AWS Cloud Practitioner — All Questions

Which service decouples application components by letting a producer place messages in a queue for a consumer to process later?

• a.Amazon SQS✓
• b.Amazon Redshift
• c.Amazon Route 53
• d.Amazon CloudFront

Amazon SQS is a managed message queue that lets components communicate asynchronously; producers enqueue messages and consumers process them independently. This decoupling improves resilience and scalability.

What does the term 'serverless' mean on AWS?

• a.You build applications without provisioning or managing servers, and AWS handles scaling✓
• b.Customers must manage the underlying servers themselves
• c.Applications somehow run without using any AWS servers or managed infrastructure whatsoever
• d.Only static websites can be built this way

Serverless means you focus on code and configuration while AWS provisions, scales, and maintains the underlying infrastructure automatically. Servers still exist, but you never manage them; examples include Lambda, DynamoDB, and S3.

Which service provides desktops in the cloud (Desktop-as-a-Service) so users can access a managed Windows or Linux desktop remotely?

• a.Amazon AppStream 2.0
• b.Amazon Lightsail
• c.Amazon WorkSpaces✓
• d.Amazon Connect

Amazon WorkSpaces provides managed, secure virtual desktops in the cloud that users can access from various devices. AppStream 2.0, by contrast, streams individual applications rather than full desktops.

Which service is a cloud-based contact center that lets companies handle customer phone and chat interactions?

• a.Amazon Connect✓
• b.Amazon Comprehend
• c.Amazon Kinesis
• d.Amazon Cognito

Amazon Connect is a scalable, cloud-based contact center service for handling customer interactions across voice and chat. It is billed by usage and requires no upfront telephony infrastructure.

Which service uses machine learning to detect and read text and data from scanned documents automatically?

• a.Amazon Redshift data warehouse
• b.Amazon Route 53
• c.Amazon EFS
• d.Amazon Textract✓

Amazon Textract automatically extracts text, forms, and tables from scanned documents using machine learning, going beyond simple optical character recognition. It helps automate document-processing workflows.

Which service is a business analytics service used to build interactive dashboards and visualizations from your data?

• a.Amazon Neptune
• b.Amazon Athena
• c.Amazon Kinesis Data Firehose
• d.Amazon QuickSight✓

Amazon QuickSight is a scalable business intelligence service for building interactive dashboards and visualizations, with pay-per-session pricing. It connects to many AWS and external data sources.

What is the purpose of tagging AWS resources from a technical management standpoint?

• a.Tags apply metadata labels used to organize, search, and automate management of resources✓
• b.Tags directly increase the performance and throughput of the resources that they are applied to
• c.Tags encrypt the resource's data at rest
• d.Tags are required before any resource can start

Tags are key-value metadata labels that help you organize, identify, search, and automate actions on resources, and they also support cost allocation. They do not affect performance or encryption.

Which service continuously delivers and automates the steps of building, testing, and deploying application code (a managed CI/CD pipeline)?

• a.Amazon Inspector vulnerability scanning
• b.Amazon Route 53
• c.AWS CodePipeline✓
• d.AWS Artifact

AWS CodePipeline is a managed continuous integration and continuous delivery service that automates build, test, and deploy stages for fast, reliable releases. It integrates with services like CodeBuild and CodeDeploy.

Which service is a managed Git-compatible source-control repository for storing and versioning application code? (Note historical AWS naming.)

• a.AWS Lambda
• b.Amazon EBS
• c.Amazon Simple Storage Service
• d.AWS CodeCommit✓

AWS CodeCommit is a managed source-control service that hosts secure, Git-based repositories for versioning code. It integrates with the rest of the AWS developer tools for CI/CD.

A company wants to distribute a static website's files with high durability and serve them cheaply. Which combination is commonly used?

