Unit 1: Cloud Fundamentals and Security - Practice Quiz

INT364 — Cloud Architecture And Implementation-Ii 60 Questions
0 Correct 0 Wrong 60 Left
0/60

1 Which AWS service centrally manages backup policies across supported AWS resources?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Easy
A. AWS Backup
B. AWS Artifact
C. AWS Config
D. AWS Shield

2 Which Amazon S3 feature automatically copies objects from one AWS Region to another?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Easy
A. S3 Event Notifications
B. S3 Object Lock
C. S3 Cross-Region Replication
D. S3 Transfer Acceleration

3 Which AWS service can direct users to a healthy disaster recovery endpoint through DNS failover?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Easy
A. Amazon CloudFront
B. AWS Direct Connect
C. Amazon Route 53
D. AWS Transit Gateway, which connects multiple VPCs and on-premises networks through a central networking hub

4 Which AWS service uses state machines to coordinate multiple steps in a recovery workflow?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Easy
A. AWS Trusted Advisor
B. AWS CloudTrail
C. AWS Cost Explorer
D. AWS Step Functions

5 What is the main activity performed before a disaster in the Backup and Restore pattern?

Recovery architecture pattern: Backup and Restore Easy
A. Maintaining full duplicate capacity
B. Running two active environments
C. Serving traffic from both Regions
D. Creating regular data backups

6 Which disaster recovery pattern usually has the lowest ongoing infrastructure cost?

Recovery architecture pattern: Backup and Restore Easy
A. Pilot Light
B. Backup and Restore
C. Multi-Site Active-Active
D. Warm Standby

7 What must happen to backed-up data before an application can fully resume after a disaster?

Recovery architecture pattern: Backup and Restore Easy
A. It must be archived
B. It must be restored
C. It must be compressed
D. It must be deleted

8 Compared with the other listed recovery patterns, Backup and Restore generally has which recovery characteristic?

Recovery architecture pattern: Backup and Restore Easy
A. A recovery process that continuously serves production traffic from multiple active Regions
B. An instant recovery time
C. A longer recovery time
D. A zero recovery time

9 In a Pilot Light architecture, which part of the workload typically remains running in the recovery Region?

Recovery architecture pattern: Pilot Light Easy
A. The critical core components
B. The complete production environment
C. The entire analytics environment
D. The full user-facing capacity

10 What usually happens to application servers during Pilot Light recovery?

Recovery architecture pattern: Pilot Light Easy
A. They are scaled up or started
B. They remain fully active everywhere
C. They are replaced only by local desktop computers used by the operations team
D. They are permanently deleted

11 Which statement best describes the recovery environment in the Pilot Light pattern?

Recovery architecture pattern: Pilot Light Easy
A. No recovery resources are prepared
B. All production services are active
C. Both Regions always process equal traffic
D. Only essential services are active

12 Pilot Light generally provides faster recovery than which pattern?

Recovery architecture pattern: Pilot Light Easy
A. Multi-Site
B. Backup and Restore
C. Warm Standby
D. Active-Active

13 What is maintained in the recovery Region under a Warm Standby pattern?

Recovery architecture pattern: Warm Standby Easy
A. A scaled-down functional environment
B. A full environment serving equal traffic
C. A disconnected environment that can be activated only after all resources are manually redesigned
D. A backup file with no infrastructure

14 What is commonly required after failing over to a Warm Standby environment?

Recovery architecture pattern: Warm Standby Easy
A. Creating the first data backup
B. Removing all replicated data
C. Designing a new application
D. Scaling resources to production capacity

15 How does Warm Standby differ from Pilot Light?

Recovery architecture pattern: Warm Standby Easy
A. It stores only offline backups
B. It always serves half of all production requests
C. It runs a functional application stack
D. It runs no application components

16 Compared with Multi-Site Active-Active, Warm Standby usually has which cost characteristic?

Recovery architecture pattern: Warm Standby Easy
A. Identical ongoing cost
B. No infrastructure cost because the entire standby environment exists only as archived documentation
C. Lower ongoing cost
D. Higher ongoing cost

17 In a Multi-Site Active-Active configuration, how many sites normally serve production traffic?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Easy
A. No active sites
B. Exactly one site
C. One offline backup site
D. Two or more sites

18 Which recovery pattern generally provides the shortest recovery time?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Easy
A. Multi-Site Active-Active
B. Pilot Light
C. Backup and Restore
D. Warm Standby

19 What is a key data requirement for an Active-Active architecture?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Easy
A. Data must remain synchronized
B. Data must remain only on tape
C. Data must be deleted daily
D. Data must be stored in one unavailable Region until a recovery team manually requests access

