I85PREP
⌘ K
AWS Cloud Practitioner study materials
AWS Cloud Practitioner study resources

AWS Cloud Practitioner practice questions

One question at a time. Build your AWS Cloud Practitioner understanding.

First 50 of 198 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Cloud Concepts

A company wants to stop making large upfront purchases for servers and instead pay only for the compute it consumes each month. Which cloud benefit does this describe?

  1. Increasing physical data center capacity
  2. Locking in fixed monthly hardware leases
  3. Eliminating all IT operating costs
  4. Trading capital expense for variable expense Correct answer.

Explanation

Cloud computing shifts spending from upfront capital purchases, such as servers and data center equipment, to variable operating expense based on consumption. Capacity can be adjusted as needs change rather than being fixed in advance.

Question 2Cloud Concepts

Why can AWS typically offer lower pay-as-you-go prices than a company running its own small data center?

  1. AWS aggregates usage from many customers and achieves economies of scale Correct answer.
  2. AWS customers own the underlying hardware they use
  3. AWS removes the need for any security controls
  4. AWS prices are fixed by government regulation

Explanation

Economies of scale mean that a large provider buying and operating hardware for many customers spreads fixed costs across a much bigger base. Lower per-unit costs allow lower prices than a single organization can achieve on its own.

Question 3Cloud Concepts

A web application automatically adds servers during a traffic spike and removes them again when traffic drops. Which cloud characteristic is this?

  1. Elasticity Correct answer.
  2. Durability
  3. Multi-factor authentication
  4. Latency-based routing

Explanation

Elasticity is the ability to acquire resources as demand increases and release them when demand falls. This keeps performance steady while avoiding payment for idle capacity.

Question 4Cloud Concepts

What is an AWS Availability Zone?

  1. A separate AWS account used only for testing disaster recovery plans
  2. A caching site that stores copies of content close to end users
  3. A billing boundary that groups together several countries and currencies
  4. An isolated group of data centers within a Region Correct answer.

Explanation

An Availability Zone is one or more discrete data centers with independent power, cooling, and networking inside a Region. Using multiple Availability Zones is the standard way to survive the failure of a single facility.

Question 5Cloud Concepts

Which approach helps an application remain available if a single data center fails?

  1. Deploying across multiple Availability Zones Correct answer.
  2. Running all instances in a single Availability Zone
  3. Keeping backup copies on the same physical disk array
  4. Resizing to a larger instance type in one zone

Explanation

Availability Zones are physically separated and have independent power and networking, so spreading resources across at least two of them removes a single facility as a point of failure. The application can continue serving traffic from the surviving zone.

Question 6Cloud Concepts

Which cloud service model gives the customer the most control over the operating system and runtime?

  1. Software as a Service (SaaS)
  2. Platform as a Service (PaaS)
  3. Function as a Service (FaaS)
  4. Infrastructure as a Service (IaaS) Correct answer.

Explanation

With IaaS the provider supplies compute, storage, and networking, while the customer installs and manages the operating system, runtime, and applications. Control decreases as you move toward PaaS, FaaS, and SaaS.

Question 7Cloud Concepts

A company keeps some workloads in its own data center and runs others in AWS, connected by a private network. Which deployment model is this?

  1. Private cloud only
  2. Public cloud only
  3. Hybrid cloud Correct answer.
  4. Community cloud

Explanation

A hybrid deployment combines on-premises or private infrastructure with public cloud resources, typically connected securely so the two environments can interoperate. Keeping some workloads local while others run in AWS is the defining pattern.

Question 8Cloud Concepts

Which statement best describes the agility benefit of the AWS cloud?

  1. It removes the need to design for failure
  2. It lets teams experiment and deploy new ideas quickly Correct answer.
  3. It fixes the number of servers a team can provision
  4. It guarantees that applications never experience downtime

Explanation

Agility is the ability to provision resources in minutes, test ideas cheaply, and release improvements faster than with long hardware procurement cycles. It is about speed and experimentation, not about eliminating outages.

Question 9Cloud Concepts

A company must keep customer data inside a specific country and also needs low latency for local users. Which factor most directly drives the choice of AWS Region?

