AWS CLOUD PRACTITIONER 2026 STUDY GUIDE
QUESTIONS AND SOLUTIONS GRADED A+
✔✔What is Amazon CloudWatch? - ✔✔enables monitoring and managing metrics and
configure alarm actions based on data from metrics
- also uses metrics to create graphs automatically and show how performance has
changed
✔✔What is AWS CloudTrail? - ✔✔A web service that records AWS Application Program
Interface (API) calls for your account and delivers log files to you.
✔✔What is AWS Consolidated Billing? - ✔✔Enables single bill for all AWS accounts in
your organization
- easily tracked and combines costs of all linked accounts in your org
- Gives ability to share bulk discount pricing, savings plans, reserved instances across
accounts in organization.
(One account may not qualify (not enough monthly usage) for discount pricing, but
when accounts combined it may result it benefit)
✔✔What are the AWS support plans? - ✔✔Basic
Developer
Business
Enterprise
✔✔What is the basic AWS support plan? - ✔✔Free to all aws customers
Access to whitepapers, documentation , and support communities
Can also contact AWS for billing questions for billing questions and service limit
increases
Access to limited AWS trusted advisor checks
Can use AWS personal health dashboard (provides alerts and remediation guidance
when AWS is experiencing events that may affect you)
✔✔What is the AWS developer support plan? - ✔✔Access to best practice guidance
Client side diagnostic tools
Building - block architect support (guidance how to use AWs offerings, features, and
services together
✔✔What is the AWS business support plan? - ✔✔Use case guidance to identify AWS
offerings, features, and services that best support specific needs
,Aws trusted advisor checks
Limited support for 3rd party software, such as common operating systems and app
stack components
✔✔What is the enterprise support plan? - ✔✔All Features in previous support plans
AND
App architecture guidance which is consultative relationship to support your company's
specific use cases and apps
Infrastructure event management:
- Short term engagement with AWS support that helps your company gain a better
understanding of use cases
- Provides your company with architectural and scaling guidance
- Technical account manager
✔✔What is a AWS Technical Account Manager? (TAM) - ✔✔If your company has
enterprise support the TAM is primary point of contact at AWS
Provide guidance, architectural reviews, & ongoing communication with company as
you plan, deploy, and optimize apps
Provides expertise across full range of AWS services
Help design solutions that efficiently use multiple services together as integrated
approach
Ex.
Interested in developing an app that uses several aws services together
TAM provide insights how to use services together
They achieve this while aligning with specific needs your company wants to address
✔✔What is a subnet? - ✔✔A range of IP Addresses in a VPC
✔✔What is a AWS virtual Private Cloud (VPC) - ✔✔A virtual network dedicated to a
customer's AWS account
✔✔What is a network access control list? - ✔✔Virtual firewall that controls inbound and
outbound traffic at subnet level
- Each AWS account includes default network ACL
When configuring VPC you can use default or create new ACL
- By default allows all inbound and outbound traffic but you can modify using your own
rules
- For Custom ACL all traffic is denied until you specify what to allow
- Also all ACLs have explicit deny rule, if a packet does not match any of the other rules
on the list it is denied
, ✔✔What type of packet filtering do Network ACLs perform? - ✔✔Stateless
✔✔What is stateless packet filtering? - ✔✔Network ACLs perform Stateless packet
filtering
They remember nothing and check packets that cross inbound and outbound
When a packet response for that request comes back to the subnet the ACL does not
remember the previous request, it then checks the package gain against lists to allow or
deny
After packet enters it must have permissions evaluated again for resources within the
subnet like EC2 instances
✔✔What is a security group? - ✔✔Firewall that controls inbound and outbound traffic for
EC2 instance
Default denies all inbound and outbound traffic . create custom rules to allow or deny
If you have multiple EC2 instances within subnet you can associate them with the same
security group or use different groups for each instance
✔✔What is type of filtering do security groups perform? - ✔✔Stateful packet filtering
✔✔What is stateful packet filtering? - ✔✔Security groups perform Stateful packet
filtering. They remember previous decisions made for incoming packets
Both network ACLs and security groups allow custom rules for traffic to VPC
✔✔What are the options for migrating a customer to AWS - ✔✔Rehost
Replatform
Refactor
Retire
Retain
Repurchase
✔✔Describe the Rehost option of migration - ✔✔Lift and shift an app to the cloud
Going from on prem datacenter to cloud (functional recreation)
Automating with tools such as AWS VM import/export
Easier to optimize and re-architect apps after migration
✔✔Describe the replatform option of migration - ✔✔Similar to rehosting in that core
architecture of app is retained
QUESTIONS AND SOLUTIONS GRADED A+
✔✔What is Amazon CloudWatch? - ✔✔enables monitoring and managing metrics and
configure alarm actions based on data from metrics
- also uses metrics to create graphs automatically and show how performance has
changed
✔✔What is AWS CloudTrail? - ✔✔A web service that records AWS Application Program
Interface (API) calls for your account and delivers log files to you.
