AWS Cloud Architecture & Infrastructure 3 — Questions and Answers
Question 1: Which AWS Well-Architected Framework pillar focuses on the ability to recover from failures and meet business demands?
- Performance Efficiency
- Reliability (Correct answer)
- Cost Optimization
- Operational Excellence
Correct answer: Reliability
The Reliability pillar covers the ability of a workload to recover from failures and meet demand.
Question 2: An EC2 instance in a private subnet needs outbound internet access for updates without being reachable from the internet. What should you use?
- Internet Gateway
- NAT Gateway (Correct answer)
- VPC Endpoint
- Egress-only Internet Gateway
Correct answer: NAT Gateway
A NAT Gateway allows instances in a private subnet to initiate outbound internet traffic while remaining unreachable inbound.
Question 3: Which service lets you access AWS services like S3 privately from your VPC without traversing the public internet?
- VPC Endpoint (Correct answer)
- Internet Gateway
- AWS Direct Connect
- Customer Gateway
Correct answer: VPC Endpoint
VPC Endpoints enable private connectivity to supported AWS services without an internet gateway or NAT.
Question 4: What is the recommended way to achieve high availability for an Amazon RDS database?
- Enable read replicas in the same AZ
- Deploy a Multi-AZ configuration (Correct answer)
- Use a larger instance type
- Take frequent manual snapshots
Correct answer: Deploy a Multi-AZ configuration
RDS Multi-AZ maintains a synchronous standby in a different Availability Zone for automatic failover.
Question 5: Which compute pricing model offers the deepest discount but can be interrupted by AWS with short notice?
- On-Demand Instances
- Reserved Instances
- Spot Instances (Correct answer)
- Dedicated Hosts
Correct answer: Spot Instances
Spot Instances use spare capacity at steep discounts but can be reclaimed by AWS with a two-minute warning.
Question 6: A workload requires sub-millisecond latency caching in front of a database. Which service fits best?
- Amazon ElastiCache (Correct answer)
- Amazon RDS
- Amazon DynamoDB
- Amazon Redshift
Correct answer: Amazon ElastiCache
Amazon ElastiCache provides in-memory caching (Redis/Memcached) for microsecond to sub-millisecond latency.
Question 7: Which service provides a dedicated private network connection from on-premises to AWS, bypassing the public internet?
- Site-to-Site VPN
- AWS Direct Connect (Correct answer)
- AWS Transit Gateway
- Amazon VPC Peering
Correct answer: AWS Direct Connect
AWS Direct Connect establishes a dedicated, private physical connection between on-premises and AWS.
AWS Cloud Architecture & Infrastructure 3
Which AWS Well-Architected Framework pillar focuses on the ability to recover from failures and meet business demands?