AWS Cloud Practitioner Practice Questions & Answers
Selected foundations: 64 original practice tasks, 14 lessons, 42 retrieval cards and four standalone guides. Official coverage remains partial; not a full syllabus, official mock or score predictor.. Selected foundation practice, not a complete exam simulation.
Try 10 original samples with answers below, or start a personal practice set.
Free access · No sign-up · No personal progress recorded on this page · Coverage & review notes
TRY A QUESTION. FOLLOW THE REASONING.
Sample questions with answers
Work out your answer first, then compare the explanation. This stable selection uses distinct task families across the available learning domains.
QUESTION 01Cloud Concepts
Cloud value and cloud economics
A fictional school sells tickets during unpredictable registration bursts. The team wants computing capacity to rise during bursts and fall when demand subsides. Which property directly addresses that requirement?
Keep a fixed fleet sized for the registration peak
Add capacity during each burst and keep that increased allocation as the new baseline
Adjusting consumed capacity with demand
Schedule one fixed capacity increase for the entire registration season
Answer: Adjusting consumed capacity with demand
The controlling requirement is a change in capacity in both directions as workload demand changes, rather than simply a high fixed peak capacity.
Cloud consumption can adjust with demand. Keeping peak capacity permanently running addresses a peak but misses the requested reduction afterward.
Choose demand-matched capacity. Check that the conclusion is about elasticity; it neither proves lower total cost nor guarantees availability during every failure.
Compare the other answer choices
Keep a fixed fleet sized for the registration peak
This can supply peak capacity, but its allocation does not fall when demand subsides.
Add capacity during each burst and keep that increased allocation as the new baseline
This follows rising demand but omits the requested reduction after the burst.
Schedule one fixed capacity increase for the entire registration season
A calendar-based fixed allocation does not directly track the stated unpredictable short bursts in both directions.
Shared responsibility changes with service abstraction
A fictional claims office uses a Lambda Event Function to process uploaded files. It uses an AWS managed runtime with Auto runtime updates, not a container image. Which TWO responsibility statements are supported? Select exactly TWO.
Select all answers that apply.
The customer decides which file data and service actions the function may access
AWS is responsible for validating that every uploaded claim is a legitimate business claim
The customer must maintain the underlying physical Lambda host
The Auto setting transfers all function-code security decisions to AWS
AWS manages the underlying execution infrastructure and publishes runtime security updates applied according to the stated Auto mode
Answer: The customer decides which file data and service actions the function may access; AWS manages the underlying execution infrastructure and publishes runtime security updates applied according to the stated Auto mode
Read the deployment assumption before assigning update work: this is a managed Event Function using Auto runtime updates, not a customer-maintained container image.
AWS manages underlying execution infrastructure. The customer retains workload data, permissions, and code-security decisions, including the allowed file/service access.
Select both the customer access statement and the conditional AWS infrastructure/runtime statement. Check the complete set: neither business-claim validation nor function-code security has been transferred to AWS.
Compare the other answer choices
AWS is responsible for validating that every uploaded claim is a legitimate business claim
Infrastructure management does not validate the office's business rules.
The customer must maintain the underlying physical Lambda host
The Event Function abstracts underlying execution infrastructure; the customer is not assigned physical host maintenance.
The Auto setting transfers all function-code security decisions to AWS
Runtime updating does not remove the customer's workload-code security duties.
A fictional application must keep its selected primary data location within an approved geographic Region. Its readers live in several cities. Which first placement decision addresses the stated constraint?
Select a suitable approved Region for the primary placement
Choose primary placement from the CloudFront edge location nearest the readers
Choose an Availability Zone before checking whether its parent Region is approved
Choose the Region nearest most readers and finish the location review on that basis
Answer: Select a suitable approved Region for the primary placement
Separate the constraint on primary data placement from the fact that the audience is geographically distributed.
An AWS Region is a geographic grouping. An AZ is within a Region, while edge delivery serves a different content-distribution function.
