AWS Certified Cloud Practitioner – Sample Questions

1. Which AWS services can be used to store files? Choose 2 answers from the options given below.
A. Amazon CloudWatch
B. Amazon Simple Storage Services (Amazon S3)
C. Amazon Elastic Block Store (Amazon EBS)
D. AWS Config
E. Amazon Athena

2. What is the best-suited file storage option for use when an administrator is looking to deploy
shared file access, linux-based workloads which will require up to petabytes of data stores?
A. Amazon EFS
B. Amazon S3
C. AWS Snowball
D. Amazon EBS

3. In Amazon S3, what is the difference between lifecycle policies and intelligent tiering?
A. Lifecycle policies are not dependant on access patterns as is the case with intelligent
tiering, instead they are pre-configured with a transition rule.
B. Intelligent tiering is an object storage class which is not dependant on access patterns, it
uses a pre-configured transition rule.
C. When transitioning objects into different storage classes, intelligent tiering is automatic
whilst lifecycle policies have to be manually triggered.
D. Lifecycle policies cannot be configured to permanently delete objects from an S3 bucket
whilst intelligent tiering can do so if versioning is turned on.

4. Which AWS service provides infrastructure security optimization recommendations?

A. AWS Application Programming Interface(API)
B. Reserved Instances
C. AWS Trusted Advisor
D. Amazon Elastic Compute Cloud (Amazon EC2) SpotFleet

5. A department in an organisation has a stipulated monthly expenditure limit on their AWS account
and is anxious about exceeding it. How best can they allay this concern?
A. Regularly review their Billing and Cost management dashboard during the course of the
month in the management console.
 B. Under Billing Preferences > Cost Management Preferences, they should tick the Receive
Free Tier Usage Alerts checkbox.
C. In AWS CloudWatch they ought to create an alarm that triggers each time the services bill
surpasses the limit.
D. In AWS Budgets, creating an email alert based on the budget parameters would suffice.

6. A company needs to know which user was responsible for terminating several critical Amazon
Elastic Compute Cloud (EC2) Instances. Where can the customer find this information?
A. AWS Trusted Advisor
B. Amazon EC2 instance usage report
C. Amazon CloudWatch
D. AWS CloudTrail logs

7. On a social media website, creative content goes viral for a few days and then rapidly declines in
popularity and views thereafter. Which storage class and configuration option would you choose
for a cost-effective storage?
A. Amazon S3 Standard with object versioning
B. Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)
C. Amazon Elastic File Store (EFS)
D. Amazon S3 Standard with lifecycle policies

8. What is the value of having AWS Cloud services accessible through an Application Programming
Interface (API)?
A. It allows developers to work with AWS resources programmatically
B. AWS resources will always be cost-optimized
C. All application testing can be managed by AWS.
D. Customer–owned, on–premises infrastructure becomes programmable.

9. An administrator would like to prepare a report that will be presented to the auditing team. The
report is meant to depict that the organisations’ cloud infrastructure has followed the widely
accepted industry standards of deployment, maintenance and monitoring. Which tool can they
use to assist them?
A. AWS CloudTrail
B. AWS Trusted Advisor
C. AWS Organisations
D. AWS Total Cost of Ownership

10. A file-sharing service uses Amazon S3 to store files uploaded by users. Files are accessed with
random frequency, popular ones are downloaded every day whilst others not so often and some
rarely. What is the most cost-effective Amazon S3 object storage class to implement?
A. Amazon S3 Standard
B. Amazon S3 Glacier
C. Amazon S3 One Zone-Infrequently Accessed
D. Amazon S3 Intelligent-Tiering
11. Which AWS service automates infrastructure provisioning and administrative tasks for an
analytical data warehouse?
A. Amazon Redshift
B. Amazon DynamoDB
C. Amazon ElastiCache
D. Amazon Aurora

12. An administrator would like to automate the creation of new AWS accounts for the research and
development department of the organisation where new workloads need to be spun-up promptly
and categorized into groups. How can this be achieved efficiently?
A. Use of AWS CloudFormation would be sufficient
B. Use of AWS Organisations
C. Using the AWS API to programmatically create each account via command line interface
D. AWS Identity Access Management (IAM)

13. An organisation utilizes a software suite, that consists of a multitude of underlying microservices
hosted on the cloud. The application is frequently giving runtime errors. Which service will help
in the troubleshooting process?
A. AWS CloudTrail
B. AWS CloudWatch
C. AWS X-Ray
D. Amazon Elasticsearch Service

14. An administrator would like to efficiently automate the replication and deployment of a specific
software configuration existent on one EC2 instance onto four hundred others. Which AWS
service is BEST suited for this implementation?
A. AWS OpsWorks
B. AWS Beanstalk
C. AWS Launch Configuration
D. AWS Auto-scaling

15. Which of the following is a benefit of running an application across two Availability Zones?
A. Performance is improved over running in a single Availability Zone.
B. It is more secure than running in a single Availability Zone.
C. It significantly reduces the total cost of ownership versus running in a single Availability
Zone.
D. It increases the availability of an application compared to running in a single Availability
Zone.

16. Which of the following service is most useful when a Disaster Recovery method is triggered in
AWS?
 A. Amazon Route 53
B. Amazon SNS
C. Amazon SQS
D. Amazon Inspector

17. Which statement is accurate about AWS Budgets and Cost Explorer?

A. AWS Budgets uses the cost visualizations provided by AWS Cost Explorer to show the
status of preset budgets and to provide forecasts of estimated costs.
B. Both AWS Budgets and AWS Cost Explorer can be used to predict usage and to give
recommended cost-optimization measures.
C. AWS Cost Explorer will lists the costs incurred over a period of time with a further
breakdown by region and linked account.
D. Due to the sensitivity of billing and cost management information with the AWS Cost
Explorer and AWS Budgets services it is not possible to view the information for multiple
accounts.

