I85PREP
⌘ K
CCP study materials
CCP study resources

CCP (Other exams) practice questions

One question at a time. Build your CCP understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Cloud Concepts and Architecture

Which AWS Cloud benefit is best described as the ability to acquire resources as demand grows and release them when demand falls?

  1. Elasticity Correct answer.
  2. Durability
  3. Fault tolerance
  4. Multi-tenancy

Explanation

Elasticity is the ability to scale resources up or down automatically to match current demand. It differs from durability, which concerns data persistence, and fault tolerance, which concerns surviving failures.

Question 2Cloud Concepts and Architecture

A company wants to trade large upfront capital expense for smaller variable operating expense by moving workloads to the cloud. Which cloud benefit does this describe?

  1. Increased network latency
  2. Shift from capital expenditure to operational expenditure Correct answer.
  3. Improved security posture
  4. Global content caching

Explanation

Cloud computing converts upfront capital purchases into pay-as-you-go operating costs. This is one of the core economic benefits of cloud adoption.

Question 3Cloud Concepts and Architecture

Which statement best describes a Region in the AWS global infrastructure?

  1. A logical grouping of accounts used for billing
  2. A single data center in a metropolitan area
  3. A caching endpoint located at the network edge
  4. A physical location containing multiple isolated Availability Zones Correct answer.

Explanation

A Region is a geographic area that contains multiple, isolated Availability Zones connected by low-latency links. Regions are the top-level physical deployment boundary for most AWS services.

Question 4Cloud Concepts and Architecture

What is the primary purpose of an Availability Zone?

  1. To provide a physically separate facility with independent power and networking within a Region Correct answer.
  2. To host the AWS management console for all Regions
  3. To serve as the billing boundary for an organization
  4. To cache static content close to end users

Explanation

Availability Zones are distinct physical locations within a Region, each with independent power, cooling, and networking. Deploying across multiple zones lets applications tolerate the failure of a single zone.

Question 5Cloud Concepts and Architecture

Which cloud service model gives the customer the most control over the operating system and runtime?

  1. Function as a Service (FaaS)
  2. Infrastructure as a Service (IaaS) Correct answer.
  3. Software as a Service (SaaS)
  4. Platform as a Service (PaaS)

Explanation

In IaaS the provider manages the physical infrastructure while the customer manages the operating system, middleware, and applications. Higher-level models such as PaaS, FaaS, and SaaS abstract away more of the stack.

Question 6Cloud Concepts and Architecture

Under the AWS shared responsibility model, which task is the customer's responsibility?

  1. Securing the hypervisor layer
  2. Managing the hardware lifecycle of storage devices
  3. Maintaining the physical security of data centers
  4. Patching the guest operating system of an Amazon EC2 instance Correct answer.

Explanation

AWS is responsible for security of the cloud, including physical facilities and the hypervisor. The customer is responsible for security in the cloud, which includes patching guest operating systems on IaaS instances.

Question 7Cloud Concepts and Architecture

Which characteristic distinguishes cloud computing from traditional on-premises infrastructure in terms of resource provisioning?

  1. Resources are limited to a single geographic location
  2. Resources are provisioned on demand with minimal management effort Correct answer.
  3. Resources are permanently dedicated to a single tenant
  4. Resources must be procured through a multi-week hardware purchase process

Explanation

On-demand self-service lets customers provision computing resources automatically without lengthy human interaction with the provider. This contrasts with the hardware procurement cycle typical of on-premises environments.

Question 8Cloud Concepts and Architecture

Which AWS Well-Architected Framework pillar focuses on the ability of a workload to recover from infrastructure or service disruptions?

  1. Operational Excellence
  2. Cost Optimization
  3. Sustainability
  4. Reliability Correct answer.

Explanation

The Reliability pillar covers designing workloads that recover from failures and dynamically acquire resources to meet demand. It addresses disruption recovery and mitigation of misconfigurations.

Question 9Cloud Concepts and Architecture

A team needs sub-millisecond latency for a workload that runs many small, interdependent services on the same host. Which AWS compute option best fits this requirement?

