AWS Cloud Practitioner EXAM 2026-2027 LATEST
UPDATED VERSION QUESTIONS AND ANSWERS
Which AWS support plan provides email only support by Cloud Support Associates?
Business
Developer
Enterprise
Basic - answer>>Business
Assuming you have configured them correctly, which AWS services can scale automatically without
intervention? (Select TWO.)
S3
RDS
EBS
DynamoDB
EC2 - answer>>S3
DynamoDB
When designing a VPC, what is the purpose of an internet gateway?
Enables Internet communications for instances in public subnets.
It's a bastion host for inbound management connections.
Provides Internet access for EC2 instances in private subnets.
It's used for making VPN connections to a VPC. - answer>>Enables Internet communications for
instances in public subnets
What is the name of the AWS managed Docker registry service used by the Amazon Elastic Container
Service (ECS)?
Elastic Container Registry
,Docker Image Repository
ECS Container Registry
Docker Container Registry - answer>>Elastic Container Registry
A company wants to utilize a pay as you go cloud model for all of their applications without CAPEX costs
and which is highly elastic. Which cloud delivery model will suit them best?
On-prem
Hybrid
Private
Public - answer>>Public
Which AWS security service provides a firewall at the subnet level within a VPC?
Network Access Control List
Bucket Policy
IAM Policy
Security Group - answer>>NAC list (firewall associated with subnet within your VPC, filters network
traffic)
A Cloud Practitioner needs to rapidly deploy a popular IT solution and start using it immediately.
What should the Cloud Practitioner use?
Elastic Beanstalk
CloudFront
Well-Architected Framework docs
Quick Start ref deployments - answer>>Quick Start ref deployments
With which service can a developer upload code using a ZIP or WAR file and have the service handle the
end-to-end deployment of the resources?
CodeDeploy
Elastic Beanstalk
,EC2
CodeCommit - answer>>Elastic Beanstalk
You are evaluating AWS services that can assist with creating scalable application environments. Which
of the statements below best describes the Elastic Load Balancer service?
A network service that provides an alternative to using the Internet to connect customers' on-premise
sites to AWS.
Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2
instances, containers, and IP addresses.
Helps you ensure that you have the correct number of Amazon EC2 instances available to handle the
load for your application.
A highly available and scalable Domain Name System (DNS) service. - answer>>Automatically distributes
incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP
addresses
Which AWS service makes it easy to coordinate the components of distributed applications as a series
of steps in a visual workflow?
SWF
Step Functions
SNS
SES - answer>>Step Functions
Which AWS security tool uses an agent installed in EC2 instances and assesses applications for
vulnerabilities and deviations from best practices?
Trusted Advisor
TCO Calculator
Personal Health Dashboard
Inspector - answer>>Inspector
According to the AWS Well-Architected Framework, what change management steps should be taken to
achieve reliability in the AWS Cloud? (Select TWO.)
, Use AWS Certificate Manager to create a catalog of approved services.
Use AWS CloudTrail to record AWS API calls into an auditable log file.
Use service limits to prevent users from creating or making changes to AWS resources.
Use AWS Config to generate an inventory of AWS resources.
Use Amazon GuardDuty to record API activity to an S3 bucket. - answer>>Use AWS CloudTrail to record
AWS API calls into an auditable log file.
Use AWS Config to generate an inventory of AWS resources.
Which of the authentication options below can be used to authenticate using AWS APIs? (Select TWO)
Key Pairs
Access Keys
Server Passwords
Server certificates
Security groups - answer>>Access Keys
Server certificates
Which of the following about AWS's pay-as-you-go pricing model is correct?
It results in reduced capital expenditures
It requires payment up front
It is relevant only for EC2, S3, and DynamoDB
It reduces operational expenditures - answer>>It results in reduced capital expenditures
Your organization has offices around the world and some employees travel between offices. How
should their accounts be setup?
IAM is a global service, just create the users in one place.
Create a separate account in IAM within each region in which they will travel.
Enable MFA for the accounts.
