Associate General Knowledge and Prerequisites Flashcards

Which component of Amazon VPC acts as a virtual firewall controlling inbound and outbound traffic at the instance level?

Answer: Security Group

Security groups are stateful virtual firewalls applied directly to EC2 instances and other resources.

A company wants to migrate its on-premises VMware workloads to AWS with minimal changes. Which service is most appropriate?

Answer: VMware Cloud on AWS

VMware Cloud on AWS lets organizations run VMware SDDC software directly on dedicated AWS infrastructure, enabling lift-and-shift with no re-platforming.

Which AWS service provides a global content delivery network (CDN) to reduce latency for end users?

Answer: Amazon CloudFront

Amazon CloudFront caches content at edge locations worldwide, reducing latency by serving requests closer to users.

What is the maximum size of a single object that can be stored in Amazon S3?

Answer: 5 TB

A single S3 object can be up to 5 TB in size; objects larger than 5 GB must use the multipart upload API.

Which AWS Identity and Access Management concept allows you to grant temporary credentials to an AWS service or external identity?

Answer: IAM Role

IAM Roles provide temporary security credentials that can be assumed by AWS services, applications, or federated users.

Which AWS service automatically distributes incoming application traffic across multiple EC2 instances, containers, and IP addresses?

Answer: Elastic Load Balancing

Elastic Load Balancing (ELB) automatically routes and distributes traffic across healthy registered targets.

A developer wants to deploy code without thinking about servers and only pay for compute time used during execution. Which service fits?

Answer: AWS Lambda

AWS Lambda runs code in response to events and charges only for the milliseconds of compute time consumed.