• a.Amazon RDS combined with attached Amazon EBS block storage volumes
• b.Amazon Redshift with Athena
• c.Amazon S3 for hosting with Amazon CloudFront for delivery✓
• d.Amazon SQS with SNS

Static websites are commonly hosted as objects in Amazon S3 and delivered globally with low latency through Amazon CloudFront. This serverless pattern is durable, scalable, and cost-effective.

What is an Elastic IP address in AWS?

• a.A DNS record automatically created for every bucket
• b.A billing identifier used for consolidated billing
• c.A static public IPv4 address you can allocate and associate with instances in your account✓
• d.A private, internal-only IP address that can never be reached from the public internet at all

An Elastic IP is a static, public IPv4 address allocated to your account that you can associate with an instance and remap as needed. It provides a stable address even if the underlying instance changes.

Which statement correctly describes horizontal scaling of an application tier on AWS?

• a.Reducing the storage attached to a single server
• b.Moving the application to a different support plan
• c.Replacing an existing instance with a physically larger and more powerful instance type
• d.Adding more instances to share the load, often behind a load balancer✓

Horizontal scaling (scaling out) adds more instances to handle load, typically distributed by a load balancer, and pairs naturally with Auto Scaling. Vertical scaling, by contrast, increases the size of a single instance.

Which AWS service or feature helps ensure an application remains available if an entire Availability Zone fails?

• a.Using one instance in one subnet
• b.Deploying resources across multiple Availability Zones behind a load balancer✓
• c.Storing all of the application's data on a single instance store volume on one host
• d.Disabling health checks

Distributing resources across multiple Availability Zones, with a load balancer routing to healthy targets, keeps an application running even if one AZ fails. AZs are physically isolated, so multi-AZ designs increase resilience.

Which of the following is a valid reason to choose one AWS Region over another?

• a.To change the account's root user email address
• b.To increase the durability of Amazon S3 objects above their normally published level
• c.To meet data-residency requirements and reduce latency for local users✓
• d.To avoid paying for any data transfer ever

Region choice is driven by factors such as compliance and data residency, proximity to users (latency), service availability, and cost. It does not change fundamental durability guarantees or eliminate all data-transfer charges.

Which service provides fully managed Apache Kafka for streaming data without managing the Kafka infrastructure yourself?

• a.Amazon Athena
• b.Amazon Managed Streaming for Apache Kafka (MSK)✓
• c.Amazon Neptune
• d.Amazon RDS running the PostgreSQL database engine

Amazon MSK is a fully managed service that runs Apache Kafka, handling provisioning, patching, and scaling of the Kafka clusters. It lets teams use Kafka without operating the underlying brokers themselves.

Which statement about AWS managed services (for example, RDS, DynamoDB, or Lambda) is true regarding the shared responsibility model?

• a.Using managed services entirely removes the customer's own responsibility for protecting their stored data
• b.The customer must patch the underlying operating system for all of them
• c.The customer becomes responsible for the physical data center security
• d.AWS takes on more of the operational responsibility, such as patching and infrastructure management✓

With managed services, AWS handles more of the operational burden such as OS patching, backups, and scaling, shifting the responsibility boundary toward AWS. The customer still remains responsible for their data, access management, and configuration.

A gaming company needs a fully managed, low-latency NoSQL database with automatic scaling and no server management for its global leaderboard. Which service fits best?

• a.Amazon RDS for PostgreSQL
• b.Amazon Redshift
• c.Amazon EFS
• d.Amazon DynamoDB✓

Amazon DynamoDB is a serverless NoSQL database offering single-digit millisecond latency and automatic scaling, well suited to high-traffic key-value workloads like leaderboards. It requires no server provisioning or management.

Which AWS service provides object storage designed for eleven nines of durability by storing data redundantly across multiple facilities?

• a.Amazon EBS
• b.Amazon S3✓
• c.Amazon EFS
• d.Amazon Instance Store

Amazon S3 is designed for 99.999999999% (eleven nines) durability by automatically storing copies of data across multiple facilities within a Region. This makes it a strong choice for backups, archives, and data lakes.