  1. The default timeout configured for Lambda functions
  2. Data residency rules and distance to end users Correct answer.
  3. The maximum number of S3 buckets per account
  4. The number of AWS accounts allowed per organization

Explanation

Region selection is driven mainly by compliance and latency: data must be stored where regulations allow, and the Region should be close to the users it serves. Service quotas and configuration defaults do not vary in a way that changes residency or user latency.

Question 10Cloud Concepts

Which pillar of the AWS Well-Architected Framework focuses on minimizing the environmental impact of cloud workloads?

  1. Operational Excellence
  2. Cost Optimization
  3. Sustainability Correct answer.
  4. Reliability

Explanation

The Sustainability pillar addresses environmental impact, including energy consumption and efficient use of resources. The other pillars cover operations, resilience, and spending efficiency rather than environmental outcomes.

Question 11Cloud Concepts

A disaster recovery plan states that a system must be restored within 4 hours of an outage, with at most 15 minutes of data loss. Which pair of terms describes these two numbers?

  1. RTO of 15 minutes and RPO of 4 hours
  2. RTO of 4 hours and RPO of 15 minutes Correct answer.
  3. SLA of 4 hours and MTTR of 15 minutes
  4. RPO of 4 hours and MTTR of 15 minutes

Explanation

Recovery Time Objective (RTO) is the maximum acceptable time to restore service, and Recovery Point Objective (RPO) is the maximum acceptable amount of data loss measured in time. Four hours maps to RTO and fifteen minutes maps to RPO.

Question 12Cloud Concepts

Which AWS Cloud Adoption Framework (CAF) perspective focuses on change management and developing the skills staff need to adopt cloud?

  1. Governance perspective
  2. Security perspective
  3. Platform perspective
  4. People perspective Correct answer.

Explanation

The People perspective covers organizational change management, training, and workforce readiness for cloud adoption. The other perspectives address controls, architecture, and portfolio management rather than staff capability.

Question 13Cloud Concepts

Which cost is typically eliminated when a company migrates an on-premises data center workload to AWS?

  1. Salaries of the application development team
  2. License fees for third-party software
  3. Physical server hardware refresh cycles Correct answer.
  4. Charges for the data stored by the application

Explanation

Moving to AWS removes the need to buy and periodically replace physical servers, because AWS maintains the underlying hardware. Software licenses, staff, and data storage costs still exist in some form.

Question 14Cloud Concepts

A team runs a batch job that must run continuously and cannot tolerate interruption, but the company can commit to a multi-year term. Which purchasing option provides the largest discount for this workload?

  1. Dedicated Hosts billed hourly with no commitment
  2. Spot Instances
  3. A 3-year Compute Savings Plan or Reserved Instance Correct answer.
  4. On-Demand Instances

Explanation

Long-term commitments such as Savings Plans or Reserved Instances exchange a one- or three-year term for a substantial discount compared with On-Demand pricing. They suit steady workloads that must keep running.

Question 15Cloud Concepts

What is the primary purpose of AWS edge locations in the global infrastructure?

  1. To cache content close to users and reduce latency Correct answer.
  2. To host the primary copy of customer data
  3. To store AWS billing records for each account
  4. To provide isolated data centers for a single Region

Explanation

Edge locations are sites positioned close to end users that cache content and terminate connections for services such as content delivery and DNS. Keeping data physically near users reduces latency for requests.

Question 16Cloud Concepts

A solution must keep operating correctly even if one Availability Zone becomes unavailable. Which design approach meets this requirement?

  1. Store all data on instance store volumes attached to a single server
  2. Deploy all resources in one Availability Zone and take nightly backups
  3. Use a single large instance covered by a long-term Reserved Instance
  4. Distribute resources across at least two Availability Zones Correct answer.

Explanation

Spreading compute and data across multiple Availability Zones lets the workload continue from a surviving zone when one fails. Backups alone restore data but do not keep the service running during the event.

Question 17Cloud Concepts

A company adds more instances to a fleet as demand grows but does not remove them afterward when demand falls. Which concept does this describe?

  1. Elasticity
  2. Vertical scaling
  3. Horizontal scaling Correct answer.
  4. Fault tolerance

Explanation

Horizontal scaling, or scaling out, increases capacity by adding more instances to a fleet. Elasticity would also remove those instances when demand drops, and vertical scaling changes the size of a single instance.

