AWS Cloud Practitioner — All Questions

Which AWS service provides resizable virtual servers in the cloud on which you can run applications?

• a.Amazon RDS
• b.Amazon EC2✓
• c.Amazon S3
• d.AWS Lambda

Amazon EC2 (Elastic Compute Cloud) provides resizable virtual servers, called instances, where you control the operating system and software. S3 is object storage, RDS is a managed database, and Lambda runs code without provisioning servers.

Which AWS service provides highly durable object storage designed for 11 nines of durability?

• a.Amazon S3✓
• b.Amazon EC2
• c.Amazon VPC
• d.AWS IAM

Amazon S3 (Simple Storage Service) is object storage designed for 99.999999999% (11 nines) durability by redundantly storing data across multiple facilities. It is commonly used for backups, static websites, data lakes, and media.

Which service lets you run code without provisioning or managing servers, charging only for the compute time consumed?

• a.Amazon EBS
• b.Amazon RDS
• c.AWS Lambda✓
• d.Amazon EC2

AWS Lambda is a serverless compute service that runs your code in response to events and automatically manages the underlying compute. You pay only for the requests and the compute time your code uses.

Which service is a managed relational database that supports engines such as MySQL, PostgreSQL, and SQL Server?

• a.Amazon S3
• b.Amazon DynamoDB
• c.Amazon RDS✓
• d.Amazon ElastiCache

Amazon RDS (Relational Database Service) is a managed service for relational databases, handling tasks like patching, backups, and failover for engines such as MySQL, PostgreSQL, MariaDB, Oracle, and SQL Server. DynamoDB, by contrast, is a NoSQL database.

Which AWS service is a fully managed NoSQL key-value and document database that delivers single-digit millisecond performance at scale?

• a.Amazon Aurora
• b.Amazon Redshift
• c.Amazon RDS
• d.Amazon DynamoDB✓

Amazon DynamoDB is a fully managed NoSQL database offering fast, consistent performance at any scale with no servers to manage. It is well suited for high-traffic applications needing flexible schemas.

What is an AWS Region?

• a.A physical geographic area containing multiple, isolated Availability Zones✓
• b.A billing category for support plans
• c.A single building that houses one server rack
• d.A content delivery cache at the network edge

An AWS Region is a separate geographic area, each containing multiple Availability Zones. Customers choose Regions based on factors such as latency, data-residency requirements, and service availability.

What is an Availability Zone (AZ)?

• a.A type of EC2 instance
• b.A global DNS service
• c.One or more discrete data centers with redundant power and networking within a Region✓
• d.A billing report

An Availability Zone consists of one or more discrete data centers with independent power, cooling, and networking, isolated from failures in other AZs. Deploying across multiple AZs increases availability and fault tolerance.

Why should a highly available application be deployed across multiple Availability Zones?

• a.So the application can continue running if one AZ experiences a failure✓
• b.To reduce the AWS bill to zero
• c.Because a single AZ cannot run any instances
• d.To avoid using load balancers

Spreading resources across multiple AZs means that if one zone fails, the application can continue serving traffic from the others. AZs are physically isolated, so this design improves availability and fault tolerance.

Which service is a content delivery network (CDN) that caches content at edge locations to reduce latency for users?

• a.AWS Lambda
• b.Amazon CloudFront✓
• c.Amazon EBS
• d.Amazon RDS

Amazon CloudFront is a CDN that caches copies of content at edge locations around the world, delivering it to users from the nearest location to reduce latency. It integrates with services like S3 and load balancers as origins.

Which service automatically distributes incoming application traffic across multiple targets such as EC2 instances?

• a.Amazon S3
• b.Elastic Load Balancing (ELB)✓
• c.Amazon Route 53
• d.AWS Lambda

Elastic Load Balancing automatically spreads incoming traffic across multiple healthy targets, such as EC2 instances in different AZs. This improves fault tolerance and helps applications scale.

Which service automatically adjusts the number of EC2 instances to match demand based on defined policies?

• a.Amazon EC2 Auto Scaling✓
• b.AWS IAM
• c.Amazon S3
• d.Amazon CloudFront

EC2 Auto Scaling adds or removes instances automatically according to demand and your scaling policies, helping maintain performance while controlling cost. Combined with a load balancer, it supports elastic, resilient architectures.

Which storage service provides persistent block-level volumes that can be attached to EC2 instances?

