Quiz: Mastering Cloud Infrastructure and Security — 6 questions

1. Which term describes the ability to automatically increase or decrease resources to match changing demand?

A. Scalability

B. High availability

C. Disaster recovery

D. Elasticity

Answer: (D)

Explanation

Elasticity means resources scale up or down automatically as demand changes. Scalability is about handling growth over time, not immediate demand fluctuations.

2. In the shared responsibility model, which task is primarily managed by the customer?

A. Operating the network hardware

B. Managing identities and access permissions

C. Securing the underlying cloud infrastructure

D. Maintaining physical data center facilities

Answer: (B)

Explanation

Customers are responsible for security in the cloud, such as identities, permissions, and data access. AWS is responsible for security of the underlying infrastructure.

3. Which AWS service provides resizable virtual servers for running full operating systems and applications?

A. Amazon EC2

B. Amazon S3

C. Amazon CloudFront

D. AWS Lambda

Answer: (A)

Explanation

Amazon EC2 provides virtual servers with resizable compute capacity. Lambda is serverless code execution, while S3 is object storage and CloudFront is a CDN.

4. Which billing option offers discounted pricing in exchange for a defined commitment, while remaining more flexible than a single fixed instance purchase?

A. AWS Budgets

B. Reserved Instances

C. Spot Instances

D. Savings Plans

Answer: (D)

Explanation

Savings Plans reduce compute costs in exchange for a consistent usage commitment and are generally more flexible than Reserved Instances. Spot Instances are cheaper but interruptible, and Budgets is a cost alerting tool.

5. Which AWS service is designed to provide access to foundation models for building generative AI applications?

A. Amazon Q

B. Amazon SageMaker

C. Amazon Rekognition

D. Amazon Bedrock

Answer: (D)

Explanation

Amazon Bedrock is the managed service for accessing foundation models to build GenAI applications. SageMaker is for building and training machine learning models, not direct foundation model access.

6. Which AWS service records API activity to create an audit trail for investigation and compliance?

A. Amazon GuardDuty

B. AWS Security Hub

C. Amazon CloudWatch

D. AWS CloudTrail

Answer: (D)

Explanation

CloudTrail records API calls and provides audit history for security investigations and compliance evidence. CloudWatch focuses on monitoring and logs, while Security Hub aggregates findings.