---
title: "AWS Advanced: EC2, RDS, Lambda, CloudFormation"
description: "Master AWS at scale: EC2 instance types, RDS databases, Lambda functions, CloudFormation infrastructure as code, and AWS architecture patterns."
author: "Mohammad Abu Mattar"
canonical: https://mkabumattar.com/quizzes/post/aws-advanced-quiz
---

# AWS Advanced: EC2, RDS, Lambda, CloudFormation

Welcome to the AWS Advanced Quiz! Test your knowledge of EC2 instance types, RDS databases, Lambda functions, CloudFormation templates, and more. This quiz is designed for those with intermediate AWS experience looking to solidify their understanding of core services and architecture patterns.

## Questions

### 1. What is Amazon EC2?

- **Elastic Compute Cloud: resizable virtual servers on-demand** ✅
  - EC2: resizable, multiple instance types, regions/zones. Foundation of AWS.
- Managed container service for running Dockerized applications
  - This describes Amazon ECS or EKS, not EC2.
- A serverless execution environment for small event-driven functions
  - This describes AWS Lambda.
- A dedicated hardware-only hosting service without virtualization
  - EC2 is primarily a virtualized service, though Bare Metal instances exist.

**Hint:** Think about virtual servers.

### 2. What is an instance type in EC2?

- **Hardware specifications categorized by compute, memory, and storage** ✅
  - Instance types: different CPU/RAM/network ratios. Right-size for workload.
- A software versioning system used to manage server operating systems
  - This describes AMIs (Amazon Machine Images).
- A geographic designation defining which data center the server occupies
  - This describes Availability Zones and Regions.
- A billing category that determines if a server is Reserved or Spot
  - This describes Purchase Options, not Instance Types (hardware specs).

**Hint:** Think about compute/memory/network balance.

### 3. What is Amazon RDS?

- **Relational Database Service: managed MySQL, PostgreSQL, or SQL Server** ✅
  - RDS: automated backups, patching, failover. Multi-AZ for HA.
- A globally distributed NoSQL database for key-value data storage
  - This describes Amazon DynamoDB.
- A database migration tool used to move data from on-premise to cloud
  - This describes AWS DMS (Database Migration Service).
- A self-managed database environment where users handle OS patching
  - RDS is a managed service; AWS handles the underlying OS and patching.

**Hint:** Think about managed databases.

### 4. What is Amazon DynamoDB?

- **Serverless NoSQL database providing consistent millisecond performance** ✅
  - DynamoDB: fast, scalable, pay-per-request or provisioned. Document DB alternative.
- Relational database engine compatible with Aurora and MySQL
  - DynamoDB is NoSQL (non-relational).
- A data warehousing service optimized for complex SQL analytics
  - This describes Amazon Redshift.
- A local file storage system for high-performance compute clusters
  - This describes Amazon FSx or EFS, not a database.

**Hint:** Think about NoSQL.

### 5. What is AWS Lambda?

- **Event-driven compute service that runs code without server management** ✅
  - Lambda: pay per execution, auto-scaling, event-triggered. Cost-effective for spiky workloads.
- A virtual machine instance that runs continuously for long-term tasks
  - This describes an EC2 Reserved Instance.
- A load balancing service that routes traffic to healthy containers
  - This describes the Application Load Balancer (ALB).
- An orchestration tool used to manage Kubernetes clusters at scale
  - This describes Amazon EKS.

**Hint:** Think about serverless functions.

### 6. What is a "cold start" in AWS Lambda?

- **Latency occurring when Lambda initializes a new execution environment** ✅
  - Cold start: provisioned concurrency reduces. Warm start: fast. Important for real-time.
- A failure mode where the function times out before processing data
  - This is an execution timeout, not a cold start.
- The process of restarting a server after a hardware maintenance event
  - Lambda is serverless; users do not manage hardware restarts.
- A security feature that clears the function memory after every execution
  - While environments are isolated, "cold start" refers specifically to initialization delay.

**Hint:** Think about first invocation latency.

### 7. What is AWS CloudFormation?

- **Infrastructure as Code service using templates to model AWS resources** ✅
  - CloudFormation: version controlled, reproducible infrastructure. Stacks update.
- A visual designer used to manually draw network diagrams in the console
  - Though a designer exists, CloudFormation is primarily code-based (JSON/YAML).
- A monitoring tool that provides real-time graphs of CPU and memory usage
  - This describes Amazon CloudWatch.
- A global content delivery network that caches data at edge locations
  - This describes Amazon CloudFront.