  1. Amazon EC2 instances in a placement group with cluster strategy Correct answer.
  2. Amazon CloudFront with a global edge cache
  3. AWS Lambda functions invoked over the public internet
  4. Amazon S3 static website hosting

Explanation

A cluster placement group packs instances close together in a single Availability Zone to provide low-latency, high-throughput networking. This suits tightly coupled, latency-sensitive workloads.

Question 10Cloud Concepts and Architecture

An application must remain available even if an entire data center loses power. Which design approach best satisfies this requirement?

  1. Deploy instances across multiple Availability Zones in one Region Correct answer.
  2. Deploy all instances in a single Availability Zone
  3. Deploy all instances on a single larger instance type
  4. Deploy instances in a single edge location

Explanation

Availability Zones have independent power and networking, so spreading workloads across zones protects against the loss of a single facility. A single zone or single host is a single point of failure.

Question 11Cloud Concepts and Architecture

A company must ensure that regulated data never leaves a specific country. What should the architect evaluate first?

  1. The instance family used for compute
  2. The choice of Region and any data residency controls Correct answer.
  3. The storage class selected for archival data
  4. The number of edge locations available globally

Explanation

Data residency requirements are addressed by selecting an appropriate Region and controlling where data is stored and replicated. Edge locations and instance choices do not by themselves satisfy residency constraints.

Question 12Cloud Concepts and Architecture

Which statement accurately contrasts vertical scaling with horizontal scaling?

  1. Vertical scaling adds more instances, while horizontal scaling increases the size of one instance
  2. Vertical scaling is only possible in the cloud, while horizontal scaling is only possible on-premises
  3. Vertical scaling requires a load balancer, while horizontal scaling never does
  4. Vertical scaling increases the size of a single resource, while horizontal scaling adds more resources Correct answer.

Explanation

Vertical scaling (scaling up) increases the capacity of an individual resource such as an instance size. Horizontal scaling (scaling out) adds more resources and typically requires distributing traffic across them.

Question 13Cloud Concepts and Architecture

A workload has highly variable, unpredictable traffic with long idle periods. Which pricing approach most directly reduces cost for this pattern?

  1. Dedicated Hosts purchased upfront
  2. Reserved Instances with a three-year commitment
  3. A Savings Plan with a fixed hourly commitment
  4. On-Demand capacity that is paid only while in use Correct answer.

Explanation

On-Demand pricing charges only for capacity actually consumed, which suits spiky or unpredictable workloads. Commitment-based options save money only when usage is steady enough to justify them.

Question 14Cloud Concepts and Architecture

Which AWS global infrastructure component is designed to deliver content to end users with low latency by caching it close to them?

  1. Availability Zone
  2. Edge location Correct answer.
  3. Virtual private cloud
  4. Region

Explanation

Edge locations are sites positioned close to end users where services such as CloudFront cache content. This reduces the distance content travels and improves latency.

Question 15Cloud Concepts and Architecture

An architect wants a managed service that automatically handles server provisioning, patching, and scaling for a web application while still allowing some runtime configuration. Which model fits best?

  1. Platform as a Service Correct answer.
  2. Infrastructure as a Service
  3. Bare metal hosting
  4. Colocation

Explanation

PaaS abstracts server provisioning, patching, and scaling while letting developers configure the runtime and deploy applications. This removes operational overhead without fully hiding the platform.

Question 16Cloud Concepts and Architecture

Which design principle from the Well-Architected Framework recommends assuming that any component can fail and building accordingly?

  1. Make frequent, small, reversible changes
  2. Design for failure and use loose coupling Correct answer.
  3. Optimize over time
  4. Perform operations as code

Explanation

Designing for failure means expecting components to fail and decoupling them so a failure does not cascade. This improves reliability by containing faults and enabling recovery.

Question 17Cloud Concepts and Architecture

A company runs a stateless web tier behind a load balancer and wants the tier to add capacity automatically when CPU utilization rises. Which approach implements this?

  1. Use a fixed number of instances sized for peak load
  2. Move the tier to a single large instance
  3. Cache all responses at the edge and remove the load balancer
  4. Configure automatic scaling policies tied to CPU metrics Correct answer.

Explanation

Automatic scaling adjusts the number of instances in response to metrics such as CPU utilization. Combined with a load balancer, this matches capacity to demand without manual intervention.

Question 18Cloud Concepts and Architecture

Which statement correctly describes the relationship between fault tolerance and high availability?