Start with an approved Region. Check that edge proximity, AZ selection, or reader proximity does not substitute for the primary geographic approval; this first decision is not a complete residency review.
Compare the other answer choices
Choose primary placement from the CloudFront edge location nearest the readers
Edge delivery proximity does not identify or approve the primary origin/data placement.
Choose an Availability Zone before checking whether its parent Region is approved
An AZ is within a Region; selecting it does not resolve the stated approval of the geographic Region.
Choose the Region nearest most readers and finish the location review on that basis
Reader proximity is not the same as satisfying the explicit approved-Region constraint.
A fictional proposal labels a compute-only subtotal a complete AWS bill. The workload description also includes retained storage, possible transfer charges under applicable pricing, and variable demand, but no quantities or prices for those factors. Which TWO critiques are justified? Select exactly TWO.
Select all answers that apply.
Use the known compute usage as a proxy for the unspecified retained-storage quantity
Compare compute purchasing options and use that comparison as the project’s total-cost model
Identify and supply the applicable omitted quantities and cost components before treating the model as complete
Use the compute unit rate as the missing storage rate and leave transfer unmodeled
State that the current number is only a compute subtotal under its stated assumptions
Answer: Identify and supply the applicable omitted quantities and cost components before treating the model as complete; State that the current number is only a compute subtotal under its stated assumptions
Compare the model boundary with the described workload: compute is priced, but storage, possible applicable transfer charges, and demand variation are not resolved.
A justified critique asks for the missing inputs and labels the present number by what it actually includes. It does not invent real prices or assert that every transfer is free.
Select the two critiques that preserve the actual model scope. Compute use cannot stand in for storage quantity, a compute purchasing comparison is not the whole project model, and a compute unit rate cannot price unrelated components.
Compare the other answer choices
Use the known compute usage as a proxy for the unspecified retained-storage quantity
Compute use does not establish the distinct storage quantity needed by the described workload.
Compare compute purchasing options and use that comparison as the project’s total-cost model
A compute-only comparison still omits the other described applicable components and demand inputs.
Use the compute unit rate as the missing storage rate and leave transfer unmodeled
Different cost components need applicable quantities/rates; reusing the compute rate does not repair the missing model boundary.
Analytics and AI: trace the input and required output
A volunteer analyst keeps tabular event files in S3 and wants occasional standard-SQL exploration without setting up a persistent database server. Which AWS service is directly presented as an interactive query service for this S3-data analysis task?
AWS Glue preparation/ETL jobs without a query engine
AWS Glue Data Catalog alone
Amazon Kinesis Data Streams
Amazon Athena
Answer: Amazon Athena
The files already exist in S3 and the missing operation is interactive SQL execution, not capture or preparation.
Athena directly matches interactive serverless SQL analysis of S3 data. Glue preparation and catalog metadata can support analytics but are not the requested query runtime by themselves.
A stream-ingestion proposal would address an earlier arrival stage. This is a purpose comparison, not a claim that no other AWS analytics service can ever query S3.
Compare the other answer choices
AWS Glue preparation/ETL jobs without a query engine
Preparing the files is useful in an analytics pipeline but does not by itself execute the requested interactive SQL.
AWS Glue Data Catalog alone
Catalog metadata describes datasets; the catalog alone is not SQL execution.
Amazon Kinesis Data Streams
Capturing a continuing stream is a different stage from querying files already in S3.
Reference basis: rd-aws-analytics. These are original learning questions, not questions reproduced from the references.
QUESTION 06Cloud Concepts
Design principles and a bounded migration decision
A fictional training team needs a reusable declared infrastructure definition to recreate the same resource settings every week without manually reselecting or re-entering those settings each time. It separately wants a one-time visual inspection of the current environment. Which TWO statements correctly distinguish these tasks? Select exactly TWO.
Select all answers that apply.