**Hint:** Think about Infrastructure as Code.

### 8. What is Amazon S3?

- **Highly durable object storage service for any type of data file** ✅
  - S3: use for uploads, static sites, backups. Versioning, encryption available.
- A network file system designed for mounting on multiple EC2 instances
  - This describes Amazon EFS (Elastic File System).
- A high-speed block storage volume used as a primary drive for OS
  - This describes Amazon EBS (Elastic Block Store).
- An archival tape storage replacement with multi-hour retrieval times
  - This describes S3 Glacier specifically, though standard S3 is instant access.

**Hint:** Think about object storage.

### 9. What is an S3 lifecycle policy?

- **Automated rules to transition or delete objects based on age** ✅
  - Lifecycle: move to Glacier after 30 days. Delete after 1 year. Cost optimization.
- A security setting that prevents objects from being deleted by users
  - This describes S3 Object Lock or MFA Delete.
- A performance optimization that compresses old files into zip archives
  - S3 does not automatically compress files; it only moves them between tiers.
- A replication rule that copies data to a different AWS Region
  - This describes S3 Cross-Region Replication (CRR).

**Hint:** Think about archiving old data.

### 10. What is an Amazon VPC?

- **A logically isolated section of the AWS Cloud for private networking** ✅
  - VPC: control networking, multi-tier, on-premise connection via VPN.
- A physical server rack dedicated to a single enterprise customer
  - This describes AWS Outposts or Dedicated Hosts.
- A connection between an on-premise data center and an AWS Region
  - This describes AWS Direct Connect or Site-to-Site VPN.
- A specialized security service that filters SQL injection attacks
  - This describes AWS WAF (Web Application Firewall).

**Hint:** Think about network isolation.

### 11. What is an AWS Security Group?

- **A stateful virtual firewall that controls inbound and outbound traffic** ✅
  - Security group: attach to instances. Implicit deny all, allow what needed.
- A stateless network layer that filters traffic at the subnet level
  - This describes Network Access Control Lists (NACLs).
- A collection of IAM users who share the same access permissions
  - This describes an IAM Group.
- An encryption tool used to protect data stored on EBS volumes
  - This refers to EBS Encryption settings or KMS.

**Hint:** Think about firewall rules.

### 12. What is AWS IAM?

- **Web service for securely controlling access to AWS resources** ✅
  - IAM: fine-grained permissions, cross-account access, federation.
- An audit tool that records every API call made in the account
  - This describes AWS CloudTrail.
- A resource tagging system used for organizing billing reports
  - This refers to Cost Allocation Tags.
- A database that stores user profiles for public-facing websites
  - This describes Amazon Cognito User Pools.

**Hint:** Think about access control.

### 13. What is an Amazon EC2 Auto Scaling Group (ASG)?

- **A collection of instances treated as a logical grouping for scaling** ✅
  - ASG: launch templates, min/desired/max capacity. Adds/removes instances.
- A feature that automatically upgrades instance CPU and RAM on the fly
  - EC2 scaling is horizontal (more instances), not vertical (bigger hardware).
- A service that migrates local virtual machines to the AWS Cloud
  - This describes AWS Application Migration Service (MGN).
- A tool that balances traffic across different regions globally
  - This describes Route 53 or Global Accelerator.

**Hint:** Think about automatic scaling.

### 14. What is Amazon CloudWatch?

- **Observability service providing metrics, logs, and actionable alarms** ✅
  - CloudWatch: collect metrics, trigger alarms. CloudWatch Logs for application logs.
- A threat detection service that monitors for malicious activity
  - This describes Amazon GuardDuty.
- A real-time compliance checker for infrastructure configurations
  - This describes AWS Config.
- A centralized portal for managing AWS support tickets and billing
  - This describes the AWS Support Center or Billing Dashboard.

**Hint:** Think about monitoring AWS resources.

### 15. What is Amazon SNS?

- **A fully managed pub/sub messaging service for fan-out architectures** ✅
  - SNS: fan-out, email, SMS, Lambda. One-to-many pattern.
- A message queuing service that ensures asynchronous task processing
  - This describes Amazon SQS.
- A push notification service exclusively for iOS and Android apps
  - SNS supports mobile, but is a general-purpose messaging service.
- A dedicated fiber optic connection between data centers
  - This refers to physical networking or Direct Connect.

