AWS Cloud Practitioner — All Questions

Which service provides a managed, scalable service for sending marketing, transactional, and notification emails?

• a.Amazon SQS
• b.Amazon Simple Email Service (SES)✓
• c.Amazon SNS
• d.Amazon Connect cloud contact center

Amazon SES is a managed email service for sending transactional, marketing, and notification emails at scale, with pay-as-you-go pricing. SNS and SQS are messaging services for application integration rather than email delivery.

A stateless application must handle unpredictable traffic while minimizing operational overhead. Which architecture aligns with AWS best practices?

• a.A fixed cluster that never changes size
• b.Serverless with Lambda, API Gateway, and DynamoDB that scale automatically✓
• c.An on-premises server connected by VPN only
• d.A single very large EC2 instance sized for the yearly peak load and left running always

A serverless architecture using services like Lambda, API Gateway, and DynamoDB scales automatically with demand and reduces operational overhead, matching cost to usage. Fixed, over-provisioned capacity wastes money and still risks under-provisioning.

Which service captures information about the IP traffic going to and from network interfaces in your VPC for troubleshooting and monitoring?

• a.Amazon CloudFront logs
• b.AWS CloudTrail
• c.Amazon Inspector
• d.VPC Flow Logs✓

VPC Flow Logs capture metadata about IP traffic to and from network interfaces, helping with troubleshooting connectivity and monitoring for unusual patterns. CloudTrail, by contrast, logs API activity rather than packet-level flow data.

Which service is used to run containerized applications with AWS's own orchestration, integrating tightly with other AWS services?

• a.Amazon Route 53
• b.Amazon Elastic Container Service (ECS)✓
• c.AWS Artifact
• d.Amazon Redshift data warehouse clusters

Amazon ECS is AWS's native container orchestration service that schedules and manages containers, integrating closely with services like IAM, load balancing, and CloudWatch. It can run on EC2 or serverless via Fargate.

What does a launch template or launch configuration define for EC2 Auto Scaling?

• a.The instance settings (such as AMI, instance type, and security groups) used to launch new instances✓
• b.The DNS routing policy for the domain
• c.The set of KMS encryption keys and database credentials that are stored inside AWS Secrets Manager for the app
• d.The monthly budget for the account

A launch template specifies the configuration used to launch instances, including the AMI, instance type, key pair, and security groups, so Auto Scaling can create consistent instances. It ensures new instances match the intended configuration.

Which service would help a company analyze application performance by tracing requests as they travel through distributed microservices?

• a.Amazon Macie
• b.Amazon Route 53
• c.AWS Artifact
• d.AWS X-Ray✓

AWS X-Ray helps developers analyze and debug distributed applications by tracing requests across services and identifying bottlenecks or errors. It provides an end-to-end view of request flows in microservice architectures.

Which service lets you schedule and automate the creation and retention of Amazon EBS snapshots?

• a.AWS Shield
• b.Amazon Cognito
• c.Amazon CloudFront distributions
• d.Amazon Data Lifecycle Manager✓

Amazon Data Lifecycle Manager automates the creation, retention, and deletion of EBS snapshots on a schedule, helping enforce backup policies. This reduces manual effort and helps meet data-protection requirements.

Which AWS compute service is best described as 'run code in response to events, scaling automatically, with no servers to manage'?

• a.Amazon EC2
• b.AWS Lambda✓
• c.Amazon Lightsail
• d.Amazon EC2 Dedicated Hosts

AWS Lambda runs your code in response to events and automatically scales by running as many copies as needed, with no server management. You pay only for the compute time consumed while your code runs.

Which service provides a fully managed feature to replicate objects automatically between S3 buckets in different Regions?

• a.Amazon EFS replication to another Region only
• b.S3 Cross-Region Replication✓
• c.Amazon Route 53 failover
• d.S3 Transfer Acceleration

S3 Cross-Region Replication automatically copies objects to a bucket in another Region, supporting disaster recovery, latency reduction, and compliance requirements. Replication is asynchronous and configurable at the bucket or prefix level.

A workload occasionally needs a burst of GPU compute for machine-learning training and can tolerate interruptions to save money. Which purchasing option combined with the right instance family is ideal?

• a.Spot Instances on GPU (accelerated computing) instances✓
• b.Dedicated Hosts billed hourly with no interruptions
• c.On-Demand CPU-only instances reserved for a full three-year term
• d.Reserved standard instances with no flexibility

Accelerated-computing (GPU) instances handle ML training, and Spot Instances offer the deepest discounts for interruption-tolerant, flexible jobs like batch training. Together they minimize cost for elastic, fault-tolerant compute.

