--- title: "AWS: Cloud Services & Architecture Fundamentals" description: "Test your knowledge of AWS fundamentals with a quiz covering key services, architecture, security, and best practices." author: "Mohammad Abu Mattar" canonical: https://mkabumattar.com/quizzes/post/aws-architecture-essentials-quiz --- # AWS: Cloud Services & Architecture Fundamentals Welcome to the AWS Basics Quiz! This quiz covers fundamental AWS concepts and best practices. Each question is multiple-choice, and you'll find hints to help you along the way. Good luck! ## Questions ### 1. Which AWS service allows you to build and scale generative AI applications using foundation models (FMs)? - Amazon SageMaker - Amazon Bedrock - Amazon Lex - Amazon Rekognition **Hint:** Think of the 'bedrock' or foundation for AI apps. ### 2. Under the AWS Shared Responsibility Model, which task is the customer's responsibility? - Physical security of data centers - Patching the host virtualization layer - Configuration of security groups - Disposal of decommissioned hardware **Hint:** Customers handle settings and data; AWS handles the physical hardware. ### 3. Which storage class is most cost-effective for long-term archiving with retrieval times of several hours? - S3 Standard - S3 Glacier Instant Retrieval - S3 Glacier Deep Archive - S3 Intelligent-Tiering **Hint:** The 'Deepest' storage for the lowest price. ### 4. Which AWS service provides a central hub to manage resources across multiple AWS accounts? - AWS Organizations - AWS Resource Explorer - AWS Control Tower - AWS Systems Manager **Hint:** Used for consolidated billing and account hierarchy. ### 5. Which EC2 instance purchasing option offers the deepest discount for fault-tolerant applications? - On-Demand Instances - Reserved Instances - Spot Instances - Dedicated Hosts **Hint:** Think of a 'spot market' for spare capacity. ### 6. Which pillar of the Well-Architected Framework focuses on running and monitoring systems effectively? - Security Pillar - Reliability Pillar - Operational Excellence Pillar - Performance Efficiency Pillar **Hint:** Focuses on 'How we work' and 'How we improve'. ### 7. Which service provides a dedicated private network connection from on-premises to AWS? - AWS Site-to-Site VPN - AWS Direct Connect - Amazon Route 53 - AWS Transit Gateway **Hint:** It is a 'Direct' physical cable connection. ### 8. Which service automatically distributes application traffic across multiple targets like EC2? - AWS Auto Scaling - Amazon CloudFront - Elastic Load Balancing - AWS Global Accelerator **Hint:** It 'balances' the 'load'. ### 9. What is the primary purpose of an AWS IAM Role? - Provide long-term credentials - Define a collection of users - Grant temporary permissions - Store Root user passwords **Hint:** Used by EC2 instances to talk to S3 without storing keys. ### 10. Which AWS service is a serverless, NoSQL database designed for high-performance at any scale? - Amazon RDS - Amazon Aurora - Amazon DynamoDB - Amazon Redshift **Hint:** It is 'Dynamic' and serverless. ### 11. Which service is best suited for petabyte-scale data warehousing and complex analytics? - Amazon Athena - Amazon Redshift - Amazon EMR - AWS Glue **Hint:** Think of 'shifting' data into a warehouse. ### 12. Which tool allows you to estimate the cost of an AWS environment before you begin building it? - AWS Budgets - AWS Cost Explorer - AWS Pricing Calculator - AWS Trusted Advisor **Hint:** A 'calculator' for future costs. ### 13. What is the minimum number of Availability Zones (AZs) found in an AWS Region? - At least one - At least two - At least three - At least five **Hint:** AWS design standards require multiple 'locations' for redundancy. ### 14. Which service provides a stateful virtual firewall for EC2 instances to control traffic? - Network ACL - Security Group - AWS WAF - AWS Shield **Hint:** It is 'stateful' and attached directly to the instance. ### 15. Which service tracks user activity and API usage across your entire AWS infrastructure? - Amazon CloudWatch - AWS CloudTrail - AWS Config - AWS Trusted Advisor **Hint:** It leaves a 'trail' of who did what. ### 16. What is the term for the ability to scale resources up and down based on changing demand? - High Availability - Fault Tolerance - Elasticity - Durability **Hint:** Like a rubber band. ### 17. Which AWS service is used to manage and rotate database credentials and API keys? - AWS KMS - AWS Secrets Manager - AWS Systems Manager - AWS Certificate Manager **Hint:** It 'manages' your 'secrets'. ### 18. Which service provides a content delivery network (CDN) to speed up delivery of web content? - Amazon Route 53 - AWS Direct Connect - Amazon CloudFront - AWS Global Accelerator **Hint:** Content is delivered at the 'front' of the 'cloud'. ### 19. In the Shared Responsibility Model, who is responsible for encrypting data at rest? - AWS Only - The Customer - AWS and Customer - Third-party vendors **Hint:** The data belongs to the customer. ### 20. Which service provides automated security assessments for EC2 instance vulnerabilities? - AWS Artifact - Amazon Inspector - AWS Shield - Amazon GuardDuty **Hint:** It 'inspects' your instances for vulnerabilities. ### 21. What does the AWS 'Total Cost of Ownership' (TCO) concept help businesses compare? - Monthly vs. Annual bills - On-premises vs. Cloud - Compute vs. Serverless - Storage vs. Network **Hint:** Cloud vs. Physical hardware. ### 22. Which service allows you to run code in response to events without managing servers? - Amazon EC2 - AWS Lambda - Amazon Lightsail - AWS Batch **Hint:** The face of serverless compute. ### 23. Which support plan provides access to a dedicated Technical Account Manager (TAM)? - Developer Plan - Business Plan - Enterprise Plan - Basic Plan **Hint:** The highest tier of support. ### 24. Which service is used to manage and deploy SSL/TLS certificates for AWS services? - AWS Key Management - AWS Directory - AWS Certificate Manager - AWS Identity Management **Hint:** It 'manages' your 'certificates'. ### 25. What is the primary function of Amazon Route 53? - Content Delivery Network - Domain Name System service - Elastic Load Balancing - Virtual Private Cloud **Hint:** It 'routes' traffic using port 53. ### 26. Which service allows you to create a logically isolated section of the AWS Cloud? - AWS Direct Connect - Amazon VPC - Amazon Route 53 - AWS CloudFormation **Hint:** Your 'Private Cloud' inside AWS. ### 27. Which AWS service is used to migrate databases to AWS with minimal downtime? - AWS Snowball - AWS DMS - AWS DataSync - AWS Discovery Service **Hint:** Database Migration... Service. ### 28. Which service provides a simple way to govern a secure, multi-account environment? - AWS Organizations - AWS Control Tower - AWS Config - AWS Service Catalog **Hint:** It 'controls' the 'tower' of accounts. ### 29. Which service is a managed message broker for Apache ActiveMQ and RabbitMQ? - Amazon SQS - Amazon SNS - Amazon MQ - Amazon Kinesis **Hint:** Same name as the protocol. ### 30. What is an AWS 'Edge Location' primarily used for? - Running EC2 instances - Hosting primary databases - Caching content via CloudFront - Storing S3 Glacier backups **Hint:** The 'edge' of the network.