What is the main function of Elastic Load Balancing health checks?

• a.To calculate the monthly bill
• b.To detect unhealthy targets and stop routing traffic to them✓
• c.To provision new AWS accounts
• d.To encrypt all of the data that is stored inside Amazon S3 buckets

ELB health checks continuously test registered targets and route traffic only to those that are healthy, improving availability. Unhealthy targets are automatically removed from rotation until they recover.

Which service would you use to create a private connection to Amazon S3 from within a VPC without using an internet gateway?

• a.A gateway VPC endpoint for S3✓
• b.An Elastic IP address assigned to the instance
• c.A CloudFront distribution
• d.A NAT gateway alone

A gateway VPC endpoint lets resources in a VPC reach Amazon S3 privately over the AWS network without an internet gateway or NAT device. This keeps traffic off the public internet and can reduce data-transfer costs.

Which statement best describes the AWS global infrastructure hierarchy?

• a.Availability Zones contain Regions, which contain edge locations
• b.Edge locations physically contain the Regions, which in turn contain all the Availability Zones
• c.Regions and Availability Zones are the same thing
• d.Regions contain multiple Availability Zones, and edge locations are separate caching sites✓

AWS organizes infrastructure into Regions, each containing multiple isolated Availability Zones, with edge locations forming a separate global network used mainly for content caching. Understanding this hierarchy is central to designing for latency and resilience.

Which service lets you centrally manage software licenses from vendors such as Microsoft and Oracle across AWS and on-premises?

• a.AWS Artifact
• b.AWS License Manager✓
• c.Amazon Redshift
• d.Amazon Cognito user directories

AWS License Manager helps you track and enforce license usage across AWS and on-premises environments, reducing the risk of non-compliance and overspending. It centralizes rules for bring-your-own-license scenarios.

Which service is a fully managed document database with MongoDB compatibility?

• a.Amazon Neptune
• b.Amazon DocumentDB✓
• c.Amazon Redshift
• d.Amazon ElastiCache

Amazon DocumentDB is a fully managed database service that is compatible with MongoDB workloads, handling scaling, backups, and patching. It suits applications that use document data models.

What does Amazon S3 Transfer Acceleration do?

• a.It encrypts objects only at rest
• b.It replaces the need for a bucket policy
• c.It automatically archives objects to the S3 Glacier storage class on a schedule
• d.It speeds up uploads to S3 over long distances using CloudFront edge locations✓

S3 Transfer Acceleration uses CloudFront's globally distributed edge locations to speed up transfers of data to and from S3 over long distances. It is useful when users far from the bucket's Region upload large files.

Which service provides a managed, scalable service for sending marketing, transactional, and notification emails?

• a.Amazon SQS
• b.Amazon Simple Email Service (SES)✓
• c.Amazon SNS
• d.Amazon Connect cloud contact center

Amazon SES is a managed email service for sending transactional, marketing, and notification emails at scale, with pay-as-you-go pricing. SNS and SQS are messaging services for application integration rather than email delivery.

A stateless application must handle unpredictable traffic while minimizing operational overhead. Which architecture aligns with AWS best practices?

• a.A fixed cluster that never changes size
• b.Serverless with Lambda, API Gateway, and DynamoDB that scale automatically✓
• c.An on-premises server connected by VPN only
• d.A single very large EC2 instance sized for the yearly peak load and left running always

A serverless architecture using services like Lambda, API Gateway, and DynamoDB scales automatically with demand and reduces operational overhead, matching cost to usage. Fixed, over-provisioned capacity wastes money and still risks under-provisioning.

Which service captures information about the IP traffic going to and from network interfaces in your VPC for troubleshooting and monitoring?

• a.Amazon CloudFront logs
• b.AWS CloudTrail
• c.Amazon Inspector
• d.VPC Flow Logs✓

VPC Flow Logs capture metadata about IP traffic to and from network interfaces, helping with troubleshooting connectivity and monitoring for unusual patterns. CloudTrail, by contrast, logs API activity rather than packet-level flow data.