Question 18Cloud Concepts

A company uses a fully managed email service where the provider handles infrastructure, patching, and the application itself, and users simply sign in and use it. Which service model is this?

  1. Infrastructure as a Service
  2. Containers as a Service
  3. Software as a Service Correct answer.
  4. Platform as a Service

Explanation

In SaaS the provider operates the entire stack, including the application, and the customer simply consumes it through a client. The customer manages no servers, runtime, or application code.

Question 19Cloud Concepts

Under the AWS shared responsibility model, which task belongs to the customer?

  1. Replacing failed disks in AWS storage hardware
  2. Configuring security groups on EC2 instances Correct answer.
  3. Patching the hypervisor that runs EC2 instances
  4. Maintaining the physical security of AWS data centers

Explanation

AWS is responsible for security of the cloud, including facilities, hardware, and the virtualization layer, while the customer is responsible for security in the cloud, such as network configuration and access rules. Security groups are customer-managed configuration.

Question 20Cloud Concepts

Why does AWS recommend that workloads be designed to expect failure rather than only trying to prevent it?

  1. Because components will fail, so designs must tolerate it Correct answer.
  2. Because monitoring and alarms become unnecessary after migration
  3. Because a single Availability Zone is already fully fault tolerant
  4. Because AWS assumes all operational risk for customer workloads

Explanation

Hardware, networks, and software can fail regardless of provider, so resilient designs assume failure and recover automatically. This is why multi-AZ deployment, retries, and health checks are common patterns.

Question 21Cloud Concepts

A workload must survive the complete failure of an entire AWS Region. Which design meets this requirement?

  1. Run resources in two Availability Zones within a single Region
  2. Use a larger instance type with enhanced networking enabled
  3. Replicate data and run resources in at least two Regions Correct answer.
  4. Take hourly snapshots and store them in the same Region

Explanation

Only running the workload in more than one Region provides protection against a Region-wide failure, because Regions are geographically separate and independently operated. Multiple Availability Zones in one Region do not cover that scenario.

Question 22Cloud Concepts

A company has steady, predictable compute usage for the next three years and wants the largest discount in exchange for a commitment. Which option fits best?

  1. Spot Instances with a two-minute interruption notice
  2. A 3-year Compute Savings Plan or Standard Reserved Instance Correct answer.
  3. On-Demand Instances with no commitment
  4. Dedicated Hosts billed hourly with no commitment

Explanation

A multi-year commitment on steady usage yields the deepest commitment-based discount because the provider can plan capacity around the reservation. The workload is predictable, so committing does not create a risk of paying for unused capacity.

Question 23Cloud Concepts

When comparing the total cost of ownership (TCO) of on-premises infrastructure with AWS, which factor is commonly overlooked if only server prices are compared?

  1. The list of AWS global infrastructure component names
  2. Power, cooling, data center space, and staff maintenance Correct answer.
  3. The maximum size of a single object stored in Amazon S3
  4. The total number of AWS Regions available for deployment

Explanation

A full TCO comparison includes facilities costs such as power, cooling, and real estate, plus the labor needed to maintain hardware and refresh it over time. Comparing only hardware or instance prices understates on-premises costs.

Question 24Cloud Concepts

Which statement correctly describes the scope of IAM and Amazon Route 53 compared with Amazon EC2?

  1. IAM and Route 53 are global services, while EC2 is Regional Correct answer.
  2. IAM and Route 53 are Regional services, while EC2 is global
  3. All three services are scoped to a single Availability Zone in one Region
  4. Route 53 is Regional, while IAM and EC2 are global services

Explanation

IAM and Route 53 are global services, so their configuration is not tied to a specific Region. EC2 resources such as instances and AMIs are created within a chosen Region and its Availability Zones.

Question 25Cloud Concepts

How does cloud elasticity differ from cloud agility?

  1. Elasticity is a purchasing discount model, while agility describes the tier of AWS Support that a customer selects
  2. Elasticity applies only to storage volumes, while agility applies only to compute services in a Region
  3. Elasticity scales capacity with demand; agility is how fast ideas reach production Correct answer.
  4. Elasticity and agility are two names for the same concept and both describe network bandwidth

Explanation

Elasticity is about automatically matching resource capacity to current demand, while agility is about how quickly an organization can build, test, and release new capabilities. A team can be agile even before it configures elastic scaling.