20 What is a common trade-off of Multi-Site Active-Active disaster recovery?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Easy
A. No need for data replication
B. Higher cost and complexity
C. Longer recovery than backups
D. No ability to distribute traffic

21 A company stores critical objects in an Amazon S3 bucket in one AWS Region. It requires copies to be created automatically in a second Region so that data remains available after a regional disruption. Which solution best meets this requirement?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Medium
A. Create an S3 Lifecycle expiration rule
B. Mount the bucket through AWS Storage Gateway
C. Enable S3 Cross-Region Replication
D. Enable S3 Transfer Acceleration

22 An operations team must coordinate a disaster recovery workflow that restores a database, starts application instances, validates health, and updates DNS. The workflow must track each stage and retry failed tasks. Which AWS service is most suitable for the orchestration?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Medium
A. AWS Step Functions
B. AWS Config
C. Amazon Inspector
D. Amazon CloudWatch Logs

23 A company wants Route 53 to direct users to a disaster recovery endpoint only when the primary endpoint becomes unhealthy. Which routing policy should it configure?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Medium
A. Geolocation routing
B. Weighted routing
C. Multivalue answer routing
D. Failover routing

24 A company needs centrally managed, policy-based backups of Amazon EBS volumes, Amazon RDS databases, and Amazon EFS file systems. It also needs cross-Region backup copies. Which service should it use?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Medium
A. AWS Application Migration Service
B. AWS Backup
C. AWS DataSync
D. Amazon S3 Glacier

25 A small internal application can tolerate an RTO of 12 hours and an RPO of 24 hours. The company wants the lowest ongoing disaster recovery cost. Which recovery pattern is the best fit?

Recovery architecture pattern: Backup and Restore Medium
A. Backup and Restore
B. Warm Standby
C. Pilot Light
D. Multi-Site Active-Active

26 A database is backed up every 6 hours with no transaction-log replication between backups. If the primary Region fails just before the next backup, what is the approximate worst-case RPO?

Recovery architecture pattern: Backup and Restore Medium
A. 6 hours
B. 24 hours
C. 3 hours
D. 12 hours

27 A team can restore its database quickly, but recreating VPCs, load balancers, and application servers manually causes recovery delays and configuration errors. Which improvement most directly reduces this problem?

Recovery architecture pattern: Backup and Restore Medium
A. Extend the backup retention period
B. Enable detailed billing reports
C. Increase the database backup frequency
D. Define the environment with infrastructure as code

28 A company copies database backups to a second Region but has never attempted a restore there. Which action provides the strongest evidence that its recovery objective is achievable?

Recovery architecture pattern: Backup and Restore Medium
A. Run scheduled restore tests in the recovery Region
B. Review backup completion notifications each month
C. Increase backup retention from 30 to 60 days
D. Encrypt each backup with an AWS KMS key

29 A company keeps a continuously replicated database and essential identity services running in its recovery Region. Application servers are created only after a disaster is declared. Which recovery pattern does this describe?

Recovery architecture pattern: Pilot Light Medium
A. Warm Standby
B. Backup and Restore
C. Multi-Site Active-Active
D. Pilot Light

30 During a Pilot Light failover, the replicated database is ready, but the recovery application tier has not yet been deployed. Which action should normally occur before directing production traffic to the recovery Region?

Recovery architecture pattern: Pilot Light Medium
A. Disable database replication permanently
B. Delete resources in the primary Region
C. Extend the DNS record TTL
D. Deploy and validate the application tier

31 A Pilot Light design takes too long to recover because large Amazon EC2 instances must be configured manually after every failover. Which change would most directly reduce the RTO while preserving the Pilot Light approach?

Recovery architecture pattern: Pilot Light Medium
A. Move audit logs to S3 Glacier
B. Use tested launch templates and Auto Scaling
C. Reduce the frequency of health checks
D. Store backups for a longer retention period

32 Which workload component is the best candidate to remain continuously active in the recovery Region of a Pilot Light architecture?

Recovery architecture pattern: Pilot Light Medium
A. A full production web server fleet
B. A complete set of worker instances
C. A full production analytics cluster
D. A replicated transactional data store

33 A retailer runs a complete but reduced-capacity copy of its application in a second Region. During a disaster, it scales out that copy and redirects all traffic to it. Which recovery pattern is being used?

Recovery architecture pattern: Warm Standby Medium
A. Warm Standby
B. Pilot Light
C. Backup and Restore
D. Multi-Site Active-Active

34 A Warm Standby environment has enough capacity for only 20% of normal demand. What should the failover runbook do before sending all production traffic to that environment?

