AWS CLOUD CERTIFICATION EXAM
COMPREHENSIVE STUDY GUIDE 2026 FULL
ANSWERS VERIFIED
◉ Which AWS service does AWS Snowball Edge natively support?
EC2
DMS
SMS
Trusted Advisor. Answer: EC2 (EC2 hosted on Snowball Edge)
◉ Which of the following best describes an AZ in the cloud?
A completely isolated geographical location
One or more physical data centers
A subnet for deploying resources into
One or more edge locations based around the world. Answer: One or
more physical data centers
◉ Which AWS service can act as a hybrid storage solution to connect
on-prem workloads with the cloud?
Direct Connect
Storage Gateway
Connect
,Backup. Answer: Storage Gateway
◉ What are the benefits of using reserved instances? (Select TWO)
Reserve capacity
Reduced cost
More flexibility
Uses dedicated hardware
High availability. Answer: Reserve capacity
Reduced cost
◉ A company has a website that delivers static content from an S3
bucket to users around the world. Which service will deliver the
content w/ low latency?
Global Accelerator
Elastic Beanstalk
CloudFront
Lambda. Answer: CloudFront (content delivery network that caches
content globally)
◉ Are there any AWS services or features that will identify and
search for externally shared AWS resources?
Fargate
OpenSearch service (ElasticSearch Service)
,Control Tower
IAM Access Analyzer. Answer: IAM access analyzer (identify
resources in your organization and accounts)
◉ Which AWS service or feature can be used to restrict the
individual API actions that users and roles in each member account
can access?
Macie
Shield
IAM
Organizations. Answer: Organizations (SPCs that manage
permissions for all accounts)
◉ What AWS service decouples application components so that they
can run independently?
Glue
Simple Workflow Service (SWF)
Simple Notification Service (SNS)
Simple Queue Service (SQS). Answer: SQS (fully managed message
queuing service used to decouple microservices, etc.)
◉ An IT company has deployed its infrastructure on the cloud. There
must be a DB that supports reads with a latency of under a
, millisecond for critical apps. Which service will meet this
requirement?
ElastiCache
Glue
RDS
EMR. Answer: ElastiCache (blazing fast, in-memory data store
providing sub-millisecond latency - built on Redis or Memcached)
◉ Which AWS services are associated with Edge locations?
CloudFront
Direct Connect
Shield
EBS
Config. Answer: CloudFront
Shield (protects against DDoS and is available globally on
CloudFront edge locations)
◉ How can a user block a suspicious IP address from connecting to
an EC2 instance?
Block the IP on the inbound rule of a network ACL.
Block the IP on the outbound rule of a security group.
Block the IP on the inbound rule of a security group and network
ACL.
COMPREHENSIVE STUDY GUIDE 2026 FULL
ANSWERS VERIFIED
◉ Which AWS service does AWS Snowball Edge natively support?
EC2
DMS
SMS
Trusted Advisor. Answer: EC2 (EC2 hosted on Snowball Edge)
◉ Which of the following best describes an AZ in the cloud?
A completely isolated geographical location
One or more physical data centers
A subnet for deploying resources into
One or more edge locations based around the world. Answer: One or
more physical data centers
◉ Which AWS service can act as a hybrid storage solution to connect
on-prem workloads with the cloud?
Direct Connect
Storage Gateway
Connect
,Backup. Answer: Storage Gateway
◉ What are the benefits of using reserved instances? (Select TWO)
Reserve capacity
Reduced cost
More flexibility
Uses dedicated hardware
High availability. Answer: Reserve capacity
Reduced cost
◉ A company has a website that delivers static content from an S3
bucket to users around the world. Which service will deliver the
content w/ low latency?
Global Accelerator
Elastic Beanstalk
CloudFront
Lambda. Answer: CloudFront (content delivery network that caches
content globally)
◉ Are there any AWS services or features that will identify and
search for externally shared AWS resources?
Fargate
OpenSearch service (ElasticSearch Service)
,Control Tower
IAM Access Analyzer. Answer: IAM access analyzer (identify
resources in your organization and accounts)
◉ Which AWS service or feature can be used to restrict the
individual API actions that users and roles in each member account
can access?
Macie
Shield
IAM
Organizations. Answer: Organizations (SPCs that manage
permissions for all accounts)
◉ What AWS service decouples application components so that they
can run independently?
Glue
Simple Workflow Service (SWF)
Simple Notification Service (SNS)
Simple Queue Service (SQS). Answer: SQS (fully managed message
queuing service used to decouple microservices, etc.)
◉ An IT company has deployed its infrastructure on the cloud. There
must be a DB that supports reads with a latency of under a
, millisecond for critical apps. Which service will meet this
requirement?
ElastiCache
Glue
RDS
EMR. Answer: ElastiCache (blazing fast, in-memory data store
providing sub-millisecond latency - built on Redis or Memcached)
◉ Which AWS services are associated with Edge locations?
CloudFront
Direct Connect
Shield
EBS
Config. Answer: CloudFront
Shield (protects against DDoS and is available globally on
CloudFront edge locations)
◉ How can a user block a suspicious IP address from connecting to
an EC2 instance?
Block the IP on the inbound rule of a network ACL.
Block the IP on the outbound rule of a security group.
Block the IP on the inbound rule of a security group and network
ACL.