Question 26Cloud Concepts

A startup wants to avoid buying servers up front and instead pay monthly only for the capacity it actually consumes. Which cloud concept does this describe?

  1. Gaining speed and agility in deployment
  2. Paying for capacity as a variable cost Correct answer.
  3. Deploying applications globally in minutes
  4. Benefiting from massive economies of scale

Explanation

Cloud computing shifts spending from large upfront capital purchases to usage-based operating expenditure charged as a variable cost. The company is billed for what it consumes and can stop paying when it stops consuming. The other options describe different benefits of cloud adoption.

Question 27Cloud Concepts

What does scalability mean in the context of the AWS Cloud?

  1. The ability to pay only for resources consumed
  2. The ability to grow to handle increased demand Correct answer.
  3. The ability to deploy workloads in many countries
  4. The ability to recover automatically from service failures

Explanation

Scalability is the capacity of a system to grow and handle larger loads, either by adding resources or by increasing the size of existing resources. It is distinct from resilience, billing models, and geographic reach.

Question 28Cloud Concepts

Which element of the AWS global infrastructure consists of one or more data centers with independent power and networking, and is used to build highly available workloads?

  1. An AWS Region
  2. An Availability Zone Correct answer.
  3. A Local Zone
  4. An edge location

Explanation

An Availability Zone is one or more discrete data centers with redundant power, networking, and connectivity, isolated from other zones so that failures do not spread. A Region is a collection of such zones, and edge locations serve cached content rather than general compute.

Question 29Cloud Concepts

Which purchasing option offers a lower price in exchange for a commitment to a consistent amount of usage over one or three years?

  1. Savings Plans Correct answer.
  2. On-Demand Instances
  3. Dedicated Hosts
  4. Spot Instances

Explanation

Savings Plans trade a one- or three-year usage commitment for discounted pricing on compute. On-Demand has no commitment, Spot relies on spare capacity that can be reclaimed, and Dedicated Hosts are about physical server dedication rather than usage commitment discounts.

Question 30Cloud Concepts

During a migration, a company discovers that two legacy reporting applications are unused and simply shuts them down instead of moving them to AWS. Which migration strategy is this?

  1. Replatform
  2. Retire Correct answer.
  3. Refactor
  4. Rehost

Explanation

The retire strategy decommissions applications that are no longer needed, which reduces cost and migration effort. Rehost, replatform, and refactor all involve moving an application to AWS in some form.

Question 31Cloud Concepts

A company wants its engineers to spend time on product features rather than racking servers and patching operating systems. Which cloud benefit does this illustrate?

  1. Reduced undifferentiated heavy lifting Correct answer.
  2. Elasticity that matches capacity to demand
  3. Global reach that spans many countries
  4. Built-in high availability across zones

Explanation

Undifferentiated heavy lifting covers the routine infrastructure work that does not differentiate a business, such as hardware procurement and operating system maintenance. Moving that work to AWS frees staff to focus on the company's own value-adding activities.

Question 32Cloud Concepts

Which pillar of the AWS Well-Architected Framework focuses on running and monitoring systems to deliver business value and on continually improving supporting processes?

  1. Reliability
  2. Operational excellence Correct answer.
  3. Performance efficiency
  4. Security

Explanation

The operational excellence pillar covers running and monitoring systems, delivering business value, and continuously improving processes and procedures. Security, reliability, and performance efficiency address different concerns.

Question 33Cloud Concepts

Which AWS Cloud Adoption Framework perspective focuses on aligning cloud investment with business outcomes and building the business case for migration?

  1. Platform
  2. Governance
  3. Operations
  4. Business Correct answer.

Explanation

The business perspective ensures that cloud investments are tied to business outcomes and that a compelling business case exists. The governance, platform, and operations perspectives cover portfolio and risk management, architecture and provisioning, and running cloud services respectively.

Question 34Cloud Concepts

A development team wants to deploy application code without managing servers or the language runtime, and wants AWS to handle runtime patching. Which service model fits?

