Unit 1: Cloud Fundamentals and Security - Practice Quiz

INT364 — Cloud Architecture And Implementation-Ii 60 Questions
0 Correct 0 Wrong 60 Left
0/60

1 Which AWS service centrally manages backup policies across supported AWS resources?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Easy
A. AWS Backup
B. AWS Artifact
C. AWS Config
D. AWS Shield

2 Which Amazon S3 feature automatically copies objects from one AWS Region to another?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Easy
A. S3 Transfer Acceleration
B. S3 Event Notifications
C. S3 Object Lock
D. S3 Cross-Region Replication

3 Which AWS service can direct users to a healthy disaster recovery endpoint through DNS failover?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Easy
A. AWS Direct Connect
B. Amazon Route 53
C. AWS Transit Gateway, which connects multiple VPCs and on-premises networks through a central networking hub
D. Amazon CloudFront

4 Which AWS service uses state machines to coordinate multiple steps in a recovery workflow?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Easy
A. AWS Cost Explorer
B. AWS Trusted Advisor
C. AWS CloudTrail
D. AWS Step Functions

5 What is the main activity performed before a disaster in the Backup and Restore pattern?

Recovery architecture pattern: Backup and Restore Easy
A. Maintaining full duplicate capacity
B. Creating regular data backups
C. Serving traffic from both Regions
D. Running two active environments

6 Which disaster recovery pattern usually has the lowest ongoing infrastructure cost?

Recovery architecture pattern: Backup and Restore Easy
A. Backup and Restore
B. Multi-Site Active-Active
C. Warm Standby
D. Pilot Light

7 What must happen to backed-up data before an application can fully resume after a disaster?

Recovery architecture pattern: Backup and Restore Easy
A. It must be archived
B. It must be restored
C. It must be compressed
D. It must be deleted

8 Compared with the other listed recovery patterns, Backup and Restore generally has which recovery characteristic?

Recovery architecture pattern: Backup and Restore Easy
A. A recovery process that continuously serves production traffic from multiple active Regions
B. A zero recovery time
C. An instant recovery time
D. A longer recovery time

9 In a Pilot Light architecture, which part of the workload typically remains running in the recovery Region?

Recovery architecture pattern: Pilot Light Easy
A. The full user-facing capacity
B. The critical core components
C. The entire analytics environment
D. The complete production environment

10 What usually happens to application servers during Pilot Light recovery?

Recovery architecture pattern: Pilot Light Easy
A. They are scaled up or started
B. They remain fully active everywhere
C. They are permanently deleted
D. They are replaced only by local desktop computers used by the operations team

11 Which statement best describes the recovery environment in the Pilot Light pattern?

Recovery architecture pattern: Pilot Light Easy
A. Only essential services are active
B. All production services are active
C. Both Regions always process equal traffic
D. No recovery resources are prepared

12 Pilot Light generally provides faster recovery than which pattern?

Recovery architecture pattern: Pilot Light Easy
A. Multi-Site
B. Backup and Restore
C. Warm Standby
D. Active-Active

13 What is maintained in the recovery Region under a Warm Standby pattern?

Recovery architecture pattern: Warm Standby Easy
A. A disconnected environment that can be activated only after all resources are manually redesigned
B. A backup file with no infrastructure
C. A full environment serving equal traffic
D. A scaled-down functional environment

14 What is commonly required after failing over to a Warm Standby environment?

Recovery architecture pattern: Warm Standby Easy
A. Removing all replicated data
B. Creating the first data backup
C. Designing a new application
D. Scaling resources to production capacity

15 How does Warm Standby differ from Pilot Light?

Recovery architecture pattern: Warm Standby Easy
A. It runs a functional application stack
B. It runs no application components
C. It always serves half of all production requests
D. It stores only offline backups

16 Compared with Multi-Site Active-Active, Warm Standby usually has which cost characteristic?

Recovery architecture pattern: Warm Standby Easy
A. No infrastructure cost because the entire standby environment exists only as archived documentation
B. Lower ongoing cost
C. Identical ongoing cost
D. Higher ongoing cost

17 In a Multi-Site Active-Active configuration, how many sites normally serve production traffic?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Easy
A. No active sites
B. Two or more sites
C. One offline backup site
D. Exactly one site

18 Which recovery pattern generally provides the shortest recovery time?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Easy
A. Backup and Restore
B. Pilot Light
C. Warm Standby
D. Multi-Site Active-Active

19 What is a key data requirement for an Active-Active architecture?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Easy
A. Data must remain only on tape
B. Data must be stored in one unavailable Region until a recovery team manually requests access
C. Data must remain synchronized
D. Data must be deleted daily

