1What is virtualization in the context of cloud computing?
Cloud Computing and Virtualization
Easy
A.The physical relocation of data center hardware to another region
B.A technique for compressing data before storing it in the cloud
C.A method of encrypting network traffic between two servers
D.The process of creating a software-based version of a physical resource such as a server
Correct Answer: The process of creating a software-based version of a physical resource such as a server
Explanation:
Virtualization abstracts physical hardware into virtual resources, allowing multiple virtual machines to run on a single physical machine.
Incorrect! Try again.
2Which software component is responsible for creating and managing virtual machines?
Cloud Computing and Virtualization
Easy
A.Firewall
B.Load balancer
C.Compiler
D.Hypervisor
Correct Answer: Hypervisor
Explanation:
A hypervisor (or virtual machine monitor) creates, runs, and manages virtual machines on physical hardware.
Incorrect! Try again.
3Which cloud service model provides virtual machines, storage, and networking as fundamental building blocks?
Cloud Computing Architecture
Easy
A.SaaS (Software as a Service)
B.FaaS (Function as a Service)
C.PaaS (Platform as a Service)
D.IaaS (Infrastructure as a Service)
Correct Answer: IaaS (Infrastructure as a Service)
Explanation:
IaaS delivers fundamental computing infrastructure such as servers, storage, and networking that users manage themselves.
Incorrect! Try again.
4In cloud computing, what does the term elasticity refer to?
Cloud Computing Architecture
Easy
A.The ability to automatically scale resources up or down based on demand
B.The physical stretching of network cables in a data center
C.The permanent reservation of a fixed amount of compute capacity
D.The encryption strength applied to stored data
Correct Answer: The ability to automatically scale resources up or down based on demand
Explanation:
Elasticity allows cloud resources to grow or shrink dynamically to match workload demand.
Incorrect! Try again.
5Which practice helps optimize cloud costs by matching instance size to actual workload needs?
Cloud computing optimization
Easy
A.Over-provisioning
B.Right-sizing
C.Multi-threading
D.Hard-coding
Correct Answer: Right-sizing
Explanation:
Right-sizing involves selecting instance types and sizes that match workload requirements to avoid paying for unused capacity.
Incorrect! Try again.
6What is an AWS Region?
AWS Platform Architecture
Easy
A.A geographic area that contains multiple isolated Availability Zones
B.A single physical server rack in a data center
C.A virtual network inside a single data center
D.A billing account used to track AWS usage
Correct Answer: A geographic area that contains multiple isolated Availability Zones
Explanation:
An AWS Region is a separate geographic area, each containing multiple Availability Zones for fault tolerance.
Incorrect! Try again.
7What is an AWS Availability Zone (AZ)?
AWS Platform Architecture
Easy
A.One or more discrete data centers with redundant power and networking within a Region
B.A global DNS service used to route end-user traffic
C.A pricing tier that offers discounted compute capacity
D.A command-line tool used to manage AWS resources
Correct Answer: One or more discrete data centers with redundant power and networking within a Region
Explanation:
An Availability Zone consists of one or more isolated data centers with independent power, cooling, and networking.
Incorrect! Try again.
8Under the AWS Shared Responsibility Model, which party is responsible for security of the cloud (the underlying infrastructure)?
AWS Reliability and Compliance
Easy
A.The internet service provider
B.AWS
C.A third-party auditor
D.The customer
Correct Answer: AWS
Explanation:
AWS is responsible for security of the cloud (hardware, software, networking, facilities), while customers are responsible for security in the cloud.
Incorrect! Try again.
9What does CLI stand for in AWS CLI?
Working with AWS CLI
Easy
A.Compute Load Indicator
B.Command Line Interface
C.Cloud Logic Interpreter
D.Central Linking Infrastructure
Correct Answer: Command Line Interface
Explanation:
AWS CLI stands for Command Line Interface, a tool for managing AWS services from a terminal.
Incorrect! Try again.
10Which command is used to configure your AWS CLI credentials and default settings?
Working with AWS CLI
Easy
A.aws login
B.aws setup
C.aws configure
D.aws init
Correct Answer: aws configure
Explanation:
The aws configure command prompts for your access key, secret key, default region, and output format.
Incorrect! Try again.
11What does EC2 stand for?
Introduction to EC2
Easy
A.Elastic Container Cloud
B.Elastic Compute Cloud
C.Encrypted Cloud Computing
D.Enterprise Compute Center
Correct Answer: Elastic Compute Cloud
Explanation:
Amazon EC2 stands for Elastic Compute Cloud, a service providing resizable virtual servers in the cloud.