  1. Software as a Service
  2. Platform as a Service Correct answer.
  3. Infrastructure as a Service
  4. Dedicated Hosting

Explanation

Platform as a Service provides a managed environment in which the provider handles the servers, operating system, and runtime, leaving the customer to deploy and manage the application. IaaS leaves runtime and operating system management with the customer, and SaaS delivers a finished application.

Question 35Cloud Concepts

Which AWS Cloud Adoption Framework perspective covers identity and access management, data protection, and threat detection?

  1. Operations
  2. Platform
  3. Business
  4. Security Correct answer.

Explanation

The security perspective addresses how the organization manages identity and access, protects data, and detects and responds to threats in the cloud. The other perspectives deal with running services, business outcomes, and technical architecture.

Question 36Cloud Concepts

Why can AWS offer lower pay-as-you-go prices than a typical company running its own small data center?

  1. Customers pay a fixed subscription regardless of use
  2. AWS hosts workloads only in low-cost countries
  3. AWS achieves massive economies of scale Correct answer.
  4. Customers buy the underlying hardware outright

Explanation

Aggregating demand from a very large customer base lets AWS purchase hardware, power, and networking at a scale that lowers unit costs, and the savings are passed on as lower prices. A company running a small data center cannot achieve that scale.

Question 37Cloud Concepts

Adding more instances of the same size to a fleet so that total capacity grows is an example of which approach?

  1. Horizontal scaling Correct answer.
  2. Fault isolation
  3. Vertical scaling
  4. Loose coupling

Explanation

Horizontal scaling adds more nodes to a fleet, while vertical scaling moves a workload to a larger instance type. Adding instances is also called scaling out.

Question 38Cloud Concepts

Why does AWS build each Region from multiple isolated Availability Zones?

  1. To limit the impact of a zone failure Correct answer.
  2. To offer lower prices in each country
  3. To reduce the number of services in a Region
  4. To meet data residency requirements

Explanation

Isolated zones give architects a way to place resources so a single data center failure does not take down the whole workload. Spreading resources across zones is the basis of highly available designs within a Region.

Question 39Cloud Concepts

A company needs compute close to users in a specific metropolitan area to reach single-digit millisecond latency. Which AWS infrastructure option is designed for this?

  1. An edge location
  2. A second AWS Region
  3. An AWS Local Zone Correct answer.
  4. An Availability Zone in another Region

Explanation

Local Zones place compute, storage, and other services in a metro area close to end users to achieve very low latency. A second Region or a distant Availability Zone adds network distance, and edge locations are used for content delivery rather than general compute placement.

Question 40Cloud Concepts

A team runs a video rendering job that can be interrupted and restarted at any time. Which purchasing option offers the largest savings?

  1. Spot Instances Correct answer.
  2. Reserved Instances
  3. Dedicated Hosts
  4. On-Demand Instances

Explanation

Spot Instances use spare EC2 capacity at steep discounts, and the trade-off is that the capacity can be reclaimed with short notice. Workloads that checkpoint and resume, such as interruptible batch rendering, are good candidates.

Question 41Cloud Concepts

A web tier writes requests to a queue that a worker tier processes later, so a worker crash does not lose requests. Which design principle does this illustrate?

  1. Loose coupling Correct answer.
  2. Tight coupling
  3. Manual provisioning
  4. Vertical scaling

Explanation

Loose coupling uses an intermediary such as a queue so components interact without direct dependencies and can fail or scale independently. If a worker fails, buffered requests remain in the queue for another worker to process.

Question 42Cloud Concepts

A company wants to estimate the monthly cost of a planned AWS architecture before deploying it. Which tool should it use?

  1. AWS Pricing Calculator Correct answer.
  2. AWS Trusted Advisor reports
  3. AWS Budgets
  4. AWS Cost Explorer

Explanation

The AWS Pricing Calculator lets you model services, quantities, and usage to produce an estimate before anything is deployed. Cost Explorer and Budgets work with actual or forecast spend after accounts are in use.

Question 43Cloud Concepts

A development environment is used only from 09:00 to 17:00 on weekdays. Which action best reflects AWS cost-optimization principles?

  1. Deploy the environment in a second Region
  2. Buy three-year Reserved Instances for the environment
  3. Move the environment to a larger instance type
  4. Stop the instances outside business hours Correct answer.