Which service is used to run containerized applications with AWS's own orchestration, integrating tightly with other AWS services?

• a.Amazon Route 53
• b.Amazon Elastic Container Service (ECS)✓
• c.AWS Artifact
• d.Amazon Redshift data warehouse clusters

Amazon ECS is AWS's native container orchestration service that schedules and manages containers, integrating closely with services like IAM, load balancing, and CloudWatch. It can run on EC2 or serverless via Fargate.

What does a launch template or launch configuration define for EC2 Auto Scaling?

• a.The instance settings (such as AMI, instance type, and security groups) used to launch new instances✓
• b.The DNS routing policy for the domain
• c.The set of KMS encryption keys and database credentials that are stored inside AWS Secrets Manager for the app
• d.The monthly budget for the account

A launch template specifies the configuration used to launch instances, including the AMI, instance type, key pair, and security groups, so Auto Scaling can create consistent instances. It ensures new instances match the intended configuration.

Which service would help a company analyze application performance by tracing requests as they travel through distributed microservices?

• a.Amazon Macie
• b.Amazon Route 53
• c.AWS Artifact
• d.AWS X-Ray✓

AWS X-Ray helps developers analyze and debug distributed applications by tracing requests across services and identifying bottlenecks or errors. It provides an end-to-end view of request flows in microservice architectures.

Which service lets you schedule and automate the creation and retention of Amazon EBS snapshots?

• a.AWS Shield
• b.Amazon Cognito
• c.Amazon CloudFront distributions
• d.Amazon Data Lifecycle Manager✓

Amazon Data Lifecycle Manager automates the creation, retention, and deletion of EBS snapshots on a schedule, helping enforce backup policies. This reduces manual effort and helps meet data-protection requirements.

Which AWS compute service is best described as 'run code in response to events, scaling automatically, with no servers to manage'?

• a.Amazon EC2
• b.AWS Lambda✓
• c.Amazon Lightsail
• d.Amazon EC2 Dedicated Hosts

AWS Lambda runs your code in response to events and automatically scales by running as many copies as needed, with no server management. You pay only for the compute time consumed while your code runs.

Which service provides a fully managed feature to replicate objects automatically between S3 buckets in different Regions?

• a.Amazon EFS replication to another Region only
• b.S3 Cross-Region Replication✓
• c.Amazon Route 53 failover
• d.S3 Transfer Acceleration

S3 Cross-Region Replication automatically copies objects to a bucket in another Region, supporting disaster recovery, latency reduction, and compliance requirements. Replication is asynchronous and configurable at the bucket or prefix level.

A workload occasionally needs a burst of GPU compute for machine-learning training and can tolerate interruptions to save money. Which purchasing option combined with the right instance family is ideal?

• a.Spot Instances on GPU (accelerated computing) instances✓
• b.Dedicated Hosts billed hourly with no interruptions
• c.On-Demand CPU-only instances reserved for a full three-year term
• d.Reserved standard instances with no flexibility

Accelerated-computing (GPU) instances handle ML training, and Spot Instances offer the deepest discounts for interruption-tolerant, flexible jobs like batch training. Together they minimize cost for elastic, fault-tolerant compute.

Which service provides managed DNS and can route users to the closest healthy endpoint across multiple Regions for a global application?

• a.Amazon EBS
• b.Amazon Route 53✓
• c.AWS Direct Connect
• d.Amazon CloudFront

Amazon Route 53 offers managed DNS with routing policies (such as latency-based, geolocation, and failover) and health checks to send users to the best healthy endpoint. This helps deliver resilient, low-latency global applications.

Which AWS database capability automatically scales capacity up and down based on application traffic, so you pay for what you use without provisioning instances?

