AWS Cloud Practitioner — All Questions

Which service provides a managed in-memory data store to reduce database load and speed up read-heavy applications?

• a.Amazon Athena
• b.Amazon ElastiCache✓
• c.Amazon Neptune
• d.Amazon Redshift Serverless

Amazon ElastiCache offers managed Redis or Memcached in-memory caches that store frequently accessed data close to the application, reducing latency and offloading the primary database. It is commonly placed in front of databases for read-heavy workloads.

A team is migrating an on-premises database to AWS and wants to minimize downtime during the move. Which service is designed to help?

• a.Amazon SNS
• b.Amazon CloudFront
• c.AWS Trusted Advisor cost and security checks
• d.AWS Database Migration Service (DMS)✓

AWS Database Migration Service migrates databases to AWS while the source remains operational, minimizing downtime, and supports both homogeneous and heterogeneous migrations. It is the standard tool for moving databases into AWS.

Which AWS service is a fully managed graph database for use cases such as social networks and recommendation engines?

• a.Amazon DynamoDB
• b.Amazon Redshift
• c.Amazon Neptune✓
• d.Amazon RDS for Oracle

Amazon Neptune is a fully managed graph database service optimized for highly connected data and queries, such as social graphs, fraud detection, and recommendation engines. It supports popular graph models and query languages.

What is a key operational advantage of using Amazon RDS instead of running a database yourself on EC2?

• a.RDS eliminates all database costs
• b.RDS automates administrative tasks such as patching, backups, and failover✓
• c.RDS lets you run any database engine ever created
• d.RDS gives you full root operating-system access so you can tune the kernel yourself

Amazon RDS handles time-consuming administration like software patching, automated backups, and failover, letting teams focus on the data and application. Running a database on EC2 leaves all of that management to the customer.

Which AWS service would you use to set an alarm that notifies you when an EC2 instance's CPU utilization stays above a threshold?

• a.Amazon CloudWatch✓
• b.AWS Artifact
• c.AWS CloudTrail audit logs
• d.Amazon Cognito

Amazon CloudWatch collects metrics such as CPU utilization and lets you create alarms that trigger notifications or actions when thresholds are breached. It is the primary monitoring and observability service on AWS.

You need to determine which user made a specific change to a resource and when it happened. Which service records this account activity?

• a.AWS Pricing Calculator
• b.Amazon CloudWatch metrics
• c.AWS CloudTrail✓
• d.Amazon S3 versioning

AWS CloudTrail records API calls and account activity, providing an audit trail of who did what, when, and from where. CloudWatch focuses on performance metrics and logs rather than API-level auditing.

What is the primary purpose of AWS CloudFormation?

• a.To define and provision AWS infrastructure from templates as code✓
• b.To store objects durably across Availability Zones
• c.To distribute content to edge locations
• d.To monitor application performance and user experience in real time

AWS CloudFormation lets you describe infrastructure in JSON or YAML templates and provision it automatically and repeatably as stacks. This infrastructure-as-code approach makes environments consistent and easy to recreate.

Which three primary methods can be used to interact with and provision AWS services?

• a.The AWS Management Console, the AWS CLI, and the AWS SDKs✓
• b.Only the AWS Management Console
• c.Only third-party automation tools that are not made or supported by AWS
• d.Only physical mail requests to AWS

You can interact with AWS through the web-based Management Console, the AWS Command Line Interface (CLI), and language-specific AWS SDKs. All three ultimately call the same AWS service APIs.

A developer wants a browser-based shell, already authenticated, to run AWS CLI commands without installing anything locally. Which service provides this?

• a.AWS Config
• b.AWS CloudFormation
• c.Amazon Inspector
• d.AWS CloudShell✓

AWS CloudShell is a browser-based shell in the console, pre-authenticated with your console credentials and preloaded with the AWS CLI and common tools. It lets you run commands without installing or configuring anything locally.

Which service continuously records and evaluates the configuration of your AWS resources to help assess compliance over time?

• a.Amazon CloudWatch
• b.AWS Config✓
• c.Amazon SNS
• d.AWS CloudShell

AWS Config records resource configurations and changes over time and can evaluate them against rules to assess compliance. It is useful for auditing, change management, and governance.

Which service helps you manage operational tasks such as patching and running commands across fleets of EC2 instances at scale?

