Free AWS Certification Test Questions & Quiz

What's the easiest way to expose your Lambda to the internet?

ExplanationFunction URLs provide a dedicated HTTP(S) endpoint for your Lambda function. Setting AUTHTYPE=NONE makes it publicly accessible. This is simpler than setting up API Gateway as it requires no additional configuration or services.

How can you invoke AWS Lambda?

ExplanationAWS Lambda functions can be invoked through multiple methods: using the AWS API (SDK), AWS CLI commands, or Function URLs. Each method has its use cases - API/SDK for programmatic access, CLI for manual testing and automation scripts, and Function URLs for HTTP(S) endpoints.

Which of the following services are NOT global?

ExplanationLambda functions are regional resources - they run in the specific AWS region where they are created. In contrast, S3 (despite having regional buckets), IAM, and Route53 are global services that operate across all regions.

What's the most efficient way to save cost in S3?

ExplanationDeep Archive is the most cost-effective storage class in S3, offering storage at a fraction of the cost of Standard tier. While it has a longer retrieval time (up to 12 hours), it's perfect for rarely accessed data that needs to be retained for compliance or archival purposes.

What would you use to update an item details using API?

ExplanationPATCH is the correct HTTP method for partial updates to a resource. While PUT is used for complete replacement of a resource, PATCH is designed for making partial modifications to an existing resource.

You run a processing job every day which takes 5 hours to finish. Select the most cost-effective solution.

ExplanationFor long-running tasks (5 hours), EC2 is most cost-effective. Lambda has a 15-minute timeout and bills for execution time. AppRunner is designed for continuous running applications. EC2 on-demand instances can be started and stopped programmatically, only charging for the hours used.

How to add a custom domain to Cloudfront?

ExplanationThe correct process involves creating an SSL certificate in ACM, adding it to CloudFront with the custom domain, and creating an ALIAS record in Route53. This ensures secure HTTPS access and proper DNS routing to your CloudFront distribution.

Which is NOT a type of API you can create in API Gateway?

ExplanationWhile API Gateway supports REST APIs, WebSocket APIs, and HTTP APIs, it does not support gRPC APIs natively. For gRPC, you would need to use other AWS services like App Runner or deploy your own gRPC server on EC2/ECS.

How to skip CDK stack changes confirmation permanently?

ExplanationThe --require-approval flag in cdk deploy command allows you to bypass manual approval for stack changes. This is useful in automated deployment pipelines where manual intervention isn't desired.

What's the easiest way to share a S3 object?

ExplanationPresigned URLs provide temporary, secure access to private S3 objects without requiring AWS credentials. They're easy to generate and can be configured with expiration times, making them ideal for temporary sharing.

How do you render HTML in Lambda?

ExplanationTo render HTML correctly, the Content-Type header must be set to 'text/html'. This tells the client browser to interpret the response body as HTML content rather than plain text or other formats.

Where does your Lambda logs go?

ExplanationAWS Lambda automatically integrates with CloudWatch Logs. Every Lambda execution generates logs that are automatically sent to CloudWatch Logs, making it the central place for Lambda logging and monitoring.

Why is Route53 called so?

ExplanationRoute53 gets its name from Port 53, which is the standard port number for DNS (Domain Name System) services. The 'Route' part refers to the service's routing capabilities, while '53' is a reference to this standard DNS port.

What's NOT true about HTTP API Gateway?

ExplanationHTTP API Gateway endpoints are regional, not global. While you can create the same API in multiple regions, there's no automatic global deployment feature. REST APIs and HTTP APIs are both regional services in API Gateway.

To delete all objects in a bucket, which AWS CLI command would you use?

ExplanationThe command 'aws s3 rm --recursive s3://my-bucket' is the correct syntax for recursively removing all objects from an S3 bucket. The --recursive flag is necessary to delete all objects including those in subdirectories.

Which of the following is NOT a best practice?

ExplanationGiving root access, even temporarily, violates AWS security best practices. Root access should be strictly limited and developers should be given specific IAM roles with only the permissions they need following the principle of least privilege.

How can you upload files to S3 from your app without AWS access keys?

ExplanationPresigned POST URLs allow secure direct uploads to S3 without exposing AWS credentials in your application. The URL contains temporary credentials and is the most secure way to handle user uploads while maintaining direct-to-S3 upload capability.

What's the best way to host a static website on AWS?

ExplanationUsing S3 with CloudFront provides the most optimal solution for static websites. S3 offers reliable storage while CloudFront provides caching, HTTPS, custom domain support, and global content delivery through its CDN network, improving both security and performance.

What's the best way to allow your Lambda to access objects in S3?

ExplanationUsing IAM roles is the AWS-recommended best practice for service-to-service access. It's more secure than using access keys, automatically rotates credentials, and follows the principle of least privilege when properly configured.

Which of the following statement about CDK and Cloudformation is NOT true?

ExplanationCDK and CloudFormation are separate tools - CDK generates CloudFormation templates, but CloudFormation doesn't use CDK. They work in one direction: CDK creates CloudFormation templates, but not vice versa.

How many free invocations do you get with AWS Lambda?

ExplanationAWS Free Tier includes 1 million free Lambda requests per month. This is part of the perpetual free tier, meaning it doesn't expire after 12 months like some other free tier benefits.

What's the longest you can run a Lambda function?

ExplanationAWS Lambda has a maximum execution duration of 15 minutes (900 seconds). This is a hard limit that cannot be increased. For longer-running tasks, consider using other services like EC2, ECS, or Step Functions.

How do you initialize a CDK project with TypeScript?

ExplanationThe correct command is 'npx cdk init app --language typescript'. This is the official AWS CDK CLI command to initialize a new CDK project specifically with TypeScript support. The command creates all necessary files including tsconfig.json and package.json with appropriate TypeScript configurations.

You need to route the users of your app to their nearest servers, which Route53 routing policy will help you?

ExplanationLatency-based routing is designed to route users to the AWS Region that provides the lowest latency. Unlike Geolocation routing which routes based on user location, latency routing ensures users get the fastest possible response regardless of their geographic location.

What's the size of the default EBS volume that comes attached with your EC2 instance?

ExplanationAWS provides a default EBS volume of 30 GB when you launch an EC2 instance using the AWS Management Console. This size can be modified during instance launch or afterward by modifying the EBS volume.

Test complete!