Incorrect! Try again.
12What is user data used for when launching an EC2 instance?
Configure Instance Behavior
Easy
A.Encrypting the root volume of the instance
B.Defining the billing account used for the instance
C.Storing the private SSH key for the instance
D.Running scripts or commands automatically when the instance first boots
Correct Answer: Running scripts or commands automatically when the instance first boots
Explanation:
User data lets you pass startup scripts that run automatically during the instance's first boot to configure it.
Incorrect! Try again.
13Which EC2 placement group strategy packs instances close together on the same hardware to achieve low network latency?
Placement Groups
Easy
A.Spread
B.Scatter
C.Partition
D.Cluster
Correct Answer: Cluster
Explanation:
A cluster placement group groups instances together within a single Availability Zone to provide low-latency, high-throughput networking.
Incorrect! Try again.
14Which EC2 pricing option offers the largest discounts in exchange for a one or three year usage commitment?
Instance Pricing
Easy
A.Reserved Instances
B.Spot Instances
C.On-Demand Instances
D.Dedicated On-Demand Hosts
Correct Answer: Reserved Instances
Explanation:
Reserved Instances provide significant discounts over On-Demand pricing in return for a one or three year term commitment.
Incorrect! Try again.
15Which EC2 purchasing option uses spare AWS capacity at steep discounts but can be interrupted?
Instance Pricing
Easy
A.Spot Instances
B.Reserved Instances
C.Dedicated Hosts
D.Savings Plans
Correct Answer: Spot Instances
Explanation:
Spot Instances use unused EC2 capacity at up to 90% off On-Demand prices, but AWS can reclaim them with short notice.
Incorrect! Try again.
16What happens to data on an EC2 instance store volume when the instance is stopped?
Instance Lifecycle
Easy
A.The data is automatically backed up to Amazon S3
B.The data is retained permanently until manually deleted
C.The data is migrated to an EBS volume
D.The data is lost because instance store is ephemeral
Correct Answer: The data is lost because instance store is ephemeral
Explanation:
Instance store volumes are ephemeral; their data is lost when the instance stops, terminates, or fails.
Incorrect! Try again.
17What is the main purpose of resource tags in AWS?
Resource Tags
Easy
A.To label and organize resources using key-value pairs
B.To automatically scale resources based on load
C.To encrypt the data stored on a resource
D.To grant internet access to a resource
Correct Answer: To label and organize resources using key-value pairs
Explanation:
Tags are key-value pairs that help organize, track, and manage AWS resources, often for cost allocation or filtering.
Incorrect! Try again.
18What are AWS service limits (quotas)?
Service Limits
Easy
A.The number of users allowed to log in simultaneously
B.The amount of money you can spend per month on a service
C.The maximum number of resources you can create for a service in an account
D.The maximum network speed allowed between two instances
Correct Answer: The maximum number of resources you can create for a service in an account
Explanation:
Service limits (quotas) define the maximum amount of resources or operations allowed per account, often adjustable on request.
Incorrect! Try again.
19What does EBS stand for in Amazon EBS?
EC2 Storage volumes
Easy
A.Enterprise Block Storage
B.Encrypted Buffer Store
C.Elastic Backup Service
D.Elastic Block Store
Correct Answer: Elastic Block Store
Explanation:
Amazon EBS stands for Elastic Block Store, which provides persistent block-level storage volumes for EC2 instances.
Incorrect! Try again.
20Which protocol is commonly used to securely connect to a Linux EC2 instance?
Accessing Your EC2 Instance
Easy
A.SSH
B.FTP
C.SMTP
D.HTTP
Correct Answer: SSH
Explanation:
SSH (Secure Shell) is the standard protocol for securely connecting to Linux EC2 instances, typically on port 22.
Incorrect! Try again.
21A company runs 10 physical servers, each at about 15% CPU utilization. They adopt a hypervisor to consolidate these workloads onto fewer machines. Which benefit of virtualization is most directly responsible for the cost savings here?
Cloud Computing and Virtualization
Medium
A.Automatic rewriting of application code for the cloud
B.Guaranteed zero downtime during hardware failure
C.Higher resource utilization through workload consolidation
D.Elimination of all network latency between servers
Correct Answer: Higher resource utilization through workload consolidation
Explanation:
Virtualization lets multiple VMs share one physical host, raising utilization from a wasteful 15% toward a far higher level. This consolidation reduces the number of physical servers needed, cutting hardware and power costs.
