AWS Cloud Practitioner
AWS Cloud Practitioner Questions Comprehensive
Questions and Verified Detailed Solutions (2025)
Which statement best describes Amazon DynamoDB?
-A service that allows customers to run relational databases in the AWS Cloud
-A serverless key-value database service
-A service that customers can use to migrate relational databases, nonrelational
databases, and other types of data stores
-An enterprise-class relational database - Answer-A serverless key-value database service
Which statement describes an IAM policy?
-An authentication process that provides an extra layer of protection for your AWS
account.
-A document that grants or denies permissions to AWS services and resources.
-An identity that you can assume to gain temporary access to permissions.
-The identity that is established when you first create an AWS account. - Answer-A
document that grants or denies permissions to AWS services and resources.
Which of the following descriptions best describes the concept of least privilege?
-Adding an IAM user into at least one IAM group.
-Granting only the permissions that are needed to perform specific job tasks.
-Checking a packet's permissions against an access control list.
,AWS Cloud Practitioner
-Performing a denial of service attack that originates from at least one device. - Answer-
Granting only the permissions that are needed to perform specific job tasks
An employee requires temporary access to create several Amazon S3 buckets. Which
option should be used for this task?
-AWS account root user.
-IAM group.
-IAM role.
-Service control policy (SCP). - Answer-IAM role
Which service helps protect your applications against distributed denial of service
(DDoS) attacks?
-Amazon GuardDuty
-Amazon Inspector
-AWS Artifact
-AWS Shield - Answer-AWS Shield
Which task can AWS Key Management Service (AWS KMS) perform?
-Configure multi-factor authentication (MFA).
-Update the AWS account root user password.
-Create cryptographic keys.
-Assign permissions to users and groups. - Answer-Create cryptographic keys
,AWS Cloud Practitioner
What is the difference between instance stores and EBS (Elastic Block Store) volumes? -
Answer--Instance stores ideal for temporary data not kept long term
-Amazon EBS volumes are ideal for data that requires retention
You want to store data that is infrequently access but must be immediately available
when needed. What S3 do you use? - Answer-S3 Standard IA
Why is AWS more economical than traditional data centers for applications with varying
compute workloads?
-Amazon EC2 costs are billed on a monthly basis.
-Users retain full administrative access to their Amazon EC2 instances.
-Amazon EC2 instances can be launched on demand when needed.
-Users can permanently run enough instances to handle peak workloads. - Answer-
Amazon EC2 instances can be launched on demand when needed.
Which AWS service would simplify the migration of a database to AWS?
-AWS Storage Gateway
-AWS Database Migration Service (AWS DMS)
-Amazon EC2
-Amazon AppStream 2.0 - Answer-AWS Database Migration Service (AWS DMS)
Which AWS offering enables users to find, buy, and immediately start using software
solutions in their AWS environment?
, AWS Cloud Practitioner
-AWS Config
-AWS OpsWorks
-AWS SDK
-AWS Marketplace - Answer-AWS Marketplace
Which AWS networking service enables a company to create a virtual network within
AWS?
-AWS Config
-Amazon Route 53
-AWS Direct Connect
-Amazon Virtual Private Cloud (Amazon VPC) - Answer-Amazon Virtual Private Cloud
(Amazon VPC)
Which of the following is an AWS responsibility under the AWS shared responsibility
model?
-Configuring third-party applications
-Maintaining physical hardware
-Securing application access and data
-Managing guest operating systems - Answer-Maintaining physical hardware
Which component of the AWS global infrastructure does Amazon CloudFront use to
ensure low-latency
delivery?
AWS Cloud Practitioner Questions Comprehensive
Questions and Verified Detailed Solutions (2025)
Which statement best describes Amazon DynamoDB?
-A service that allows customers to run relational databases in the AWS Cloud
-A serverless key-value database service
-A service that customers can use to migrate relational databases, nonrelational
databases, and other types of data stores
-An enterprise-class relational database - Answer-A serverless key-value database service
Which statement describes an IAM policy?
-An authentication process that provides an extra layer of protection for your AWS
account.
-A document that grants or denies permissions to AWS services and resources.
-An identity that you can assume to gain temporary access to permissions.
-The identity that is established when you first create an AWS account. - Answer-A
document that grants or denies permissions to AWS services and resources.
Which of the following descriptions best describes the concept of least privilege?
-Adding an IAM user into at least one IAM group.
-Granting only the permissions that are needed to perform specific job tasks.
-Checking a packet's permissions against an access control list.
,AWS Cloud Practitioner
-Performing a denial of service attack that originates from at least one device. - Answer-
Granting only the permissions that are needed to perform specific job tasks
An employee requires temporary access to create several Amazon S3 buckets. Which
option should be used for this task?
-AWS account root user.
-IAM group.
-IAM role.
-Service control policy (SCP). - Answer-IAM role
Which service helps protect your applications against distributed denial of service
(DDoS) attacks?
-Amazon GuardDuty
-Amazon Inspector
-AWS Artifact
-AWS Shield - Answer-AWS Shield
Which task can AWS Key Management Service (AWS KMS) perform?
-Configure multi-factor authentication (MFA).
-Update the AWS account root user password.
-Create cryptographic keys.
-Assign permissions to users and groups. - Answer-Create cryptographic keys
,AWS Cloud Practitioner
What is the difference between instance stores and EBS (Elastic Block Store) volumes? -
Answer--Instance stores ideal for temporary data not kept long term
-Amazon EBS volumes are ideal for data that requires retention
You want to store data that is infrequently access but must be immediately available
when needed. What S3 do you use? - Answer-S3 Standard IA
Why is AWS more economical than traditional data centers for applications with varying
compute workloads?
-Amazon EC2 costs are billed on a monthly basis.
-Users retain full administrative access to their Amazon EC2 instances.
-Amazon EC2 instances can be launched on demand when needed.
-Users can permanently run enough instances to handle peak workloads. - Answer-
Amazon EC2 instances can be launched on demand when needed.
Which AWS service would simplify the migration of a database to AWS?
-AWS Storage Gateway
-AWS Database Migration Service (AWS DMS)
-Amazon EC2
-Amazon AppStream 2.0 - Answer-AWS Database Migration Service (AWS DMS)
Which AWS offering enables users to find, buy, and immediately start using software
solutions in their AWS environment?
, AWS Cloud Practitioner
-AWS Config
-AWS OpsWorks
-AWS SDK
-AWS Marketplace - Answer-AWS Marketplace
Which AWS networking service enables a company to create a virtual network within
AWS?
-AWS Config
-Amazon Route 53
-AWS Direct Connect
-Amazon Virtual Private Cloud (Amazon VPC) - Answer-Amazon Virtual Private Cloud
(Amazon VPC)
Which of the following is an AWS responsibility under the AWS shared responsibility
model?
-Configuring third-party applications
-Maintaining physical hardware
-Securing application access and data
-Managing guest operating systems - Answer-Maintaining physical hardware
Which component of the AWS global infrastructure does Amazon CloudFront use to
ensure low-latency
delivery?
