Practice essential AWS Cloud Practitioner concepts with 50 original questions and clear explanations.
Level: AWS Certified Cloud PractitionerDifficulty: beginner50 questions40 min
Answer each AWS question, then check your score. Wrong answers are saved locally for review.
Day streak: 0 daysSaved only on this device
Progress0 / 50
Time left: 00:00
No wrong answers saved yet.
No questions match your filters.
Question 1
Which AWS pricing model charges customers only for the resources they actually use?
With pay-as-you-go pricing, customers pay only for the AWS services and resources they consume.
Question 2
Which cloud deployment model combines on-premises infrastructure with AWS resources?
A hybrid cloud connects on-premises infrastructure with cloud resources such as AWS.
Question 3
Which AWS Well-Architected Framework pillar focuses on recovering from failures and meeting demand?
The Reliability pillar focuses on workload resilience, recovery, and handling change in demand.
Question 4
Which term describes automatically adding or removing AWS resources as demand changes?
Elasticity is the ability to automatically increase or decrease resources to match changing demand.
Question 5
A company wants lower latency for customers in Europe. Which AWS global infrastructure approach is most direct?
Deploying resources in a Region near users reduces network distance and typically improves latency.
Question 6
How does AWS typically achieve lower prices through economies of scale?
Economies of scale allow AWS to distribute infrastructure and operating costs across a large customer base.
Question 7
What is an AWS Region?
An AWS Region is a geographic area that contains multiple isolated Availability Zones.
Question 8
What is an AWS Availability Zone?
Each Availability Zone contains one or more discrete data centers with independent power, cooling, and networking.
Question 9
Which AWS service is global and is not tied to a specific Region?
IAM is a global service. Most AWS services are Regional, but IAM resources are available globally.
Question 10
Which deployment choice is a best practice for making an application highly available on AWS?
Spreading a workload across multiple Availability Zones reduces the risk of a single location becoming unavailable.
Question 11
What is an AWS edge location?
Edge locations are used by CloudFront and other services to cache content near end users.
Question 12
Which statement about AWS Regions is true?
AWS does not automatically replicate data or resources across Regions unless the customer configures it.
Question 13
Which AWS service provides resizable virtual servers?
Amazon EC2 provides resizable compute capacity in the form of virtual servers.
Question 14
Which AWS service is used to store objects such as images and backups?
Amazon Simple Storage Service (S3) provides object storage with high durability.
Question 15
Which AWS service runs code without requiring the customer to provision servers?
AWS Lambda is a serverless compute service that runs code in response to events.
Question 16
Which AWS service is a managed relational database service?
Amazon RDS supports several relational database engines, including MySQL, PostgreSQL, and SQL Server.
Question 17
Which AWS service is a fully managed NoSQL database?
DynamoDB is a serverless NoSQL key-value and document database. It scales automatically and delivers single-digit millisecond latency for high-traffic applications. RDS is a relational database, Redshift is a data warehouse, and EBS is block storage, so none of them are fully managed NoSQL databases.
Question 18
Which AWS service provides a logically isolated virtual network in the cloud?
Amazon VPC lets customers launch AWS resources in a logically isolated virtual network.
Question 19
Which AWS service manages users, groups, roles, and permissions?
AWS IAM controls who can access AWS resources and what actions they can perform.
Question 20
Which AWS service is a content delivery network?
Amazon CloudFront caches content at edge locations to deliver it with lower latency.
Question 21
Which AWS service provides scalable domain name system services?
Route 53 is a highly available DNS service that routes traffic to AWS and external resources.
Question 22
Which AWS service collects metrics and logs to monitor resources and applications?
CloudWatch provides monitoring, metrics, alarms, and logs for AWS resources and applications.
Question 23
Which AWS service records API calls for auditing and governance?
CloudTrail records account activity and API calls for audit, security, and compliance.
Question 24
Which AWS service distributes incoming traffic across multiple EC2 instances?
Elastic Load Balancing automatically distributes traffic across multiple targets, such as EC2 instances.
Question 25
Which AWS service automatically adjusts EC2 capacity based on demand?
