AWS Certified Cloud Practitioner practice questions

Question 1

An organization is evaluating cloud guidance, and a board member asks the cloud team for a plain-language definition of an EC2 instance. According to AWS, which option best matches?

Accepted Answer

An EC2 instance is a virtual server in the AWS Cloud.

Answer

An EC2 instance is a billing line item with no executable content.

Answer

An EC2 instance is a physical desktop computer in the customer's office.

Answer

An EC2 instance is a database engine that cannot run any general workload.

Question 2

An enterprise architect is evaluating why AWS recommends a multi-account environment as a best practice. According to AWS Organizations, which option best matches the rationale?

Accepted Answer

AWS accounts are natural boundaries for permission, security, costs, and workloads.

Answer

AWS accounts are unrelated to security boundaries and are only meaningful for marketing analytics.

Answer

AWS accounts are arbitrary billing constructs with no boundary semantics at all.

Answer

AWS accounts are physical servers and customers must buy more hardware to add accounts.

Question 3

A government-sector buyer is evaluating whether AWS is a fit for their organization and is asking which customer segments AWS is documented to serve. According to the AWS overview, which option best matches that documentation?

Accepted Answer

AWS serves enterprises, start-ups, small and medium-sized businesses, and customers in the public sector.

Answer

Only consumer households, with no enterprise or public sector use cases and contradicts the AWS documentation that the executive should reference.

Answer

Only single-developer hobby projects and no commercial customers and is not the framing AWS uses in its published overview material.

Answer

Only U.S. military customers and no other segments and is not the answer AWS documents for this scenario in its guidance.

Question 4

An enterprise CFO is evaluating what discount and pricing benefits consolidated billing unlocks across all accounts in the organization. According to AWS, which option best matches?

Accepted Answer

Combined usage across all accounts in the organization shares the volume pricing discounts, Reserved Instance discounts, and Savings Plans.

Answer

Combined usage across accounts is impossible because AWS does not aggregate usage between accounts and is inconsistent with how AWS documents the service in its overview.

Answer

Combined usage across accounts removes all pricing discounts and forces On-Demand-only pricing and is not aligned with the AWS documentation that the team should rely on.

Answer

Combined usage across accounts physically merges all customer servers into one and contradicts the AWS documentation that the executive should reference.

Question 5

An operations leader is evaluating which AWS service monitors AWS resources and the applications running on AWS in real time, and offers system-wide observability. According to AWS, which service best matches?

Accepted Answer

Amazon CloudWatch, which monitors AWS resources and the applications you run on AWS in real time, and offers many tools to give you system-wide observability of your application performance, operational health, and resource utilization.

Answer

Amazon SQS, which is a queue service rather than a monitoring service and is not how AWS describes this concept in its documentation The AWS documentation makes this distinction clear for foundational-level audiences.

Answer

Amazon RDS, which is a managed relational database service rather than a monitoring service and does not match the published AWS documentation on this topic The AWS documentation makes this distinction clear for foundational-level audiences.

Answer

Amazon Route 53, which is a DNS service rather than a monitoring service and is inconsistent with how AWS documents the service in its overview The AWS documentation makes this distinction clear for foundational-level audiences.

Question 6

An executive is evaluating what kinds of inputs GuardDuty uses to identify suspicious or potentially malicious activity. According to AWS, which option best matches?

Accepted Answer

GuardDuty uses threat intelligence feeds, such as lists of malicious IP addresses and domains, file hashes, and machine learning models to identify suspicious and potentially malicious activity.

Answer

GuardDuty uses only paper forms submitted by customers each month and is inconsistent with how AWS documents the service in its overview The AWS documentation makes this distinction clear for foundational-level audiences.

Answer

GuardDuty uses only the AWS account root user password as its input and is not aligned with the AWS documentation that the team should rely on The AWS documentation makes this distinction clear for foundational-level audiences.

Answer

GuardDuty uses only customer billing invoices as its sole input and contradicts the AWS documentation that the executive should reference The AWS documentation makes this distinction clear for foundational-level audiences.

Question 7

An executive team is evaluating why their critical production application should span more than one Availability Zone. According to the AWS overview, what business value does using multiple Availability Zones provide?

Accepted Answer

Availability Zones offer the ability to operate production applications and databases that are more highly available, fault tolerant, and scalable than would be possible from a single data center.

Answer

Availability Zones are required to physically own AWS hardware before any service activates and contradicts the AWS documentation that the executive should reference.

Answer

Availability Zones provide nothing beyond a single data center and are equivalent in resilience and is not the framing AWS uses in its published overview material.

Answer

Availability Zones eliminate the need for any application architecture work whatsoever and is not the answer AWS documents for this scenario in its guidance The AWS documentation makes this distinction clear for foundational-level audiences.

Question 8

A finance operations lead is evaluating how Compute Savings Plans apply across EC2 usage attributes such as instance family, size, OS, tenancy, or AWS Region. According to AWS, which option best matches?