Recovery architecture pattern: Warm Standby Medium
A. Increase DNS TTL values across both Regions
B. Scale resources and verify application health
C. Disable monitoring to reduce operational load
D. Delete the primary environment and its backups

35 A business is comparing Pilot Light with Warm Standby. It can accept higher ongoing cost in exchange for a shorter RTO. Why is Warm Standby generally more suitable?

Recovery architecture pattern: Warm Standby Medium
A. It restores all components only from backups
B. It serves traffic from every Region continuously
C. It keeps a complete application stack running
D. It removes the need for data replication

36 A team periodically sends a small percentage of synthetic transactions to its Warm Standby environment. What is the primary recovery benefit of this practice?

Recovery architecture pattern: Warm Standby Medium
A. It converts the design into Backup and Restore
B. It guarantees synchronous cross-Region replication
C. It verifies that the standby stack remains functional
D. It eliminates the need to scale during failover

37 An application serves users concurrently from two AWS Regions. Route 53 directs requests to healthy endpoints based on latency. Which recovery pattern does this represent?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Medium
A. Backup and Restore
B. Multi-Site Active-Active
C. Pilot Light
D. Warm Standby

38 A company is designing an Active-Active shopping cart service across two Regions. Users may update the same cart through either Region. Which issue requires the most careful design?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Medium
A. Manual creation of compute after an outage
B. Monthly backup retention and archive pricing
C. Concurrent data updates and conflict resolution
D. Delayed provisioning of the secondary VPC

39 Two active Regions each handle 50% of an application's normal traffic. Either Region must handle all traffic if the other fails. What capacity principle should guide the design?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Medium
A. Each Region needs only half of the production load
B. Each Region must scale to the full production load
C. The database alone must support the full load
D. The recovery Region can remain without compute

40 An Active-Active application stores user session state only in the memory of regional web servers. After Route 53 moves a user to another healthy Region, the user is unexpectedly signed out. Which design change best addresses this issue?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Medium
A. Store session state in a replicated shared data layer
B. Create larger instance stores in each Region
C. Increase the DNS TTL for all application records
D. Disable health checks on regional load balancers

41 A company replicates an Amazon Aurora database to a secondary Region using an Aurora global database. During a regional failure, the secondary cluster is promoted successfully, but application recovery still exceeds the RTO because clients continue using the original database endpoint. Which design most directly resolves this orchestration gap?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Hard
A. Place an Amazon Route 53 private record in front of the database endpoint and update it during failover
B. Create an Amazon CloudFront distribution whose origin is the active Aurora database writer endpoint
C. Store the active cluster endpoint in AWS Systems Manager Parameter Store and refresh it during each deployment
D. Increase the DNS TTL of the original Aurora writer endpoint to reduce resolver traffic during recovery

42 A regulated workload requires immutable, logically isolated recovery points that remain available even if the production AWS account is compromised by an administrator. Which AWS-native design best satisfies this requirement?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Hard
A. Export daily database snapshots to an encrypted S3 bucket owned by the production AWS account
B. Copy AWS Backup recovery points into a separate account vault protected by AWS Backup Vault Lock
C. Replicate EBS snapshots into another Region while retaining them in the production AWS account
D. Enable S3 Versioning in production and deny object deletion through an application IAM role

43 An application writes an order to Amazon DynamoDB and then asynchronously publishes an event. During a regional disaster, DynamoDB global tables preserve the order, but some events are missing in the recovery Region. Which redesign most effectively preserves the order-to-event relationship across failover?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Hard
A. Use S3 Cross-Region Replication to copy application log files containing the published events
B. Use Route 53 health checks to redirect event publishers when the primary Region becomes unhealthy
C. Use EventBridge scheduled rules to scan the orders table and publish recently modified records
D. Use DynamoDB Streams and deploy an idempotent stream consumer in each participating Region

44 A disaster recovery workflow uses AWS Step Functions to promote a database, scale compute, update DNS, and run validation. Operators may retry the workflow after a timeout whose completion state is unknown. Which property is most important for preventing retries from corrupting the recovery state?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Hard
A. Each workflow task should use an Express Workflow to minimize orchestration execution latency
B. Each workflow task should be idempotent and verify the current resource state before changing it
C. Each workflow task should disable service API retries and immediately report transient failures
D. Each workflow task should execute concurrently so that the total recovery duration is minimized

45 A 40 TiB application is rebuilt in a recovery Region from nightly snapshots. Snapshot creation meets an 8-hour RPO, but restoring storage and rehydrating application caches takes 14 hours against a 6-hour RTO. Which change addresses the violated objective without changing the backup interval?