20 What is a common trade-off of Multi-Site Active-Active disaster recovery?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Easy
A. Higher cost and complexity
B. No ability to distribute traffic
C. No need for data replication
D. Longer recovery than backups

21 A company stores critical objects in an Amazon S3 bucket in one AWS Region. It requires copies to be created automatically in a second Region so that data remains available after a regional disruption. Which solution best meets this requirement?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Medium
A. Enable S3 Transfer Acceleration
B. Mount the bucket through AWS Storage Gateway
C. Create an S3 Lifecycle expiration rule
D. Enable S3 Cross-Region Replication

22 An operations team must coordinate a disaster recovery workflow that restores a database, starts application instances, validates health, and updates DNS. The workflow must track each stage and retry failed tasks. Which AWS service is most suitable for the orchestration?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Medium
A. Amazon Inspector
B. AWS Config
C. AWS Step Functions
D. Amazon CloudWatch Logs

23 A company wants Route 53 to direct users to a disaster recovery endpoint only when the primary endpoint becomes unhealthy. Which routing policy should it configure?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Medium
A. Multivalue answer routing
B. Geolocation routing
C. Failover routing
D. Weighted routing

24 A company needs centrally managed, policy-based backups of Amazon EBS volumes, Amazon RDS databases, and Amazon EFS file systems. It also needs cross-Region backup copies. Which service should it use?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Medium
A. AWS DataSync
B. AWS Backup
C. Amazon S3 Glacier
D. AWS Application Migration Service

25 A small internal application can tolerate an RTO of 12 hours and an RPO of 24 hours. The company wants the lowest ongoing disaster recovery cost. Which recovery pattern is the best fit?

Recovery architecture pattern: Backup and Restore Medium
A. Backup and Restore
B. Warm Standby
C. Multi-Site Active-Active
D. Pilot Light

26 A database is backed up every 6 hours with no transaction-log replication between backups. If the primary Region fails just before the next backup, what is the approximate worst-case RPO?

Recovery architecture pattern: Backup and Restore Medium
A. 3 hours
B. 24 hours
C. 12 hours
D. 6 hours

27 A team can restore its database quickly, but recreating VPCs, load balancers, and application servers manually causes recovery delays and configuration errors. Which improvement most directly reduces this problem?

Recovery architecture pattern: Backup and Restore Medium
A. Enable detailed billing reports
B. Define the environment with infrastructure as code
C. Extend the backup retention period
D. Increase the database backup frequency

28 A company copies database backups to a second Region but has never attempted a restore there. Which action provides the strongest evidence that its recovery objective is achievable?

Recovery architecture pattern: Backup and Restore Medium
A. Review backup completion notifications each month
B. Encrypt each backup with an AWS KMS key
C. Run scheduled restore tests in the recovery Region
D. Increase backup retention from 30 to 60 days

29 A company keeps a continuously replicated database and essential identity services running in its recovery Region. Application servers are created only after a disaster is declared. Which recovery pattern does this describe?

Recovery architecture pattern: Pilot Light Medium
A. Warm Standby
B. Multi-Site Active-Active
C. Backup and Restore
D. Pilot Light

30 During a Pilot Light failover, the replicated database is ready, but the recovery application tier has not yet been deployed. Which action should normally occur before directing production traffic to the recovery Region?

Recovery architecture pattern: Pilot Light Medium
A. Extend the DNS record TTL
B. Deploy and validate the application tier
C. Delete resources in the primary Region
D. Disable database replication permanently

31 A Pilot Light design takes too long to recover because large Amazon EC2 instances must be configured manually after every failover. Which change would most directly reduce the RTO while preserving the Pilot Light approach?

Recovery architecture pattern: Pilot Light Medium
A. Reduce the frequency of health checks
B. Store backups for a longer retention period
C. Move audit logs to S3 Glacier
D. Use tested launch templates and Auto Scaling

32 Which workload component is the best candidate to remain continuously active in the recovery Region of a Pilot Light architecture?

Recovery architecture pattern: Pilot Light Medium
A. A full production web server fleet
B. A replicated transactional data store
C. A complete set of worker instances
D. A full production analytics cluster

33 A retailer runs a complete but reduced-capacity copy of its application in a second Region. During a disaster, it scales out that copy and redirects all traffic to it. Which recovery pattern is being used?

Recovery architecture pattern: Warm Standby Medium
A. Backup and Restore
B. Multi-Site Active-Active
C. Pilot Light
D. Warm Standby

34 A Warm Standby environment has enough capacity for only 20% of normal demand. What should the failover runbook do before sending all production traffic to that environment?