Accepted Answer

Compute Savings Plans provide lower prices on Amazon EC2 instance usage regardless of instance family, instance size, OS, tenancy, or AWS Region.

Answer

Compute Savings Plans only apply to a single instance family inside a single Region and is inconsistent with how AWS documents the service in its overview.

Answer

Compute Savings Plans only apply when the customer mails AWS a paper purchase order each month and is not aligned with the AWS documentation that the team should rely on.

Answer

Compute Savings Plans cannot be applied to EC2 usage under any circumstances and contradicts the AWS documentation that the executive should reference.

Question 9

A CIO is evaluating which two AWS services below should be paired when the goal is both on-demand virtual server capacity and serverless code execution without server management. Which pair from the AWS documentation should the CIO highlight?

Accepted Answer

Amazon Elastic Compute Cloud (Amazon EC2), which provides on-demand, scalable computing capacity in the Amazon Web Services (AWS) Cloud.

Accepted Answer

AWS Lambda, a compute service that runs code without the need to manage servers.

Answer

Amazon Macie, which is a data security service rather than a compute service and is not how AWS describes this concept in its documentation.

Answer

Amazon Route 53, which is a DNS service rather than a compute service and does not match the published AWS documentation on this topic.

Question 10

A CISO is evaluating how to give human users access to AWS accounts in a way that issues temporary credentials. According to AWS IAM best practices, which mechanism best matches the recommendation?

Accepted Answer

Use an identity provider for your human users to provide federated access to AWS accounts by assuming roles, which provide temporary credentials.

Answer

Disable all identity-based access controls and rely on physical access to facilities only and is not the answer AWS documents for this scenario in its guidance.

Answer

Issue every employee a permanent IAM user with an access key embedded in the source code and is not consistent with the AWS documentation the team should cite.

Answer

Email the AWS account root user password to every employee who needs access and is not how AWS describes this concept in its documentation.

Question 11

A company is evaluating how to systematically improve its existing AWS workloads and an executive asks how the Well-Architected Framework helps the team gauge progress over time. Which statement best captures the framework's value to ongoing improvement?

Accepted Answer

It provides a way for customers to consistently measure their architectures against best practices and identify areas for improvement.

Answer

It eliminates the need for any technical review by automatically remediating all architectural defects and is inconsistent with how AWS documents the service in its overview.

Answer

It locks every architecture into a frozen design that cannot be revisited once approved by AWS and is not aligned with the AWS documentation that the team should rely on.

Answer

It is only useful for greenfield projects and offers nothing to teams running existing workloads and contradicts the AWS documentation that the executive should reference.

Question 12

A finance manager is evaluating what complexity range AWS Budgets supports for cost and usage tracking. According to AWS, which option best matches?

Accepted Answer

You can use AWS Budgets to enable simple-to-complex cost and usage tracking.

Answer

You can use AWS Budgets only for the simplest fixed monthly budget and nothing more.

Answer

You can use AWS Budgets only for the most complex multi-dimensional cost tracking and nothing simpler.

Answer

You cannot use AWS Budgets for any cost or usage tracking at all.

Question 13

A product manager is evaluating what messaging patterns SNS supports between systems and people. According to AWS, which option best matches?

Accepted Answer

SNS supports both Application-to-Application (A2A) and Application-to-Person (A2P) messaging.

Answer

SNS supports only physical postal mail between people and is not how AWS describes this concept in its documentation.

Answer

SNS supports only Application-to-Application messaging and never any person-facing channel.

Answer

SNS supports only person-to-person messaging and never any application-to-application channel.

Question 14

A founder is evaluating what credentials are used to sign in as the AWS account root user. According to AWS, which option best matches?

Accepted Answer

The email address and password that you used to create your AWS account are the credentials you use to sign in as your root user.

Answer

Only an IAM user's access key is used to sign in as the root user and contradicts the AWS documentation that the executive should reference.

Answer

Only a hardware token generated by AWS support is used to sign in as the root user and is not the framing AWS uses in its published overview material.

Answer

A new password is automatically created every five minutes and emailed to the customer and is not the answer AWS documents for this scenario in its guidance.

Question 15

An operations leader is evaluating, on behalf of a board member, to define an Availability Zone in plain language. According to the AWS documentation, which option best matches the published definition?

Accepted Answer

Availability Zones consist of one or more discrete data centers, each with redundant power, networking, and connectivity, housed in separate facilities.

Answer

Availability Zones are a customer's own desktop computers running a hypervisor at home and contradicts the AWS documentation that the executive should reference.

Answer

Availability Zones are a single shared rack of servers inside one data center for all AWS customers and is not the framing AWS uses in its published overview material.

Answer

Availability Zones are a synonym for AWS Regions and have no separate meaning and is not the answer AWS documents for this scenario in its guidance.

AWS Certified Cloud Practitioner

Sample questions

Sources

Similar exams