Recovery architecture pattern: Backup and Restore Hard
A. Move backup initiation to off-peak hours so snapshot creation causes less production contention
B. Increase backup retention from thirty days to ninety days in the secondary recovery Region
C. Pre-provision critical restored datasets or maintain a continuously replicated minimal data tier
D. Create snapshots every four hours while retaining the existing restoration and cache procedures

46 A database receives writes at an approximately uniform rate. Full backups occur every 24 hours and transaction logs are archived every 15 minutes. After a disaster, the latest usable log archive is timestamped 10:45, while the failure occurred at 10:57. Ignoring clock skew, what is the effective data-loss window?

Recovery architecture pattern: Backup and Restore Hard
A. Approximately 24 hours 12 minutes, because logs are applied after restoring the full backup
B. Approximately 24 hours, because only the latest full backup can be considered recoverable
C. Approximately 15 minutes, because the archive schedule always determines actual loss
D. Approximately 12 minutes, because recovery can replay logs through 10:45

47 Infrastructure is recreated from AWS CloudFormation during a Backup and Restore recovery. The stack consistently fails because an S3 bucket name is globally unique and remains owned by the unavailable primary account configuration. Which design best improves deterministic recovery?

Recovery architecture pattern: Backup and Restore Hard
A. Retain the fixed bucket name and repeatedly retry stack creation until the global namespace releases it
B. Use the primary Region name as a hard-coded suffix in every recovery environment resource identifier
C. Parameterize Region-specific names and use generated physical identifiers instead of fixed global names
D. Create the bucket manually during each disaster and remove it from the CloudFormation stack definition

48 A company copies encrypted Amazon RDS snapshots to a recovery Region. During a disaster exercise, the snapshots are visible but cannot be restored because the original customer-managed KMS key is unavailable in that Region. Which preparation would have prevented this failure?

Recovery architecture pattern: Backup and Restore Hard
A. Attach an IAM policy to the snapshot that grants the recovery account permission to decrypt it
B. Enable automatic key rotation on the source KMS key before copying each database snapshot
C. Store the source KMS key identifier in Parameter Store and retrieve it during database restoration
D. Encrypt the regional snapshot copies with a usable KMS key in the destination Region

49 A Pilot Light environment keeps an asynchronously replicated database running in the recovery Region, while application servers are created only after a disaster. A test shows that database promotion takes 4 minutes, infrastructure deployment takes 11 minutes, instance bootstrapping takes 9 minutes, and validation takes 6 minutes. If the stages are strictly sequential, what RTO can the design realistically claim?

Recovery architecture pattern: Pilot Light Hard
A. At least 30 minutes, excluding detection and operator decision time
B. At least 19 minutes, because promotion can be excluded from application recovery time
C. At least 26 minutes, because validation occurs after the service has already recovered
D. At least 15 minutes, because deployment and bootstrapping describe the same recovery stage

50 A Pilot Light design stores current application data in the recovery Region but creates the VPC, load balancers, IAM roles, and compute fleet only during failover. Which risk most directly threatens its RTO despite successful data replication?

Recovery architecture pattern: Pilot Light Hard
A. DNS records may have lower TTL values than those used by the normal production environment
B. Regional service quotas or unavailable instance capacity may block rapid infrastructure expansion
C. Cross-Region data transfer charges may increase while the database replication stream remains active
D. The recovery database may contain more current records than the last primary database snapshot

51 A Pilot Light architecture uses an Amazon RDS read replica in another Region. After promotion during a regional outage, the application writes to the promoted database. The original primary later returns. Which failback strategy best avoids silently discarding recovery-Region writes?

Recovery architecture pattern: Pilot Light Hard
A. Demote the recovery database and immediately reconnect it as a read replica of the restored original primary
B. Re-enable the old replication relationship and allow timestamp ordering to resolve all divergent transactions
C. Treat the promoted database as authoritative and establish replication toward a newly prepared original Region
D. Restore the original primary from its latest local automated backup and redirect traffic without reconciliation

52 A company claims a 20-minute RTO for its Pilot Light design because its Auto Scaling group can launch the required instances in 12 minutes. During a test, newly launched instances cannot retrieve deployment artifacts because the artifact bucket exists only in the failed Region. What architectural principle was violated?

