Beginner AWS test (Beginner)

Sample questions

5 sample questions from the Beginner AWS test, with the answers. Samples are taken out of the live test, so you will not meet these when you sit it.

1. Which of the following statements accurately describes IAM user password policies and how they compare to IAM role password policies?

   1. IAM role password policies require passwords to be at least 8 characters long and include at least one uppercase letter, one lowercase letter, and one number. They also enforce password complexity and rotation rules.
   2. IAM role password policies are not applicable because roles do not have passwords.
   3. IAM user password policies require passwords to be at least 8 characters long and include at least one uppercase letter, one lowercase letter, and one number. They also enforce password complexity and rotation rules.
   4. IAM user password policies do not enforce password complexity and are optional to use.

   Answer: C. IAM user password policies require passwords to be at least 8 characters long and include at least one uppercase letter, one lowercase letter, and one number. They also enforce password complexity and rotation rules.

   IAM user password policies enforce specific rules for password complexity, such as minimum length, character requirements, and rotation intervals. These policies ensure that passwords are strong and secure. In contrast, IAM roles do not have password policies since they are not associated with long-term credentials.

2. A developer notices that objects in an S3 bucket are not being deleted as expected. What is the most likely reason for this issue?

   1. The lifecycle policy is not attached to the correct S3 bucket.
   2. The lifecycle policy uses incorrect storage classes.
   3. The lifecycle policy does not include a transition rule.
   4. The lifecycle policy is set to expire after 30 days.

   Answer: A. The lifecycle policy is not attached to the correct S3 bucket.

   If an S3 lifecycle policy is not attached to the correct bucket, it will not apply to the objects in that bucket, which may lead to incorrect behavior such as objects not being deleted or transitioned as intended. The other options are not directly related to lifecycle policies.

3. Which of the following is the best use case for using Spot Instances in an AWS project?

   1. Use Spot Instances for long-running, stateful applications.
   2. Use Spot Instances for mission-critical applications requiring continuous uptime.
   3. Use Spot Instances for batch processing tasks that can handle interruptions.
   4. Use Spot Instances as a primary resource for running a production web application.

   Answer: C. Use Spot Instances for batch processing tasks that can handle interruptions.

   Spot Instances are ideal for workloads that can tolerate interruptions, such as batch processing tasks. They offer significant cost savings but are not suitable for applications requiring continuous uptime. The other options either misrepresent Spot Instance behavior or suggest inappropriate use cases.

4. Which of the following accurately describes on-demand instance pricing in AWS?

   1. On-demand instance pricing requires an upfront payment and long-term commitment.
   2. On-demand instance pricing is only available for specific instance types.
   3. On-demand instance pricing is determined by the supply and demand in the market.
   4. On-demand instance pricing is billed by the hour or second, with no long-term commitment or upfront payment required.

   Answer: D. On-demand instance pricing is billed by the hour or second, with no long-term commitment or upfront payment required.

   On-demand instance pricing is billed by the hour or second, with no long-term commitment or upfront payment required. Reserved instance pricing involves upfront payments and long-term commitments, while spot instances are priced based on supply and demand. The other options do not accurately describe on-demand pricing.

5. A company wants to securely grant access to a new developer for a project that involves managing AWS resources programmatically. Which of the following is the correct approach to create an IAM user for this purpose?

   1. Use the AWS root account credentials for access and assign permissions directly to the user.
   2. Create an IAM user with programmatic access and assign them to a group with the necessary permissions.
   3. Create an IAM user without programmatic access and assign them to an IAM role for the project.
   4. Create an IAM role and assign it directly to the user for the project.

   Answer: B. Create an IAM user with programmatic access and assign them to a group with the necessary permissions.

   Creating an IAM user with programmatic access and assigning them to a group with the necessary permissions is the correct approach for a realistic project scenario. This ensures secure access control and follows AWS best practices. Other options either lack security (e.g., using root credentials) or do not align with proper IAM setup (e.g., creating a user without permissions or using an IAM role for a user directly).