AWS Certified Cloud Practitioner Exam Questions and
Answers with Verified Solutions
This practice document contains 100 unique exam questions designed for the AWS Certified
Cloud Practitioner certification, complete with verified correct answers and detailed
explanations.
1. Which AWS service is defined as a pay-as-you-go compute service that lets you run
code without provisioning or managing servers?
A. Amazon EC2
B. AWS Lambda
C. AWS Elastic Beanstalk
D. Amazon Lightsail
Correct Answer: B. AWS Lambda
Explanation: AWS Lambda is a serverless compute service that runs your code in response to
events and automatically manages the underlying compute resources for you, charging only for
the compute time you consume.
2. What AWS architectural pillar focuses on the ability to run workloads efficiently, gain
insight into operations, and continuously improve supporting processes and
procedures?
A. Operational Excellence
B. Security
C. Reliability
D. Performance Efficiency
Correct Answer: A. Operational Excellence
Explanation: The Operational Excellence pillar of the AWS Well-Architected Framework focuses
on running and monitoring systems to deliver business value and continually improving
supporting processes and procedures.
3. Under the AWS Shared Responsibility Model, which of the following is a responsibility
of AWS?
A. Configuring guest operating system firewall rules
B. Managing IAM user access permissions
C. Physical security of data centers
, D. Encrypting customer application data at rest
Correct Answer: C. Physical security of data centers
Explanation: AWS is responsible for security "of" the cloud, which includes the physical
infrastructure, hardware, facilities, edge locations, and core network facilities that run all of the
services offered by AWS.
4. Which S3 storage class is best suited for long-term data archiving where access is
infrequent and retrieval times of minutes to hours are acceptable at the lowest cost?
A. Amazon S3 Standard
B. Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
C. Amazon S3 Glacier Flexible Retrieval
D. Amazon S3 One Zone-IA
Correct Answer: C. Amazon S3 Glacier Flexible Retrieval
Explanation: Amazon S3 Glacier Flexible Retrieval delivers low-cost storage for archive data
that does not require immediate access, with retrieval options ranging from a few minutes to 3-5
hours.
5. Which AWS tool provides automated recommendations to help users optimize their
AWS infrastructure regarding cost, performance, security, fault tolerance, and service
limits?
A. AWS Inspector
B. AWS Trusted Advisor
C. AWS Config
D. AWS Security Hub
Correct Answer: B. AWS Trusted Advisor
Explanation: AWS Trusted Advisor acts as a customized cloud expert, inspecting your AWS
environment and providing real-time recommendations across five pillars: Cost Optimization,
Performance, Security, Fault Tolerance, and Service Limits.
6. Which AWS service automatically distributes incoming application traffic across
multiple targets, such as Amazon EC2 instances, containers, and IP addresses?
A. AWS Auto Scaling
B. Elastic Load Balancing (ELB)
C. Amazon Route 53
D. AWS Global Accelerator
Correct Answer: B. Elastic Load Balancing (ELB)
Explanation: Elastic Load Balancing (ELB) automatically distributes incoming application traffic
across multiple targets in one or more Availability Zones to ensure high availability and fault
, tolerance.
7. A company needs a relational database that scales automatically and provides up to
5x the performance of standard MySQL databases. Which AWS service should they
choose?
A. Amazon DynamoDB
B. Amazon Aurora
C. Amazon Redshift
D. Amazon ElastiCache
Correct Answer: B. Amazon Aurora
Explanation: Amazon Aurora is a fully managed relational database engine built for the cloud
that is MySQL and PostgreSQL compatible, providing up to 5x the throughput of standard
MySQL and 3x MySQL performance at lower cost.
8. Which AWS service is used to record API calls and track user activity across your
AWS account for governance, compliance, and operational auditing?
A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS Config
D. AWS X-Ray
Correct Answer: B. AWS CloudTrail
Explanation: AWS CloudTrail tracks user activity and API calls made within your account,
generating event logs that allow you to conduct auditing, security monitoring, and resource
change tracking.
9. Which pricing model offers the highest discount (up to 90%) on Amazon EC2 instances
for fault-tolerant workloads that can tolerate unexpected interruptions?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Hosts
Correct Answer: C. Spot Instances
Explanation: Amazon EC2 Spot Instances allow you to request spare EC2 computing capacity
at up to a 90% discount off On-Demand prices, ideal for stateless, fault-tolerant, or flexible
workloads.