Recovery architecture pattern: Pilot Light Hard
A. All application instances must remain continuously active in both Regions to qualify as Pilot Light
B. All dependencies required for scale-out must be replicated or independently available in the recovery Region
C. All Auto Scaling groups must use identical Availability Zone identifiers in both participating Regions
D. All deployment artifacts must be embedded in public AMIs that are shared with every AWS account

53 A Warm Standby environment continuously handles 10% of production traffic and is sized for 20% of peak load. Scaling to full capacity takes 18 minutes, but the business RTO is 10 minutes. Which adjustment most directly aligns the architecture with the RTO?

Recovery architecture pattern: Warm Standby Hard
A. Increase baseline standby capacity or reserve capacity so full service can be reached within 10 minutes
B. Send no normal traffic to the standby Region so its resources remain available for emergency scaling
C. Increase database backup frequency so the standby application tier scales in less than 10 minutes
D. Reduce Route 53 TTL values so the existing standby compute fleet automatically gains more capacity

54 A Warm Standby system uses asynchronous database replication. At disaster declaration, monitoring reports a replication lag of 90 seconds. DNS failover completes in 20 seconds, and application scaling completes in 5 minutes. Which statement correctly distinguishes its recovery objectives?

Recovery architecture pattern: Warm Standby Hard
A. The observed RPO is about 90 seconds, while technical service recovery takes at least 5 minutes
B. The observed RPO is zero, while technical service recovery equals the 90-second replication lag
C. The observed RPO is about 20 seconds, while technical service recovery takes about 90 seconds
D. The observed RPO is about 5 minutes, while technical service recovery takes about 20 seconds

55 A standby Region is running a reduced but functional application stack. Its database is current, but background workers are disabled to avoid duplicate processing. During failover, web traffic is redirected before workers are enabled, causing accepted requests to remain unprocessed. Which orchestration sequence is most appropriate?

Recovery architecture pattern: Warm Standby Hard
A. Promote data services, enable and validate workers, scale the stack, and then redirect production traffic
B. Enable workers in both Regions, redirect production traffic, promote the replica, and then stop replication
C. Redirect production traffic, promote data services, disable workers, and then scale the application stack
D. Scale the web tier, redirect production traffic, restore the database, and then validate background workers

56 A Warm Standby exercise succeeds under average traffic but fails at peak because the recovery Region reaches an Elastic Load Balancing quota before Auto Scaling finishes. Which testing practice would have exposed this weakness most reliably?

Recovery architecture pattern: Warm Standby Hard
A. Run CloudFormation drift detection against the standby stacks before each software release
B. Run synthetic health checks against one standby endpoint at a constant low request rate
C. Run daily database restore tests without shifting application traffic from the primary Region
D. Run periodic full-load regional evacuation tests that include quota and scaling validation

57 Two active Regions accept updates to the same customer profile through DynamoDB global tables. Concurrent writes update different attributes of the same item, but one update disappears after replication convergence. Which change best reduces this conflict risk?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Hard
A. Increase the table's provisioned write capacity equally in both active AWS Regions
B. Reduce Route 53 TTL values so clients switch Regions before issuing concurrent writes
C. Model independently updated attributes as separate items and make operations idempotent
D. Use strongly consistent reads against each Region before submitting every local update

58 An active-active API uses Route 53 latency-based routing across two Regions. A Region remains reachable and returns HTTP 200 responses from /health, but its dependency on a payment provider is broken, so all payment requests fail. Which health design most effectively prevents traffic from continuing to reach that Region?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Hard
A. Use a health check against the Region's static status page stored in an S3 bucket
B. Use a calculated or application-aware health check that reflects the critical payment dependency
C. Use an EC2 instance status check for one representative application server in the Region
D. Use a TCP health check against the load balancer listener with a shorter polling interval

59 An active-active application processes messages from independent regional queues. A producer retry and cross-Region rerouting can cause the same business event to appear in both queues. Which consumer design is required to preserve exactly-once business effects despite at-least-once delivery?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Hard
A. Use a shorter queue visibility timeout and increase the number of consumers in both Regions
B. Use message timestamps to discard any event received after its original regional submission time
C. Use FIFO queues with separate message-group identifiers generated independently by each Region
D. Use a globally meaningful idempotency key and persist the processing result atomically

60 A two-Region active-active service has independent availability probabilities of per Region for a given interval. The service remains available if at least one Region is available, and shared dependencies are ignored. What is the theoretical service availability?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Hard
A. , because the availability probabilities of the two Regions are added directly
B. , because both Regions must remain available for the service to be considered healthy
C. , because routing cannot improve the availability of either individual Region
D. , because both Regions must fail for the service to be unavailable