Validation Quiz - MODULE 1
This 30-question quiz allows you to validate your knowledge of Cloud Computing and the introduction to AWS before moving on to the practical lab.
Question 1
What is the definition of Cloud Computing according to NIST?
A) A physical server installed in a company
B) The delivery of on-demand computing resources via the Internet with pay-as-you-go billing
C) Software installed on a personal computer
D) A corporate local area network
See the answer
Answer: B
The NIST (National Institute of Standards and Technology) defines Cloud Computing as a model enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.
Question 2
What are the 5 essential characteristics of the Cloud according to NIST?
A) Security, Performance, Availability, Scalability, Cost
B) On-demand self-service, Broad network access, Resource pooling, Rapid elasticity, Measured service
C) Servers, Storage, Network, Database, Applications
D) Public, Private, Hybrid, Community, Multi-cloud
See the answer
Answer: B
The 5 essential characteristics of the Cloud according to NIST are:
- On-demand self-service: the user can provision resources without human intervention
- Broad network access: accessible via the network with standard mechanisms
- Resource pooling: resources shared among multiple clients
- Rapid elasticity: ability to quickly scale up or down
- Measured service: usage is measured and billed according to use
Question 3
Which Cloud service model offers the most control to the user?
A) SaaS (Software as a Service)
B) PaaS (Platform as a Service)
C) IaaS (Infrastructure as a Service)
D) FaaS (Function as a Service)
See the answer
Answer: C
IaaS offers the most control because the user manages the operating system, applications, data, and middleware. The provider only manages the physical infrastructure (servers, storage, network). With SaaS, the user only controls their data. With PaaS, they control their applications and data.
Question 4
In the AWS shared responsibility model, who is responsible for the security OF the cloud?
A) The customer
B) AWS
C) Both equally
D) A third-party auditor
See the answer
Answer: B
AWS is responsible for the security OF the cloud, meaning the underlying infrastructure: physical data centers, hardware, global network, hypervisor. The customer is responsible for security IN the cloud: their data, configuration, identities, applications.
Question 5
What type of Cloud deployment is entirely owned and operated by a single organization?
A) Public Cloud
B) Private Cloud
C) Hybrid Cloud
D) Community Cloud
See the answer
Answer: B
The Private Cloud is a cloud infrastructure used exclusively by a single organization. It can be managed by the organization itself or by a third party, and can exist on-site or off-site. It offers more control but less elasticity than the public cloud.
Question 6
What is the main difference between vertical and horizontal scalability?
A) Vertical adds servers, horizontal increases power
B) Vertical increases the power of a server, horizontal adds servers
C) Both are identical
D) Vertical is for storage, horizontal for computing
See the answer
Answer: B
Vertical scalability (scale up/down) involves increasing or decreasing the resources of a single server (more CPU, RAM). Horizontal scalability (scale out/in) involves adding or removing servers. Horizontal scalability is generally preferred in the cloud as it offers better resilience and can be automated.
Question 7
How many Availability Zones (AZ) does an AWS region have at a minimum?
A) 1
B) 2
C) 3
D) 4
See the answer
Answer: C
Each AWS region has at least 3 Availability Zones (AZ). An AZ consists of one or more data centers with redundant power, network, and connectivity. AZs are physically separated but connected by a low-latency network.
Question 8
What is an AWS Availability Zone?
A) An entire geographic region
B) One or more isolated data centers with independent infrastructure
C) A specific AWS service
D) A billing zone
See the answer
Answer: B
An Availability Zone (AZ) consists of one or more discrete data centers with redundant power, networking, and connectivity. AZs in the same region are connected to each other by a high-speed, low-latency private network, but are far enough apart to avoid a single disaster affecting multiple AZs.
Question 9
Which AWS service manages identities and access?
A) Amazon EC2
B) Amazon S3
C) AWS IAM
D) Amazon VPC
See the answer
Answer: C
AWS IAM (Identity and Access Management) is the service that securely manages access to AWS services and resources. It allows you to create and manage users, groups, roles, and access policies.
Question 10
What is the best practice regarding the AWS root account?
