Practice questions across the four AWS Cloud Practitioner exam domains. Pick an answer to reveal whether you were right and why - nothing is shown until you commit, so you can genuinely test yourself.
72 questions
Answered 0/72
· Correct 0
Cloud Concepts Q1
Which pillar of the AWS Well-Architected Framework focuses on a system’s ability to recover from failures and dynamically meet demand?
Why: Reliability covers recovering from disruptions and scaling to meet demand. The six pillars are Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability.
Cloud Concepts Q2
Which of the following is NOT a pillar of the AWS Well-Architected Framework?
Why: Elasticity is a cloud characteristic, not a pillar. The six pillars are Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability.
Cloud Concepts Q3
What is a primary financial benefit of moving to the AWS Cloud?
Why: Instead of large up-front data-center investments (CapEx), you pay only for what you consume (variable OpEx), and pay less as you scale thanks to economies of scale.
Cloud Concepts Q4
A workload’s traffic spikes every evening and drops overnight. Which cloud characteristic lets AWS automatically add and remove capacity to match this?
Why: Elasticity is the ability to acquire resources as you need them and release them when you don’t, scaling in and out automatically with demand.
Cloud Concepts Q5
Which component of AWS global infrastructure is a physically separate, isolated location made up of one or more data centers within a Region?
Why: A Region contains multiple Availability Zones (AZs). Each AZ is one or more discrete data centers with independent power and networking, enabling highly available designs across AZs.
Cloud Concepts Q6
Which EC2 purchasing option offers the largest discount (up to 90%) and is best for fault-tolerant, flexible, or interruptible workloads?
Why: Spot Instances use spare EC2 capacity at steep discounts but can be reclaimed with a two-minute warning, so they suit batch jobs, CI, and other interruption-tolerant work.
Cloud Concepts Q7
A company wants to run some workloads in its own data center while connecting them to resources in AWS. Which deployment model is this?
Why: A hybrid deployment integrates on-premises infrastructure with cloud resources, often connected via VPN or AWS Direct Connect.
Cloud Concepts Q8
Which benefit of cloud computing lets a company deploy its application to customers around the world in minutes?
Why: “Go global in minutes” means deploying to multiple AWS Regions worldwide with a few clicks, putting applications closer to users for lower latency.
Cloud Concepts Q9
Because AWS aggregates usage from hundreds of thousands of customers, it can lower prices over time. This is an example of what?
Why: Economies of scale: AWS’s massive aggregated demand drives down its per-unit costs, and those savings are passed on as lower pricing.
Cloud Concepts Q10
What does the cloud benefit “stop guessing capacity” allow a business to do?
Why: Rather than buying for peak (waste) or too little (poor performance), you scale on demand and pay for what you actually use.
Cloud Concepts Q11
Which practice most improves the high availability of an application running on Amazon EC2?
Why: Spreading instances across multiple AZs (and using a load balancer + Auto Scaling) means the failure of one AZ doesn’t take the application down.
Cloud Concepts Q12
A healthcare company must store patient data within a specific country to satisfy local law. Which factor should most influence its AWS Region choice?
Why: When laws require data to reside in a particular jurisdiction, compliance/data-residency requirements drive Region selection. Latency, price, and service availability are secondary factors.
Cloud Concepts Q13
Adding more, smaller instances to handle increased load (rather than resizing to a bigger instance) is known as what?
Why: Horizontal scaling (scaling out) adds more instances; vertical scaling (scaling up) increases the size of a single instance. The cloud makes horizontal scaling easy via Auto Scaling.
Cloud Concepts Q14
Which cloud benefit refers to being able to experiment and provision resources in minutes instead of weeks?
Why: Agility is the speed with which you can spin resources up and down, letting teams experiment cheaply and bring ideas to market faster.
Cloud Concepts Q15
What is the main purpose of comparing Total Cost of Ownership (TCO) between on-premises and AWS?
Why: TCO accounts for all direct and indirect costs (hardware, facilities, power, cooling, admin labor) so the comparison reflects true cost, not just visible line items.
Cloud Concepts Q16
Designing application components so that a failure in one does not cascade to others is best described as what?
Why: Loose coupling (often via queues like Amazon SQS or load balancers) isolates components so they can fail and scale independently, improving resilience.
Security & Compliance Q17
Under the AWS Shared Responsibility Model, who is responsible for patching the guest operating system on an Amazon EC2 instance?
Why: AWS secures the cloud (hardware, hypervisor, facilities). The customer is responsible for security *in* the cloud - the guest OS, patches, applications, and data on EC2.
Security & Compliance Q18
Under the Shared Responsibility Model, which of these is always AWS’s responsibility?
