Unit 1: Cloud Fundamentals and Security - Practice Quiz

1 Which component of the AWS Global Infrastructure consists of one or more discrete data centers with redundant power, networking, and connectivity?

2 Which factor should primarily be considered when choosing an AWS Region to reduce latency for end-users?

3 What is the primary function of AWS Edge Locations?

4 Which pillar of the AWS Well-Architected Framework focuses on the ability to run and monitor systems to deliver business value and to continually improve processes and procedures?

5 Which design principle is recommended by the AWS Well-Architected Framework regarding capacity planning?

6 In the Shared Responsibility Model, which of the following is the customer's responsibility?

7 What is the primary purpose of AWS Identity and Access Management (IAM)?

8 Which IAM entity represents a person or service that interacts with AWS?

9 What is the recommended best practice for the AWS account root user?

10 Which IAM feature allows you to associate permissions with a collection of users?

11 What format are IAM policies written in?

12 Which principle suggests granting only the permissions required to perform a task?

13 An IAM Role is best described as:

14 What is the default effect of an IAM policy if no Allow or Deny is explicitly stated?

15 Which AWS service enables you to manage access across multiple AWS accounts centrally?

16 What mechanism allows users from an external identity provider (IdP) like Active Directory to access AWS resources without creating IAM users?

17 Which industry standard is commonly used for federating users into AWS?

18 To allow an application running on an EC2 instance to access an S3 bucket securely, what should you configure?

19 Which API call is used to obtain temporary security credentials when assuming a role?

20 What is the primary service used for creating and managing cryptographic keys in AWS?

21 Which type of encryption protects data while it is stored on a disk?

22 What does Server-Side Encryption (SSE) on Amazon S3 imply?

23 Which AWS service protects against Distributed Denial of Service (DDoS) attacks?

24 Which service helps protect your web applications from common web exploits like SQL injection and cross-site scripting?

25 Amazon GuardDuty is best described as:

26 Which service automatically discovers, classifies, and protects sensitive data (like PII) in AWS?

27 Which service is used to assess applications for exposure, vulnerabilities, and deviations from best practices?

28 What does the 'Sustainability' pillar of the Well-Architected Framework focus on?

29 Which AWS service records API calls for your account and delivers log files to you?

30 In IAM, what is the 'PowerUserAccess' managed policy?

31 What feature allows you to grant cross-account access to S3 resources explicitly within the S3 service?

32 Which cryptographic method uses a public key for encryption and a private key for decryption?

33 What is 'Envelope Encryption'?

34 Which AWS feature can be used to ensure that EBS volumes created by users are always encrypted?

35 When designing for failure in the Cloud, what is a key concept?

36 What is the purpose of Service Control Policies (SCPs) in AWS Organizations?

37 Which credential is required for programmatic access to AWS via the CLI?

38 What is the function of AWS Secrets Manager?

39 Which pillar of the Well-Architected Framework focuses on the ability to prevent financial loss?

40 Which security service provides on-demand access to AWS compliance reports (e.g., SOC, PCI)?

41 In IAM, what is the 'Principal' in a policy statement?

42 What is the difference between a Security Group and a Network ACL (NACL)?

43 Which AWS service allows you to manage encryption keys in a dedicated, single-tenant hardware security module (HSM)?

44 How often should IAM Access Keys be rotated according to best practices?

45 Which IAM tool helps you identify unused credentials and excessive permissions?

46 If an explicit Deny and an explicit Allow exist for the same request, which one takes precedence?

47 Which is a valid use case for Web Identity Federation?

48 What is the 'Condition' element in an IAM JSON policy used for?

49 Which service acts as a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads?

50 What type of scaling is described as adding more power (CPU, RAM) to an existing machine?