• a.Amazon CloudFront
• b.Amazon EBS✓
• c.Amazon S3
• d.Amazon Route 53

Amazon EBS (Elastic Block Store) provides durable block storage volumes for use with EC2 instances, similar to a virtual hard disk. Volumes persist independently of the instance lifecycle and can be snapshotted to S3.

Which service provides scalable, shared file storage that multiple Linux EC2 instances can mount simultaneously?

• a.Amazon EFS✓
• b.Amazon S3 Glacier
• c.Amazon DynamoDB
• d.Amazon EBS

Amazon EFS (Elastic File System) is a managed, elastic NFS file system that many EC2 instances can mount concurrently. Unlike EBS, which attaches to a single instance at a time, EFS supports shared access.

Which AWS service is a scalable Domain Name System (DNS) web service used to route users to applications?

• a.Amazon CloudFront
• b.Amazon VPC
• c.Amazon Route 53✓
• d.AWS Direct Connect

Amazon Route 53 is a highly available and scalable DNS service that routes end users to applications by translating domain names into IP addresses. It also supports domain registration and health checks.

Which service lets you provision a logically isolated section of the AWS Cloud where you define your own IP ranges, subnets, and routing?

• a.AWS Lambda
• b.Amazon CloudWatch
• c.Amazon S3
• d.Amazon VPC✓

Amazon VPC (Virtual Private Cloud) lets you create an isolated virtual network in AWS where you control IP address ranges, subnets, route tables, and gateways. It gives you networking control similar to a traditional data center.

Which service provides monitoring and observability, collecting metrics, logs, and alarms for AWS resources and applications?

• a.Amazon CloudWatch✓
• b.Amazon Route 53
• c.Amazon Cognito
• d.AWS Artifact

Amazon CloudWatch collects metrics, logs, and events, and can trigger alarms and actions based on thresholds. It is the primary monitoring service for gaining operational visibility into AWS resources and applications.

Which service lets you model and provision AWS infrastructure as code using templates?

• a.Amazon CloudWatch
• b.AWS Shield
• c.Amazon Inspector
• d.AWS CloudFormation✓

AWS CloudFormation lets you define infrastructure in templates and provision it automatically and repeatably as 'stacks.' This infrastructure-as-code approach makes environments consistent and easy to replicate.

A developer wants to deploy a web application without manually configuring the underlying compute, load balancing, and scaling. Which service handles this?

• a.Amazon VPC
• b.Amazon S3
• c.AWS Elastic Beanstalk✓
• d.Amazon EC2

AWS Elastic Beanstalk is a platform-as-a-service that deploys and manages applications, automatically handling capacity provisioning, load balancing, scaling, and health monitoring. Developers simply upload code while retaining control of the resources.

Which fully managed message queuing service decouples components by letting them send and receive messages asynchronously?

• a.Amazon CloudFront
• b.Amazon EFS
• c.Amazon SQS✓
• d.Amazon RDS

Amazon SQS (Simple Queue Service) is a managed message queue that lets application components communicate asynchronously, improving decoupling and resilience. Producers send messages to a queue and consumers process them independently.

Which service is a fully managed publish/subscribe messaging service used to send notifications to subscribers or other services?

• a.Amazon Redshift
• b.Amazon EBS
• c.Amazon Route 53
• d.Amazon SNS✓

Amazon SNS (Simple Notification Service) is a pub/sub messaging service that delivers messages to multiple subscribers such as email, SMS, or other AWS services. It is often used for fan-out notifications and event-driven architectures.

Which service is a fully managed data warehouse designed for running complex analytic queries over large datasets?

• a.Amazon SQS
• b.Amazon Redshift✓
• c.Amazon EFS
• d.Amazon DynamoDB

Amazon Redshift is a managed, petabyte-scale data warehouse optimized for analytical queries using columnar storage and parallel processing. It is designed for business intelligence workloads rather than transactional processing.

A company needs a dedicated, private network connection from its on-premises data center to AWS that bypasses the public internet. Which service should it use?

• a.Amazon CloudFront
• b.Amazon SNS
• c.AWS Direct Connect✓
• d.Amazon Route 53

AWS Direct Connect establishes a dedicated private network connection between on-premises and AWS, providing more consistent network performance than the public internet. It is often used for large data transfers and hybrid architectures.