Why: AWS is responsible for security *of* the cloud - including physical facilities, hardware, and the global infrastructure. Customers configure security groups, IAM, and data encryption.
Security & Compliance Q19
Which AWS service is used to create users and groups and control their permissions to AWS resources?
Why: AWS Identity and Access Management (IAM) manages users, groups, roles, and fine-grained permission policies for AWS services and resources.
Security & Compliance Q20
Which is a security best practice for the AWS account root user?
Why: Protect the root user with MFA, lock away its credentials, and do day-to-day work with least-privilege IAM users or roles. The root user cannot be deleted.
Security & Compliance Q21
Which service continuously monitors AWS accounts and workloads for malicious activity using machine learning and threat intelligence?
Which service provides on-demand access to AWS compliance reports such as SOC and PCI DSS?
Why: AWS Artifact is a self-service portal for on-demand access to AWS security and compliance documentation, including SOC reports and PCI DSS attestations.
Security & Compliance Q23
Which service protects web applications from common exploits like SQL injection and cross-site scripting?
Why: AWS WAF (Web Application Firewall) filters malicious web requests with rules. AWS Shield defends specifically against DDoS attacks.
Security & Compliance Q24
Which AWS service helps defend applications against Distributed Denial of Service (DDoS) attacks, with a Standard tier enabled automatically at no extra cost?
Why: AWS Shield Standard provides automatic, free DDoS protection for all AWS customers. Shield Advanced adds enhanced protections and support for a fee.
Security & Compliance Q25
Which service lets you create and control the encryption keys used to encrypt your data across AWS services?
Why: AWS Key Management Service (KMS) creates and manages cryptographic keys and integrates with services like S3, EBS, and RDS to encrypt data.
Security & Compliance Q26
Which service uses machine learning to discover and protect sensitive data such as personally identifiable information (PII) stored in Amazon S3?
Why: Amazon Macie automatically discovers, classifies, and helps protect sensitive data (like PII) in S3 using machine learning.
Security & Compliance Q27
Which service performs automated security assessments to find software vulnerabilities and unintended network exposure in workloads?
Why: Amazon Inspector continuously scans EC2 instances, container images, and Lambda functions for known vulnerabilities (CVEs) and network reachability issues.
Security & Compliance Q28
An application on EC2 needs to read from an S3 bucket. What is the AWS-recommended way to grant this access?
Why: Attaching an IAM role provides temporary, automatically rotated credentials to the instance - no long-lived keys to embed or leak.
Security & Compliance Q29
What does the principle of “least privilege” mean when assigning IAM permissions?
Why: Least privilege limits each identity to exactly the permissions it needs, reducing the blast radius if credentials are compromised.
Security & Compliance Q30
What does multi-factor authentication (MFA) add to an AWS sign-in?
Why: MFA requires a second factor (such as a code from a device) on top of the password, so a stolen password alone isn’t enough to sign in.
Security & Compliance Q31
Which statement about security groups and network ACLs in a VPC is correct?
Why: Security groups are stateful (return traffic is automatically allowed) and act at the instance level. Network ACLs are stateless and act at the subnet level.
Security & Compliance Q32
Which service records API calls made in your account - capturing who did what, when, and from where - for auditing and governance?
Why: AWS CloudTrail logs account activity and API calls for audit and compliance. CloudWatch focuses on performance metrics and logs; Config tracks resource configuration state.
Security & Compliance Q33
Which service continuously assesses, audits, and evaluates the configurations of your AWS resources against desired rules?
Why: AWS Config records resource configurations and evaluates them against rules, alerting you when a resource drifts out of compliance.
Security & Compliance Q34
Which service helps you securely store, retrieve, and automatically rotate secrets such as database credentials and API keys?
Why: AWS Secrets Manager stores and centrally manages secrets and can rotate them automatically, so credentials aren’t hard-coded in application source.
Security & Compliance Q35
In AWS Organizations, what is the purpose of a Service Control Policy (SCP)?
Why: SCPs act as guardrails - they set the maximum permissions accounts can have but do not by themselves grant permissions. Actual access still requires IAM policies.
Cloud Technology & Services Q36
Which AWS service provides resizable virtual servers (compute capacity) in the cloud?
Why: Amazon Elastic Compute Cloud (EC2) provides resizable virtual machines. S3 is storage, RDS is databases, and VPC is networking.
Cloud Technology & Services Q37
Which AWS service is a fully managed relational database service?
Why: Amazon RDS manages relational databases (MySQL, PostgreSQL, MariaDB, Oracle, SQL Server, Aurora). DynamoDB is NoSQL, Redshift is a data warehouse, S3 is object storage.