Explanation

Cost optimization means paying only for what is needed, and idle development capacity outside working hours is waste that can be removed by stopping or scheduling instances. Committing to a term for intermittent usage or increasing capacity both raise cost.

Question 44Cloud Concepts

A company wants one place to centrally restrict which AWS services its many accounts may use and to consolidate billing. Which approach meets both needs?

  1. Enabling AWS Config rules separately in each account
  2. AWS Organizations with service control policies Correct answer.
  3. Reviewing AWS Trusted Advisor reports every quarter
  4. Creating individual IAM policies in every member account

Explanation

AWS Organizations provides consolidated billing across accounts and supports service control policies that set a central permission boundary on what member accounts can use. Managing policies or config rules account by account is decentralized and does not consolidate billing.

Question 45Cloud Concepts

Which statement describes a pilot light disaster recovery strategy?

  1. A complete duplicate of production runs continuously in a second Region
  2. A minimal core is always running and is scaled up during failover Correct answer.
  3. Only backups are copied to AWS, and infrastructure is built from them after a disaster
  4. Production traffic is served from two Regions at once in an active-active setup

Explanation

Pilot light keeps a small, always-on core of the workload, such as replicated data and core configuration, in the recovery environment and scales the rest up when a failover occurs. It sits between backup and restore, which provisions everything after the event, and a fully running duplicate.

Question 46Cloud Concepts

After a lift-and-shift migration, a company finds its servers run at about 5 percent CPU utilization because they were sized for rare peaks. Which action best follows AWS cost-optimization guidance?

  1. Move the workload to an even larger instance type
  2. Rightsize the instances and add Auto Scaling Correct answer.
  3. Replicate the workload into additional Regions
  4. Purchase more Reserved Instances at the current sizes

Explanation

Rightsizing matches instance size to actual demand, and Auto Scaling adds capacity only when peaks occur, removing the cost of permanently over-provisioned servers. Committing to oversized capacity or adding capacity elsewhere preserves the waste.

Question 47Cloud Concepts

Which statement correctly distinguishes the AWS Well-Architected Framework from the AWS Cloud Adoption Framework?

  1. Both organize guidance around the same six perspectives
  2. Both are certifications that must be renewed every year
  3. The Framework assesses workloads; the CAF guides change Correct answer.
  4. The CAF reviews workloads and the Framework covers hiring

Explanation

The Well-Architected Framework provides questions and best practices for evaluating individual workloads against design pillars. The Cloud Adoption Framework addresses the organizational, people, governance, platform, security, and operations changes needed to adopt cloud successfully.

Question 48Cloud Concepts

Which statement best describes how serverless computing changes the customer's operational responsibility?

  1. The customer selects instance types and patches the operating system
  2. The customer pays a fixed hourly rate for servers kept running between requests
  3. The provider scales capacity and bills per request Correct answer.
  4. The customer keeps full control of the host networking stack

Explanation

With serverless compute the provider manages the servers, capacity, and scaling, and the customer is billed per invocation or per unit of consumption. The customer focuses on code and configuration rather than on hosts and operating systems.

Question 49Security and Compliance

Under the AWS shared responsibility model, which task is the customer's responsibility?

  1. Patching the hypervisor software that runs the EC2 instances
  2. Patching the guest operating system on an Amazon EC2 instance Correct answer.
  3. Replacing failed hard drives in the underlying storage hardware
  4. Maintaining the physical security of AWS data center buildings

Explanation

AWS is responsible for security 'of' the cloud, which covers facilities, hardware, and the virtualization layer. Customers are responsible for security 'in' the cloud, including the guest operating system, applications, and data on services such as EC2. Patching the instance OS is therefore a customer task.

Question 50Security and Compliance

A company wants to require a second authentication factor when IAM users sign in to the AWS Management Console. Which action should the company take?

  1. Enable IAM Access Analyzer for the account
  2. Attach an IAM permissions boundary to the user
  3. Apply a stricter password policy requiring longer passwords
  4. Enable MFA on the IAM user Correct answer.

Explanation

MFA adds a second factor beyond a password, such as a virtual or hardware token code, at sign-in time. It is enabled per IAM user (or centrally for users in AWS IAM Identity Center). Password policies only strengthen the first factor, not add a second one.