Technology & Digital Applications Flashcards
7 cards from real Cloud Engineer practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Technology & Digital Applications flashcards as text
A cloud engineer needs to process streaming IoT sensor data with sub-second latency. Which managed service is best suited for this use case on AWS?
Answer: Amazon Kinesis Data Streams
Amazon Kinesis Data Streams is purpose-built for real-time streaming data ingestion and processing with millisecond latency.
Which cloud networking concept allows private connectivity between a VPC and on-premises infrastructure without traversing the public internet?
Answer: AWS Direct Connect
AWS Direct Connect establishes a dedicated private network connection from on-premises to AWS, bypassing the public internet.
A team deploys a containerized microservice and wants Kubernetes to automatically add more pod replicas when CPU usage exceeds 70%. Which object should they configure?
Answer: HorizontalPodAutoscaler
HorizontalPodAutoscaler automatically scales the number of pod replicas based on observed CPU or custom metrics.
In a multi-cloud strategy, what is the PRIMARY purpose of using an abstraction layer like Terraform?
Answer: To provide a single IaC language that works across multiple cloud providers
Terraform's provider model lets engineers define infrastructure using a single HCL language across AWS, GCP, Azure, and other providers.
A cloud engineer observes that an application's database queries are slow due to repeated identical lookups. Which solution addresses this with the least refactoring?
Answer: Adding a caching layer with Redis or Memcached
An in-memory cache like Redis stores frequently queried results, dramatically reducing repeated database round-trips without changing application logic.
Which cloud storage class is most cost-effective for data that must be retained for 7 years for compliance but is almost never accessed?
Answer: Glacier Deep Archive
Glacier Deep Archive offers the lowest storage cost on AWS and is designed for long-term archival data with retrieval times of 12 hours or more.
A serverless function needs read/write access to an S3 bucket. What is the most secure way to grant this permission?
Answer: Attach an IAM role with a least-privilege policy to the function
Attaching an IAM role with a scoped policy follows the principle of least privilege and avoids storing long-lived credentials in code or environment variables.