A) Use it for all daily operations
B) Share its credentials with the team
C) Use it only for tasks that require it and enable MFA
D) Delete the root account after creation
See the answer
Answer: C
The root account has unlimited access to all resources. Best practices are: do not use it for daily tasks, enable MFA (Multi-Factor Authentication), never share the credentials, create IAM users with the minimal necessary permissions, and only use the root for tasks that absolutely require it (such as changing billing information).
Question 11
What is the principle of least privilege?
A) Give all access to all users
B) Grant only the permissions strictly necessary to perform a task
C) Deny all access by default without exception
D) Use only the root account
See the answer
Answer: B
The principle of least privilege involves granting a user, role, or service only the minimum permissions necessary to perform its task. This reduces the attack surface and limits the potential impact of credential compromise.
Question 12
What is AWS CLI?
A) A graphical interface for AWS
B) A command-line tool to interact with AWS services
C) An AWS storage service
D) A programming language
See the answer
Answer: B
AWS CLI (Command Line Interface) is a unified tool to manage AWS services from the command line. It allows you to automate tasks, write scripts, and interact with AWS without using the web console. Commands generally follow the format: aws [service] [command] [options].
Question 13
Which AWS CLI command lists S3 buckets?
A) aws s3 list
B) aws s3 ls
C) aws s3 show
D) aws s3 get-buckets
See the answer
Answer: B
The command aws s3 ls lists all S3 buckets in the account. To list the contents of a specific bucket, use aws s3 ls s3://bucket-name. This command is part of the high-level S3 interface commands.
Question 14
How do you configure AWS CLI credentials?
A) aws setup
B) aws configure
C) aws init
D) aws login
See the answer
Answer: B
The command aws configure allows you to configure AWS CLI credentials and default settings. It prompts for: Access Key ID, Secret Access Key, default region, and output format. This information is stored in ~/.aws/credentials and ~/.aws/config.
Question 15
What is LocalStack?
A) An official AWS service
B) A local emulator of AWS services for development and testing
C) A local physical server
D) A browser extension
See the answer
Answer: B
LocalStack is an open-source emulator that replicates AWS service APIs on your local machine. It allows you to develop and test cloud applications without needing an AWS account and without incurring costs. It supports many services like S3, EC2, Lambda, DynamoDB, etc.
Question 16
Which port does LocalStack use by default for all services?
A) 80
B) 443
C) 4566
D) 8080
See the answer
Answer: C
LocalStack exposes all its services by default on port 4566. Unlike real AWS where each service has its own endpoint, LocalStack unifies all services on a single port to simplify local configuration. The default endpoint is therefore http://localhost:4566.
Question 17
How do you specify the LocalStack endpoint with AWS CLI?
A) --local
B) --endpoint-url=http://localhost:4566
C) --localstack
D) --dev-mode
See the answer
Answer: B
To use AWS CLI with LocalStack, add the parameter --endpoint-url=http://localhost:4566 to each command. For example: aws --endpoint-url=http://localhost:4566 s3 ls. Alternatively, you can use the awslocal command which automatically adds this parameter.
Question 18
What tool is necessary to run LocalStack?
A) Python only
B) Java only
C) Docker
D) Node.js only
See the answer
Answer: C
Docker is necessary to run LocalStack because it runs in a Docker container. LocalStack can be started with docker-compose up or localstack start. Python and pip are needed to install the LocalStack CLI, but Docker is essential for execution.
Question 19
What billing model is typical of Cloud Computing?
A) Fixed annual license
B) Hardware purchase
C) Pay-as-you-go
D) Fixed monthly subscription only
See the answer
Answer: C
The pay-as-you-go model is fundamental in the cloud. You only pay for the resources you consume, often billed by the second or hour. This eliminates significant upfront investments (CapEx) and turns costs into variable operational expenses (OpEx).
Question 20
What is CapEx vs OpEx in the context of the cloud?
A) Two types of AWS services
B) CapEx = capital expenditures, OpEx = operational expenditures
C) Two cloud deployment models
D) Two types of AWS regions
See the answer
Answer: B
CapEx (Capital Expenditure) represents capital investment expenses like purchasing physical servers. OpEx (Operational Expenditure) represents ongoing operational expenses. The cloud transforms CapEx into OpEx, offering more financial flexibility and eliminating heavy initial investments.