  1. Both terms mean the same thing and are interchangeable
  2. High availability guarantees zero downtime, while fault tolerance aims to minimize downtime
  3. Fault tolerance guarantees zero downtime, while high availability aims to minimize downtime Correct answer.
  4. Fault tolerance applies only to storage, while high availability applies only to compute

Explanation

Fault-tolerant systems continue operating without interruption when a component fails, while highly available systems minimize downtime but may experience brief outages during failover. The two represent different levels of resilience.

Question 19Cloud Concepts and Architecture

An application writes data to a single Availability Zone and must survive the loss of that zone without data loss. Which change best addresses this?

  1. Add a read replica in the same Availability Zone
  2. Increase the size of the instance writing the data
  3. Enable a larger storage volume in the same zone
  4. Replicate the data synchronously to another Availability Zone Correct answer.

Explanation

Replicating data to a separate Availability Zone ensures a copy survives the loss of the original zone. A replica in the same zone shares the same failure domain and provides no protection.

Question 20Cloud Concepts and Architecture

Which cloud design principle reduces the blast radius of a failure by limiting dependencies between components?

  1. Single-tenancy
  2. Vertical scaling
  3. Tight coupling
  4. Loose coupling Correct answer.

Explanation

Loose coupling uses asynchronous communication and independent components so a failure in one does not cascade to others. This limits the blast radius and improves overall reliability.

Question 21Cloud Concepts and Architecture

A startup wants to minimize operational overhead for running containers while retaining control over cluster-level configuration. Which AWS service category best matches this need?

  1. A managed container orchestration service Correct answer.
  2. A serverless function service
  3. A managed relational database service
  4. A content delivery network

Explanation

Managed container orchestration services handle the control plane and cluster operations while allowing configuration of the worker layer. This balances operational overhead against control over the cluster.

Question 22Cloud Concepts and Architecture

An architect is choosing between two Regions for a new workload and must account for latency to users, service availability, and legal constraints. Which approach best reflects sound architectural reasoning?

  1. Select the Region with the lowest advertised price regardless of other factors
  2. Select the Region with the most Availability Zones regardless of service availability
  3. Select the Region that satisfies residency requirements and offers the needed services with acceptable latency Correct answer.
  4. Always select the Region closest to the company headquarters

Explanation

Region selection is a multi-factor decision balancing compliance, service availability, latency, and cost. Residency requirements are often non-negotiable, and service availability determines feasibility.

Question 23Cloud Concepts and Architecture

A workload must tolerate the loss of an entire Region while keeping recovery time low. Which combination best supports this goal?

  1. A single Availability Zone with synchronous replication
  2. A single Region with multiple Availability Zones and nightly backups
  3. A single Region with a larger instance type and read replicas
  4. Multi-Region deployment with replicated data and automated failover Correct answer.

Explanation

Surviving a full Region loss requires resources and data in another Region, plus a tested failover mechanism. Multi-AZ designs protect against zone failures but not Region-level events.

Question 24Cloud Concepts and Architecture

A team must decide between a serverless function and a container-based service for an event-driven workload with unpredictable bursts. Which consideration most strongly favors the serverless option?

  1. The need to host a stateful database on the same host
  2. The requirement to run a persistent background daemon
  3. The need to control the underlying operating system kernel
  4. The desire to pay only for actual execution time with automatic scaling Correct answer.

Explanation

Serverless functions scale automatically and bill per invocation duration, which suits bursty event-driven work. Needing kernel control, daemons, or co-located stateful components points toward container or instance-based options.

Question 25Cloud Concepts and Architecture

An organization wants to reduce cost for a steady-state workload that runs continuously for three years, while retaining the ability to change instance families. Which purchasing option best balances savings and flexibility?

  1. Standard Reserved Instances locked to one instance family
  2. Spot Instances without interruption handling
  3. On-Demand Instances
  4. Convertible Reserved Instances Correct answer.

Explanation

Convertible Reserved Instances offer committed-term savings while allowing changes to instance attributes such as family. Standard Reserved Instances cost less but lock the family, and Spot capacity can be reclaimed.

Question 26Cloud Concepts and Architecture

Which statement best describes elasticity in cloud computing?