Which service provides managed DNS and can route users to the closest healthy endpoint across multiple Regions for a global application?

• a.Amazon EBS
• b.Amazon Route 53✓
• c.AWS Direct Connect
• d.Amazon CloudFront

Amazon Route 53 offers managed DNS with routing policies (such as latency-based, geolocation, and failover) and health checks to send users to the best healthy endpoint. This helps deliver resilient, low-latency global applications.

Which AWS database capability automatically scales capacity up and down based on application traffic, so you pay for what you use without provisioning instances?

• a.Amazon ElastiCache reserved nodes
• b.Amazon Redshift reserved nodes
• c.Amazon Aurora Serverless✓
• d.Amazon RDS Multi-AZ

Aurora Serverless automatically starts, scales, and shuts down database capacity based on demand, so you pay for the capacity used rather than provisioning fixed instances. It suits variable or intermittent workloads.

Which best describes the purpose of Amazon CloudWatch Logs?

• a.To register and manage domain names
• b.To centralize, store, and query log data from applications and AWS services✓
• c.To store highly durable object backups designed for eleven nines of durability
• d.To provision infrastructure from templates

Amazon CloudWatch Logs centralizes log data from applications, EC2 instances, and AWS services so you can store, search, and analyze it. It complements CloudWatch metrics and alarms for full observability.

Which service helps you deploy application updates to EC2 instances, on-premises servers, or Lambda with controlled rollouts?

• a.Amazon QuickSight
• b.Amazon Athena
• c.AWS CodeDeploy✓
• d.Amazon Neptune

AWS CodeDeploy automates code deployments to compute services such as EC2, on-premises servers, and Lambda, supporting strategies like rolling and blue/green to reduce downtime. It is part of AWS's developer tooling for release automation.

What is the primary benefit of a blue/green deployment strategy?

• a.It encrypts all data at rest automatically
• b.It permanently doubles your total monthly infrastructure bill for the entire duration of the deployment
• c.It reduces deployment risk by shifting traffic to a new environment and enabling quick rollback✓
• d.It removes the need for any testing

Blue/green deployments run a new (green) environment alongside the current (blue) one and shift traffic over, allowing fast rollback if problems appear. This lowers the risk and downtime of releases.

Which service would a company use to build, deploy, and manage a serverless application defined as a single stack of Lambda functions, APIs, and tables?

• a.AWS Serverless Application Model (SAM) / CloudFormation✓
• b.Amazon EBS
• c.Amazon Route 53
• d.Amazon Redshift provisioned data-warehouse cluster nodes

The AWS Serverless Application Model (SAM) extends CloudFormation to define serverless resources like Lambda functions, APIs, and DynamoDB tables in a concise template. It provisions the whole application as one stack.

Which capability lets you connect users' existing corporate identities to AWS so they can sign in without separate IAM users, centrally across accounts?

• a.Root user sharing
• b.AWS IAM Identity Center (single sign-on)✓
• c.Long-term access keys per user
• d.Amazon Cognito user pools for the app only

AWS IAM Identity Center provides centralized single sign-on and lets you connect an existing identity source so users access multiple AWS accounts and applications without separate IAM users. It simplifies workforce access at scale.

Which service is designed to run high-performance computing (HPC) or big-data frameworks like Apache Spark and Hadoop on managed clusters?

• a.Amazon EMR✓
• b.Amazon Cognito
• c.Amazon Route 53
• d.AWS Artifact

Amazon EMR provides managed clusters to run big-data frameworks such as Apache Spark, Hadoop, and Hive at scale, handling provisioning and tuning. It is used for large-scale data processing and analytics.

A company wants to reduce the operational effort of running its message queue and pay only for what it uses. Which AWS characteristic makes SQS attractive here?

• a.It requires managing your own broker servers
• b.It is fully managed and scales automatically with pay-per-use pricing✓
• c.It can only be used from on-premises servers
• d.It charges one large fixed monthly fee regardless of how many messages you send

Amazon SQS is fully managed, scales automatically, and charges based on usage, removing the need to run and patch your own message-broker servers. This lowers operational overhead and matches cost to actual traffic.

Which statement about scaling a relational database on Amazon RDS is accurate?

• a.Read replicas provide automatic failover for the primary
• b.You can only scale the database by fully rewriting the entire application to use a NoSQL engine
• c.RDS cannot be scaled at all once created
• d.You can scale reads with read replicas and scale compute by changing the instance class✓

With RDS you can add read replicas to scale read traffic and change the instance class to scale compute and memory (vertical scaling). Multi-AZ provides failover, which is a separate capability from read scaling.