Which option lets you create an encrypted connection over the public internet between your on-premises network and your VPC?

• a.An Elastic IP address
• b.Amazon CloudFront distribution
• c.AWS Site-to-Site VPN✓
• d.S3 Transfer Acceleration

AWS Site-to-Site VPN creates an encrypted tunnel over the internet between your network and your VPC. Unlike Direct Connect, it uses the public internet but is quick to set up and encrypted.

Which purchasing option is best for a fault-tolerant, flexible workload that can handle interruptions and wants the lowest EC2 price?

• a.Reserved Instances with no flexibility
• b.Dedicated Hosts
• c.On-Demand Instances
• d.Spot Instances✓

Spot Instances let you use spare EC2 capacity at steep discounts but can be reclaimed by AWS with short notice. They are ideal for fault-tolerant, flexible workloads such as batch processing.

Which AWS database service is MySQL- and PostgreSQL-compatible and offers higher performance and availability as part of RDS?

• a.Amazon ElastiCache
• b.Amazon DynamoDB
• c.Amazon Neptune
• d.Amazon Aurora✓

Amazon Aurora is a MySQL- and PostgreSQL-compatible relational database built for the cloud, offering greater throughput and built-in high availability compared to standard engines. It is part of the Amazon RDS family.

Which service provides in-memory caching to improve the performance of read-heavy applications, supporting engines like Redis and Memcached?

• a.Amazon ElastiCache✓
• b.Amazon EFS
• c.Amazon RDS
• d.Amazon Redshift

Amazon ElastiCache provides managed in-memory data stores using Redis or Memcached to reduce latency and offload databases. It is commonly used to cache frequently accessed data for faster reads.

Which S3 storage class is designed for long-term archival where retrieval times of minutes to hours are acceptable at very low cost?

• a.S3 Intelligent-Tiering
• b.S3 Standard
• c.S3 Standard-Infrequent Access
• d.S3 Glacier✓

The S3 Glacier storage classes are designed for low-cost, long-term archival where data is accessed rarely and some retrieval delay is acceptable. S3 Standard, by contrast, is for frequently accessed data with immediate retrieval.

Which S3 feature automatically moves objects between access tiers based on changing access patterns to optimize cost?

• a.S3 Intelligent-Tiering✓
• b.S3 Versioning
• c.S3 Cross-Region Replication
• d.S3 Transfer Acceleration

S3 Intelligent-Tiering automatically moves data between frequent and infrequent access tiers based on usage, optimizing storage costs without performance impact or operational overhead. It is useful when access patterns are unknown or changing.

A team wants to run Docker containers on AWS without managing the underlying EC2 servers. Which combination is most appropriate?

• a.Amazon ECS or EKS with AWS Fargate✓
• b.Amazon RDS with EBS
• c.Amazon Route 53 with CloudFront
• d.Amazon SNS with SQS

AWS Fargate is a serverless compute engine for containers that works with Amazon ECS and EKS, removing the need to provision or manage EC2 instances. It lets teams run containers while AWS handles the underlying infrastructure.

Which service can migrate large amounts of data into AWS by shipping a physical, ruggedized storage device when network transfer would be too slow?

• a.Amazon S3 Transfer Acceleration
• b.Amazon CloudFront
• c.AWS Direct Connect
• d.AWS Snowball✓

AWS Snowball is a physical data transport device used to move large datasets into or out of AWS when transferring over the network would take too long or be too costly. AWS ships the device, you load data, and return it for import.

Which statement correctly describes edge locations in the AWS global infrastructure?

• a.They replace Availability Zones
• b.They are where the root user signs in
• c.They are sites used to cache content closer to users, primarily for services like CloudFront✓
• d.They are used only for storing relational databases

Edge locations are part of the content delivery network and cache content closer to end users to reduce latency. They are distinct from Regions and Availability Zones, which host the core compute and storage infrastructure.

Which service allows you to register domain names and configure routing policies such as latency-based or weighted routing?

• a.Amazon EBS
• b.AWS CloudFormation
• c.Amazon Route 53✓
• d.Amazon VPC

Amazon Route 53 supports domain registration and advanced DNS routing policies, including latency-based, weighted, geolocation, and failover routing. This helps direct users to the best endpoint for their needs.

What is the main advantage of a serverless architecture using services like Lambda and DynamoDB?