18. When designing a system you use the principle of design for failure and nothing will fail. Which of
the following services/features of AWS can assist in supporting this design principle. Choose 3
answers from the options given below
A. Availability Zones
B. Regions
C. Elastic Load Balancer
D. Pay as you go

19. Currently your organization has an operational team that takes care of ID management in their
on-premise data center. They now also need to manage users and groups created in AWS. Which
of the following AWS tools would they need to use for performing this management function?
A. AWS Config
B. AWS Cloud Trail
C. AWS Key Management Service (AWS KMS)
D. AWS Identity and Access Management (IAM)

20. You have a devops team in your current organization structure. They are keen to know if there is
any service available in AWS which can be used to manage infrastructure as code. Which of the
following can be met with such a requirement?
A. Using AWS Cloudformation
B. Using AWS Config
C. Using AWS Inspector
 D. Using AWS Trusted Advisor

21. Select TWO statements that describe the main roles of AWS Web Application Firewall (WAF) and
AWS Shield?

A. AWS Shield Standard is inherently available within the AWS WAF service at no extra cost
B. AWS WAF is inherently available within the AWS Shield Standard service at an additional
charge
C. AWS Web Application Firewall (WAF) will provide expanded protection against SYN floods
DNS query floods and UDP reflection attacks at no additional cost
D. AWS Web Application Firewall (WAF) and AWS Shield are fully-managed services
E. AWS WAF is a web application firewall that includes AWS Shield - a service that prevents
distributed denial of service (DDoS) attacks

22. Which of the following is the responsibility of AWS according to the Shared Security Model?
Choose 3 answers from the options given below
A. Managing AWS Identity and Access Management (IAM)
B. Securing edge locations
C. Monitoring physical device security
D. Implementing service organization Control (SOC) standards

23. Your company has just started using the resources on the AWS Cloud. They want to get an idea
on the costs being incurred so far for the resources being used. How can this be achieved.
A. By going to the Amazon EC2 dashboard. Here you can see the costs of the running EC2
resources.
B. By using the AWS Cost Explorer. Here you can see the running and forecast costs.
C. By using the AWS Trusted Advisor dashboard. This dashboard will give you all the costs.
D. By seeing the AWS Cloud Trail logs.

24. By default who from the below roles has complete administrative control over all resources in the
respective AWS account?
A. AWS Support Team
B. AWS Account Owner
C. AWS Security Team
D. AWS Technical Account Manager (TAM)

25. Your design team is planning to design an application that will be hosted on the AWS Cloud. One
of their main non-functional requirements is given below Reduce inter-dependencies so failures
 do not impact other components Which of the following concepts does this requirement relate
to?
A. Integration
B. Decoupling
C. Aggregation
D. Segregation
26. Which of the following can be used to increase the fault tolerance of an application?

A. Deploying resources across multiple edge locations

B. Deploying resources across multiple VPC’s
C. Deploying resources across multiple Availability Zones
D. Deploying resources across multiple AWS Accounts
27. Which of the following are best practices when designing cloud based systems? Choose 2 answers
from the options below
A. Build Tightly-coupled components
B. Build loosely-coupled components
C. Assume everything will fail
D. Use as many services as possible

28. Which statement about the Shared Responsibility Model is accurate?

A. The user is responsible for AWS physical infrastructure when moving data from their on-
premise data center using AWS Snowball
B. The hypervisor and its security is the users’ responsibility
C. Amazon is responsible for running operating system updates, patching of application
software and its maintenance.
D. Compliance with industry bodies and regulatory authorities is the users’ responsibility

29. Which of the following is the amount of storage that can be stored in the Simple Storage service?
A. 1 TB
B. 5 TB
C. 1 PB
D. Virtually unlimited storage

30. Which services allow the customer to retain full administrative privileges of the underlying virtual
infrastructure?
A. Amazon EC2
B. Amazon S3
 C. Amazon Lambda
D. Amazon DynamoDB

31. A website for an international sports governing body would like to serve its content to viewers
from different parts of the world in their vernacular language. Which is the most suitable service
that will allow different language versions of the same website to be served, according to where
in the world the browser is viewing from.
A. Amazon CloudFront
B. Content Delivery Network (CDN)
C. Amazon Lightsail
D. Amazon Route 53

32. You have a mission-critical application which must always be globally available . If this is the case,
which of the below deployment mechanisms would you employ
A. Deployment to multiple edge locations
B. Deployment to multiple Availability Zones
C. Deployment to multiple Data Centers
D. Deployment to multiple Regions

33. Which of the following can be used to protect against DDOS attacks? Choose 2 answers from the
options given below
A. AWS EC2
B. AWS ELB
C. AWS Shield

34. You are working on an e-commerce web application, which is running on an EC2 instance and is
experiencing a bad performance in browsing and searching use cases. When heavy load use-cases
are running at the same time. The application monitors highlight a bottleneck in the web tier.
You decide to re-engineer the application code by decoupling the web tier from the orders heavy
workloads. What AWS service can support the application change?
A. AWS Auto Scaling
B. AWS Elastic Load Balancing
C. Amazon SQS
D. Amazon Kinesis Streams
35. An online streaming company is prohibited from broadcasting its content in certain countries and
regions in the world. Which Amazon Route 53 routing policy would be most suitable in
guaranteeing their compliance?
A. Geoproximity
B. Geolocation
C. Multi-value answer
D. Failover

36. The project team requires an AWS service that provides a filesystem simultaneously mounted
from different instances of EC2. Which AWS service will satisfy this requirement?

A. Amazon EFS
B. Amazon S3
C. Amazon EBS
D. Amazon FSx for Windows File Server