• a.Amazon Athena
• b.Amazon Comprehend natural-language processing
• c.Amazon Neptune
• d.AWS Systems Manager✓

AWS Systems Manager provides operational tools to view and control infrastructure, including running commands, applying patches, and managing parameters across fleets of instances. It centralizes many routine operational tasks.

A large enterprise wants to centrally set up and govern a secure, multi-account AWS environment based on best practices. Which service automates this landing-zone setup?

• a.AWS Control Tower✓
• b.Amazon Macie
• c.AWS Direct Connect
• d.Amazon CloudFront

AWS Control Tower automates the setup of a well-architected, multi-account environment (a landing zone) with guardrails and best practices, built on top of AWS Organizations. It simplifies governance at scale.

What is the benefit of using infrastructure as code with services like AWS CloudFormation?

• a.It automatically writes the application's business logic
• b.It completely removes the need to pay for any of the provisioned underlying resources
• c.It prevents anyone from ever deleting resources
• d.Environments can be provisioned consistently and repeatably, reducing manual errors✓

Infrastructure as code lets you define resources in templates so environments are created the same way every time, reducing manual configuration errors and enabling version control. You still pay for whatever resources the templates provision.

Which service lets developers model cloud infrastructure using familiar programming languages such as Python or TypeScript, which then synthesizes CloudFormation templates?

• a.AWS Systems Manager Automation runbooks
• b.Amazon QuickSight
• c.AWS Cloud Development Kit (CDK)✓
• d.AWS Config

The AWS Cloud Development Kit (CDK) lets you define infrastructure using general-purpose programming languages, which it converts into CloudFormation templates for provisioning. It appeals to developers who prefer code over raw templates.

Which service is a serverless event bus that connects application components using events from AWS services, SaaS apps, and your own apps?

• a.Amazon RDS
• b.Amazon EBS
• c.Amazon EventBridge✓
• d.Amazon Elastic File System

Amazon EventBridge is a serverless event bus that routes events between AWS services, custom applications, and SaaS providers, enabling event-driven architectures. It helps decouple producers and consumers of events.

Which service lets you coordinate multiple AWS services into serverless workflows using visual state machines?

• a.Amazon EBS
• b.Amazon CloudFront content delivery network
• c.Amazon Route 53
• d.AWS Step Functions✓

AWS Step Functions orchestrates multiple services into serverless workflows defined as state machines, managing sequencing, retries, and error handling. It simplifies building and visualizing multi-step processes.

A team is building a REST API and wants a managed service to create, publish, secure, and monitor APIs at scale. Which service should they use?

• a.Amazon Redshift
• b.Amazon Kinesis Data Streams
• c.Amazon EFS
• d.Amazon API Gateway✓

Amazon API Gateway is a fully managed service for creating, publishing, securing, and monitoring APIs at any scale, and it integrates well with Lambda for serverless backends. It handles traffic management, authorization, and throttling.

Which service is designed to collect, process, and analyze streaming data such as clickstreams or IoT telemetry in real time?

• a.Amazon Kinesis✓
• b.AWS Artifact
• c.Amazon Glacier
• d.Amazon Athena interactive queries

Amazon Kinesis captures and processes real-time streaming data such as logs, clickstreams, and telemetry, enabling near-real-time analytics. Athena, by contrast, runs SQL queries against data already stored in S3.

Which service lets you run standard SQL queries directly against data stored in Amazon S3 without loading it into a database?

• a.Amazon DynamoDB
• b.Amazon Athena✓
• c.Amazon Redshift Spectrum only
• d.Amazon RDS

Amazon Athena is a serverless, interactive query service that runs SQL directly against data in Amazon S3, charging per data scanned with no infrastructure to manage. It is ideal for ad hoc analysis of data already in S3.

Which fully managed service helps developers build, train, and deploy machine learning models?

• a.Amazon EBS
• b.Amazon Route 53 DNS service
• c.Amazon SageMaker✓
• d.AWS CloudTrail

Amazon SageMaker is a managed platform that covers the full machine-learning lifecycle, from building and training models to deploying them for inference. It removes much of the heavy lifting of standing up ML infrastructure.

Which AWS AI service converts text into lifelike speech?