  1. Resources are matched to current demand automatically, growing and shrinking as workload changes. Correct answer.
  2. Resources are shared only among users within a single physical building.
  3. Resources are pre-allocated for peak load and held at that level for the contract term.
  4. Resources are purchased in fixed capacity blocks that cannot be changed after provisioning.

Explanation

Elasticity means capacity tracks demand dynamically, scaling out when load rises and scaling in when it falls. This avoids paying for idle capacity while preserving performance during peaks.

Question 27Cloud Concepts and Architecture

A company wants to avoid large upfront capital purchases and instead pay only for the compute hours it consumes. Which cloud benefit does this describe?

  1. Permanent ownership of the underlying hardware
  2. Increased physical security controls
  3. Guaranteed elimination of all IT costs
  4. Conversion of capital expense to variable operational expense Correct answer.

Explanation

Cloud consumption models trade upfront capital expenditure for usage-based operating expenditure. Customers pay for what they consume rather than depreciating owned hardware.

Question 28Cloud Concepts and Architecture

What is the primary purpose of an Availability Zone within an AWS Region?

  1. To host the billing and account management systems
  2. To isolate failures so that one zone's outage does not affect the others Correct answer.
  3. To provide a caching layer close to end users
  4. To store encryption keys for the entire Region

Explanation

Availability Zones are physically separate data center groups with independent power, cooling, and networking. Deploying across multiple zones lets a workload continue operating if one zone fails.

Question 29Cloud Concepts and Architecture

Which cloud characteristic allows multiple customers to share the same underlying physical infrastructure while keeping their data logically separated?

  1. Data residency
  2. Dedicated host allocation
  3. Multi-tenancy Correct answer.
  4. Single-tenancy

Explanation

Multi-tenancy pools physical resources across customers while logical isolation keeps each tenant's data and workloads separate. This pooling is what enables the economies of scale of public cloud.

Question 30Cloud Concepts and Architecture

An architect is designing a web application that must survive the loss of a single Availability Zone with no manual intervention. Which approach meets this requirement?

  1. Deploy a single large instance sized for peak load in one zone.
  2. Deploy all instances in one Availability Zone behind an Elastic IP address.
  3. Deploy instances in one zone and take nightly snapshots to another zone.
  4. Deploy instances across at least two Availability Zones behind a load balancer. Correct answer.

Explanation

Spreading instances across multiple Availability Zones behind a load balancer lets traffic shift away from a failed zone automatically. Snapshots alone restore data but do not keep the application running during the outage.

Question 31Cloud Concepts and Architecture

A media company serves video to viewers worldwide and wants to reduce latency by caching content at locations near those viewers. Which infrastructure component should it use?

  1. A single Availability Zone in the company's home country
  2. A virtual private gateway
  3. An edge location paired with a content delivery network Correct answer.
  4. A Region-level relational database

Explanation

Edge locations are distributed points of presence that cache content close to end users, reducing round-trip latency. A CDN uses these locations to deliver objects efficiently.

Question 32Cloud Concepts and Architecture

A team is decomposing a monolithic application and wants each component to fail independently so that one failing component does not cascade to others. Which design approach should they apply?

  1. Consolidating all components into a single process
  2. Loose coupling through asynchronous messaging between components Correct answer.
  3. Tight coupling with synchronous in-process calls
  4. Sharing a single database schema across all components

Explanation

Loose coupling with asynchronous messaging lets a component continue operating or buffer work when another component is unhealthy. Tight coupling and shared state propagate failures across boundaries.

Question 33Cloud Concepts and Architecture

Which statement best explains the difference between high availability and disaster recovery?

  1. High availability keeps a workload running through component failures, while disaster recovery restores service after a large-scale event. Correct answer.
  2. High availability applies only to databases, while disaster recovery applies only to networks.
  3. High availability and disaster recovery are identical concepts and use the same metrics.
  4. Disaster recovery keeps a workload running continuously, while high availability only restores data afterward.

Explanation

High availability minimizes downtime from routine component failures through redundancy. Disaster recovery addresses rare, large-scale events and is measured by recovery objectives such as RTO and RPO.

Question 34Cloud Concepts and Architecture

A workload's recovery point objective is 15 minutes. What does this requirement specify?