A declarative CloudFormation template can represent reusable infrastructure settings
Use the one-time console inspection as the reusable provisioning definition for subsequent weeks
Retain a report of the first environment and select the intended settings again during each weekly setup
Replace the one-time visual inspection with a fresh provisioning run
The console can support visual inspection, while repetition still needs an appropriate reusable definition
Answer: A declarative CloudFormation template can represent reusable infrastructure settings; The console can support visual inspection, while repetition still needs an appropriate reusable definition
The weekly task explicitly requires a reusable declared definition in place of manual reselection or re-entry of settings. The separate one-time task only requires viewing the current environment.
CloudFormation templates support repeated provisioning; a console can support visual inspection. A screenshot or click sequence is not automatically the template the first task requires.
Select the two statements that preserve the different outputs. A current-state record, repeated manual selection, and a fresh provisioning run do not substitute for the specific reusable-definition and one-time-inspection tasks.
Compare the other answer choices
Use the one-time console inspection as the reusable provisioning definition for subsequent weeks
Inspection observes the current state; it does not itself supply the declared reusable input for provisioning.
Retain a report of the first environment and select the intended settings again during each weekly setup
The report records an output, but repeated selection of settings leaves the reusable declaration requirement unresolved.
Replace the one-time visual inspection with a fresh provisioning run
Creating an environment and inspecting the current one are different tasks; the requested one-time observation does not require reprovisioning.
A fictional user completes sign-in, including MFA, but a request to read a training object is denied because that identity has no permission for it. Which distinction explains this result?
MFA grants every resource action after sign-in
Successful sign-in proves the object must be publicly readable
Authentication succeeded, but authorization for the object action is absent
A denied action proves the sign-in credentials were not checked
Answer: Authentication succeeded, but authorization for the object action is absent
The stem explicitly says identity verification completed; do not reinterpret it as a failed sign-in.
IAM separates authentication from authorization. The request still needs permission for the relevant action on the object.
The supported diagnosis is missing authorization. Check that solving it conceptually concerns the required scope, not automatically granting all actions because MFA was used.
Compare the other answer choices
MFA grants every resource action after sign-in
MFA strengthens authentication; it is not a resource permission grant.
Successful sign-in proves the object must be publicly readable
An authenticated identity does not make a resource public.
A denied action proves the sign-in credentials were not checked
A later authorization denial does not reverse the stated successful authentication.
A fictional EC2-based service needs its application instance count to change with demand within configured bounds, and incoming traffic must be distributed across healthy targets. Which TWO statements correctly assign these functions? Select exactly TWO.
Select all answers that apply.
Elastic Load Balancing distributes incoming traffic among healthy application targets
A load balancer alone necessarily launches every needed application instance
An Auto Scaling group guarantees an instantaneous response with unlimited capacity
EC2 Auto Scaling can launch or terminate instances according to configured capacity and policies
IAM permissions automatically replace both capacity policies and traffic distribution
Answer: Elastic Load Balancing distributes incoming traffic among healthy application targets; EC2 Auto Scaling can launch or terminate instances according to configured capacity and policies
Keep both requirements: changing how many application instances exist and distributing traffic to the healthy ones.
EC2 Auto Scaling manages instance count through group capacity and policies. Elastic Load Balancing routes incoming traffic across healthy targets.
Select both function assignments. Check the bounds and timing limitations, and do not confuse load-balancer scaling with application-instance creation.
Compare the other answer choices
A load balancer alone necessarily launches every needed application instance
Scaling the load balancer does not establish creation of application instances.
An Auto Scaling group guarantees an instantaneous response with unlimited capacity
Group bounds and policies apply; no instantaneous or unlimited guarantee is established.
IAM permissions automatically replace both capacity policies and traffic distribution
Authorization does not implement either requested function.
Estimate, observe, budget, and find technical help
A fictional team has not launched its project. It wants to model the cost of assumed service configurations and usage before committing to the plan. Which tool purpose is the direct fit?