Recovery architecture pattern: Warm Standby Medium
A. Delete the primary environment and its backups
B. Scale resources and verify application health
C. Increase DNS TTL values across both Regions
D. Disable monitoring to reduce operational load

35 A business is comparing Pilot Light with Warm Standby. It can accept higher ongoing cost in exchange for a shorter RTO. Why is Warm Standby generally more suitable?

Recovery architecture pattern: Warm Standby Medium
A. It removes the need for data replication
B. It keeps a complete application stack running
C. It serves traffic from every Region continuously
D. It restores all components only from backups

36 A team periodically sends a small percentage of synthetic transactions to its Warm Standby environment. What is the primary recovery benefit of this practice?

Recovery architecture pattern: Warm Standby Medium
A. It converts the design into Backup and Restore
B. It eliminates the need to scale during failover
C. It verifies that the standby stack remains functional
D. It guarantees synchronous cross-Region replication

37 An application serves users concurrently from two AWS Regions. Route 53 directs requests to healthy endpoints based on latency. Which recovery pattern does this represent?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Medium
A. Pilot Light
B. Multi-Site Active-Active
C. Backup and Restore
D. Warm Standby

38 A company is designing an Active-Active shopping cart service across two Regions. Users may update the same cart through either Region. Which issue requires the most careful design?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Medium
A. Delayed provisioning of the secondary VPC
B. Concurrent data updates and conflict resolution
C. Monthly backup retention and archive pricing
D. Manual creation of compute after an outage

39 Two active Regions each handle 50% of an application's normal traffic. Either Region must handle all traffic if the other fails. What capacity principle should guide the design?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Medium
A. Each Region needs only half of the production load
B. Each Region must scale to the full production load
C. The recovery Region can remain without compute
D. The database alone must support the full load

40 An Active-Active application stores user session state only in the memory of regional web servers. After Route 53 moves a user to another healthy Region, the user is unexpectedly signed out. Which design change best addresses this issue?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Medium
A. Disable health checks on regional load balancers
B. Create larger instance stores in each Region
C. Increase the DNS TTL for all application records
D. Store session state in a replicated shared data layer

41 A company replicates an Amazon Aurora database to a secondary Region using an Aurora global database. During a regional failure, the secondary cluster is promoted successfully, but application recovery still exceeds the RTO because clients continue using the original database endpoint. Which design most directly resolves this orchestration gap?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Hard
A. Increase the DNS TTL of the original Aurora writer endpoint to reduce resolver traffic during recovery
B. Place an Amazon Route 53 private record in front of the database endpoint and update it during failover
C. Store the active cluster endpoint in AWS Systems Manager Parameter Store and refresh it during each deployment
D. Create an Amazon CloudFront distribution whose origin is the active Aurora database writer endpoint

42 A regulated workload requires immutable, logically isolated recovery points that remain available even if the production AWS account is compromised by an administrator. Which AWS-native design best satisfies this requirement?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Hard
A. Copy AWS Backup recovery points into a separate account vault protected by AWS Backup Vault Lock
B. Enable S3 Versioning in production and deny object deletion through an application IAM role
C. Replicate EBS snapshots into another Region while retaining them in the production AWS account
D. Export daily database snapshots to an encrypted S3 bucket owned by the production AWS account

43 An application writes an order to Amazon DynamoDB and then asynchronously publishes an event. During a regional disaster, DynamoDB global tables preserve the order, but some events are missing in the recovery Region. Which redesign most effectively preserves the order-to-event relationship across failover?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Hard
A. Use EventBridge scheduled rules to scan the orders table and publish recently modified records
B. Use S3 Cross-Region Replication to copy application log files containing the published events
C. Use DynamoDB Streams and deploy an idempotent stream consumer in each participating Region
D. Use Route 53 health checks to redirect event publishers when the primary Region becomes unhealthy

44 A disaster recovery workflow uses AWS Step Functions to promote a database, scale compute, update DNS, and run validation. Operators may retry the workflow after a timeout whose completion state is unknown. Which property is most important for preventing retries from corrupting the recovery state?

AWS-native disaster recovery mechanisms and service orchestration for data durability and operational resilience Hard
A. Each workflow task should use an Express Workflow to minimize orchestration execution latency
B. Each workflow task should disable service API retries and immediately report transient failures
C. Each workflow task should be idempotent and verify the current resource state before changing it
D. Each workflow task should execute concurrently so that the total recovery duration is minimized

45 A 40 TiB application is rebuilt in a recovery Region from nightly snapshots. Snapshot creation meets an 8-hour RPO, but restoring storage and rehydrating application caches takes 14 hours against a 6-hour RTO. Which change addresses the violated objective without changing the backup interval?

