AWS CLOUD PRACTITIONER COMPREHENSIVE EXAM 2026
QUESTIONS AND SOLUTIONS GRADED A+
✔✔What is amazon S3 static website hosting? - ✔✔you can host a website within
amazon S3 buckets by putting html code into the bucket
✔✔What is a non-relational or NoSQL database organized by? - ✔✔data is organized
into items and attributes (basically key and value)
✔✔What is Amazon Elasticache? - ✔✔a service that adds layers of caching on top of
databases to help improve read times of common requests
✔✔What two data stores does Amazon Elasticache support? - ✔✔Redis
Memcached
✔✔What is a IAM user? - ✔✔an Identity creates in AWS
- represents the person or app that interacts with AWS services and resources (consists
of name and credentials)
- When creates has no permissions associated with it
✔✔What is a IAM policy? - ✔✔A Document that allows or denies permissions to AWS
services and resources
Enables you to customize users level of access to resources
✔✔What is an IAM group? - ✔✔An IAM group is a collection of IAM Users.
Use groups to specify permissions for a collection of users.
✔✔What is an IAM Role? - ✔✔- an identity you can assume to gain temporary access
to permissions
- before a user, app , or service can assume a role they must be granted permission to
switch to that role
- when someone assumes a role they abandon all previous permissions of old roles and
do to new role
✔✔-What is an AWS Organization? - ✔✔- Use organizations to consolidate and
manage multiple aws accounts in one location
- When you create an organization aws organizations auto creates a root, which is
parent container for all accounts in org
- You can centrally control permissions for the accounts in your org by using Service
control Policies (SCPs)
- These enable you to place restrictions on AWs services, resources, and individual api
actions users and roles can access
,✔✔What is AWS Shield? - ✔✔Provides protection against DDoS
Provides standard and advanced protection
Standard:
- Auto protects at no cost
- Analyzes using techniques to detect malicious traffic in real time and mitigates
automatically
Advanced:
- Paid service that provides detailed attack diagnostics
- Integrates with services like cloudFront , 53, and ELB
- Can integrate AWS shield and AWS WAF by writing rules to mitigate complex DDos
attacks
✔✔What is AWS Key Management Service (AWS KMS)? - ✔✔A managed service that
makes it easy for you to create and control the encryption keys used to encrypt your
data.
✔✔What is AWS WAF? - ✔✔- A web application firewall that lets you monitor network
requests that come into web apps
- it works with cloudFront and Load Balancer
- Similar to NACL but instead uses access control list (ACL)
- you can block specific IP addresses from your service
✔✔What is Amazon CloudWatch? - ✔✔enables monitoring and managing metrics and
configure alarm actions based on data from metrics
- also uses metrics to create graphs automatically and show how performance has
changed
✔✔What is AWS CloudTrail? - ✔✔A web service that records AWS Application Program
Interface (API) calls for your account and delivers log files to you.
✔✔What is AWS Consolidated Billing? - ✔✔Enables single bill for all AWS accounts in
your organization
- easily tracked and combines costs of all linked accounts in your org
- Gives ability to share bulk discount pricing, savings plans, reserved instances across
accounts in organization.
(One account may not qualify (not enough monthly usage) for discount pricing, but
when accounts combined it may result it benefit)
✔✔What are the AWS support plans? - ✔✔Basic
Developer
Business
Enterprise
, ✔✔What is the basic AWS support plan? - ✔✔Free to all aws customers
Access to whitepapers, documentation , and support communities
Can also contact AWS for billing questions for billing questions and service limit
increases
Access to limited AWS trusted advisor checks
Can use AWS personal health dashboard (provides alerts and remediation guidance
when AWS is experiencing events that may affect you)
✔✔What is the AWS developer support plan? - ✔✔Access to best practice guidance
Client side diagnostic tools
Building - block architect support (guidance how to use AWs offerings, features, and
services together
✔✔What is the AWS business support plan? - ✔✔Use case guidance to identify AWS
offerings, features, and services that best support specific needs
Aws trusted advisor checks
Limited support for 3rd party software, such as common operating systems and app
stack components
✔✔What is the enterprise support plan? - ✔✔All Features in previous support plans
AND
App architecture guidance which is consultative relationship to support your company's
specific use cases and apps
Infrastructure event management:
- Short term engagement with AWS support that helps your company gain a better
understanding of use cases
- Provides your company with architectural and scaling guidance
- Technical account manager
✔✔What is a AWS Technical Account Manager? (TAM) - ✔✔If your company has
enterprise support the TAM is primary point of contact at AWS
Provide guidance, architectural reviews, & ongoing communication with company as
you plan, deploy, and optimize apps
Provides expertise across full range of AWS services
Help design solutions that efficiently use multiple services together as integrated
approach
QUESTIONS AND SOLUTIONS GRADED A+
✔✔What is amazon S3 static website hosting? - ✔✔you can host a website within
amazon S3 buckets by putting html code into the bucket
✔✔What is a non-relational or NoSQL database organized by? - ✔✔data is organized
into items and attributes (basically key and value)
✔✔What is Amazon Elasticache? - ✔✔a service that adds layers of caching on top of
databases to help improve read times of common requests
✔✔What two data stores does Amazon Elasticache support? - ✔✔Redis
Memcached
✔✔What is a IAM user? - ✔✔an Identity creates in AWS
- represents the person or app that interacts with AWS services and resources (consists
of name and credentials)
- When creates has no permissions associated with it
✔✔What is a IAM policy? - ✔✔A Document that allows or denies permissions to AWS
services and resources
Enables you to customize users level of access to resources
✔✔What is an IAM group? - ✔✔An IAM group is a collection of IAM Users.
