B. Amazon CloudWatch
C. AWS Config
D. AWS Trusted Advisor
Answer: A
Explanation: AWS CloudTrail records AWS API calls and related events made on your account and delivers log files to an Amazon S3 bucket.
What is the purpose of AWS Systems Manager Parameter Store?
Store and manage secrets
B. Monitor application performance
C. Automate infrastructure provisioning
D. Manage IAM policies
Answer: A
Explanation: AWS Systems Manager Parameter Store provides secure, hierarchical storage for configuration data management and secrets management.
How can you automate the patching of EC2 instances?
Use AWS CloudFormation
B. Use AWS Systems Manager Patch Manager
C. Use AWS CodeDeploy
D. Use AWS OpsWorks
Answer: B
Explanation: AWS Systems Manager Patch Manager automates the process of patching managed instances with both security-related and other types of updates.
Which AWS service allows you to run code without provisioning or managing servers?
AWS Lambda
B. Amazon EC2
C. AWS Elastic Beanstalk
D. AWS OpsWorks
Answer: A
Explanation: AWS Lambda lets you run code without provisioning or managing servers, paying only for the compute time you consume.
What is the advantage of using Amazon CloudWatch Logs Insights?
Real-time application debugging
B. Automated infrastructure deployment
C. Secure storage of secrets
D. Managing IAM roles
Answer: A
Explanation: Amazon CloudWatch Logs Insights enables you to interactively search and analyze your log data in Amazon CloudWatch Logs to gain operational insights.
How can you ensure that only specific users can approve deployments in AWS CodePipeline?
Configure IAM policies with specific permissions
B. Use AWS CloudTrail
C. Set up AWS Config rules
D. Implement AWS Shield
Answer: A
Explanation: By configuring IAM policies with specific permissions, you can control which users have the ability to approve deployments in AWS CodePipeline.
Which AWS service helps you define and enforce compliance rules for your AWS resources?
AWS CloudTrail
B. AWS Config
C. Amazon CloudWatch
D. AWS Trusted Advisor
Answer: B
Explanation: AWS Config enables you to assess, audit, and evaluate the configurations of your AWS resources, helping you to ensure compliance.
What is a benefit of using AWS CodeArtifact?
Hosting static websites
B. Managing software package dependencies
C. Monitoring application performance
D. Automating infrastructure deployment
Answer: B
Explanation: AWS CodeArtifact is a fully managed artifact repository service that makes it easy for organizations to securely store, publish, and share software packages used in their software development process.
How can you automate the deployment of applications to EC2 instances?
Use AWS CodeDeploy
B. Use AWS CloudFormation
C. Use AWS Lambda
D. Use AWS OpsWorks
Answer: A
Explanation: AWS CodeDeploy automates code deployments to any instance, including Amazon EC2 instances and instances running on-premises.
Which AWS service provides recommendations for cost optimization and security best practices?
AWS Trusted Advisor
B. AWS Config
C. AWS CloudTrail
D. Amazon CloudWatch
Answer: A
Explanation: AWS Trusted Advisor provides real-time guidance to help you provision your resources following AWS best practices.
What is the purpose of AWS CloudFormation StackSets?
Automate code deployments
B. Deploy CloudFormation stacks across multiple accounts and regions
C. Monitor application performance
D. Store and manage secrets
Answer: B
Explanation: AWS CloudFormation StackSets extends the functionality of stacks by enabling you to create, update, or delete stacks across multiple accounts and regions with a single operation.
How can you monitor the health and performance of your applications in AWS?
Use AWS CloudTrail
B. Use Amazon CloudWatch
C. Use AWS Config
D. Use AWS Trusted Advisor
Answer: B
Explanation: Amazon CloudWatch provides data and actionable insights to monitor your applications, understand and respond to system-wide performance changes, and optimize resource utilization.
What AWS service allows you to define and provision infrastructure using a declarative template?
AWS CloudFormation
B. AWS Elastic Beanstalk
C. AWS OpsWorks
D. AWS CodeDeploy
Answer: A
Explanation: AWS CloudFormation enables you to model and set up your Amazon Web Services resources so that you can spend less time managing those resources and more time focusing on your applications.
Which AWS service enables you to run containerized applications without managing servers?
Amazon EC2
B. AWS Fargate
C. AWS Lambda
D. AWS OpsWorks
Answer: B
Explanation: AWS Fargate is a serverless compute engine for containers that works with both Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS), allowing you to run containers without managing servers.
How can you securely store and manage secrets in AWS?
Use Amazon S3
B. Use AWS Secrets Manager
C. Use AWS CloudTrail
D. Use AWS Config
Answer: B
Explanation: AWS Secrets Manager helps you protect access to your applications, services, and IT resources without the upfront cost and complexity of managing your own hardware security module (HSM) infrastructure.
What is the purpose of AWS CodeBuild?
Automate code deployments
B. Monitor application performance
C. Compile source code, run tests, and produce packages
D. Store and manage secrets
Answer: C
Explanation: AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy.
Which AWS service allows you to define approval stages in a CI/CD pipeline?
AWS CodeCommit
B. AWS CodeDeploy
C. AWS CodePipeline
D. AWS CodeArtifact
Answer: C
Explanation: AWS CodePipeline allows you to model the different stages of your software release process, including manual approval actions.
How can you ensure that your EC2 instances comply with organizational security policies?
Use AWS CloudTrail
B. Use AWS Systems Manager State Manager
C. Use AWS Config
D. Use AWS Trusted Advisor
Answer: B
Explanation: AWS Systems Manager State Manager automates the process of keeping your Amazon EC2 and hybrid infrastructure in a defined state.
What is the advantage of using infrastructure as code (IaC)?
Manual server patching
B. Faster EC2 performance
C. Repeatability and version control
D. Improved Lambda pricing
Answer: C
Explanation: Infrastructure as code (IaC) allows you to manage and provision computing infrastructure through machine-readable definition files, enabling repeatability and version control.
Which AWS service helps you automate patch management?
AWS Config
B. AWS Systems Manager Patch Manager
C. AWS OpsWorks
D. AWS CloudFormation
Answer: B
Explanation: AWS Systems Manager Patch Manager automates the process of patching managed instances with both security-related and other types of updates.
How can you securely provide temporary access to AWS resources for external users?
Create an IAM user
B. Use root credentials
C. Use IAM roles with AWS Security Token Service (STS)
D. Create EC2 instance profiles
Answer: C
Explanation: IAM roles combined with AWS Security Token Service (STS) provide temporary, limited-privilege credentials for external users.
Reviews
There are no reviews yet.