Recovery architecture pattern: Backup and Restore Hard
A. Pre-provision critical restored datasets or maintain a continuously replicated minimal data tier
B. Create snapshots every four hours while retaining the existing restoration and cache procedures
C. Increase backup retention from thirty days to ninety days in the secondary recovery Region
D. Move backup initiation to off-peak hours so snapshot creation causes less production contention

46 A database receives writes at an approximately uniform rate. Full backups occur every 24 hours and transaction logs are archived every 15 minutes. After a disaster, the latest usable log archive is timestamped 10:45, while the failure occurred at 10:57. Ignoring clock skew, what is the effective data-loss window?

Recovery architecture pattern: Backup and Restore Hard
A. Approximately 24 hours, because only the latest full backup can be considered recoverable
B. Approximately 12 minutes, because recovery can replay logs through 10:45
C. Approximately 15 minutes, because the archive schedule always determines actual loss
D. Approximately 24 hours 12 minutes, because logs are applied after restoring the full backup

47 Infrastructure is recreated from AWS CloudFormation during a Backup and Restore recovery. The stack consistently fails because an S3 bucket name is globally unique and remains owned by the unavailable primary account configuration. Which design best improves deterministic recovery?

Recovery architecture pattern: Backup and Restore Hard
A. Parameterize Region-specific names and use generated physical identifiers instead of fixed global names
B. Retain the fixed bucket name and repeatedly retry stack creation until the global namespace releases it
C. Use the primary Region name as a hard-coded suffix in every recovery environment resource identifier
D. Create the bucket manually during each disaster and remove it from the CloudFormation stack definition

48 A company copies encrypted Amazon RDS snapshots to a recovery Region. During a disaster exercise, the snapshots are visible but cannot be restored because the original customer-managed KMS key is unavailable in that Region. Which preparation would have prevented this failure?

Recovery architecture pattern: Backup and Restore Hard
A. Attach an IAM policy to the snapshot that grants the recovery account permission to decrypt it
B. Enable automatic key rotation on the source KMS key before copying each database snapshot
C. Encrypt the regional snapshot copies with a usable KMS key in the destination Region
D. Store the source KMS key identifier in Parameter Store and retrieve it during database restoration

49 A Pilot Light environment keeps an asynchronously replicated database running in the recovery Region, while application servers are created only after a disaster. A test shows that database promotion takes 4 minutes, infrastructure deployment takes 11 minutes, instance bootstrapping takes 9 minutes, and validation takes 6 minutes. If the stages are strictly sequential, what RTO can the design realistically claim?

Recovery architecture pattern: Pilot Light Hard
A. At least 26 minutes, because validation occurs after the service has already recovered
B. At least 15 minutes, because deployment and bootstrapping describe the same recovery stage
C. At least 30 minutes, excluding detection and operator decision time
D. At least 19 minutes, because promotion can be excluded from application recovery time

50 A Pilot Light design stores current application data in the recovery Region but creates the VPC, load balancers, IAM roles, and compute fleet only during failover. Which risk most directly threatens its RTO despite successful data replication?

Recovery architecture pattern: Pilot Light Hard
A. DNS records may have lower TTL values than those used by the normal production environment
B. The recovery database may contain more current records than the last primary database snapshot
C. Regional service quotas or unavailable instance capacity may block rapid infrastructure expansion
D. Cross-Region data transfer charges may increase while the database replication stream remains active

51 A Pilot Light architecture uses an Amazon RDS read replica in another Region. After promotion during a regional outage, the application writes to the promoted database. The original primary later returns. Which failback strategy best avoids silently discarding recovery-Region writes?

Recovery architecture pattern: Pilot Light Hard
A. Re-enable the old replication relationship and allow timestamp ordering to resolve all divergent transactions
B. Demote the recovery database and immediately reconnect it as a read replica of the restored original primary
C. Treat the promoted database as authoritative and establish replication toward a newly prepared original Region
D. Restore the original primary from its latest local automated backup and redirect traffic without reconciliation

52 A company claims a 20-minute RTO for its Pilot Light design because its Auto Scaling group can launch the required instances in 12 minutes. During a test, newly launched instances cannot retrieve deployment artifacts because the artifact bucket exists only in the failed Region. What architectural principle was violated?