• a.Amazon Rekognition
• b.Amazon Polly✓
• c.Amazon Translate
• d.Amazon Comprehend

Amazon Polly turns text into lifelike speech using deep learning, supporting many languages and voices. Rekognition analyzes images and video, Comprehend does natural-language processing, and Translate performs language translation.

Which service provides a fully managed data-integration (ETL) capability to discover, prepare, and combine data for analytics?

• a.Amazon Route 53
• b.Amazon EFS
• c.Amazon EC2
• d.AWS Glue✓

AWS Glue is a serverless data-integration service that makes it easy to discover, prepare, transform, and combine data for analytics and machine learning. It includes a data catalog and managed ETL jobs.

A company needs AWS compute and storage running physically inside its own on-premises data center while using the same AWS APIs. Which service provides this?

• a.Amazon Lightsail
• b.Amazon CloudFront
• c.AWS Outposts✓
• d.AWS Snowmobile

AWS Outposts brings AWS infrastructure and services to a customer's on-premises facility, offering a consistent hybrid experience with the same APIs and tools used in AWS Regions. It suits low-latency or data-residency needs that require local processing.

What are AWS Local Zones primarily used for?

• a.Storing rarely accessed archival data at the lowest possible storage cost for many years
• b.Placing compute and storage closer to large population centers for very low latency✓
• c.Registering domain names
• d.Replacing the need for IAM permissions

AWS Local Zones extend a Region to place select services closer to end users in specific metropolitan areas, reducing latency for demanding applications like gaming or media. They are an extension of the Region's infrastructure.

Which statement about AWS Lambda pricing and operation is correct?

• a.It requires you to patch the underlying operating system
• b.It can only run code written in Java
• c.You are charged based on the number of requests and the duration your code runs✓
• d.You must reserve and pay for a fixed number of servers in advance for the whole term

With Lambda you pay per request and for the compute duration your function consumes, and AWS manages the servers, scaling, and patching. It supports many languages and scales automatically with demand.

A message must be delivered to multiple subscribers at once (fan-out), such as several queues and an email endpoint. Which service is designed for this?

• a.Amazon Simple Queue Service
• b.Amazon EBS
• c.Amazon RDS
• d.Amazon SNS✓

Amazon SNS is a publish/subscribe service that delivers a single published message to many subscribers simultaneously, such as SQS queues, Lambda functions, and email. SQS, by contrast, is a queue for point-to-point, decoupled processing.

Which service decouples application components by letting a producer place messages in a queue for a consumer to process later?

• a.Amazon SQS✓
• b.Amazon Redshift
• c.Amazon Route 53
• d.Amazon CloudFront

Amazon SQS is a managed message queue that lets components communicate asynchronously; producers enqueue messages and consumers process them independently. This decoupling improves resilience and scalability.

What does the term 'serverless' mean on AWS?

• a.You build applications without provisioning or managing servers, and AWS handles scaling✓
• b.Customers must manage the underlying servers themselves
• c.Applications somehow run without using any AWS servers or managed infrastructure whatsoever
• d.Only static websites can be built this way

Serverless means you focus on code and configuration while AWS provisions, scales, and maintains the underlying infrastructure automatically. Servers still exist, but you never manage them; examples include Lambda, DynamoDB, and S3.

Which service provides desktops in the cloud (Desktop-as-a-Service) so users can access a managed Windows or Linux desktop remotely?

• a.Amazon AppStream 2.0
• b.Amazon Lightsail
• c.Amazon WorkSpaces✓
• d.Amazon Connect

Amazon WorkSpaces provides managed, secure virtual desktops in the cloud that users can access from various devices. AppStream 2.0, by contrast, streams individual applications rather than full desktops.

Which service is a cloud-based contact center that lets companies handle customer phone and chat interactions?

• a.Amazon Connect✓
• b.Amazon Comprehend
• c.Amazon Kinesis
• d.Amazon Cognito

Amazon Connect is a scalable, cloud-based contact center service for handling customer interactions across voice and chat. It is billed by usage and requires no upfront telephony infrastructure.

Which service uses machine learning to detect and read text and data from scanned documents automatically?

• a.Amazon Redshift data warehouse
• b.Amazon Route 53
• c.Amazon EFS
• d.Amazon Textract✓

Amazon Textract automatically extracts text, forms, and tables from scanned documents using machine learning, going beyond simple optical character recognition. It helps automate document-processing workflows.