Cloud Technology & Services Q38
Which service lets you run code without provisioning or managing servers, paying only for the compute time consumed?
Why: AWS Lambda is serverless compute: you upload code, it runs in response to events, and you pay per request and execution duration - no servers to manage.
Cloud Technology & Services Q39
A team needs a managed NoSQL key-value database with single-digit millisecond latency at any scale. Which service fits best?
Why: Amazon DynamoDB is a fully managed, serverless NoSQL key-value and document database delivering consistent single-digit millisecond performance at virtually any scale.
Cloud Technology & Services Q40
Which service is object storage designed for 99.999999999% (eleven nines) durability?
Why: Amazon Simple Storage Service (S3) stores objects with eleven nines of durability. EBS and EFS are block and file storage respectively.
Cloud Technology & Services Q41
Which service provides persistent block storage volumes that attach to a single EC2 instance, like a virtual hard drive?
Why: Amazon Elastic Block Store (EBS) provides block-level volumes attached to one EC2 instance at a time. EFS is a shared file system; S3 is object storage.
Cloud Technology & Services Q42
Which service provides a shared file system that can be mounted concurrently by many Linux EC2 instances?
Why: Amazon Elastic File System (EFS) is an elastic, shared NFS file system that many EC2 instances can mount at the same time.
Cloud Technology & Services Q43
Which service is a content delivery network (CDN) that caches content at edge locations to reduce latency for users worldwide?
Why: Amazon CloudFront caches content at global edge locations, serving users from the nearest point of presence to lower latency. Route 53 is DNS.
Cloud Technology & Services Q44
Which service lets you provision a logically isolated section of the AWS Cloud with your own IP ranges, subnets, and route tables?
Why: Amazon Virtual Private Cloud (VPC) is an isolated virtual network where you define IP ranges, subnets, route tables, and gateways.
Cloud Technology & Services Q45
Which fully managed service decouples application components by passing messages through a queue?
Why: Amazon Simple Queue Service (SQS) is a managed message queue that decouples producers from consumers so components can fail and scale independently. SNS is pub/sub.
Cloud Technology & Services Q46
Which service is a publish/subscribe messaging service used to send notifications to many subscribers (email, SMS, SQS, Lambda) at once?
Why: Amazon Simple Notification Service (SNS) is a pub/sub service that fans out messages to multiple subscribing endpoints. SQS is a point-to-point queue.
Cloud Technology & Services Q47
Which service provides infrastructure as code, letting you model and provision AWS resources from templates?
Why: AWS CloudFormation provisions resources repeatably from JSON/YAML templates. CloudTrail logs API activity, CloudWatch monitors, and Config tracks configuration.
Cloud Technology & Services Q48
Which service should you use to physically transfer petabytes of data into AWS when transferring over the network would be too slow?
Why: AWS Snowball is a rugged physical appliance you load with data and ship to AWS - ideal for very large migrations where internet transfer would take too long.
Cloud Technology & Services Q49
Which service automatically adjusts the number of EC2 instances to match application demand?
Why: EC2 Auto Scaling adds instances when demand rises and removes them when it falls, keeping performance and cost balanced. Load balancing distributes the traffic.
Cloud Technology & Services Q50
Which service distributes incoming application traffic across multiple targets, such as EC2 instances in several Availability Zones?
Why: Elastic Load Balancing (ELB) spreads traffic across healthy targets across AZs, improving availability and fault tolerance.
Cloud Technology & Services Q51
Which service provides scalable Domain Name System (DNS) and domain registration?
Why: Amazon Route 53 is a highly available DNS service that also handles domain registration and health-check-based routing.
Cloud Technology & Services Q52
Which service is a fully managed, petabyte-scale data warehouse for running analytics with SQL?
Why: Amazon Redshift is a managed data warehouse optimized for large-scale analytical (OLAP) queries. RDS/DynamoDB target transactional workloads.
Cloud Technology & Services Q53
Which service lets you run containers without provisioning or managing the underlying servers?
Why: AWS Fargate is a serverless compute engine for containers (with Amazon ECS or EKS) - you run containers without managing EC2 instances.
Cloud Technology & Services Q54
A developer wants to deploy a web app and let AWS handle capacity provisioning, load balancing, and scaling automatically. Which service fits best?
Why: AWS Elastic Beanstalk is a platform-as-a-service: you upload code and it handles provisioning, load balancing, scaling, and health monitoring for you.
Cloud Technology & Services Q55
Which service collects metrics, logs, and alarms to monitor the operational health of AWS resources and applications?
Why: Amazon CloudWatch collects metrics and logs and triggers alarms/actions. CloudTrail records API activity; Config tracks resource configuration.