Question 21
Which AWS service is used for computing (virtual machines)?
A) Amazon S3
B) Amazon EC2
C) Amazon RDS
D) Amazon VPC
See the answer
Answer: B
Amazon EC2 (Elastic Compute Cloud) is the computing service that allows you to launch instances (virtual machines) in the AWS cloud. It offers resizable compute capacity and allows you to choose the instance type, operating system, and configuration according to your needs.
Question 22
Which AWS service provides object storage?
A) Amazon EBS
B) Amazon S3
C) Amazon EC2
D) Amazon RDS
See the answer
Answer: B
Amazon S3 (Simple Storage Service) is AWS's object storage service. It allows you to store and retrieve any amount of data from anywhere on the web. Data is organized into buckets and objects, with a durability of 99.999999999% (11 nines).
Question 23
What is the difference between object storage and block storage?
A) No difference
B) Object storage is for files, block storage is for databases only
C) Object storage stores files with metadata, block storage stores data in fixed-size blocks
D) Block storage is more recent
See the answer
Answer: C
Object storage (S3) stores complete files with metadata in a flat space, ideal for static files, backups, and archives. Block storage (EBS) stores data in fixed-size blocks that can be modified independently, ideal for operating systems and databases that require fast and granular access.
Question 24
What is Amazon VPC?
A) A computing service
B) An isolated virtual private network in the AWS cloud
C) A storage service
D) A database service
See the answer
Answer: B
Amazon VPC (Virtual Private Cloud) allows you to provision a logically isolated section of the AWS cloud where you can launch resources in a virtual network that you define. You control the network environment: IP address range, subnets, route tables, and gateways.
Question 25
What format does AWS CLI use to display results by default?
A) XML
B) JSON
C) YAML
D) Plain text
See the answer
Answer: B
By default, AWS CLI displays results in JSON format. This format can be changed with the --output option or by configuring the default format with aws configure. Available formats are: json, text, table, and yaml.
Question 26
How do you check the installed version of AWS CLI?
A) aws version
B) aws --version
C) aws -v
D) aws info
See the answer
Answer: B
The command aws --version displays the installed version of AWS CLI as well as the version of Python used. This is useful for verifying the installation and ensuring compatibility with desired features.
Question 27
What is an AMI in AWS?
A) An instance type
B) A machine image containing the operating system and software to launch an instance
C) A monitoring service
D) A storage type
See the answer
Answer: B
An AMI (Amazon Machine Image) is a template that contains the software configuration (operating system, application server, and applications) needed to launch an instance. AMIs can be public (provided by AWS or the community), private, or shared with specific accounts.
Question 28
Which command verifies the identity of the configured AWS account?
A) aws whoami
B) aws sts get-caller-identity
C) aws iam get-user
D) aws account info
See the answer
Answer: B
The command aws sts get-caller-identity returns details about the IAM identity whose credentials are used to call the API. It displays the UserId, Account (account number), and ARN of the identity. This is useful for verifying which account and user are configured.
Question 29
In which file does AWS CLI store default credentials?
A) ~/.aws/config
B) ~/.aws/credentials
C) ~/.aws/keys
D) /etc/aws/credentials
See the answer
Answer: B
AWS CLI stores credentials (Access Key ID and Secret Access Key) in the file ~/.aws/credentials. The file ~/.aws/config contains other configuration settings like the default region and output format. Both files use the INI format with sections for each profile.
Question 30
Why use named profiles in AWS CLI?
A) For security only
B) To manage multiple AWS accounts or roles with different configurations
C) To speed up commands
D) It's mandatory
See the answer
Answer: B
Named profiles allow you to configure multiple sets of credentials and settings for different AWS accounts, environments (dev, staging, prod), or roles. You can then use a specific profile with the --profile profile_name option. The default profile is used if no profile is specified.
Result
Count your correct answers:
- 27-30: Excellent - You have mastered the fundamental concepts
- 22-26: Good - Some points to review
- 17-21: Average - Review the course before the lab
- Less than 17: Insufficient - Start the course from the beginning
Proceed to the Practical Lab once you have reached at least 22 correct answers.