Which service is a business analytics service used to build interactive dashboards and visualizations from your data?

• a.Amazon Neptune
• b.Amazon Athena
• c.Amazon Kinesis Data Firehose
• d.Amazon QuickSight✓

Amazon QuickSight is a scalable business intelligence service for building interactive dashboards and visualizations, with pay-per-session pricing. It connects to many AWS and external data sources.

What is the purpose of tagging AWS resources from a technical management standpoint?

• a.Tags apply metadata labels used to organize, search, and automate management of resources✓
• b.Tags directly increase the performance and throughput of the resources that they are applied to
• c.Tags encrypt the resource's data at rest
• d.Tags are required before any resource can start

Tags are key-value metadata labels that help you organize, identify, search, and automate actions on resources, and they also support cost allocation. They do not affect performance or encryption.

Which service continuously delivers and automates the steps of building, testing, and deploying application code (a managed CI/CD pipeline)?

• a.Amazon Inspector vulnerability scanning
• b.Amazon Route 53
• c.AWS CodePipeline✓
• d.AWS Artifact

AWS CodePipeline is a managed continuous integration and continuous delivery service that automates build, test, and deploy stages for fast, reliable releases. It integrates with services like CodeBuild and CodeDeploy.

Which service is a managed Git-compatible source-control repository for storing and versioning application code? (Note historical AWS naming.)

• a.AWS Lambda
• b.Amazon EBS
• c.Amazon Simple Storage Service
• d.AWS CodeCommit✓

AWS CodeCommit is a managed source-control service that hosts secure, Git-based repositories for versioning code. It integrates with the rest of the AWS developer tools for CI/CD.

A company wants to distribute a static website's files with high durability and serve them cheaply. Which combination is commonly used?

• a.Amazon RDS combined with attached Amazon EBS block storage volumes
• b.Amazon Redshift with Athena
• c.Amazon S3 for hosting with Amazon CloudFront for delivery✓
• d.Amazon SQS with SNS

Static websites are commonly hosted as objects in Amazon S3 and delivered globally with low latency through Amazon CloudFront. This serverless pattern is durable, scalable, and cost-effective.

What is an Elastic IP address in AWS?

• a.A DNS record automatically created for every bucket
• b.A billing identifier used for consolidated billing
• c.A static public IPv4 address you can allocate and associate with instances in your account✓
• d.A private, internal-only IP address that can never be reached from the public internet at all

An Elastic IP is a static, public IPv4 address allocated to your account that you can associate with an instance and remap as needed. It provides a stable address even if the underlying instance changes.

Which statement correctly describes horizontal scaling of an application tier on AWS?

• a.Reducing the storage attached to a single server
• b.Moving the application to a different support plan
• c.Replacing an existing instance with a physically larger and more powerful instance type
• d.Adding more instances to share the load, often behind a load balancer✓

Horizontal scaling (scaling out) adds more instances to handle load, typically distributed by a load balancer, and pairs naturally with Auto Scaling. Vertical scaling, by contrast, increases the size of a single instance.

Which AWS service or feature helps ensure an application remains available if an entire Availability Zone fails?

• a.Using one instance in one subnet
• b.Deploying resources across multiple Availability Zones behind a load balancer✓
• c.Storing all of the application's data on a single instance store volume on one host
• d.Disabling health checks

Distributing resources across multiple Availability Zones, with a load balancer routing to healthy targets, keeps an application running even if one AZ fails. AZs are physically isolated, so multi-AZ designs increase resilience.

Which of the following is a valid reason to choose one AWS Region over another?

• a.To change the account's root user email address
• b.To increase the durability of Amazon S3 objects above their normally published level
• c.To meet data-residency requirements and reduce latency for local users✓
• d.To avoid paying for any data transfer ever

Region choice is driven by factors such as compliance and data residency, proximity to users (latency), service availability, and cost. It does not change fundamental durability guarantees or eliminate all data-transfer charges.

Which service provides fully managed Apache Kafka for streaming data without managing the Kafka infrastructure yourself?