Set the user account as a "global" account when created. - answer>>IAM is a global service, just create
the users in one place
UPDATED VERSION QUESTIONS AND ANSWERS
Which AWS support plan provides email only support by Cloud Support Associates?
Business
Developer
Enterprise
Basic - answer>>Business
Assuming you have configured them correctly, which AWS services can scale automatically without
intervention? (Select TWO.)
S3
RDS
EBS
DynamoDB
EC2 - answer>>S3
DynamoDB
When designing a VPC, what is the purpose of an internet gateway?
Enables Internet communications for instances in public subnets.
It's a bastion host for inbound management connections.
Provides Internet access for EC2 instances in private subnets.
It's used for making VPN connections to a VPC. - answer>>Enables Internet communications for
instances in public subnets
What is the name of the AWS managed Docker registry service used by the Amazon Elastic Container
Service (ECS)?
Elastic Container Registry
,Docker Image Repository
ECS Container Registry
Docker Container Registry - answer>>Elastic Container Registry
A company wants to utilize a pay as you go cloud model for all of their applications without CAPEX costs
and which is highly elastic. Which cloud delivery model will suit them best?
On-prem
Hybrid
Private
Public - answer>>Public
Which AWS security service provides a firewall at the subnet level within a VPC?
Network Access Control List
Bucket Policy
IAM Policy
Security Group - answer>>NAC list (firewall associated with subnet within your VPC, filters network
traffic)
A Cloud Practitioner needs to rapidly deploy a popular IT solution and start using it immediately.
What should the Cloud Practitioner use?
Elastic Beanstalk
CloudFront
Well-Architected Framework docs
Quick Start ref deployments - answer>>Quick Start ref deployments
With which service can a developer upload code using a ZIP or WAR file and have the service handle the
end-to-end deployment of the resources?
CodeDeploy
Elastic Beanstalk
,EC2
CodeCommit - answer>>Elastic Beanstalk
You are evaluating AWS services that can assist with creating scalable application environments. Which
of the statements below best describes the Elastic Load Balancer service?
A network service that provides an alternative to using the Internet to connect customers' on-premise
sites to AWS.
Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2
instances, containers, and IP addresses.
Helps you ensure that you have the correct number of Amazon EC2 instances available to handle the
load for your application.
A highly available and scalable Domain Name System (DNS) service. - answer>>Automatically distributes
incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP
addresses
Which AWS service makes it easy to coordinate the components of distributed applications as a series
of steps in a visual workflow?
SWF
Step Functions
SNS
SES - answer>>Step Functions
Which AWS security tool uses an agent installed in EC2 instances and assesses applications for
vulnerabilities and deviations from best practices?
Trusted Advisor
TCO Calculator
Personal Health Dashboard
Inspector - answer>>Inspector
According to the AWS Well-Architected Framework, what change management steps should be taken to
achieve reliability in the AWS Cloud? (Select TWO.)
, Use AWS Certificate Manager to create a catalog of approved services.
Use AWS CloudTrail to record AWS API calls into an auditable log file.
Use service limits to prevent users from creating or making changes to AWS resources.
Use AWS Config to generate an inventory of AWS resources.
Use Amazon GuardDuty to record API activity to an S3 bucket. - answer>>Use AWS CloudTrail to record
AWS API calls into an auditable log file.
Use AWS Config to generate an inventory of AWS resources.
Which of the authentication options below can be used to authenticate using AWS APIs? (Select TWO)
Key Pairs
Access Keys
Server Passwords
Server certificates
Security groups - answer>>Access Keys
Server certificates
Which of the following about AWS's pay-as-you-go pricing model is correct?
It results in reduced capital expenditures
It requires payment up front
It is relevant only for EC2, S3, and DynamoDB
It reduces operational expenditures - answer>>It results in reduced capital expenditures
Your organization has offices around the world and some employees travel between offices. How
should their accounts be setup?
IAM is a global service, just create the users in one place.
Create a separate account in IAM within each region in which they will travel.
Enable MFA for the accounts.
Set the user account as a "global" account when created. - answer>>IAM is a global service, just create
the users in one place
