Repeated requests for the same content are served nearer users by which service?
A CloudFront
B Route table
C Hypervisor
D IAM role
Answer: A. CloudFront. CloudFront caches copies at edge locations closer to viewers, reducing repeated origin requests.
Subnet traffic follows rules stored in which VPC structure?
A Security group
B Route table
C Object tag
D Key policy
Answer: B. Route table. A route table contains rules that direct traffic toward gateways or other network targets.
Direct internet routing attaches to which VPC component?
A NAT gateway
B Load balancer
C Internet gateway
D Key manager
Answer: C. Internet gateway. An internet gateway attaches to a VPC and serves as a route target for internet-bound traffic.
With an internet-gateway route, a subnet is classified as what?
A Private subnet
B Isolated subnet
C Edge subnet
D Public subnet
Answer: D. Public subnet. A subnet with a route to an internet gateway is commonly called a public subnet.
Stateful filtering for VPC instances is provided by which control?
A Security group
B Network ACL
C Route table
D DNS zone
Answer: A. Security group. Security groups are stateful: response traffic for an allowed connection is automatically permitted.
Network ACL rules apply across what boundary?
A Instance level
B Subnet level
C Account level
D Region level
Answer: B. Subnet level. A network ACL applies to traffic entering or leaving its associated subnet.
Private IPv4 hosts start outbound internet sessions through which gateway?
A Internet gateway
B Route table
C Security group
D NAT gateway
Answer: D. NAT gateway. A NAT gateway lets private-subnet instances initiate internet connections without accepting unsolicited inbound connections.
Previous object versions remain available through what S3 feature?
A Lifecycle rule
B Object lock
C Versioning
D Replication
Answer: C. Versioning. S3 Versioning stores multiple object variants, including previous versions after updates.
Automated storage transitions and expiration rely on which S3 rule?
A Access policy
B Lifecycle rule
C Key policy
D Route rule
Answer: B. Lifecycle rule. Lifecycle rules can transition objects between storage classes or expire them.
Incoming requests reach healthy registered targets through what component?
A Load balancer
B Hypervisor
C Key manager
D Route table
Answer: A. Load balancer. Elastic load balancing distributes incoming traffic and routes it to healthy registered targets.
Adding nodes to increase capacity is known as what scaling method?
A Vertical scaling
B Manual scaling
C Storage scaling
D Horizontal scaling
Answer: D. Horizontal scaling. Horizontal scaling increases capacity by adding more instances or nodes.
Growing one VM’s CPU or memory is called what form of scaling?
A Horizontal scaling
B Elastic scaling
C Vertical scaling
D Geographic scaling
Answer: C. Vertical scaling. Vertical scaling increases resources assigned to one machine, such as CPU or memory.
Filesystem and defaults for container launch are packaged in what?
A Container image
B Kernel module
C Virtual disk
D Route bundle
Answer: A. Container image. A container image packages the filesystem and configuration used to create containers.
On a host, which software actually starts containers?
A Orchestrator
B Container runtime
C Image registry
D Load balancer
Answer: B. Container runtime. A container runtime pulls images and starts containers on a host.
Cluster-wide placement and restart of containers are handled by what?
A Image registry
B Hypervisor
C Orchestrator
D Gateway
Answer: C. Orchestrator. A container orchestrator schedules workloads and manages containers across cluster resources.
Running directly on hardware, a hypervisor is classified as which type?
A Hosted hypervisor
B Type 2 hypervisor
C Application VM
D Type 1 hypervisor
Answer: D. Type 1 hypervisor. A Type 1 hypervisor runs on the host hardware rather than on a general-purpose host OS.
Hosted hypervisors rely on what base software?
A Guest container
B Host operating system
C Bare metal firmware
D Cloud subnet
Answer: B. Host operating system. A Type 2, or hosted, hypervisor runs as software on a host operating system.
Temporary AWS workload credentials can be supplied by which identity?
A IAM role
B S3 bucket
C VPC endpoint
D Access key
Answer: A. IAM role. An IAM role can provide temporary credentials to an application or service.
Beyond a password, which control adds another authentication proof?
A Encryption
B MFA
C Tokenization
D Federation
Answer: B. MFA. Multi-factor authentication requires an additional proof beyond the primary credential.
For managed cryptographic key control, which AWS service is used?
A CloudFront
B AWS KMS
C AWS Config
D Amazon VPC
Answer: B. AWS KMS. AWS Key Management Service creates and controls cryptographic keys used by supported services.
During network transit, which protocol protects application data?
A TLS
B CIDR
C NAT
D DNS
Answer: A. TLS. Transport Layer Security protects data exchanged over a network connection.
Request-to-response delay is measured as what?
A Throughput
B Jitter
C Latency
D Capacity
Answer: C. Latency. Latency measures the time delay between a request and its response.
Data delivered per unit time is measured by which metric?
A Availability
B Durability
C Latency
D Throughput
Answer: D. Throughput. Throughput describes how much data is transferred in a given amount of time.
Grouping and billing labels can be attached through what resource feature?
A Labels
B Cost tags
C Metadata tags
D Resource tags
Answer: D. Resource tags. Resource tags attach metadata that helps organize, identify, and report on cloud resources.
Outbound data transfer from a cloud environment is called what?
A Ingress
B Replication
C Egress
D Failover
Answer: C. Egress. Egress is outbound data transfer from a cloud network or service.