• a.You focus on code and data while AWS manages provisioning and scaling of the infrastructure✓
• b.You pay a fixed monthly fee regardless of usage
• c.You must manually patch and scale servers
• d.You cannot integrate with other AWS services

Serverless services remove the need to provision, patch, and scale servers, letting developers focus on application logic while AWS handles the underlying infrastructure. Billing is typically based on actual usage rather than pre-provisioned capacity.

Which compute option provides physically dedicated servers for a customer, often used to meet licensing or compliance requirements?

• a.Amazon EC2 Dedicated Hosts✓
• b.Amazon S3
• c.Spot Instances
• d.AWS Lambda

Amazon EC2 Dedicated Hosts provide physical servers dedicated to a single customer, which can help address software licensing that is tied to physical cores or specific compliance needs. They give visibility and control over the underlying hardware.

Why does AWS offer several Amazon EC2 instance families such as compute-optimized, memory-optimized, and storage-optimized?

• a.Because each family is permanently locked to one specific AWS Region and cannot be resized or migrated later
• b.So you can match the balance of CPU, memory, and storage to your workload✓
• c.Because larger families are the only ones eligible for the Free Tier
• d.Because instance families determine which support plan you must purchase

EC2 offers purpose-built instance families so you can pick hardware that fits a workload, such as memory-optimized for in-memory databases or compute-optimized for batch processing. Choosing the right family improves performance efficiency and cost.

What is an Amazon Machine Image (AMI) used for when launching Amazon EC2 instances?

• a.It provides the template of the operating system and software used to launch an instance✓
• b.It is the DNS record that routes users to the instance
• c.It sets the maximum monthly spending limit and automatically stops the instance when that limit is reached
• d.It is the physical server that the instance runs on

An AMI is a preconfigured template containing the operating system, and optionally application software, used to launch EC2 instances. Using a custom AMI lets you launch identical instances quickly and consistently.

A workload runs a short function each time a file is uploaded to Amazon S3 and should incur no charge when idle. Which compute service fits best?

• a.Amazon EC2 Dedicated Hosts reserved for three years
• b.AWS Lambda✓
• c.An Amazon RDS database instance running continuously
• d.A fleet of always-on Amazon EC2 instances

AWS Lambda runs code in response to events, such as an S3 upload, and charges only for the requests and compute time used, with no cost while idle. This event-driven, serverless model is ideal for intermittent tasks.

Which statement best describes AWS Fargate?

• a.A service that registers domain names and manages DNS routing
• b.A managed relational database engine compatible with MySQL
• c.A serverless compute engine that runs containers without managing EC2 servers✓
• d.A ruggedized physical appliance that AWS ships to your data center to transfer very large datasets offline

AWS Fargate is a serverless compute engine for containers that works with Amazon ECS and EKS, so you run containers without provisioning or managing the underlying EC2 instances. You pay for the vCPU and memory your containers request.

A company wants to run and orchestrate Kubernetes on AWS while letting AWS manage the Kubernetes control plane. Which service should it use?

• a.Amazon EC2 Auto Scaling
• b.Amazon Simple Queue Service (SQS)
• c.AWS Elastic Beanstalk with managed container support
• d.Amazon Elastic Kubernetes Service (EKS)✓

Amazon EKS is a managed service that runs the Kubernetes control plane for you, so you can deploy and operate Kubernetes clusters without maintaining the control-plane infrastructure yourself. Amazon ECS is AWS's own container orchestrator alternative.

Which AWS service is a fully managed batch-processing service that dynamically provisions compute to run large numbers of batch computing jobs?

• a.Amazon Athena
• b.Amazon Kinesis Data Streams
• c.Amazon Lightsail
• d.AWS Batch✓

AWS Batch plans, schedules, and runs batch computing workloads, automatically provisioning the right quantity and type of compute based on job requirements. It removes the need to manually manage batch infrastructure.

A developer wants a simple way to launch a small website with a bundled virtual server, storage, and networking for a predictable low monthly price. Which service is designed for this?

• a.Amazon Redshift
• b.AWS CloudFormation
• c.Amazon Lightsail✓
• d.Amazon EMR

Amazon Lightsail offers easy-to-use virtual private servers bundled with storage and networking at a predictable monthly price, aimed at simpler workloads and users new to the cloud. It abstracts much of the configuration required with raw EC2.

In Amazon EC2, what does the instance type (for example, m5.large) primarily determine?

