Unit 2: AWS Storage; Amazon Virtual Private Cloud - Practice Quiz

1 In Amazon S3, what is the fundamental container used to store objects?

2 Amazon S3 is best described as which type of storage?

3 What level of durability is Amazon S3 Standard designed to provide for objects?

4 What is the main purpose of an S3 Lifecycle configuration?

5 Which component uniquely identifies an object within an S3 bucket?

6 Amazon S3 Glacier is primarily designed for which use case?

7 Which AWS service provides a scalable, shared file system that can be mounted by multiple Linux EC2 instances?

8 Amazon FSx for Windows File Server is built on which file-sharing protocol?

9 What is the primary function of AWS Storage Gateway?

10 In the CIDR notation 10.0.0.0/16, what does the /16 represent?

11 A subnet in a VPC is always associated with which of the following?

12 What best describes an AWS Availability Zone?

13 What is an Elastic Network Interface (ENI) in a VPC?

14 How many primary private IP addresses can a single network interface have?

15 Which action does attaching a secondary ENI to an EC2 instance allow?

16 What is the purpose of an Internet Gateway in a VPC?

17 What does a VPC route table contain?

18 At what level does a Security Group operate in a VPC?

19 Which statement about security groups is correct?

20 At what level does a Network ACL control traffic?

21 A developer stores objects in an Amazon S3 bucket and needs to reference a specific object. Which combination uniquely identifies an object within S3?

22 Amazon S3 Standard is designed for (11 nines) durability. What does this durability figure primarily describe?

23 A company wants objects to move to S3 Standard-IA after 30 days and then to Glacier after 90 days, deleting them after 365 days. Which S3 feature automates this?

24 You need to grant a user temporary, time-limited access to a private S3 object without changing bucket permissions. What is the best approach?

25 An archive stored in S3 Glacier Flexible Retrieval must be retrieved. Which retrieval option typically provides the fastest access for a small number of objects?

26 A fleet of Linux EC2 instances across multiple Availability Zones needs a shared file system that scales automatically. Which service fits best?

27 A Windows-based application requires a shared file system supporting SMB protocol and Active Directory integration. Which AWS service is most appropriate?

28 An on-premises application needs low-latency local access to frequently used data while asynchronously backing up all data to S3. Which Storage Gateway mode fits?

29 You create a VPC with CIDR block . Approximately how many IP addresses does this provide?

30 In a subnet with CIDR , how many IP addresses are available for your EC2 instances after AWS reservations?

31 To build a highly available web tier, how should subnets be distributed relative to Availability Zones?

32 What is a key characteristic of an Elastic Network Interface (ENI) that aids high availability?

33 What distinguishes the primary private IP address of an ENI from a secondary one?

34 An administrator wants to create a management network path separate from the main application traffic on a single EC2 instance. What approach achieves this?

35 Instances in a public subnet have public IPs but still cannot reach the internet. Which configuration is most likely missing?

36 In a VPC route table, when two routes could match a packet, how does AWS decide which route to use?

37 A web server's security group allows inbound HTTP but you add no outbound rules changes. Why can the server still send HTTP responses back to clients?

38 Which statement correctly contrasts Network ACLs with security groups?

39 To avoid charges, when should an Elastic IP address be released in AWS?

40 A global application wants to route users to the nearest healthy endpoint using static anycast IPs over the AWS backbone. Which service provides this?

41 You create a VPC with CIDR block 10.0.0.0/16. AWS reserves 5 IP addresses in every subnet. If you carve a subnet 10.0.1.0/24, how many usable host addresses remain for your instances?

42 A team stores 10 million objects in S3 Standard, which offers eleven nines () durability. Statistically, what is the expected timescale over which a single object loss might occur?

43 An object is uploaded to S3 Standard. A lifecycle rule transitions it to S3 Standard-IA after 30 days and to S3 Glacier Flexible Retrieval after 60 days. Why might transitioning small objects to Standard-IA actually increase cost?

44 An ENI is attached as a secondary interface (eth1) to an EC2 instance in a different subnet than eth0. What is a key constraint of this configuration?

45 A subnet's NACL allows inbound HTTP (port 80) but you forgot to add an outbound rule for ephemeral ports. A client sends an HTTP request to a web server in that subnet. What happens?

46 VPC-A (10.0.0.0/16) is peered with VPC-B (10.0.0.0/16). What is the fundamental problem, and does transitive routing help?

47 A private subnet uses a NAT Gateway for outbound internet access. An external host on the internet attempts to initiate a connection to an instance in the private subnet. What is the result?

48 Two EC2 instances in different Availability Zones must share a POSIX-compliant file system with concurrent read/write access. Which solution and configuration is correct?

49 How does AWS Global Accelerator fundamentally differ from Amazon CloudFront in handling user requests?

50 A subnet's route table has: 10.0.0.0/16 → local, 0.0.0.0/0 → igw-xxx, and 10.0.5.0/24 → pcx-yyy (peering). Traffic is destined for 10.0.5.10. Which route is selected?

51 Instance A's security group allows inbound from Instance B's security group ID on port 443. Instance B initiates an HTTPS connection to A. Why does the return traffic succeed even without an outbound rule on A?

52 An archive is stored in S3 Glacier Deep Archive. A compliance audit requires fastest-possible retrieval. Which retrieval option and typical time applies?

53 You allocate an Elastic IP but leave it unassociated with any running instance. What is the billing consequence and the reasoning?

54 A company wants on-premises applications to write to local storage with low latency while asynchronously backing data to S3, keeping a full copy on-prem. Which Storage Gateway mode fits?

55 An EC2 instance in a public subnet has a public IP and the subnet route table points 0.0.0.0/0 to an Internet Gateway, yet it cannot reach the internet. Which is the most likely remaining cause?

56 You assign a secondary private IP to an instance's ENI and want external hosts to reach a service bound to that secondary IP. What additional step is required?

57 You need to split 10.0.0.0/24 into 4 equal subnets. What prefix length and how many usable AWS addresses per subnet result?

58 A high-performance computing workload needs a file system delivering hundreds of GB/s throughput and sub-millisecond latencies, integrated with S3 for input/output data. Which option is designed for this?

59 A pre-signed URL is generated for a GET on a private S3 object with a 1-hour expiry using temporary IAM role credentials. The URL stops working after 20 minutes. What is the most likely reason?

60 A company uses AWS Direct Connect as its primary link to AWS and wants automatic failover to encrypted connectivity if Direct Connect fails. What is the recommended design?