Which core AWS pricing principle is reflected by paying only for the compute you actually consume, with no long-term contract required?

• a.Pay the same amount every month regardless of usage
• b.Pay a large fixed annual fee
• c.Pay only after a three-year commitment
• d.Pay-as-you-go✓

A foundational AWS pricing principle is pay-as-you-go: you pay only for the individual services and capacity you use, for as long as you use them, without long-term contracts. This aligns spending with actual consumption.

Which AWS pricing principle explains why customers get lower per-unit prices as AWS grows and gains more customers?

• a.You always pay a single flat fee for unlimited usage of every AWS service each month
• b.Pay more to reserve capacity
• c.As AWS grows, economies of scale lower costs that are passed on to customers✓
• d.Prices increase as usage increases

One of AWS's pricing principles is that its economies of scale reduce its costs over time, and those savings are passed to customers as lower prices. This is distinct from the discounts customers earn by committing to usage.

Which EC2 pricing option offers up to about a 72% discount in exchange for a one- or three-year commitment tied to specific instance attributes?

• a.Spot Instances
• b.Standard Reserved Instances✓
• c.Dedicated Hosts billed on demand
• d.On-Demand Instances

Standard Reserved Instances provide substantial discounts (up to roughly 72%) versus On-Demand in return for a one- or three-year commitment to specific attributes such as instance type and Region. They suit steady-state, predictable workloads.

Which purchasing option provides spare EC2 capacity at the deepest discounts but can be interrupted with little notice?

• a.On-Demand Instances
• b.Spot Instances✓
• c.Standard Reserved Instances
• d.Dedicated Hosts

Spot Instances let you use unused EC2 capacity at up to about 90% off On-Demand prices, but AWS can reclaim them when it needs the capacity. They are ideal for fault-tolerant, flexible, and stateless workloads.

Compared with Reserved Instances, what added flexibility do Savings Plans generally offer?

• a.They only apply to one single specific instance type in a single Availability Zone and can never be shared or moved between accounts
• b.They apply savings across usage based on a dollars-per-hour commitment, often spanning instance families or even compute services✓
• c.They require no commitment at all
• d.They eliminate all data-transfer charges

Savings Plans commit you to a consistent amount of usage measured in dollars per hour, and Compute Savings Plans apply automatically across instance families, Regions, and even services like Fargate and Lambda. This is more flexible than Reserved Instances tied to specific attributes.

Which statement about the AWS Free Tier's three offer types is correct?

• a.It includes 12-month free offers, always-free offers, and short-term trials✓
• b.The Free Tier is available only to enterprise customers
• c.It requires purchasing the Business Support plan
• d.Everything in AWS is completely free forever once you sign up under the Free Tier

The AWS Free Tier has three categories: 12-month free offers for new accounts, always-free offers, and short-term free trials. Usage beyond the specified limits is billed at standard rates.

A new customer wants to explore AWS without incurring charges as long as they stay within limits. What should they be aware of about the Free Tier?

• a.It requires an Enterprise Support plan
• b.It never expires for any service
• c.Exceeding the Free Tier limits results in standard charges✓
• d.It automatically caps all of your account spending at exactly zero dollars

The Free Tier lets you try services within specific limits, but any usage beyond those limits is billed at normal rates, so it does not guarantee a zero bill. Monitoring usage with Budgets or the Free Tier dashboard helps avoid surprises.

Which tool provides an upfront estimate of the monthly cost of a proposed AWS architecture before you build it?

• a.AWS Cost and Usage Report
• b.AWS Pricing Calculator✓
• c.AWS Budgets
• d.AWS Cost Explorer

The AWS Pricing Calculator models a planned architecture and estimates its cost before deployment, useful for planning and comparisons. Cost Explorer and the Cost and Usage Report analyze actual, historical usage instead.

Which service lets you set a custom threshold and receive an alert when your actual or forecasted AWS spending exceeds it?

• a.Amazon Inspector
• b.AWS Budgets✓
• c.AWS Artifact
• d.AWS CloudFormation

AWS Budgets lets you create custom cost and usage budgets and sends alerts when actual or forecasted amounts breach your thresholds. This supports proactive cost control.

Which tool is best for visualizing and analyzing historical AWS spend with graphs, filtering, and forecasting?