  1. No more than 15 minutes of data may be lost in a failure. Correct answer.
  2. The workload must be restored within 15 minutes of an outage.
  3. Backups must be encrypted within 15 minutes of being written.
  4. The workload must handle a 15-minute traffic burst without scaling.

Explanation

RPO defines the maximum acceptable amount of data loss measured in time, which drives backup and replication frequency. The time to restore service is the RTO, a separate objective.

Question 35Cloud Concepts and Architecture

A company runs a stateless web tier and wants capacity to grow automatically as request volume increases and shrink when it drops. Which capability should it rely on?

  1. Manual instance resizing by an operator
  2. Auto scaling driven by a load metric Correct answer.
  3. A larger instance type purchased in advance
  4. A static fixed fleet sized for peak demand

Explanation

Auto scaling adjusts the number of instances based on a metric such as average CPU or request count. Because the tier is stateless, instances can be added or removed without coordination.

Question 36Cloud Concepts and Architecture

An architect must choose between two Regions for a new workload. Which factor most directly affects the latency experienced by users in a specific geography?

  1. The size of the account's billing history
  2. The naming convention used for resources
  3. The physical distance between users and the selected Region Correct answer.
  4. The number of IAM users in the account

Explanation

Network round-trip time grows with physical distance, so placing a workload closer to its users reduces latency. Region selection is therefore driven largely by user geography.

Question 37Cloud Concepts and Architecture

Which combination best supports tolerating the loss of an entire Region with a low recovery time objective?

  1. A single-Region deployment with manual runbooks for rebuilding
  2. A single-Region deployment with nightly backups stored locally
  3. An active-passive multi-Region deployment with replicated data and automated failover Correct answer.
  4. A single Availability Zone with a standby instance in the same zone

Explanation

Surviving a Regional loss requires resources and data in a second Region, and a low RTO requires failover to be automated rather than manual. Active-passive with replication and automated failover satisfies both.

Question 38Cloud Concepts and Architecture

A company must keep regulated data physically stored within a specific country. Which action should the architect take first?

  1. Select a Region located in that country and restrict replication to it Correct answer.
  2. Store the data only in edge locations worldwide
  3. Enable cross-Region replication to the nearest low-cost Region
  4. Rely on encryption alone to satisfy the requirement

Explanation

Data residency requirements constrain where data may be stored, so the architect must first choose a Region within the required jurisdiction. Replication must also be restricted so copies do not leave that boundary.

Question 39Cloud Concepts and Architecture

An application's traffic is highly unpredictable, with long idle periods between bursts. Which architectural choice most directly reduces cost while preserving responsiveness?

  1. A fixed fleet of large instances running continuously
  2. A dedicated host allocated for the entire year
  3. Reserved instances sized for peak traffic
  4. A serverless, event-driven design that scales to zero when idle Correct answer.

Explanation

Serverless event-driven designs bill per invocation and can scale to zero during idle periods, so cost tracks actual usage. Fixed and reserved capacity charges continue during idle time.

Question 40Cloud Concepts and Architecture

A team needs a managed compute service that handles server provisioning, patching, and scaling for a web application while allowing the team to choose the runtime. Which service category fits?

  1. A managed platform-as-a-service for application hosting Correct answer.
  2. A content delivery network
  3. A managed relational database engine
  4. A raw virtual machine requiring manual OS patching

Explanation

A platform-as-a-service abstracts server management, including provisioning and patching, while letting the team deploy application code on a chosen runtime. Infrastructure-level control remains with the provider for the underlying hosts.

Question 41Cloud Security and Compliance

Under the shared responsibility model for a SaaS offering, which party is primarily responsible for classifying and managing the data that users place into the application?

  1. A third-party auditor
  2. The cloud provider
  3. The internet service provider
  4. The customer Correct answer.

Explanation

In SaaS, the provider secures the application infrastructure, but the customer retains ownership and responsibility for its data, including classification, access decisions, and content governance. The provider does not determine the sensitivity of customer content.

Question 42Cloud Security and Compliance

Which concept describes a cloud customer's ability to retrieve their data in a usable format and to verify its deletion when leaving a provider?