Answers with Verified Solutions
This practice document contains 100 unique exam questions designed for the AWS Certified
Cloud Practitioner certification, complete with verified correct answers and detailed
explanations.
1. Which AWS service is defined as a pay-as-you-go compute service that lets you run
code without provisioning or managing servers?
A. Amazon EC2
B. AWS Lambda
C. AWS Elastic Beanstalk
D. Amazon Lightsail
Correct Answer: B. AWS Lambda
Explanation: AWS Lambda is a serverless compute service that runs your code in response to
events and automatically manages the underlying compute resources for you, charging only for
the compute time you consume.
2. What AWS architectural pillar focuses on the ability to run workloads efficiently, gain
insight into operations, and continuously improve supporting processes and
procedures?
A. Operational Excellence
B. Security
C. Reliability
D. Performance Efficiency
Correct Answer: A. Operational Excellence
Explanation: The Operational Excellence pillar of the AWS Well-Architected Framework focuses
on running and monitoring systems to deliver business value and continually improving
supporting processes and procedures.
3. Under the AWS Shared Responsibility Model, which of the following is a responsibility
of AWS?
A. Configuring guest operating system firewall rules
B. Managing IAM user access permissions
C. Physical security of data centers
, D. Encrypting customer application data at rest
Correct Answer: C. Physical security of data centers
Explanation: AWS is responsible for security "of" the cloud, which includes the physical
infrastructure, hardware, facilities, edge locations, and core network facilities that run all of the
services offered by AWS.
4. Which S3 storage class is best suited for long-term data archiving where access is
infrequent and retrieval times of minutes to hours are acceptable at the lowest cost?
A. Amazon S3 Standard
B. Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
C. Amazon S3 Glacier Flexible Retrieval
D. Amazon S3 One Zone-IA
Correct Answer: C. Amazon S3 Glacier Flexible Retrieval
Explanation: Amazon S3 Glacier Flexible Retrieval delivers low-cost storage for archive data
that does not require immediate access, with retrieval options ranging from a few minutes to 3-5
hours.
5. Which AWS tool provides automated recommendations to help users optimize their
AWS infrastructure regarding cost, performance, security, fault tolerance, and service
limits?
A. AWS Inspector
B. AWS Trusted Advisor
C. AWS Config
D. AWS Security Hub
Correct Answer: B. AWS Trusted Advisor
Explanation: AWS Trusted Advisor acts as a customized cloud expert, inspecting your AWS
environment and providing real-time recommendations across five pillars: Cost Optimization,
Performance, Security, Fault Tolerance, and Service Limits.
6. Which AWS service automatically distributes incoming application traffic across
multiple targets, such as Amazon EC2 instances, containers, and IP addresses?
A. AWS Auto Scaling
B. Elastic Load Balancing (ELB)
C. Amazon Route 53
D. AWS Global Accelerator
Correct Answer: B. Elastic Load Balancing (ELB)
Explanation: Elastic Load Balancing (ELB) automatically distributes incoming application traffic
across multiple targets in one or more Availability Zones to ensure high availability and fault
, tolerance.
7. A company needs a relational database that scales automatically and provides up to
5x the performance of standard MySQL databases. Which AWS service should they
choose?
A. Amazon DynamoDB
B. Amazon Aurora
C. Amazon Redshift
D. Amazon ElastiCache
Correct Answer: B. Amazon Aurora
Explanation: Amazon Aurora is a fully managed relational database engine built for the cloud
that is MySQL and PostgreSQL compatible, providing up to 5x the throughput of standard
MySQL and 3x MySQL performance at lower cost.
8. Which AWS service is used to record API calls and track user activity across your
AWS account for governance, compliance, and operational auditing?
A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS Config
D. AWS X-Ray
Correct Answer: B. AWS CloudTrail
Explanation: AWS CloudTrail tracks user activity and API calls made within your account,
generating event logs that allow you to conduct auditing, security monitoring, and resource
change tracking.
9. Which pricing model offers the highest discount (up to 90%) on Amazon EC2 instances
for fault-tolerant workloads that can tolerate unexpected interruptions?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Hosts
Correct Answer: C. Spot Instances
Explanation: Amazon EC2 Spot Instances allow you to request spare EC2 computing capacity
at up to a 90% discount off On-Demand prices, ideal for stateless, fault-tolerant, or flexible
workloads.