Incorrect! Try again.
22An application is designed so that compute, storage, and database tiers can each scale independently without affecting the others. Which cloud architectural principle does this best demonstrate?
Cloud Computing Architecture
Medium
A.Loose coupling between components
B.Tight synchronous coupling
C.Single points of failure consolidation
D.Vertical scaling of a monolith
Correct Answer: Loose coupling between components
Explanation:
Loose coupling means components interact through well-defined interfaces and can scale or fail independently. This improves resilience and lets each tier scale based on its own demand.
Incorrect! Try again.
23A workload runs 24/7 for the next 3 years with steady, predictable usage. To optimize cost, which EC2 purchasing approach is generally the best fit?
Cloud computing optimization
Medium
A.On-Demand Instances only
B.Dedicated Hosts billed hourly
C.Spot Instances for all capacity
D.Reserved Instances or Savings Plans
Correct Answer: Reserved Instances or Savings Plans
Explanation:
Steady, long-running, predictable workloads benefit from the committed-use discounts of Reserved Instances or Savings Plans, which can be significantly cheaper than On-Demand. Spot is unsuitable because it can be interrupted.
Incorrect! Try again.
24A solution must remain available even if an entire data center loses power. Within a single AWS Region, what is the recommended way to achieve this?
AWS Platform Architecture
Medium
A.Deploy resources across multiple Availability Zones
B.Use multiple edge locations in that Region
C.Deploy all resources in one Availability Zone
D.Rely on a single large instance type
Correct Answer: Deploy resources across multiple Availability Zones
Explanation:
Availability Zones are physically isolated data centers within a Region. Spreading resources across multiple AZs protects against the failure of any single data center while keeping low-latency connectivity.
Incorrect! Try again.
25Under the AWS Shared Responsibility Model, who is responsible for patching the guest operating system on an EC2 instance?
AWS Reliability and Compliance
Medium
A.The customer
B.The AWS Marketplace vendor
C.The Availability Zone operator
D.AWS exclusively
Correct Answer: The customer
Explanation:
AWS manages security of the cloud (hardware, hypervisor, facilities), while the customer manages security in the cloud. For EC2, patching the guest OS and applications is the customer's responsibility.
Incorrect! Try again.
26You run an AWS CLI command and receive an UnauthorizedOperation error, yet the credentials are valid. Which is the most likely cause?
Working with AWS CLI
Medium
A.The region flag was omitted
B.The output format is set to JSON
C.The CLI version is outdated
D.The IAM identity lacks permission for that action
Correct Answer: The IAM identity lacks permission for that action
Explanation:
UnauthorizedOperation indicates the credentials are recognized but the associated IAM policy does not grant the requested action. This is an authorization (permissions) problem, not authentication.
Incorrect! Try again.
27A startup needs a mix of 4 vCPUs and high memory for an in-memory cache. Which EC2 instance family is best suited for this requirement?
Introduction to EC2
Medium
A.General purpose (T family burstable)
B.Memory optimized (R family)
C.Compute optimized (C family)
D.Storage optimized (I family)
Correct Answer: Memory optimized (R family)
Explanation:
Memory-optimized (R) instances provide a high ratio of RAM to vCPU, making them ideal for in-memory databases and caches. Compute-optimized favors CPU, and storage-optimized favors local disk throughput.
Incorrect! Try again.
28You want an EC2 instance to automatically install software and run a script the first time it boots. Which feature should you use?
Configure Instance Behavior
Medium
A.An Elastic IP association
B.A placement group
C.User data script
D.Instance metadata tags
Correct Answer: User data script
Explanation:
User data lets you pass a script that runs at launch (by default on first boot) to bootstrap the instance—installing packages or configuring services automatically. Metadata and tags do not execute code.
Incorrect! Try again.
29An HPC workload requires the lowest possible network latency and highest packet-per-second performance between instances. Which placement group strategy should you choose?
Placement Groups
Medium
A.Partition placement group
B.Spread placement group
C.Multi-AZ placement group
D.Cluster placement group
Correct Answer: Cluster placement group
Explanation:
A cluster placement group packs instances close together within a single AZ for low latency and high throughput—ideal for tightly coupled HPC jobs. Spread and partition prioritize fault isolation over latency.
Incorrect! Try again.
30A batch job can tolerate interruption and restart at any time. To minimize cost, which pricing model offers the largest discount compared to On-Demand?