Cost Explorer analysis of recorded cost and usage
AWS Budgets actual or forecasted threshold tracking
Activated cost allocation tag reporting
AWS Pricing Calculator for an input-based estimate
Answer: AWS Pricing Calculator for an input-based estimate
There is no recorded project usage yet; the team needs a scenario model from explicit assumptions.
Pricing Calculator supports cost estimates from selected service/configuration inputs before using the services.
Choose Calculator for the assumed configuration model. Recorded-cost analysis, threshold tracking, and allocation reports are useful for different questions but do not supply the requested pre-launch estimate.
Compare the other answer choices
Cost Explorer analysis of recorded cost and usage
Recorded-cost analysis needs recorded usage evidence; the project instead asks for a pre-launch model from assumptions.
AWS Budgets actual or forecasted threshold tracking
Tracking against a threshold is a different output from modeling the planned configuration’s cost.
Activated cost allocation tag reporting
Categorizing applicable incurred costs does not supply the pre-launch configuration/usage estimate requested.
Integration, desktop/application delivery and email boundaries
A fictional booking service separates two communication needs: transactional email sent using its own domain, and topic notifications to email/SMS subscribers. Select TWO correctly matched service-purpose statements.
Select all answers that apply.
Use SES for transactional email sent from the organization’s addresses/domain
Use an SQS queue as the complete direct email/SMS subscriber delivery mechanism
Use an SNS topic to publish the stated email/SMS subscriber notifications
Use SNS publication as the stored work backlog that independent workers pull from when ready
Use a successful queue write as proof that email/SMS subscribers received a notification
Answer: Use SES for transactional email sent from the organization’s addresses/domain; Use an SNS topic to publish the stated email/SMS subscriber notifications
The stated requirements separate an email platform using the organization’s addresses/domain from publication to topic subscribers.
SES matches the transactional email purpose, and SNS topics support the named subscriber notifications. SQS is a related buffering capability rather than a substitute for both.
The wrong proposals confuse publication with a worker backlog or treat one messaging stage as evidence of completed delivery. A larger architecture may use queues and notifications together, but each stage and its outcome must remain explicit.
Compare the other answer choices
Use an SQS queue as the complete direct email/SMS subscriber delivery mechanism
A queue stores work for consumers; queueing alone does not establish the requested direct subscriber notification delivery.
Use SNS publication as the stored work backlog that independent workers pull from when ready
Publication and the worker-pulled stored backlog are different messaging relationships; SQS supplies the latter queue capability.
Use a successful queue write as proof that email/SMS subscribers received a notification
A stored message is evidence of buffering, not proof of a subsequent notification reaching its endpoint.
Reference basis: rd-aws-integration; rd-aws-ses. These are original learning questions, not questions reproduced from the references.
What this practice covers
Selected foundations: 64 original practice tasks, 14 lessons, 42 retrieval cards and four standalone guides. Official coverage remains partial; not a full syllabus, official mock or score predictor.
Selected foundations: 64 original practice tasks, 14 lessons, 42 retrieval cards and four standalone guides. Official coverage remains partial; not a full syllabus, official mock or score predictor.
48 single-choice and 16 select-TWO original foundation tasks. Editorial difficulty only; no calibrated readiness prediction.
10 public examples64 question variants in the studio40 task families
Review status: Independent educator review and learner calibration are pending. Use these selected foundation examples alongside the coverage map and current official references.
Start with the lesson linked to an unfamiliar topic, try a focused set in the practice studio, then return to the review cards. Your practice progress stays in this browser.
Catalog scope record: . This records the saved content mapping, not a guarantee that every external rule is current.
Selected foundations: 64 original practice tasks, 14 lessons, 42 retrieval cards and four standalone guides. Official coverage remains partial; not a full syllabus, official mock or score predictor.
The appended teaching expands selected previously missing objectives; remaining subtopics and unsupported official formats remain explicit in Coverage & gaps.
Qualified professional review pending; representative learner trial not_run; publication HOLD.
Check the exam provider's current information for registration, test rules and official preparation materials. The exam guide collects the relevant official references.