  1. Data portability and deletion assurance Correct answer.
  2. Data deduplication
  3. Data localization
  4. Data masking

Explanation

Portability covers exporting data in a usable format, while deletion assurance covers evidence that data has been removed at end of contract. Together they reduce lock-in and support exit obligations.

Question 43Cloud Security and Compliance

A regulation requires that personal data of its residents not leave the country unless an approved safeguard exists. Which cloud control most directly addresses this requirement?

  1. Increasing backup frequency to hourly
  2. Configuring a region-restricted data residency policy Correct answer.
  3. Enabling multi-factor authentication for administrators
  4. Enabling object versioning on storage buckets

Explanation

Data residency requirements are met by controlling the geographic location where data is stored and processed, typically through region selection and residency policies. The other controls improve security or resilience but do not constrain location.

Question 44Cloud Security and Compliance

Which artifact typically documents a cloud provider's security controls, their operating effectiveness, and an independent auditor's opinion?

  1. A privacy notice
  2. A disaster recovery plan
  3. A SOC 2 report Correct answer.
  4. A service level agreement

Explanation

SOC 2 reports contain management's description of controls plus an independent auditor's opinion on design and, for Type 2, operating effectiveness. An SLA states service commitments rather than control testing results.

Question 45Cloud Security and Compliance

Which activity is part of continuous compliance monitoring in a cloud environment?

  1. Signing a new contract amendment with the provider
  2. Automatically evaluating resource configurations against policy baselines Correct answer.
  3. Requesting a price quote for additional storage
  4. Manually reviewing the provider's marketing materials each quarter

Explanation

Continuous monitoring uses automated evaluation of configurations and logs against defined baselines so drift is detected promptly. Contract and commercial activities do not provide technical assurance of control state.

Question 46Cloud Security and Compliance

Which cloud logging capability best supports investigation of who accessed a sensitive storage bucket and when?

  1. Data access audit logs Correct answer.
  2. Billing export reports
  3. Network flow logs for the provider backbone
  4. Performance metrics dashboards

Explanation

Data access audit logs record reads and writes against resources along with the identity and time, which is exactly what access investigations require. Billing, backbone flow, and performance data do not attribute resource-level access to identities.

Question 47Cloud Security and Compliance

Which encryption approach gives a cloud customer the greatest degree of control over the key material used to protect data at rest?

  1. Provider-managed keys with default rotation
  2. Transport encryption using TLS
  3. Storage-level encryption enabled by default
  4. Customer-managed keys held in a hardware security module Correct answer.

Explanation

Customer-managed keys, especially when held in an HSM the customer controls, let the customer govern key lifecycle, access policy, and revocation. Provider-managed keys shift that control to the provider, and TLS protects data in transit rather than at rest.

Question 48Cloud Security and Compliance

Which statement correctly distinguishes a cloud provider's compliance certification from a customer's own compliance?

  1. The provider's certification covers only the provider's scope, so the customer must still meet its own obligations Correct answer.
  2. The provider's certification eliminates the need for customer audit logging
  3. The provider's certification guarantees customer applications are secure
  4. The provider's certification transfers directly to all customer workloads

Explanation

Certifications are scoped to the provider's infrastructure and services; the customer remains responsible for its configuration, data, and processes. Compliance is therefore shared and never transferred wholesale.

Question 49Cloud Security and Compliance

A team must demonstrate that only approved regions can be used to deploy workloads. Which control combination most directly enforces this?

  1. A web application firewall plus rate limiting
  2. A content delivery network plus cache invalidation
  3. An organization policy that restricts allowed locations plus detective monitoring for violations Correct answer.
  4. Per-project billing alerts plus a monthly cost review

Explanation

Preventive organization policies constrain where resources can be created, and detective monitoring catches drift or exceptions. Cost, WAF, and CDN controls address spending and traffic handling rather than location.

Question 50Cloud Security and Compliance

An auditor asks for evidence that privileged access to a production environment is reviewed periodically. Which artifact best satisfies this request?

  1. The network topology diagram
  2. The application's load test results
  3. The provider's public status page history
  4. Recurring access review records showing reviewer decisions and dates Correct answer.

Explanation

Access reviews produce dated records of who reviewed which entitlements and what decisions were made, which is the evidence an auditor needs. Status pages, load tests, and diagrams do not show entitlement review.