AWS Trusted Advisor recommendations - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ service_behavior

intermediate

Understanding AWS Trusted Advisor Cost Optimization Checks

Which of the following AWS Trusted Advisor checks helps identify unused or idle resources to reduce costs?

A Service Limits - Monitors usage against service quotas

B Underutilized Amazon EC2 Instances - Identifies instances with low CPU utilization

C Security Groups - Checks for overly permissive rules

D S3 Bucket Permissions - Checks for public access

💡 Hint

Think about which check focuses on resource usage and cost savings.

The 'Underutilized Amazon EC2 Instances' check identifies EC2 instances with low CPU usage, helping reduce costs by stopping or resizing them.

❓ security

intermediate

AWS Trusted Advisor Security Check Purpose

Which AWS Trusted Advisor check helps you find security risks related to your AWS Identity and Access Management (IAM) settings?

A IAM Use - Checks for unused IAM users

B S3 Bucket Permissions - Checks for public read or write access

C Security Groups - Checks for unrestricted inbound access

D MFA on Root Account - Checks if multi-factor authentication is enabled on the root user

💡 Hint

Consider which check protects the most powerful account in AWS.

Enabling MFA on the root account adds an extra layer of security, and Trusted Advisor checks if this is enabled.

❓ Architecture

advanced

Interpreting AWS Trusted Advisor Service Limits Check

You receive a Trusted Advisor alert about approaching service limits for Amazon RDS instances. What is the best architectural response?

A Ignore the alert since limits reset monthly

B Delete all existing RDS instances to free up capacity

C Request a service limit increase from AWS Support before reaching the limit

D Switch to a different AWS region without checking limits

💡 Hint

Think about how to handle resource limits proactively.

Requesting a limit increase prevents service disruption and supports scaling your architecture safely.

✅ Best Practice

advanced

AWS Trusted Advisor Recommendations for Fault Tolerance

Which Trusted Advisor check helps improve fault tolerance by identifying single points of failure?

A Amazon RDS Backups - Checks if automated backups are enabled

B Amazon EC2 Reserved Instances - Checks for unused reservations

C Amazon S3 Bucket Permissions - Checks for public access

D Service Limits - Checks usage against quotas

💡 Hint

Think about backups and recovery in case of failure.

Enabling automated backups on RDS improves fault tolerance by allowing recovery from failures.

🧠 Conceptual

expert

Analyzing AWS Trusted Advisor Impact on Security Posture

After running AWS Trusted Advisor, you find that your S3 buckets have public read access warnings. What is the most secure and practical next step?

A Review each bucket's purpose and restrict public access only where it is not required

B Immediately remove all public access permissions from all buckets without review

C Ignore the warnings if the buckets contain only non-sensitive data

D Delete all buckets with public access to prevent any risk

💡 Hint

Consider balancing security with business needs.

Not all public access is bad; some buckets are meant to be public. Review and restrict only unnecessary public access.