• a.Amazon ElastiCache reserved nodes
• b.Amazon Redshift reserved nodes
• c.Amazon Aurora Serverless✓
• d.Amazon RDS Multi-AZ

Aurora Serverless automatically starts, scales, and shuts down database capacity based on demand, so you pay for the capacity used rather than provisioning fixed instances. It suits variable or intermittent workloads.

Which best describes the purpose of Amazon CloudWatch Logs?

• a.To register and manage domain names
• b.To centralize, store, and query log data from applications and AWS services✓
• c.To store highly durable object backups designed for eleven nines of durability
• d.To provision infrastructure from templates

Amazon CloudWatch Logs centralizes log data from applications, EC2 instances, and AWS services so you can store, search, and analyze it. It complements CloudWatch metrics and alarms for full observability.

Which service helps you deploy application updates to EC2 instances, on-premises servers, or Lambda with controlled rollouts?

• a.Amazon QuickSight
• b.Amazon Athena
• c.AWS CodeDeploy✓
• d.Amazon Neptune

AWS CodeDeploy automates code deployments to compute services such as EC2, on-premises servers, and Lambda, supporting strategies like rolling and blue/green to reduce downtime. It is part of AWS's developer tooling for release automation.

What is the primary benefit of a blue/green deployment strategy?

• a.It encrypts all data at rest automatically
• b.It permanently doubles your total monthly infrastructure bill for the entire duration of the deployment
• c.It reduces deployment risk by shifting traffic to a new environment and enabling quick rollback✓
• d.It removes the need for any testing

Blue/green deployments run a new (green) environment alongside the current (blue) one and shift traffic over, allowing fast rollback if problems appear. This lowers the risk and downtime of releases.

Which service would a company use to build, deploy, and manage a serverless application defined as a single stack of Lambda functions, APIs, and tables?

• a.AWS Serverless Application Model (SAM) / CloudFormation✓
• b.Amazon EBS
• c.Amazon Route 53
• d.Amazon Redshift provisioned data-warehouse cluster nodes

The AWS Serverless Application Model (SAM) extends CloudFormation to define serverless resources like Lambda functions, APIs, and DynamoDB tables in a concise template. It provisions the whole application as one stack.

Which capability lets you connect users' existing corporate identities to AWS so they can sign in without separate IAM users, centrally across accounts?

• a.Root user sharing
• b.AWS IAM Identity Center (single sign-on)✓
• c.Long-term access keys per user
• d.Amazon Cognito user pools for the app only

AWS IAM Identity Center provides centralized single sign-on and lets you connect an existing identity source so users access multiple AWS accounts and applications without separate IAM users. It simplifies workforce access at scale.

Which service is designed to run high-performance computing (HPC) or big-data frameworks like Apache Spark and Hadoop on managed clusters?

• a.Amazon EMR✓
• b.Amazon Cognito
• c.Amazon Route 53
• d.AWS Artifact

Amazon EMR provides managed clusters to run big-data frameworks such as Apache Spark, Hadoop, and Hive at scale, handling provisioning and tuning. It is used for large-scale data processing and analytics.

A company wants to reduce the operational effort of running its message queue and pay only for what it uses. Which AWS characteristic makes SQS attractive here?

• a.It requires managing your own broker servers
• b.It is fully managed and scales automatically with pay-per-use pricing✓
• c.It can only be used from on-premises servers
• d.It charges one large fixed monthly fee regardless of how many messages you send

Amazon SQS is fully managed, scales automatically, and charges based on usage, removing the need to run and patch your own message-broker servers. This lowers operational overhead and matches cost to actual traffic.

Which statement about scaling a relational database on Amazon RDS is accurate?

• a.Read replicas provide automatic failover for the primary
• b.You can only scale the database by fully rewriting the entire application to use a NoSQL engine
• c.RDS cannot be scaled at all once created
• d.You can scale reads with read replicas and scale compute by changing the instance class✓

With RDS you can add read replicas to scale read traffic and change the instance class to scale compute and memory (vertical scaling). Multi-AZ provides failover, which is a separate capability from read scaling.