Instance Pricing
Medium
A.Savings Plans
B.Reserved Instances
C.Dedicated Hosts
D.Spot Instances
Correct Answer: Spot Instances
Explanation:
Spot Instances use spare capacity at up to ~90% off On-Demand, but can be reclaimed with short notice. For fault-tolerant, interruptible batch work, Spot provides the deepest discount.
Incorrect! Try again.
31When an EBS-backed EC2 instance is stopped (not terminated), what happens to data on its root EBS volume?
Instance Lifecycle
Medium
A.The data is archived to Glacier automatically
B.The data is permanently deleted
C.The data is moved to an instance store
D.The data is preserved on the EBS volume
Correct Answer: The data is preserved on the EBS volume
Explanation:
Stopping an EBS-backed instance keeps the root EBS volume and its data intact; you can start it again later. Data is only lost on termination (if delete-on-termination is set) or when using instance store.
Incorrect! Try again.
32A finance team wants to break down the monthly AWS bill by department. What is the recommended way to enable this in Cost Explorer?
Resource Tags
Medium
A.Use instance IDs as billing keys
B.Create a separate account per department only
C.Apply cost allocation tags such as Department
D.Rename each EC2 instance manually
Correct Answer: Apply cost allocation tags such as Department
Explanation:
Tagging resources with keys like Department and activating them as cost allocation tags lets Cost Explorer and billing reports group spend by those tags—enabling per-department cost breakdowns.
Incorrect! Try again.
33Your team's deployment fails because you cannot launch more On-Demand instances in a Region. What is the first action to resolve this?
Service Limits
Medium
A.Switch all instances to Spot
B.Request a service quota increase
C.Delete the VPC and recreate it
D.Move the workload to another AWS account permanently
Correct Answer: Request a service quota increase
Explanation:
On-Demand instance counts are governed by service quotas (limits). The correct fix is to request a quota increase via Service Quotas or Support, rather than redesigning the deployment.
Incorrect! Try again.
34An application needs block storage that persists independently of the instance lifecycle and can be detached and reattached to another instance. Which option fits?
EC2 Storage volumes
Medium
A.Instance store volume
B.Amazon S3 bucket
C.Local RAM disk
D.Amazon EBS volume
Correct Answer: Amazon EBS volume
Explanation:
EBS provides network-attached, durable block storage that persists beyond instance stop/termination and can be detached and reattached. Instance store is ephemeral, and S3 is object (not block) storage.
Incorrect! Try again.
35An instance uses an instance store volume for a scratch cache. The instance is stopped and later started on different hardware. What happens to the cached data?
Instance store Volumes
Medium
A.The data moves to EBS
B.The data is snapshotted to S3
C.The data is retained automatically
D.The data is lost
Correct Answer: The data is lost
Explanation:
Instance store is ephemeral and tied to the host hardware. Stopping the instance (or hardware failure) wipes instance store data. Only non-critical, reproducible data like caches should live there.
Incorrect! Try again.
36You launched a Linux EC2 instance and try to SSH in using ssh -i key.pem ec2-user@<ip> but get a Permission denied (publickey) error. The key file has mode 0644. What is the most likely fix?
Accessing Your EC2 Instance
Medium
A.Change the key file permissions to 0400
B.Disable the security group entirely
C.Attach an Elastic IP to the instance
D.Use port 3389 instead of 22
Correct Answer: Change the key file permissions to 0400
Explanation:
SSH refuses to use a private key that is too openly readable. Setting the key to chmod 400 key.pem restricts it to the owner, which SSH requires. Port 3389 is for RDP, not SSH.
Incorrect! Try again.
37A web server instance should accept HTTPS from the internet but allow SSH only from the company office IP. How should the security group be configured?
Securing Your EC2 Instance
Medium
A.Allow 22 from 0.0.0.0/0 and 443 from the office CIDR
B.Deny all inbound and allow all outbound
C.Allow 443 and 22 both from 0.0.0.0/0
D.Allow 443 from 0.0.0.0/0 and 22 from the office CIDR
Correct Answer: Allow 443 from 0.0.0.0/0 and 22 from the office CIDR
Explanation:
HTTPS (443) must be open to the public, while SSH (22) should be restricted to the trusted office CIDR for security. Security groups are stateful allow-lists, so you specify exactly these two rules.
Incorrect! Try again.
