AWS Quiz 1

June 2020
M	T	W	T	F	S	S
1	2	3	4	5	6	7
8	9	10	11	12	13	14
15	16	17	18	19	20	21
22	23	24	25	26	27	28
29	30

May 15, 2019 by debashish in AWS

AWS Quiz 1

Please wait while the activity loads.
If this activity does not load, try refreshing your browser. Also, this page requires javascript. Please visit using a browser with javascript enabled.

If loading fails, click here to try again

Answer these 5 simple questions on AWS and judge where you stand with your knowledge about this Cloud provider.

Start

Congratulations - you have completed AWS Quiz 1.

You scored %%SCORE%% out of %%TOTAL%%.

Your performance has been rated as %%RATING%%

Your answers are highlighted below.

Question 1

As a Solutions Architect you are designing a shared service for hosting containers from several customers on Amazon ECS. These containers will call several AWS services. However, a container from one customer should not be able access data from another customer. Which of the below solutions should you employ to satisfy this requirement?

A	IAM Instance profile for EC2 Instances
B	IAM roles for EC2 Instances
C	Security Group rules
D	IAM roles for tasks

Question 1 Explanation:

With IAM roles for Amazon ECS tasks, you can specify an IAM role to be used by the containers in a task. Applications are required to sign their AWS API requests with AWS credentials, and this feature provides a strategy to manage credentials for your application’s use. This is similar to how Amazon EC2 instance profiles provide credentials to EC2 instances.

Question 2

Your company presently hosts huge amount of data on its on-premises location. You have been told by the CIO that the company wants to store the backups of this data on AWS while continuing to provide a low-latency access to the entire dataset. Which is the most efficient way to achieve this?

A	Create EBS Volumes and store the data.
B	Create EBS Snapshots and store the data.
C	Use Amazon Glacier.
D	Use Storage Gateway Stored volumes.

Question 2 Explanation:

By using stored volumes, you can store your primary data locally, while asynchronously backing up that data to AWS. Stored volumes provide your on-premises applications with low-latency access to their entire datasets. At the same time, they provide durable, offsite backups. You can create storage volumes and mount them as iSCSI devices from your on-premises application servers. Data written to your stored volumes is stored on your on-premises storage hardware. This data is asynchronously backed up to Amazon S3 as Amazon Elastic Block Store (Amazon EBS) snapshots.

Question 3

You have been tasked with architecting an application in AWS. The architecture would consist of EC2, the Classic Load Balancer, Auto Scaling and Route 53. There is a directive to ensure that Blue-Green deployments are possible in this architecture. Which routing policy could you ideally use in Route 53 for achieving Blue-Green deployments?

A	Latency
B	Weighted
C	Failover
D	Simple
E	Multivalue answer

Question 3 Explanation:

AWS Documentation mentions that Weighted routing policy is good for testing new versions of software and is the ideal approach for Blue-Green deployments. Weighted routing lets you associate multiple resources with a single domain name (example.com) or subdomain name (acme.example.com) and choose how much traffic is routed to each resource. For more information on Route 53 routing policies, please visit the following URL: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html

Question 4

Bounty Airlines has couple of EC2 Instances hosted inside a VPC in a private subnet. Due to a new feature being added these instances now need to access resources stored in a S3 bucket. However, due to security constraints the traffic should not traverse the internet. Which of the following would help cater to this requirement?

A	Internet Gateway
B	NAT Instance
C	Virtual Private Gateway
D	NAT Gateway
E	VPC Endpoint

Question 4 Explanation:

A VPC endpoint enables you to privately connect your VPC to supported AWS services and VPC endpoint services powered by PrivateLink without requiring an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection. Instances in your VPC do not require public IP addresses to communicate with resources in the service. Traffic between your VPC and the other service does not leave the Amazon network. For more information visit https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-endpoints.html

Question 5

You have been directed to deploy your Spring Boot application on your Amazon EC2 production instances. Your application makes AWS API calls. How could you securely pass credentials to the application to do so?

A	Hard-code the API credentials into your application (example using Java property file).
B	Convey the API credentials to the instance using Instance userdata.
C	Assign IAM roles to the EC2 Instances.
D	Store the API credentials as an object in Amazon S3.

Question 5 Explanation:

AWS clearly states that we should use roles to delegate access to users, applications, or services that don’t normally have access to our AWS resources. It is not a good practice to directly use IAM credentials for a production based application.

Once you are finished, click the button below. Any items you have not completed will be marked incorrect. Get Results

There are 5 questions to complete.

←

List

→

Return

Shaded items are complete.

1	2	3	4	5
End

Return

Tagged with: Amazon, AWS, Cloud

TQ: Test your Tech Quotient

Browse By

Calendar

Leave a Reply Cancel reply