EC2 Auto Scaling adds or removes EC2 instances according to defined policies.
Question 26
Which storage service provides durable block storage for an EC2 instance?
Amazon EBS provides persistent block-level storage volumes for use with EC2 instances.
Question 27
Which AWS service is a managed message queue for decoupling applications?
Amazon Simple Queue Service (SQS) provides a managed message queue for decoupling application components.
Question 28
Which AWS service provides publish/subscribe messaging?
Amazon Simple Notification Service (SNS) sends messages from publishers to subscribers.
Question 29
Which AWS service provides an in-memory data store and cache?
ElastiCache provides managed in-memory caching using Redis or Memcached. It stores frequently accessed data in memory to reduce database load and speed up reads. RDS and DynamoDB are persistent databases, and Redshift is a data warehouse, so they do not provide in-memory caching.
Question 30
Which AWS compute option runs containers without requiring the customer to provision servers?
Fargate is a serverless compute engine for containers that removes server management.
Question 31
Which AWS service is a managed Kubernetes service?
Amazon Elastic Kubernetes Service (EKS) runs Kubernetes control planes and nodes for customers.
Question 32
Which AWS service can host a static website?
Amazon S3 can host static websites by serving HTML, CSS, JavaScript, and other static assets.
Question 33
Which AWS service is a fully managed data warehouse?
Amazon Redshift is a petabyte-scale, fully managed data warehouse service.
Question 34
Which AWS service is a serverless data integration service?
AWS Glue is a serverless data integration service used for discovery, preparation, and transformation.
Question 35
Which AWS service creates and manages REST APIs?
API Gateway creates, publishes, and secures REST, HTTP, and WebSocket APIs.
Question 36
Which AWS service provides a managed file system for Linux workloads?
Amazon EFS provides scalable, elastic file storage for Linux-based workloads.
Question 37
Which S3 storage class is best for long-term archive data that is accessed rarely?
S3 Glacier storage classes are designed for low-cost, long-term archival of rarely accessed data.
Question 38
Which AWS service provides cloud-based virtual desktops?
Amazon WorkSpaces is a managed desktop-as-a-service offering. It gives users cloud-based virtual desktops with centralized management and security. EC2 is general-purpose compute, App Runner runs containers, and Lightsail is simplified VPS hosting, none of which provide managed virtual desktops.
Question 39
Under the AWS shared responsibility model, who is responsible for patching the guest operating system on EC2?
For EC2, AWS manages the underlying host, while the customer manages the guest OS, patches, and applications.
Question 40
Which AWS service enables central management of multiple AWS accounts?
AWS Organizations centralizes management and governance across multiple AWS accounts.
Question 41
Which AWS service protects applications from distributed denial-of-service attacks?
AWS Shield provides managed DDoS protection for applications running on AWS.
Question 42
Which AWS service filters malicious web traffic at the application layer?
AWS WAF is a web application firewall that filters malicious HTTP/HTTPS traffic.
Question 43
Which AWS service manages encryption keys?
AWS Key Management Service creates and controls cryptographic keys used to protect data.
Question 44
Which AWS service provides on-demand compliance reports?
AWS Artifact provides access to AWS compliance reports and agreements.
Question 45
Which AWS service continuously monitors for malicious activity and unauthorized behavior?
GuardDuty uses threat intelligence and anomaly detection to identify potentially malicious activity.
Question 46
Which security best practice is most important for the AWS root user?
The root user has full account access, so enabling MFA and limiting root use are critical controls.
Question 47
What does the principle of least privilege mean?
Least privilege limits each identity to the minimum permissions required for its tasks.
Question 48
Which AWS tool estimates the monthly cost of planned AWS resources?
AWS Pricing Calculator estimates costs for planned AWS workloads before deployment.
Question 49
Which AWS service provides real-time recommendations for cost optimization, security, and performance?
Trusted Advisor inspects an AWS environment and recommends improvements across several categories.
Question 50
Which AWS service visualizes and manages AWS costs and usage over time?
Cost Explorer provides charts, filters, and forecasts for AWS cost and usage.