Use groups to specify permissions for a collection of users.
✔✔What is an IAM Role? - ✔✔- an identity you can assume to gain temporary access
to permissions
- before a user, app , or service can assume a role they must be granted permission to
switch to that role
- when someone assumes a role they abandon all previous permissions of old roles and
do to new role
✔✔-What is an AWS Organization? - ✔✔- Use organizations to consolidate and
manage multiple aws accounts in one location
- When you create an organization aws organizations auto creates a root, which is
parent container for all accounts in org
- You can centrally control permissions for the accounts in your org by using Service
control Policies (SCPs)
- These enable you to place restrictions on AWs services, resources, and individual api
actions users and roles can access
,✔✔What is AWS Shield? - ✔✔Provides protection against DDoS
Provides standard and advanced protection
Standard:
- Auto protects at no cost
- Analyzes using techniques to detect malicious traffic in real time and mitigates
automatically
Advanced:
- Paid service that provides detailed attack diagnostics
- Integrates with services like cloudFront , 53, and ELB
- Can integrate AWS shield and AWS WAF by writing rules to mitigate complex DDos
attacks
✔✔What is AWS Key Management Service (AWS KMS)? - ✔✔A managed service that
makes it easy for you to create and control the encryption keys used to encrypt your
data.
✔✔What is AWS WAF? - ✔✔- A web application firewall that lets you monitor network
requests that come into web apps
- it works with cloudFront and Load Balancer
- Similar to NACL but instead uses access control list (ACL)
- you can block specific IP addresses from your service
✔✔What is Amazon CloudWatch? - ✔✔enables monitoring and managing metrics and
configure alarm actions based on data from metrics
- also uses metrics to create graphs automatically and show how performance has
changed
✔✔What is AWS CloudTrail? - ✔✔A web service that records AWS Application Program
Interface (API) calls for your account and delivers log files to you.
✔✔What is AWS Consolidated Billing? - ✔✔Enables single bill for all AWS accounts in
your organization
- easily tracked and combines costs of all linked accounts in your org
- Gives ability to share bulk discount pricing, savings plans, reserved instances across
accounts in organization.
(One account may not qualify (not enough monthly usage) for discount pricing, but
when accounts combined it may result it benefit)
✔✔What are the AWS support plans? - ✔✔Basic
Developer
Business
Enterprise
, ✔✔What is the basic AWS support plan? - ✔✔Free to all aws customers
Access to whitepapers, documentation , and support communities
Can also contact AWS for billing questions for billing questions and service limit
increases
Access to limited AWS trusted advisor checks
Can use AWS personal health dashboard (provides alerts and remediation guidance
when AWS is experiencing events that may affect you)
✔✔What is the AWS developer support plan? - ✔✔Access to best practice guidance
Client side diagnostic tools
Building - block architect support (guidance how to use AWs offerings, features, and
services together
✔✔What is the AWS business support plan? - ✔✔Use case guidance to identify AWS
offerings, features, and services that best support specific needs
Aws trusted advisor checks
Limited support for 3rd party software, such as common operating systems and app
stack components
✔✔What is the enterprise support plan? - ✔✔All Features in previous support plans
AND
App architecture guidance which is consultative relationship to support your company's
specific use cases and apps
Infrastructure event management:
- Short term engagement with AWS support that helps your company gain a better
understanding of use cases
- Provides your company with architectural and scaling guidance
- Technical account manager
✔✔What is a AWS Technical Account Manager? (TAM) - ✔✔If your company has
enterprise support the TAM is primary point of contact at AWS
Provide guidance, architectural reviews, & ongoing communication with company as
you plan, deploy, and optimize apps
Provides expertise across full range of AWS services
Help design solutions that efficiently use multiple services together as integrated
approach