38An Auto Scaling group has min=2, max=6, desired=4. A target tracking policy aims to keep average CPU at 50%. If CPU drops to 20% for a sustained period, what will Auto Scaling most likely do?
EC2 Auto Scaling
Medium
A.Terminate all instances in the group
B.Change the desired capacity to 0
C.Scale in toward the minimum of 2 instances
D.Scale out toward the maximum of 6 instances
Correct Answer: Scale in toward the minimum of 2 instances
Explanation:
With CPU well below the 50% target, target tracking reduces capacity (scale in) to save cost, but it will never go below the configured minimum of 2 instances.
Incorrect! Try again.
39You need to run a shell command across 50 EC2 instances without opening SSH or managing keys. Which AWS Systems Manager capability enables this?
AWS System Manager
Medium
A.CloudFront invalidation
B.EBS fast snapshot restore
C.Run Command
D.Elastic Load Balancing
Correct Answer: Run Command
Explanation:
Systems Manager Run Command executes commands on managed instances via the SSM Agent and IAM permissions—no SSH, open ports, or key management required, making it ideal for fleet-wide operations.
Incorrect! Try again.
40Which AWS CLI command correctly lists all EC2 instances in the configured region?
AWS CLI Examples
Medium
A.aws ec2 describe-instances
B.aws ec2 get-instances
C.aws ec2 list-instances
D.aws ec2 show-instances
Correct Answer: aws ec2 describe-instances
Explanation:
The EC2 CLI uses describe-* verbs for read operations. aws ec2 describe-instances returns details of instances; list-instances, get-instances, and show-instances are not valid EC2 commands.
Incorrect! Try again.
41A company runs a Type 1 hypervisor on bare-metal hosts. During a performance audit, they observe that CPU-bound workloads achieve near-native performance, but I/O-heavy workloads suffer. Which virtualization characteristic BEST explains this disparity?
Cloud Computing and Virtualization
Hard
A.CPU-bound tasks are throttled by the hypervisor scheduler more aggressively than I/O
B.Hardware-assisted CPU virtualization (e.g., Intel VT-x) offloads instruction execution, while device I/O often traverses emulation or paravirtualized driver layers that add overhead
C.I/O workloads always bypass the hypervisor entirely, so overhead is impossible
D.Type 1 hypervisors cannot virtualize CPUs, so they fall back to full software emulation
Correct Answer: Hardware-assisted CPU virtualization (e.g., Intel VT-x) offloads instruction execution, while device I/O often traverses emulation or paravirtualized driver layers that add overhead
Explanation:
Modern CPUs provide hardware extensions that let guest instructions run nearly natively. Device I/O, however, frequently passes through emulated or paravirtualized drivers, introducing latency unless SR-IOV or passthrough is used.
Incorrect! Try again.
42In a well-designed cloud architecture following the shared responsibility model for IaaS, which combination of concerns remains the CUSTOMER's responsibility?
Cloud Computing Architecture
Hard
A.Physical facility security, hypervisor patching, and network cabling
B.Edge location DDoS mitigation infrastructure and global backbone routing
C.Hardware lifecycle, host firmware, and data center cooling
D.Guest OS patching, application code, and configuration of security groups
Correct Answer: Guest OS patching, application code, and configuration of security groups
Explanation:
Under IaaS shared responsibility, the provider manages the physical and virtualization layers while the customer manages the guest OS, applications, and security configuration such as security groups and IAM.
Incorrect! Try again.
43An application has a steady baseline of 40 instances plus unpredictable spikes up to 100 instances for a few hours daily. To minimize cost while meeting demand, which purchasing strategy is MOST optimal?
Cloud computing optimization
Hard
A.On-Demand for all 100 instances at all times to maximize flexibility
B.Reserved/Savings Plans for the 40 baseline instances and On-Demand or Spot for the variable spike capacity
C.Reserved Instances for all 100 instances to lock in the lowest rate
D.Spot Instances for all capacity including the steady baseline to minimize cost
Correct Answer: Reserved/Savings Plans for the 40 baseline instances and On-Demand or Spot for the variable spike capacity
Explanation:
Commit to discounted pricing for predictable baseline load and use flexible On-Demand or interruptible Spot for the variable peaks. Reserving all 100 wastes money off-peak; all-Spot risks interruption for the baseline.
Incorrect! Try again.
44A multi-region application must survive the complete failure of an entire AWS Availability Zone without downtime. Which design principle is NON-negotiable to achieve this within a single region?
