Amazon Web Services Flashcards
7 cards from real Architecting on AWS Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Amazon Web Services flashcards as text
Which AWS global infrastructure component caches content at locations close to end users to reduce latency for web applications?
Answer: Amazon CloudFront Edge Locations
CloudFront Edge Locations are globally distributed points of presence that cache content and serve it from the location nearest to the user.
A financial services company must ensure API keys and database passwords are rotated automatically and never hardcoded. Which AWS service is purpose-built for this?
Answer: AWS Secrets Manager
AWS Secrets Manager stores, rotates, and manages access to secrets such as database credentials and API keys automatically.
Which AWS compute service is best for running event-driven code in response to triggers such as S3 uploads or API Gateway calls without provisioning servers?
Answer: AWS Lambda
AWS Lambda runs code in response to triggers and automatically manages the compute resources, charging only for execution time.
What is the maximum size of a single object that can be stored in Amazon S3?
Answer: 5 TB
Amazon S3 supports individual objects up to 5 TB; objects larger than 5 GB must use the multipart upload API.
An architect needs to connect dozens of VPCs and on-premises networks through a central hub with minimal operational overhead. Which service is best suited?
Answer: AWS Transit Gateway
AWS Transit Gateway acts as a network transit hub, enabling transitive routing between thousands of VPCs and on-premises networks.
Which IAM policy evaluation rule applies when there is a conflict between an explicit Deny and an explicit Allow in the same account?
Answer: Deny takes precedence
In IAM policy evaluation, an explicit Deny always overrides any Allow, regardless of the order or number of policies.
A company wants to run a containerized batch processing job that starts, completes work, and terminates without a long-running cluster. Which service pattern is most cost-effective?
Answer: AWS Batch with Fargate compute
AWS Batch with Fargate compute automatically provisions resources for batch jobs, runs them to completion, and terminates with no idle cluster costs.