Quiz: Module 04: IAM - Users, Groups & Policies

Question 1. Which of the following best describes Amazon EC2?

Question 2. In the EC2 instance type name `m5.xlarge`, what does each component represent?

Question 3. True or False: EC2 instance types follow the naming convention `[family][generation].[size]`, where the family indicates the workload optimization, the generation indicates the hardware iteration, and the size determines the CPU and memory allocation.

Question 4. A data science team needs to train a deep learning model that requires GPU acceleration. Which EC2 instance family should they select?

Question 5. Which EC2 instance family uses a burstable CPU credit model, making it cost-effective for workloads that are mostly idle but occasionally spike?

Question 6. In your own words, explain the difference between the C instance family and the R instance family, and give one example use case for each.

Question 7. Which of the following are included in an Amazon Machine Image (AMI)? (Select THREE.)Select multiple

Question 8. A company wants to use a pre-configured AMI that includes WordPress already installed on Amazon Linux. Where should they look?

Question 9. True or False: AMIs are Region-specific. To launch an instance from an AMI in a different Region, you must first copy the AMI to the target Region.

Question 10. A DevOps engineer creates a custom AMI from a fully configured production instance. What is the primary benefit of launching new instances from this custom AMI instead of using user data scripts to install software on every launch?

Question 11. Which EBS volume type provides a baseline of 3,000 IOPS and 125 MiB/s throughput at no additional cost, with the ability to independently scale IOPS and throughput?

Question 12. A database administrator needs storage for a mission-critical Oracle database that requires 100,000 IOPS with sub-millisecond latency. Which EBS volume type is the best choice?

Question 13. Which of the following are characteristics of HDD-based EBS volume types (st1 and sc1)? (Select TWO.)Select multiple

Question 14. True or False: EBS snapshots are incremental, only the blocks that have changed since the last snapshot are saved, making them storage-efficient and cost-effective.

Question 15. An engineer has an unencrypted EBS volume that must now be encrypted to meet a new compliance requirement. What is the correct process?

Question 16. Which of the following statements about EBS volumes are correct? (Select TWO.)Select multiple

Question 17. What is the key difference between instance store volumes and EBS volumes?

Question 18. A company runs a high-performance computing application that needs temporary scratch space for intermediate calculations. The data does not need to survive instance termination. Which storage option is most appropriate?

Question 19. Which of the following is a valid use case for EC2 user data scripts?

Question 20. True or False: By default, EC2 user data scripts run every time an instance is started, including after a stop-and-start cycle.

Question 21. A developer writes the following user data script for an Amazon Linux 2023 instance. What does it do? ```bash #!/bin/bash yum update -y yum install -y httpd systemctl start httpd systemctl enable httpd echo "<h1>Hello from EC2</h1>" > /var/www/html/index.html ```

Question 22. From within a running EC2 instance, which URL can you use to view the user data that was provided at launch?

Question 23. Which EC2 connection method eliminates the need to open inbound port 22, manage SSH key pairs, or use bastion hosts?

Question 24. Which of the following are required for connecting to an EC2 instance using EC2 Instance Connect? (Select TWO.)Select multiple

Question 25. A security team requires that all EC2 connections be logged for auditing and that no inbound ports be opened on production instances. Which connection method meets these requirements?

Question 26. True or False: Security groups for EC2 instances are stateful, meaning that if you allow inbound traffic on a port, the return traffic is automatically allowed regardless of outbound rules.

Question 27. An EC2 instance in a public subnet has a security group that allows inbound HTTP (port 80) from `0.0.0.0/0` and inbound SSH (port 22) from `10.0.0.0/16`. A user at IP address `203.0.113.50` tries to SSH into the instance. What happens?

Question 28. What is the purpose of a launch template in the context of EC2 Auto Scaling?

Question 29. An Auto Scaling group is configured with minimum capacity = 2, desired capacity = 3, and maximum capacity = 10. Currently, 3 instances are running. A scaling policy triggers and determines that 5 instances are needed. How many instances will the Auto Scaling group launch?

Question 30. Which Auto Scaling scaling policy type is the simplest to configure and automatically adjusts the number of instances to maintain a specified metric value, such as average CPU utilization at 50%?

Question 31. True or False: When an Auto Scaling group detects an unhealthy instance through health checks, it terminates the unhealthy instance and automatically launches a replacement.

Question 32. Which of the following health check types can an Auto Scaling group use? (Select TWO.)Select multiple

Question 33. A company runs a web application that experiences predictable traffic spikes every weekday from 8:00 AM to 6:00 PM. Which Auto Scaling scaling policy type is best suited for this pattern?

Question 34. Which EC2 pricing model has no long-term commitment and charges by the second (with a minimum of 60 seconds) at the full listed price?

Question 35. A company has a steady-state production workload that runs 24/7 on `m6i.large` instances. They want to reduce costs with a 1-year commitment. Which pricing model should they consider?

Question 36. What is the key difference between Standard Reserved Instances and Convertible Reserved Instances?

Question 37. Which of the following statements about Savings Plans are correct? (Select TWO.)Select multiple

Question 38. A startup runs a batch data processing pipeline that can tolerate interruptions and checkpoint its progress. The workload is flexible across instance types and Availability Zones. Which pricing model offers the greatest cost savings?

Question 39. True or False: Spot Instances can be interrupted by AWS with a two-minute warning when AWS needs the capacity back, making them unsuitable for workloads that cannot tolerate interruptions such as single-instance databases.

Question 40. Which EC2 pricing option provides a physical server fully dedicated to your use, which can help meet compliance requirements for software licensing that requires per-socket or per-core visibility?

Question 41. What is the difference between Dedicated Hosts and Dedicated Instances?

Question 42. A company needs to deploy a distributed database cluster where the nodes must communicate with extremely low latency. Which placement group strategy should they use?

Question 43. Which placement group strategy distributes instances across distinct underlying hardware to reduce the risk of simultaneous failures, with a limit of 7 instances per Availability Zone per group?

Question 44. True or False: A partition placement group divides instances into logical partitions, where each partition runs on its own set of hardware. This is useful for large distributed workloads like HDFS, HBase, and Cassandra.

Question 45. An EC2 instance needs to retrieve its own public IP address programmatically at runtime. Which service provides this information?

Question 46. What is the IP address used to access the EC2 Instance Metadata Service (IMDS) from within an instance?

Question 47. A solutions architect is designing a three-tier web application on AWS. The application tier runs on EC2 instances that must automatically scale between 2 and 20 instances based on request count, survive the failure of an entire Availability Zone, and use the most cost-effective storage for the boot volume. Describe the Auto Scaling group configuration (including AZ strategy, capacity settings, and scaling policy type) and the EBS volume type you would recommend.

Question 48. Which of the following scenarios correctly matches a workload to the most appropriate EC2 pricing model? (Select TWO.)Select multiple

Question 49. True or False: When you stop an EC2 instance, the root EBS volume is preserved by default, but any instance store volumes attached to the instance lose their data permanently.

Question 50. A company launches an EC2 instance with the default settings. The root EBS volume is not encrypted. The security team now requires all volumes to be encrypted. The company also wants to ensure that all future EBS volumes are automatically encrypted. Describe the steps to (a) encrypt the existing root volume and (b) enable encryption by default for the AWS account.