Recovery architecture pattern: Pilot Light Hard
A. All deployment artifacts must be embedded in public AMIs that are shared with every AWS account
B. All Auto Scaling groups must use identical Availability Zone identifiers in both participating Regions
C. All application instances must remain continuously active in both Regions to qualify as Pilot Light
D. All dependencies required for scale-out must be replicated or independently available in the recovery Region

53 A Warm Standby environment continuously handles 10% of production traffic and is sized for 20% of peak load. Scaling to full capacity takes 18 minutes, but the business RTO is 10 minutes. Which adjustment most directly aligns the architecture with the RTO?

Recovery architecture pattern: Warm Standby Hard
A. Increase database backup frequency so the standby application tier scales in less than 10 minutes
B. Reduce Route 53 TTL values so the existing standby compute fleet automatically gains more capacity
C. Increase baseline standby capacity or reserve capacity so full service can be reached within 10 minutes
D. Send no normal traffic to the standby Region so its resources remain available for emergency scaling

54 A Warm Standby system uses asynchronous database replication. At disaster declaration, monitoring reports a replication lag of 90 seconds. DNS failover completes in 20 seconds, and application scaling completes in 5 minutes. Which statement correctly distinguishes its recovery objectives?

Recovery architecture pattern: Warm Standby Hard
A. The observed RPO is about 90 seconds, while technical service recovery takes at least 5 minutes
B. The observed RPO is zero, while technical service recovery equals the 90-second replication lag
C. The observed RPO is about 20 seconds, while technical service recovery takes about 90 seconds
D. The observed RPO is about 5 minutes, while technical service recovery takes about 20 seconds

55 A standby Region is running a reduced but functional application stack. Its database is current, but background workers are disabled to avoid duplicate processing. During failover, web traffic is redirected before workers are enabled, causing accepted requests to remain unprocessed. Which orchestration sequence is most appropriate?

Recovery architecture pattern: Warm Standby Hard
A. Redirect production traffic, promote data services, disable workers, and then scale the application stack
B. Promote data services, enable and validate workers, scale the stack, and then redirect production traffic
C. Scale the web tier, redirect production traffic, restore the database, and then validate background workers
D. Enable workers in both Regions, redirect production traffic, promote the replica, and then stop replication

56 A Warm Standby exercise succeeds under average traffic but fails at peak because the recovery Region reaches an Elastic Load Balancing quota before Auto Scaling finishes. Which testing practice would have exposed this weakness most reliably?

Recovery architecture pattern: Warm Standby Hard
A. Run CloudFormation drift detection against the standby stacks before each software release
B. Run daily database restore tests without shifting application traffic from the primary Region
C. Run synthetic health checks against one standby endpoint at a constant low request rate
D. Run periodic full-load regional evacuation tests that include quota and scaling validation

57 Two active Regions accept updates to the same customer profile through DynamoDB global tables. Concurrent writes update different attributes of the same item, but one update disappears after replication convergence. Which change best reduces this conflict risk?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Hard
A. Model independently updated attributes as separate items and make operations idempotent
B. Increase the table's provisioned write capacity equally in both active AWS Regions
C. Reduce Route 53 TTL values so clients switch Regions before issuing concurrent writes
D. Use strongly consistent reads against each Region before submitting every local update

58 An active-active API uses Route 53 latency-based routing across two Regions. A Region remains reachable and returns HTTP 200 responses from /health, but its dependency on a payment provider is broken, so all payment requests fail. Which health design most effectively prevents traffic from continuing to reach that Region?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Hard
A. Use a health check against the Region's static status page stored in an S3 bucket
B. Use a calculated or application-aware health check that reflects the critical payment dependency
C. Use a TCP health check against the load balancer listener with a shorter polling interval
D. Use an EC2 instance status check for one representative application server in the Region

59 An active-active application processes messages from independent regional queues. A producer retry and cross-Region rerouting can cause the same business event to appear in both queues. Which consumer design is required to preserve exactly-once business effects despite at-least-once delivery?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Hard
A. Use message timestamps to discard any event received after its original regional submission time
B. Use a shorter queue visibility timeout and increase the number of consumers in both Regions
C. Use a globally meaningful idempotency key and persist the processing result atomically
D. Use FIFO queues with separate message-group identifiers generated independently by each Region

60 A two-Region active-active service has independent availability probabilities of per Region for a given interval. The service remains available if at least one Region is available, and shared dependencies are ignored. What is the theoretical service availability?

Recovery architecture pattern: Multi-Site (Active-Active) configurations Hard
A. , because routing cannot improve the availability of either individual Region
B. , because both Regions must fail for the service to be unavailable
C. , because both Regions must remain available for the service to be considered healthy
D. , because the availability probabilities of the two Regions are added directly