• a.AWS Cost Explorer✓
• b.AWS Pricing Calculator
• c.AWS Artifact
• d.Amazon Macie

AWS Cost Explorer provides an interactive interface to visualize, filter, and forecast historical costs and usage, helping identify trends and cost drivers. The Pricing Calculator, by contrast, estimates costs before deployment.

Which billing artifact provides the most granular, line-item detail of AWS usage and can be delivered to Amazon S3 for deep analysis?

• a.AWS Cost and Usage Report (CUR)✓
• b.AWS Pricing Calculator estimate export
• c.AWS Trusted Advisor summary
• d.AWS Budgets report

The AWS Cost and Usage Report contains the most detailed billing data available, down to the line item and hour, and can be delivered to S3 for querying with tools like Athena. It supports advanced cost analysis and chargeback.

What does consolidated billing in AWS Organizations provide?

• a.It automatically encrypts all resources
• b.A single bill across accounts, with combined usage that can unlock volume pricing tiers✓
• c.It deliberately reduces the durability of all of your stored data in order to save you money
• d.It grants every account root access to the others

Consolidated billing aggregates charges from all member accounts into one payer bill and combines usage so the group can reach volume-pricing discount tiers sooner. Each account's costs remain trackable individually.

Which feature lets a management account share the benefit of Reserved Instances or Savings Plans across accounts in an organization?

• a.VPC peering
• b.Service control policies
• c.Automatic cross-Region replication of all storage buckets in the organization
• d.Consolidated billing with sharing of reservation and Savings Plans discounts✓

Under consolidated billing, Reserved Instance and Savings Plans discounts can be shared across accounts in the organization when sharing is enabled, improving overall utilization. This maximizes the value of commitments.

How many support plans does AWS offer for customers, and what is the lowest tier?

• a.Several plans; the lowest is Basic, which is included free with every account✓
• b.Two plans; the lowest is Enterprise
• c.There is only one plan; the lowest tier is Developer, which costs a flat monthly fee
• d.One plan only, which is Business

AWS offers multiple support tiers, and Basic Support is included with every account at no additional cost, providing access to documentation, whitepapers, and account/billing support. Paid tiers add technical support and faster response times.

Which support plan is the least expensive paid tier and provides business-hours email access to a Cloud Support Associate, suited to early experimentation?

• a.Basic
• b.Business
• c.Developer✓
• d.Enterprise

The Developer Support plan is the entry-level paid tier, offering business-hours email access to support for non-production or early development use. Production workloads typically warrant Business or higher.

A company running production workloads wants 24/7 phone, email, and chat support plus full Trusted Advisor checks, but does not need a dedicated TAM. Which plan fits?

• a.Basic
• b.Business✓
• c.Developer
• d.Enterprise

The Business Support plan provides 24/7 technical support by phone, chat, and email and the full set of Trusted Advisor checks, making it appropriate for production workloads. A dedicated Technical Account Manager comes with Enterprise-level plans.

Which support plan includes a designated Technical Account Manager (TAM), concierge billing support, and the fastest response times?

• a.Business Support plan
• b.Developer
• c.Basic
• d.Enterprise✓

The Enterprise Support plan includes a designated Technical Account Manager, a concierge support team for billing and account help, and the fastest response times for critical issues. It targets large, business-critical workloads.

Which support offering gives a lower-cost path to some Enterprise-level benefits, including a pool of Technical Account Managers rather than a single designated TAM?

• a.Free Tier Support
• b.Developer Support plan
• c.Basic Support
• d.Enterprise On-Ramp✓

Enterprise On-Ramp provides a subset of Enterprise benefits at a lower cost, including access to a pool of Technical Account Managers and faster response times than Business. It bridges the gap between Business and full Enterprise support.

Which service inspects your AWS environment and gives recommendations across cost optimization, security, fault tolerance, performance, and service limits?

• a.Amazon Inspector
• b.AWS Pricing Calculator
• c.AWS Trusted Advisor✓
• d.AWS Budgets

AWS Trusted Advisor evaluates your account against best practices in five categories, including cost optimization, and recommends actions such as removing idle resources. The full set of checks is available with Business and Enterprise Support.

Which category of AWS Trusted Advisor checks would flag underutilized or idle resources to help you save money?

• a.Service limits
• b.Security
• c.Cost optimization✓
• d.Fault tolerance checks

The cost optimization category of Trusted Advisor identifies opportunities to save money, such as idle load balancers, underused EC2 instances, or unattached EBS volumes. Acting on these recommendations reduces waste.

How does resource tagging support cost management on AWS?

