AWS Associate General Knowledge and Prerequisites 3 — Questions and Answers
Question 1: Which component of Amazon VPC acts as a virtual firewall controlling inbound and outbound traffic at the instance level?
- Network ACL
- Security Group (Correct answer)
- Route Table
- Internet Gateway
Correct answer: Security Group
Security groups are stateful virtual firewalls applied directly to EC2 instances and other resources.
Question 2: A company wants to migrate its on-premises VMware workloads to AWS with minimal changes. Which service is most appropriate?
- AWS Application Migration Service
- VMware Cloud on AWS (Correct answer)
- AWS Server Migration Service
- Amazon EC2 Dedicated Hosts
Correct answer: VMware Cloud on AWS
VMware Cloud on AWS lets organizations run VMware SDDC software directly on dedicated AWS infrastructure, enabling lift-and-shift with no re-platforming.
Question 3: Which AWS service provides a global content delivery network (CDN) to reduce latency for end users?
- AWS Global Accelerator
- Amazon Route 53
- Amazon CloudFront (Correct answer)
- AWS Direct Connect
Correct answer: Amazon CloudFront
Amazon CloudFront caches content at edge locations worldwide, reducing latency by serving requests closer to users.
Question 4: What is the maximum size of a single object that can be stored in Amazon S3?
- 5 GB
- 100 GB
- 5 TB (Correct answer)
- 50 TB
Correct answer: 5 TB
A single S3 object can be up to 5 TB in size; objects larger than 5 GB must use the multipart upload API.
Question 5: Which AWS Identity and Access Management concept allows you to grant temporary credentials to an AWS service or external identity?
- IAM User
- IAM Group
- IAM Role (Correct answer)
- IAM Policy
Correct answer: IAM Role
IAM Roles provide temporary security credentials that can be assumed by AWS services, applications, or federated users.
Question 6: Which AWS service automatically distributes incoming application traffic across multiple EC2 instances, containers, and IP addresses?
- AWS Auto Scaling
- Amazon CloudFront
- Elastic Load Balancing (Correct answer)
- Amazon Route 53
Correct answer: Elastic Load Balancing
Elastic Load Balancing (ELB) automatically routes and distributes traffic across healthy registered targets.
Question 7: A developer wants to deploy code without thinking about servers and only pay for compute time used during execution. Which service fits?
- Amazon EC2 Auto Scaling
- AWS Lambda (Correct answer)
- Amazon ECS
- AWS Elastic Beanstalk
Correct answer: AWS Lambda
AWS Lambda runs code in response to events and charges only for the milliseconds of compute time consumed.
AWS Associate General Knowledge and Prerequisites 3
Which component of Amazon VPC acts as a virtual firewall controlling inbound and outbound traffic at the instance level?