Skip to content
Rokool
Back to home

10 AWS Cloud Practitioner practice questions with answers

Ten questions written by Rokool in the style of the exam, covering the four domains. Answer in your head, then open the answer. These are not official AWS questions.

Read the exam guide

  1. Question 1Security and compliance

    A company uses Amazon EC2. Under the shared responsibility model, which of these tasks is the company's job?

    1. A. Maintaining the physical servers
    2. B. Patching the instances' operating system
    3. C. Physically securing the data centres
    4. D. Updating the hypervisor
    Show the answer

    Answer: B. Patching the instances' operating system

    With EC2, the customer manages everything running inside the instance, including the operating system and its patches. AWS takes care of the hardware, the data centres and the virtualisation layer.

  2. Question 2Cloud technology and services

    An application must stay available even if a data centre fails. What does AWS recommend?

    1. A. Use several edge locations
    2. B. Pick a more powerful instance type
    3. C. Take a daily EBS snapshot
    4. D. Deploy the application across several Availability Zones
    Show the answer

    Answer: D. Deploy the application across several Availability Zones

    An Availability Zone is one or more data centres isolated from the others. Spreading the application across zones lets it survive the failure of one. Edge locations mainly bring content closer to users.

  3. Question 3Billing, pricing and support

    A batch job can be interrupted and resumed without any problem. Which EC2 purchasing option is the cheapest?

    1. A. Spot Instances
    2. B. On-Demand Instances
    3. C. Reserved Instances
    4. D. Dedicated Hosts
    Show the answer

    Answer: A. Spot Instances

    Spot Instances use AWS's spare capacity at a steep discount, but AWS can reclaim them at short notice. They suit work that tolerates interruptions.

  4. Question 4Security and compliance

    What is the best practice for the AWS account root user?

    1. A. Share its credentials with administrators
    2. B. Create access keys for scripts
    3. C. Enable multi-factor authentication (MFA) and don't use it for everyday tasks
    4. D. Delete it once the account is created
    Show the answer

    Answer: C. Enable multi-factor authentication (MFA) and don't use it for everyday tasks

    The root user can do everything. Protect it with MFA and keep it for the few tasks that require it; day to day, work with IAM identities that have limited permissions.

  5. Question 5Cloud technology and services

    Which service stores files as objects, reachable over the internet, with virtually unlimited capacity?

    1. A. Amazon EBS
    2. B. Amazon S3
    3. C. Amazon EFS
    4. D. AWS Storage Gateway
    Show the answer

    Answer: B. Amazon S3

    Amazon S3 is the object storage service. EBS provides disks (block storage) to an EC2 instance, EFS a shared file system, and Storage Gateway connects on-premises storage to AWS.

  6. Question 6Cloud technology and services

    A team needs a fully managed NoSQL database with single-digit millisecond latency at any scale. Which service should it choose?

    1. A. Amazon DynamoDB
    2. B. Amazon RDS
    3. C. Amazon Aurora
    4. D. Amazon Redshift
    Show the answer

    Answer: A. Amazon DynamoDB

    DynamoDB is AWS's managed NoSQL (key-value and document) database. RDS and Aurora are relational databases, and Redshift is a data warehouse for analytics.

  7. Question 7Cloud concepts

    Which of these is NOT a pillar of the AWS Well-Architected Framework?

    1. A. Operational excellence
    2. B. Sustainability
    3. C. Cost optimization
    4. D. Scalability
    Show the answer

    Answer: D. Scalability

    The six pillars are operational excellence, security, reliability, performance efficiency, cost optimization and sustainability. Scalability is a goal, not a pillar.

  8. Question 8Security and compliance

    An auditor asks for AWS's compliance reports (for example ISO or SOC). Where can you get them?

    1. A. AWS Trusted Advisor
    2. B. AWS CloudTrail
    3. C. AWS Artifact
    4. D. AWS Config
    Show the answer

    Answer: C. AWS Artifact

    AWS Artifact gives access to AWS's compliance reports. Trusted Advisor recommends improvements, CloudTrail records API calls and Config tracks resource configuration.

  9. Question 9Security and compliance

    You need to know who deleted a resource, and when. Which service tells you?

    1. A. AWS CloudTrail
    2. B. Amazon CloudWatch
    3. C. Amazon GuardDuty
    4. D. AWS Config
    Show the answer

    Answer: A. AWS CloudTrail

    CloudTrail records the actions taken in the account (who, what, when). CloudWatch monitors application metrics and logs, GuardDuty detects threats, and Config shows how configuration changes over time.

  10. Question 10Billing, pricing and support

    A start-up wants an alert as soon as its monthly AWS spend goes over a set amount. Which service should it use?

    1. A. AWS Cost Explorer
    2. B. AWS Pricing Calculator
    3. C. AWS Organizations
    4. D. AWS Budgets
    Show the answer

    Answer: D. AWS Budgets

    AWS Budgets sends an alert when actual or forecast costs exceed a threshold. Cost Explorer analyses past spending, the Pricing Calculator estimates a project, and Organizations manages several accounts.

Missed one?

In Rokool, it would come back in the same session, then the next day, until you know it.

We'll email you when the app is out. Details in the privacy policy.