• a.Tags are mandatory before launching any resource
• b.Tags encrypt the billing data
• c.Applying cost allocation tags automatically lowers the hourly price of every resource they are applied to
• d.Cost allocation tags let you group and report spending by dimensions like project, team, or environment✓

Activating cost allocation tags lets you break down and report costs by categories such as project, department, or environment in Cost Explorer and the Cost and Usage Report. This improves visibility and enables chargeback or showback.

Which AWS service uses machine learning to detect unusual spending patterns and alert you to potential cost anomalies?

• a.AWS Pricing Calculator estimates
• b.AWS Cost Anomaly Detection✓
• c.Amazon Macie
• d.AWS Artifact

AWS Cost Anomaly Detection uses machine learning to monitor spend and alert you when it detects unexpected or unusual cost patterns. This helps catch runaway costs early.

Which statement about AWS data-transfer pricing is generally true?

• a.AWS charges a flat monthly fee that includes unlimited data transfer
• b.Data transferred into AWS is typically free, while data transferred out to the internet is usually charged✓
• c.All data transfer in and out is always free
• d.All data transferred within the same Availability Zone always costs the most of any type of transfer you can make

As a general rule, inbound data transfer into AWS is free, while outbound data transfer to the internet is metered and billed, with rates that can vary by volume and Region. Understanding this helps forecast costs for data-heavy applications.

Which of the following is a way to reduce AWS costs according to AWS best practices?

• a.Always run the single largest available instance type
• b.Disable monitoring so you cannot see usage
• c.Right-size resources and shut down idle instances✓
• d.Keep unattached storage volumes indefinitely

Cost optimization best practices include right-sizing resources to match actual needs and turning off or removing idle resources such as stopped instances or unattached volumes. Monitoring usage is essential to finding these savings.

What is the pricing model for AWS Lambda?

• a.A charge only when the account is created
• b.A fixed monthly subscription per function
• c.A one-time upfront payment that covers all future invocations of the function
• d.A charge based on the number of requests and the duration your code runs✓

AWS Lambda charges by the number of requests and the compute duration (rounded to the millisecond) that your function runs, with no charge when idle. This usage-based model aligns cost with actual execution.

For Amazon S3, which factors primarily determine your monthly cost?

• a.The number of IAM users in the account
• b.The amount of storage, the storage class, requests, and data transfer out✓
• c.Only the number of buckets you create
• d.A single flat monthly fee no matter how much or how little data you actually store

S3 costs depend on how much data you store, the storage class chosen, the number and type of requests, and data transfer out of AWS. Choosing the right storage class and lifecycle rules helps optimize these costs.

Which AWS pricing principle is demonstrated by receiving a lower per-GB price as your Amazon S3 storage volume crosses higher usage tiers?

• a.Pay only after a multi-year commitment
• b.Pay more by reserving capacity
• c.Pay a single flat rate regardless of the total volume you use
• d.Pay less per unit when you use more (volume-based discounts)✓

AWS offers tiered, volume-based pricing on some services so that the per-unit price decreases as usage grows. This is distinct from commitment-based discounts like Reserved Instances or Savings Plans.

Which tool would you use to compare the cost of running a workload on-premises versus on AWS to build a business case for migration?

• a.AWS WAF
• b.Amazon GuardDuty continuous threat-detection and account-monitoring service dashboards view
• c.Amazon Route 53
• d.A total cost of ownership (TCO) analysis, for example using the AWS Pricing Calculator✓

A total cost of ownership analysis compares the full costs of on-premises infrastructure with running the same workload on AWS, and tools like the AWS Pricing Calculator help model the AWS side. This supports migration business cases.

Which statement about On-Demand pricing is correct?

• a.It is always guaranteed to be cheaper than Reserved Instances for every possible workload
• b.It is only available for storage services
• c.You pay for compute capacity by the hour or second with no long-term commitment✓
• d.It requires a one-year commitment

On-Demand pricing charges for capacity by the hour or second with no upfront cost or commitment, making it flexible for unpredictable or short-term workloads. Committed options like Reserved Instances and Savings Plans trade flexibility for lower rates.

A workload runs steadily 24/7 for the next three years with predictable usage. Which purchasing approach typically minimizes cost?

• a.Dedicated Hosts billed hourly with no commitment
• b.Spot Instances only
• c.On-Demand Instances only
• d.A three-year Savings Plan or Reserved Instances✓

For steady, predictable, long-running workloads, committing to a one- or three-year Savings Plan or Reserved Instances yields the largest discounts over On-Demand. Spot suits interruptible work, and On-Demand is best for variable usage.