AWS Platform Architecture
Hard
A.Distribute resources across at least two AZs with load balancing and data replication between them
B.Deploy all resources in a single AZ but take frequent EBS snapshots
C.Rely on the AWS global backbone to automatically relocate instances
D.Use a larger instance type so the single AZ has more fault tolerance
Correct Answer: Distribute resources across at least two AZs with load balancing and data replication between them
Explanation:
AZs are isolated failure domains. Surviving an AZ outage requires compute and data to be redundantly spread across multiple AZs with traffic distributed by a load balancer. Snapshots or larger instances in one AZ do not help.
Incorrect! Try again.
45An organization under HIPAA must prove that all API activity in its AWS account is logged immutably and retained. Which service combination directly satisfies the audit-logging requirement?
AWS Reliability and Compliance
Hard
A.Amazon CloudWatch metrics with a 15-month retention dashboard
B.AWS Config rules evaluating resource compliance in real time only
C.VPC Flow Logs capturing all network packet payloads for inspection
D.AWS CloudTrail with log file integrity validation delivering to an S3 bucket with Object Lock
Correct Answer: AWS CloudTrail with log file integrity validation delivering to an S3 bucket with Object Lock
Explanation:
CloudTrail records API activity; integrity validation plus S3 Object Lock provides tamper-evident, immutable retention. CloudWatch handles metrics, Config tracks configuration state, and VPC Flow Logs capture network metadata (not full payloads).
Incorrect! Try again.
46A script running on an EC2 instance uses the AWS CLI but you want it to never store long-lived credentials on disk. Which configuration achieves least-privilege, credential-free operation?
Working with AWS CLI
Hard
A.Hardcode credentials in the script and encrypt the script file at rest
B.Export AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY in /etc/environment
C.Store the access key and secret key in ~/.aws/credentials with 600 permissions
D.Attach an IAM role to the instance so the CLI retrieves temporary credentials from the instance metadata service
Correct Answer: Attach an IAM role to the instance so the CLI retrieves temporary credentials from the instance metadata service
Explanation:
An instance profile (IAM role) lets the CLI automatically obtain short-lived, auto-rotated credentials from the metadata service, eliminating stored long-lived keys. All other options persist static credentials somewhere.
Incorrect! Try again.
47You launch an EC2 instance from an AMI in us-east-1. You then need an identical instance in eu-west-1. Why can't you simply reference the same AMI ID directly?
Introduction to EC2
Hard
A.AMIs expire after 24 hours and must always be recreated from scratch
B.AMIs can only be used in the Availability Zone where they were created
C.AMI IDs are globally unique and work in any region without changes
D.AMI IDs are region-scoped; you must copy the AMI to the target region, which generates a new AMI ID there
Correct Answer: AMI IDs are region-scoped; you must copy the AMI to the target region, which generates a new AMI ID there
Explanation:
AMIs are regional resources. To use one in another region you copy it, producing a distinct AMI ID in the destination region. They are not AZ-scoped nor globally reusable by the same ID.
Incorrect! Try again.
48An EC2 instance must run a bootstrap script exactly once at first boot to install software, but the same script must NOT re-run on reboot. Which mechanism best enforces this?
Configure Instance Behavior
Hard
A.A cron job added via the AMI that triggers on every system start
B.User data, which by default executes only on the first boot of the instance
C.User data with the [always] directive to force re-execution
D.Instance metadata, which runs scripts on every boot automatically
Correct Answer: User data, which by default executes only on the first boot of the instance
Explanation:
By default cloud-init runs user data only on the first boot. Using the [always] directive would make it run on every boot, which is the opposite of the requirement.
Incorrect! Try again.
49A tightly-coupled HPC workload needs the lowest possible inter-node network latency and highest packet-per-second performance. However, the team also fears correlated hardware failure. Which trade-off correctly describes a Cluster placement group?
Placement Groups
Hard
A.It spreads each instance onto distinct hardware across AZs, maximizing both latency and fault isolation
B.It guarantees instances never share a rack while still delivering single-digit microsecond latency between them
C.It packs instances onto the same high-bisection-bandwidth rack for low latency, but concentrates them so a single hardware failure can affect many instances simultaneously
D.It is identical to a Spread placement group except it allows more than seven instances per AZ
Correct Answer: It packs instances onto the same high-bisection-bandwidth rack for low latency, but concentrates them so a single hardware failure can affect many instances simultaneously
Explanation:
Cluster placement groups co-locate instances for lowest latency and high throughput, trading off fault isolation. Spread groups do the opposite by placing instances on distinct hardware.