**Hint:** Think about pub/sub messaging.

### 16. What is Amazon SQS?

- **A managed message queuing service used to decouple applications** ✅
  - SQS: FIFO/standard, visibility timeout, long polling. Many producers/consumers.
- A streaming platform designed for processing gigabytes of data per second
  - This describes Amazon Kinesis.
- A real-time chat protocol used for internal service communication
  - SQS is for asynchronous messaging, not real-time chat protocols.
- A centralized directory for storing and discovering API endpoints
  - This describes AWS Cloud Map or API Gateway.

**Hint:** Think about message queues.

### 17. What is an Elastic Load Balancer (ELB)?

- **A service that automatically distributes incoming app traffic across targets** ✅
  - ELB types: Classic, Application (layer 7), Network (layer 4). Improves availability.
- A device that increases the electricity throughput of a data center
  - ELB is a software-defined networking service, not a physical power tool.
- A tool that compresses web traffic to reduce bandwidth costs
  - While ELBs support compression, their primary purpose is distribution.
- A DNS management service used to register new domain names
  - This describes Amazon Route 53.

**Hint:** Think about distributing traffic.

### 18. What is Amazon Route 53?

- **A highly available and scalable Cloud Domain Name System (DNS) service** ✅
  - Route53: simple routing, weighted, latency-based, failover. Integrates with ELBs.
- A private network circuit that bypasses the public internet
  - This describes AWS Direct Connect.
- A routing algorithm that optimizes internal database query paths
  - Route 53 handles external network traffic, not internal DB queries.
- An IP address management tool used for local office networks
  - Route 53 is a cloud DNS service, not for local office IP management.

**Hint:** Think about DNS and domains.

### 19. What is Amazon ElastiCache?

- **A web service that makes it easy to deploy an in-memory data store** ✅
  - ElastiCache: improves performance, reduces DB load. Redis for advanced features.
- A storage tier that automatically moves data to cheaper HDD drives
  - This describes S3 Intelligent-Tiering or EBS volume changes.
- A processor cache optimization used on specialized EC2 instances
  - ElastiCache is a managed Redis/Memcached service, not hardware CPU cache.
- An encrypted backup vault for storing long-term database snapshots
  - This describes AWS Backup or RDS Snapshots.

**Hint:** Think about caching layer.

### 20. What is Amazon API Gateway?

- **A managed service for creating, publishing, and securing APIs at any scale** ✅
  - API Gateway: request transformation, authentication, throttling. Lambda integration.
- A hardware appliance installed in on-premise offices to route cloud traffic
  - API Gateway is a fully managed cloud service, not a hardware appliance.
- A programming language used to define serverless backend logic
  - API Gateway is a service, not a language (like Dart or JavaScript).
- A security firewall that only allows traffic from a specific IP range
  - While it supports IP filtering, it is a full API management suite.

**Hint:** Think about RESTful API management.

### 21. What is Amazon Cognito?

- **A service providing user sign-up, sign-in, and access control for apps** ✅
  - Cognito: sign-up/sign-in, social login, MFA. Manages user identities.
- A machine learning service that recognizes faces in digital images
  - This describes Amazon Rekognition.
- A data synchronization tool for keeping documents consistent across users
  - This describes Amazon WorkDocs or AppSync.
- A specialized encryption chip found in AWS Graviton processors
  - Cognito is an identity service, not a physical hardware chip.

**Hint:** Think about authentication and authorization.

### 22. What is AWS KMS?

- **A service used to create and control the keys used to encrypt data** ✅
  - KMS: master keys, data keys, envelope encryption. Integrates with S3, RDS, EBS.
- A knowledge-based support system for resolving technical AWS issues
  - This refers to AWS Documentation or Support.
- A physical security key used for Multi-Factor Authentication (MFA)
  - KMS manages digital cryptographic keys, not physical MFA tokens.
- A global management system for tracking software licenses in the cloud
  - This describes AWS License Manager.

**Hint:** Think about encryption keys.

### 23. What is Amazon CloudFront?

- **A fast content delivery network (CDN) service that caches data globally** ✅
  - CloudFront: edge locations, origin (S3, custom), cache behaviors.
- A user interface framework for building responsive web dashboards
  - CloudFront is a CDN; UI frameworks include things like AWS Amplify UI.
- A satellite-based internet provider for remote data center locations
  - This describes AWS Ground Station or Starlink, not CloudFront.
- A video conferencing tool used for internal team communication
  - This describes Amazon Chime.