• a.Amazon Athena
• b.Amazon Managed Streaming for Apache Kafka (MSK)✓
• c.Amazon Neptune
• d.Amazon RDS running the PostgreSQL database engine

Amazon MSK is a fully managed service that runs Apache Kafka, handling provisioning, patching, and scaling of the Kafka clusters. It lets teams use Kafka without operating the underlying brokers themselves.

Which statement about AWS managed services (for example, RDS, DynamoDB, or Lambda) is true regarding the shared responsibility model?

• a.Using managed services entirely removes the customer's own responsibility for protecting their stored data
• b.The customer must patch the underlying operating system for all of them
• c.The customer becomes responsible for the physical data center security
• d.AWS takes on more of the operational responsibility, such as patching and infrastructure management✓

With managed services, AWS handles more of the operational burden such as OS patching, backups, and scaling, shifting the responsibility boundary toward AWS. The customer still remains responsible for their data, access management, and configuration.

A gaming company needs a fully managed, low-latency NoSQL database with automatic scaling and no server management for its global leaderboard. Which service fits best?

• a.Amazon RDS for PostgreSQL
• b.Amazon Redshift
• c.Amazon EFS
• d.Amazon DynamoDB✓

Amazon DynamoDB is a serverless NoSQL database offering single-digit millisecond latency and automatic scaling, well suited to high-traffic key-value workloads like leaderboards. It requires no server provisioning or management.

Which AWS service provides object storage designed for eleven nines of durability by storing data redundantly across multiple facilities?

• a.Amazon EBS
• b.Amazon S3✓
• c.Amazon EFS
• d.Amazon Instance Store

Amazon S3 is designed for 99.999999999% (eleven nines) durability by automatically storing copies of data across multiple facilities within a Region. This makes it a strong choice for backups, archives, and data lakes.

What is the main function of Elastic Load Balancing health checks?

• a.To calculate the monthly bill
• b.To detect unhealthy targets and stop routing traffic to them✓
• c.To provision new AWS accounts
• d.To encrypt all of the data that is stored inside Amazon S3 buckets

ELB health checks continuously test registered targets and route traffic only to those that are healthy, improving availability. Unhealthy targets are automatically removed from rotation until they recover.

Which service would you use to create a private connection to Amazon S3 from within a VPC without using an internet gateway?

• a.A gateway VPC endpoint for S3✓
• b.An Elastic IP address assigned to the instance
• c.A CloudFront distribution
• d.A NAT gateway alone

A gateway VPC endpoint lets resources in a VPC reach Amazon S3 privately over the AWS network without an internet gateway or NAT device. This keeps traffic off the public internet and can reduce data-transfer costs.

Which statement best describes the AWS global infrastructure hierarchy?

• a.Availability Zones contain Regions, which contain edge locations
• b.Edge locations physically contain the Regions, which in turn contain all the Availability Zones
• c.Regions and Availability Zones are the same thing
• d.Regions contain multiple Availability Zones, and edge locations are separate caching sites✓

AWS organizes infrastructure into Regions, each containing multiple isolated Availability Zones, with edge locations forming a separate global network used mainly for content caching. Understanding this hierarchy is central to designing for latency and resilience.

Which service lets you centrally manage software licenses from vendors such as Microsoft and Oracle across AWS and on-premises?

• a.AWS Artifact
• b.AWS License Manager✓
• c.Amazon Redshift
• d.Amazon Cognito user directories

AWS License Manager helps you track and enforce license usage across AWS and on-premises environments, reducing the risk of non-compliance and overspending. It centralizes rules for bring-your-own-license scenarios.

Which service is a fully managed document database with MongoDB compatibility?

• a.Amazon Neptune
• b.Amazon DocumentDB✓
• c.Amazon Redshift
• d.Amazon ElastiCache

Amazon DocumentDB is a fully managed database service that is compatible with MongoDB workloads, handling scaling, backups, and patching. It suits applications that use document data models.

What does Amazon S3 Transfer Acceleration do?

• a.It encrypts objects only at rest
• b.It replaces the need for a bucket policy
• c.It automatically archives objects to the S3 Glacier storage class on a schedule
• d.It speeds up uploads to S3 over long distances using CloudFront edge locations✓

S3 Transfer Acceleration uses CloudFront's globally distributed edge locations to speed up transfers of data to and from S3 over long distances. It is useful when users far from the bucket's Region upload large files.