✔✔What is AWS Consolidated Billing? - ✔✔Enables single bill for all AWS accounts in
your organization
- easily tracked and combines costs of all linked accounts in your org
- Gives ability to share bulk discount pricing, savings plans, reserved instances across
accounts in organization.
(One account may not qualify (not enough monthly usage) for discount pricing, but
when accounts combined it may result it benefit)
✔✔What are the AWS support plans? - ✔✔Basic
Developer
Business
Enterprise
✔✔What is the basic AWS support plan? - ✔✔Free to all aws customers
Access to whitepapers, documentation , and support communities
Can also contact AWS for billing questions for billing questions and service limit
increases
Access to limited AWS trusted advisor checks
Can use AWS personal health dashboard (provides alerts and remediation guidance
when AWS is experiencing events that may affect you)
✔✔What is the AWS developer support plan? - ✔✔Access to best practice guidance
Client side diagnostic tools
Building - block architect support (guidance how to use AWs offerings, features, and
services together
✔✔What is the AWS business support plan? - ✔✔Use case guidance to identify AWS
offerings, features, and services that best support specific needs
,Aws trusted advisor checks
Limited support for 3rd party software, such as common operating systems and app
stack components
✔✔What is the enterprise support plan? - ✔✔All Features in previous support plans
AND
App architecture guidance which is consultative relationship to support your company's
specific use cases and apps
Infrastructure event management:
- Short term engagement with AWS support that helps your company gain a better
understanding of use cases
- Provides your company with architectural and scaling guidance
- Technical account manager
✔✔What is a AWS Technical Account Manager? (TAM) - ✔✔If your company has
enterprise support the TAM is primary point of contact at AWS
Provide guidance, architectural reviews, & ongoing communication with company as
you plan, deploy, and optimize apps
Provides expertise across full range of AWS services
Help design solutions that efficiently use multiple services together as integrated
approach
Ex.
Interested in developing an app that uses several aws services together
TAM provide insights how to use services together
They achieve this while aligning with specific needs your company wants to address
✔✔What is a subnet? - ✔✔A range of IP Addresses in a VPC
✔✔What is a AWS virtual Private Cloud (VPC) - ✔✔A virtual network dedicated to a
customer's AWS account
✔✔What is a network access control list? - ✔✔Virtual firewall that controls inbound and
outbound traffic at subnet level
- Each AWS account includes default network ACL
When configuring VPC you can use default or create new ACL
- By default allows all inbound and outbound traffic but you can modify using your own
rules
- For Custom ACL all traffic is denied until you specify what to allow
- Also all ACLs have explicit deny rule, if a packet does not match any of the other rules
on the list it is denied
, ✔✔What type of packet filtering do Network ACLs perform? - ✔✔Stateless
✔✔What is stateless packet filtering? - ✔✔Network ACLs perform Stateless packet
filtering
They remember nothing and check packets that cross inbound and outbound
When a packet response for that request comes back to the subnet the ACL does not
remember the previous request, it then checks the package gain against lists to allow or
deny
After packet enters it must have permissions evaluated again for resources within the
subnet like EC2 instances
✔✔What is a security group? - ✔✔Firewall that controls inbound and outbound traffic for
EC2 instance
Default denies all inbound and outbound traffic . create custom rules to allow or deny
If you have multiple EC2 instances within subnet you can associate them with the same
security group or use different groups for each instance
✔✔What is type of filtering do security groups perform? - ✔✔Stateful packet filtering
✔✔What is stateful packet filtering? - ✔✔Security groups perform Stateful packet
filtering. They remember previous decisions made for incoming packets
Both network ACLs and security groups allow custom rules for traffic to VPC
✔✔What are the options for migrating a customer to AWS - ✔✔Rehost
Replatform
Refactor
Retire
Retain
Repurchase
✔✔Describe the Rehost option of migration - ✔✔Lift and shift an app to the cloud
Going from on prem datacenter to cloud (functional recreation)
Automating with tools such as AWS VM import/export
Easier to optimize and re-architect apps after migration
✔✔Describe the replatform option of migration - ✔✔Similar to rehosting in that core
architecture of app is retained