**Hint:** Think about content delivery.

### 24. What is Amazon EBS?

- **High-performance block storage service designed for use with EC2** ✅
  - EBS: gp2/gp3 (general), io1 (IOPS). Snapshots for backup. AZ-bound.
- An elastic backup system that automatically clones S3 buckets
  - EBS is block storage for servers, not a backup system for S3.
- A temporary storage volume that is deleted when an instance stops
  - This describes Instance Store (ephemeral storage), whereas EBS is persistent.
- A managed service for migrating physical hard drives to the cloud
  - This refers to AWS Snowball or AWS Import/Export.

**Hint:** Think about block storage for EC2.

### 25. What is AWS Lambda concurrency?

- **The number of requests that a Lambda function is serving at any given time** ✅
  - Concurrency: account limit (1000), provisioned concurrency for predictable load.
- The total amount of memory allocated to a single function execution
  - This refers to Memory Configuration, not Concurrency.
- The speed at which a function compiles before it begins to execute
  - This is part of the cold start process, not the concurrency metric.
- A billing model where users pay a flat monthly fee for unlimited calls
  - Lambda is pay-per-execution, not a flat-fee service.

**Hint:** Think about simultaneous executions.

### 26. What are Amazon DynamoDB Streams?

- **An ordered flow of information about item-level changes in a table** ✅
  - Streams: trigger Lambda, replicate data, CQRS patterns. 24-hour retention.
- A video streaming service used to host live application tutorials
  - This describes Amazon IVS (Interactive Video Service).
- A high-speed data import tool used to load CSV files into NoSQL
  - This describes DynamoDB Import from S3.
- A feature that allows SQL queries to be run directly on DynamoDB data
  - DynamoDB uses PartiQL for SQL-like queries, but "Streams" refers to change logs.

**Hint:** Think about capturing changes.

### 27. What is VPC peering?

- **A networking connection between two VPCs using private IP addresses** ✅
  - Peering: point-to-point, no data transfer charge. AWS or cross-account.
- A public internet bridge used to connect AWS to other cloud providers
  - VPC Peering is private and stays within the AWS network backbone.
- A process that automatically merges two AWS accounts into one
  - This describes AWS Organizations consolidation, not VPC peering.
- A security audit that checks for open ports across all subnets
  - This describes Amazon Inspector or VPC Flow Logs analysis.

**Hint:** Think about connecting VPCs.

### 28. What is an AWS NAT Gateway?

- **A managed service that allows instances in a private subnet to connect to the internet** ✅
  - NAT Gateway: in public subnet, handles outbound traffic. Different from NAT Instance.
- A specialized entrance for allowing public web traffic into a database
  - NAT Gateways are for outbound traffic only; they block unsolicited inbound traffic.
- A hardware device used to connect local office printers to the AWS Cloud
  - This is not a function of the NAT Gateway service.
- An authentication portal for managing VPN connections to the VPC
  - This refers to a Client VPN Endpoint or Virtual Private Gateway.

**Hint:** Think about private subnet internet access.

### 29. What is an Amazon EBS snapshot?

- **An incremental, point-in-time backup of an EBS volume stored in S3** ✅
  - Snapshots: only changed blocks, cross-region copy. AMI from snapshots.
- A real-time mirror of a volume that exists in a different Availability Zone
  - This describes EBS Multi-Attach or RDS Mirroring, not a Snapshot.
- A temporary log file that records all disk writes for 24 hours
  - Snapshots are persistent backups, not temporary log files.
- A configuration script that automatically formats a new hard drive
  - This is part of the instance user-data or OS initialization.

**Hint:** Think about backup and recovery.

### 30. What is Amazon Kinesis?

- **A platform for collecting, processing, and analyzing real-time streaming data** ✅
  - Kinesis: streams (shards), analytics, Firehose for delivery. Alternative to Kafka.
- A data compression tool used to shrink large files before moving to S3
  - Kinesis is for data streams, not file-system compression.
- A physical migration service involving a truck filled with hard drives
  - This describes AWS Snowmobile.
- An encryption protocol used for securing wireless data in warehouses
  - Kinesis is a data service, not a wireless security protocol.

**Hint:** Think about real-time data streaming.