• a.The specific AWS Region and Availability Zone that the instance is permanently tied to for its whole life
• b.The IAM permissions granted to the instance
• c.The amount of vCPU, memory, storage, and network capacity of the instance✓
• d.The Availability Zone that will be used automatically

An EC2 instance type defines the hardware profile of the instance, including vCPUs, memory, storage, and networking performance. Selecting the right type balances performance and cost for the workload.

Which EC2 feature lets you run instances on hardware physically isolated for a single customer to help meet strict compliance or licensing rules tied to physical cores?

• a.Dedicated Hosts✓
• b.Auto Scaling groups
• c.Spot Instances
• d.Elastic IP addresses

Amazon EC2 Dedicated Hosts provide a physical server dedicated to your use, giving visibility into sockets and cores that helps with license terms and compliance. Standard shared tenancy places instances on hardware shared with other customers.

What is the main purpose of an Amazon EC2 Auto Scaling group's desired, minimum, and maximum capacity settings?

• a.To set the KMS encryption keys used for the instances' attached storage volumes and their snapshots
• b.To choose which support plan applies to the account
• c.To determine the retention period for CloudTrail logs
• d.To keep the number of running instances within defined bounds as demand changes✓

An Auto Scaling group uses minimum, maximum, and desired capacity to control how many instances run, adding or removing instances within those bounds as scaling policies trigger. This maintains availability while matching capacity to demand.

A stateless web tier needs to scale out during traffic spikes and in during quiet periods automatically. Which pair of services is most appropriate?

• a.Amazon S3 for storage combined with Amazon Glacier for archival
• b.Amazon Route 53 and AWS Artifact
• c.Elastic Load Balancing with EC2 Auto Scaling✓
• d.Amazon SNS with Amazon Cognito

Elastic Load Balancing distributes incoming traffic across instances while EC2 Auto Scaling adjusts the number of instances to match demand. Together they provide an elastic, highly available web tier.

Which statement about AWS Elastic Beanstalk is correct?

• a.It is a NoSQL database service for key-value data
• b.It only supports static websites with no server-side code
• c.You upload application code and it provisions and manages the underlying resources for you✓
• d.It requires you to manually configure every load balancer, Auto Scaling group, and security group yourself

Elastic Beanstalk is a platform service where you upload code and it automatically handles capacity provisioning, load balancing, scaling, and health monitoring. You keep full control of the underlying AWS resources if you need it.

In Amazon S3, what is a 'bucket'?

• a.A reserved compute capacity reservation
• b.A virtual network boundary for your resources
• c.A container that holds objects (files) stored in S3✓
• d.A block-level storage volume that attaches to a single EC2 instance

In Amazon S3, a bucket is the top-level container that holds objects, each identified by a unique key. Buckets are created in a specific Region and organize your stored data.

Which characteristic distinguishes object storage such as Amazon S3 from block storage such as Amazon EBS?

• a.Object storage manages data as whole objects with metadata, accessed over HTTP-based APIs✓
• b.Block storage cannot be attached to compute resources
• c.Object storage can only hold files smaller than one megabyte and cannot store any associated metadata
• d.Block storage is accessed only through a web browser

Object storage like S3 stores data as complete objects with metadata and is accessed via web APIs, making it ideal for unstructured data at scale. Block storage like EBS presents raw volumes to an instance, which the OS formats and uses like a disk.

A single Amazon EC2 instance needs a persistent, low-latency volume that behaves like an attached disk for its operating system and database files. Which service fits?

• a.Amazon Elastic Block Store (EBS)✓
• b.Amazon S3
• c.Amazon SQS
• d.Amazon Elastic File System (EFS) shared mount

Amazon EBS provides persistent block-level volumes attached to a single EC2 instance, suitable for boot volumes and databases that need low-latency disk access. The volume persists independently of the instance lifecycle.

What does an Amazon EBS snapshot allow you to do?

• a.Automatically resize the volume every hour
• b.Create a point-in-time backup of a volume that is stored durably in Amazon S3✓
• c.Convert the volume into an object storage bucket
• d.It lets you attach the same volume to hundreds of instances across many Availability Zones at once

An EBS snapshot captures a point-in-time backup of a volume and stores it durably in Amazon S3 (managed by AWS). Snapshots are incremental and can be used to restore volumes or create new ones.