Incorrect! Try again.
50A fault-tolerant batch job can checkpoint and resume at any point. It runs intermittently and can tolerate interruptions. The job runs ~6 hours per day with no fixed schedule. Which pricing model minimizes cost?
Instance Pricing
Hard
A.A 3-year Standard Reserved Instance to lock in the deepest discount
B.Spot Instances, leveraging spare capacity at steep discounts with checkpointing to handle interruptions
C.On-Demand Instances to avoid any possibility of interruption
D.Dedicated Hosts billed hourly for compliance isolation
Correct Answer: Spot Instances, leveraging spare capacity at steep discounts with checkpointing to handle interruptions
Explanation:
An interruptible, checkpointable, intermittent workload is the textbook Spot use case, offering up to ~90% savings. Reserved pricing suits steady 24/7 usage; On-Demand and Dedicated Hosts cost more here.
Incorrect! Try again.
51You stop (not terminate) an EBS-backed instance and start it again later. Which statement about the instance's state is CORRECT?
Instance Lifecycle
Hard
A.The instance keeps the same host, same public IP, and all instance store data is preserved
B.The private IP changes but the public IPv4 address is always retained across a stop/start
C.The instance typically moves to new underlying hardware and receives a new public IPv4 address unless an Elastic IP is attached, while EBS data persists
D.Both the EBS root volume and any instance store volumes retain their data across the stop/start
Correct Answer: The instance typically moves to new underlying hardware and receives a new public IPv4 address unless an Elastic IP is attached, while EBS data persists
Explanation:
On stop/start, EBS volumes persist and the private IP is retained, but the instance may land on new hardware and gets a new public IPv4 (unless an EIP is used). Instance store data is lost on stop.
Incorrect! Try again.
52A finance team needs per-project cost allocation in Cost Explorer. Developers already tag resources with Project=X, but the costs still appear ungrouped. What is the MOST likely missing step?
Resource Tags
Hard
A.Cost allocation requires resources to be in a single AZ to be grouped
B.The tag key must be exactly aws:Project to be billable
C.The Project tag has not been activated as a cost allocation tag in the Billing console
D.Tags cannot be used for cost allocation; only account IDs can group costs
Correct Answer: The Project tag has not been activated as a cost allocation tag in the Billing console
Explanation:
User-defined tags must be explicitly activated as cost allocation tags in the Billing console before they appear as grouping dimensions in Cost Explorer and billing reports.
Incorrect! Try again.
53A deployment pipeline suddenly fails with a VcpuLimitExceeded error when launching On-Demand instances, even though you deleted old instances yesterday. What is the correct interpretation and remedy?
Service Limits
Hard
A.On-Demand vCPU quotas are per-region and measured in aggregate vCPUs; request a quota increase via Service Quotas for the relevant instance family
B.The error means your account is suspended for abuse and needs support reinstatement
C.The limit is a hard cap that can never be raised; you must switch regions permanently
D.Deleting instances does not free quota for 30 days, so you must wait
Correct Answer: On-Demand vCPU quotas are per-region and measured in aggregate vCPUs; request a quota increase via Service Quotas for the relevant instance family
Explanation:
On-Demand limits are now vCPU-based per region per instance family. If current launches exceed the quota, you request an increase through Service Quotas. The quota is adjustable, not a permanent hard cap.
Incorrect! Try again.
54A database needs sustained 20,000 IOPS at consistent low latency regardless of volume size. Among EBS volume types, which choice meets this requirement MOST directly?
EC2 Storage volumes
Hard
A.Throughput Optimized HDD (st1), optimized for large sequential throughput
B.General Purpose SSD (gp2), relying on burst credits to reach the target
C.Provisioned IOPS SSD (io1/io2), where you specify IOPS independently of capacity
D.Cold HDD (sc1), the lowest-cost option for infrequently accessed data
Correct Answer: Provisioned IOPS SSD (io1/io2), where you specify IOPS independently of capacity
Explanation:
Provisioned IOPS SSD lets you provision a specific, consistent IOPS level decoupled from volume size, ideal for latency-sensitive databases. gp2 depends on size/credits; HDD types target throughput, not high IOPS.
Incorrect! Try again.
55An instance with an instance store volume is used as a high-speed scratch cache. The team is surprised data vanished. Which scenario does NOT cause instance store data loss?