Cloud Technology & Services Q56
Which serverless service lets you query data directly in Amazon S3 using standard SQL, with no infrastructure to manage?
Why: Amazon Athena runs standard SQL queries directly against data in S3 and charges per data scanned - fully serverless.
Cloud Technology & Services Q57
Which of these is a programmatic way to interact with AWS services from a terminal using commands and scripts?
Why: The AWS CLI lets you control services from a terminal and automate with scripts. The Console is the web GUI; SDKs embed AWS calls in application code.
Cloud Technology & Services Q58
Which service provides a dedicated, private network connection from an on-premises data center to AWS?
Why: AWS Direct Connect establishes a dedicated physical connection between your data center and AWS for consistent, private, higher-bandwidth networking.
Cloud Technology & Services Q59
Which Amazon S3 storage class is designed for low-cost, long-term data archiving where retrieval times of minutes to hours are acceptable?
Why: The S3 Glacier storage classes offer the lowest storage cost for archival data that is rarely accessed and can tolerate longer retrieval times.
Cloud Technology & Services Q60
Which fully managed service is used to build, train, and deploy machine learning models at scale?
Why: Amazon SageMaker is the end-to-end ML platform for building, training, and deploying models. Rekognition and Comprehend are pre-built AI services for images and text.
Billing, Pricing & Support Q61
Which tool lets you visualize, understand, and manage your AWS costs and usage over time?
Why: AWS Cost Explorer provides graphs and reports of historical spend plus forecasts. Budgets sets thresholds/alerts; the Pricing Calculator estimates costs before you build.
Billing, Pricing & Support Q62
Which service lets you set a custom cost or usage threshold and get alerted when spending is forecast to exceed it?
Why: AWS Budgets lets you define budgets for cost or usage and receive alerts (email/SNS) when actual or forecasted spend crosses your threshold.
Billing, Pricing & Support Q63
Which AWS Support plan is the lowest tier that includes a designated Technical Account Manager (TAM)?
Why: A designated TAM comes with the Enterprise Support plan. Enterprise On-Ramp provides a pool of TAMs; Business and below do not include a designated TAM.
Billing, Pricing & Support Q64
What is a primary benefit of consolidated billing in AWS Organizations?
Why: Consolidated billing aggregates usage across member accounts so combined volume can reach lower pricing tiers, and you get one bill while still seeing per-account activity.
Billing, Pricing & Support Q65
A company runs a steady, predictable EC2 workload 24/7 and wants the lowest cost with a 1- or 3-year commitment. Which option is most appropriate?
Why: For steady, predictable usage, committing to a 1- or 3-year term via Savings Plans or Reserved Instances yields large discounts (up to ~72%) versus On-Demand.
Billing, Pricing & Support Q66
Which service inspects your environment and gives real-time recommendations across cost optimization, performance, security, fault tolerance, and service limits?
Why: AWS Trusted Advisor evaluates your account against best-practice checks in five categories and recommends actions. Full checks require Business or Enterprise Support.
Billing, Pricing & Support Q67
Which tool helps you estimate the cost of an AWS architecture before you build it?
Why: The AWS Pricing Calculator models the cost of a proposed architecture up front. Cost Explorer and the CUR report on spend that has already occurred.
Billing, Pricing & Support Q68
Which statement about the AWS Free Tier is correct?
Why: The Free Tier has three types: always-free (e.g. Lambda’s monthly free requests), 12-months-free (e.g. limited EC2/S3 for new accounts), and short-term free trials.
Billing, Pricing & Support Q69
Which AWS Support plan provides 24/7 access to Cloud Support Engineers by phone, email, and chat, plus full Trusted Advisor checks - at the lowest price that includes those?
Why: Business Support adds 24/7 phone/email/chat access to engineers and the full set of Trusted Advisor checks. Developer offers only business-hours email to Support Associates.
Billing, Pricing & Support Q70
Which pricing principle is true for data transfer with AWS?
Why: Data transfer *into* AWS from the internet is typically free; you generally pay for data transferred *out* to the internet and some cross-Region/cross-AZ traffic.
Billing, Pricing & Support Q71
A company wants to break down its AWS bill by project and department. Which feature best enables this?
Why: Cost allocation tags label resources (e.g. by project or department) so costs can be grouped and analyzed by those tags in Cost Explorer and billing reports.
Billing, Pricing & Support Q72
Which resource is a digital catalog where customers can find, buy, and deploy third-party software that runs on AWS?
Why: AWS Marketplace is a curated catalog for discovering, purchasing, and deploying third-party software and services, often billed through your AWS account.
You scored 0/72 (0%)
Cookies on Penluma
We use privacy-friendly analytics to understand what's read. Nothing loads until you
choose. See our Cookie Policy.