Instance store Volumes
Hard
A.The underlying host hardware failing
B.Terminating the instance
C.Rebooting the instance
D.Stopping and later starting the instance
Correct Answer: Rebooting the instance
Explanation:
Instance store (ephemeral) data survives a reboot because the instance stays on the same host. It is lost on stop/start (host change), host failure, or termination.
Incorrect! Try again.
56You can no longer SSH to a Linux instance after losing the private key. Which approach recovers access WITHOUT losing the EBS data?
Accessing Your EC2 Instance
Hard
A.Use the AWS console to display the original private key for download again
B.Terminate the instance and launch a new one from the same AMI with a new key pair
C.Reboot the instance repeatedly until SSH re-enables the old key
D.Stop the instance, detach its root EBS volume, attach it to a helper instance, inject a new public key into authorized_keys, then reattach and start
Correct Answer: Stop the instance, detach its root EBS volume, attach it to a helper instance, inject a new public key into authorized_keys, then reattach and start
Explanation:
AWS never stores your private key, so it cannot be re-downloaded. The volume-swap technique (or using SSM/EC2 Instance Connect) lets you add a new key while preserving the EBS data.
Incorrect! Try again.
57A web server's security group allows inbound TCP 443 from 0.0.0.0/0. Outbound rules are left at default. A request from a client on 443 arrives; the response leaves the instance. Why does the response succeed even though no explicit outbound rule for the ephemeral return port exists?
Securing Your EC2 Instance
Hard
A.Security groups are stateful, so return traffic for an allowed inbound connection is automatically permitted
B.The response uses port 443 outbound, matching the inbound rule
C.Network ACLs override the security group and permit the return traffic
D.Security groups are stateless, so the default allow-all outbound rule is required to match the return port
Correct Answer: Security groups are stateful, so return traffic for an allowed inbound connection is automatically permitted
Explanation:
Security groups are stateful: once inbound traffic is allowed, the corresponding response is automatically allowed regardless of outbound rules. Network ACLs, by contrast, are stateless.
Incorrect! Try again.
58An Auto Scaling group has a target tracking policy on 50% average CPU. During a brief spike, it scales out, then CPU drops and it immediately scales in, only to spike again moments later causing thrashing. Which single adjustment MOST directly reduces this flapping?
EC2 Auto Scaling
Hard
A.Switch to a manual desired capacity and disable scaling policies
B.Set the maximum capacity equal to the minimum capacity
C.Configure appropriate cooldown/warm-up periods so metrics stabilize before further scaling actions
D.Lower the target CPU to 20% so scaling happens sooner
Correct Answer: Configure appropriate cooldown/warm-up periods so metrics stabilize before further scaling actions
Explanation:
Cooldown and instance warm-up periods prevent reactive, rapid scale-in/scale-out cycles by letting metrics settle. Lowering the target or pinning capacity addresses symptoms, not the thrashing cause.
Incorrect! Try again.
59A fleet of EC2 instances in a private subnet with no internet access must receive patches and run remote commands centrally, without opening inbound ports or using SSH keys. Which Systems Manager setup satisfies this?
AWS System Manager
Hard
A.Assign public IPs to all instances so the SSM Agent can reach the service
B.Use EC2 Instance Connect over a NAT gateway with a shared SSH key
C.Open inbound TCP 22 from the SSM service IP ranges in the security group
D.Install the SSM Agent, attach an instance role granting SSM permissions, and create VPC interface endpoints for the SSM services
Correct Answer: Install the SSM Agent, attach an instance role granting SSM permissions, and create VPC interface endpoints for the SSM services
Explanation:
SSM uses an outbound agent model with no inbound ports or SSH keys. For private subnets with no internet, VPC interface endpoints for ssm, ssmmessages, and ec2messages allow the agent to connect privately.
Incorrect! Try again.
60Which AWS CLI command correctly returns ONLY the instance IDs of running instances tagged Env=prod, using server-side filtering?
describe-instances with --filters applies server-side filtering by tag and state, and --query uses JMESPath to project only the instance IDs. The other commands use non-existent subcommands or invalid syntax.
Incorrect! Try again.
Did this save you a night before the exam?
LPU Notes is free, and it stays free. Ads cover part of the server bill.
The rest comes out of a student's own pocket: the domain, the storage,
and keeping the site up through the weeks everyone needs it at once.
The payment button didn't load. An ad blocker or a filtered network is the usual reason.
to try again.
Nothing here is ever locked, and nothing unlocks. Chip in only if it was worth it.
What it pays for →