#separator:tab
#html:true
#notetype:Basic
#tags column:3
"What are the advantages of deploying an application with Amazon EC2 instances in multiple Availability Zones?
A. Allowing the application to serve cross-Region users with low latency
B. Increasing the load of the application
C. Preventing a single point of failure
D. Reducing the operational costs of the application
E. Increasing the availability of the application" "C, E
Spreading EC2 instances across multiple Availability Zones prevents a single point of failure and increases availability, because AZs are physically redundant. It does not change load or reduce cost.
Related: Availability Zones · High Availability · Amazon EC2" "aws-certified-cloud-practitioner-exam-clf-co2 domain::1"
"A company has an on-premises Linux-based server with an Oracle database that runs on it. The company wants to migrate the database server to run on an Amazon EC2 instance in AWS. Which service should the company use to complete the migration?
A. AWS Outposts
B. AWS Schema Conversion Tool (AWS SCT)
C. AWS Database Migration Service (AWS DMS)
D. AWS Application Migration Service (AWS MGN)" "D
AWS Application Migration Service (MGN) is an automated lift-and-shift tool that migrates entire servers—and the databases and apps running on them—to EC2. DMS moves data only; SCT converts schema.
Related: Application Migration Service · AWS DMS (Database Migration Service) · AWS SCT (Schema Conversion Tool)" "aws-certified-cloud-practitioner-exam-clf-co2 domain::1"
"What are benefits of using the AWS Cloud for companies with customers in many countries around the world?
A. Companies can deploy applications in multiple AWS Regions to reduce latency.
B. Amazon CloudFront has multiple edge locations around the world to reduce latency.
C. Elastic Load Balancing can distribute application web traffic to multiple AWS Regions around the world, which reduces latency.
D. Amazon Comprehend allows users to build applications that can respond to user requests in many languages.
E. Amazon Translate automatically translates third-party website interfaces into multiple languages." "A, B
Two Regions/edge benefits apply: deploying in multiple AWS Regions puts the app closer to users to cut latency, and Amazon CloudFront's global edge locations cache content near users for low-latency delivery. (ELB can't target across Regions; Comprehend and Translate don't fit.)
Related: Regions · Amazon CloudFront · edge locations · Global Infrastructure" "aws-certified-cloud-practitioner-exam-clf-co2 domain::1"
"A user deploys an Amazon RDS DB instance in multiple Availability Zones. This strategy involves which pillar of the AWS Well-Architected Framework?
A. Security
B. Performance efficiency
C. Reliability
D. Cost Optimization" "C
Deploying Amazon RDS across multiple Availability Zones supports the Reliability pillar: it removes single points of failure so the workload keeps performing its intended function consistently.
Related: Reliability · Amazon RDS · Availability Zones · AWS Well-Architected Framework" "aws-certified-cloud-practitioner-exam-clf-co2 domain::1"
"What are the benefits of developing and running a new application in the AWS Cloud compared to on-premises? (Select TWO.)
A. AWS automatically distributes
B. AWS operates the application.
C. AWS provides options to architect for high availability.
D. AWS can scale resources of changing application demands.
E. AWS patches user applications." "C, D
AWS gives you the building blocks to architect for high availability (multiple Availability Zones and Regions) and to scale capacity up and down with demand. Operating and patching your own application stays with you under the shared responsibility model.
Related: High Availability · Elasticity · AWS shared responsibility model" "aws-certified-cloud-practitioner-exam-clf-co2 domain::1"
"Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?
A. Amazon Cognito
B. AWS Directory Service
C. AWS IAM Identity Center
D. Amazon API Gateway" "C
AWS fully manages Cognito, Directory Service, and API Gateway. With IAM Identity Center the customer maintains what it points at — the identity source, permission sets, and any self-managed directory connected to it.
Related: AWS shared responsibility model · AWS IAM Identity Center · Amazon Cognito · AWS Directory Service" "aws-certified-cloud-practitioner-exam-clf-co2 domain::2"
"Which AWS service identifies security groups that allow unrestricted access to a user's AWS resources?
A. AWS CloudTrail
B. AWS Trusted Advisor
C. AWS Identity and Access Management (IAM)
D. Amazon CloudWatch" "B
AWS Trusted Advisor's security checks flag security groups with rules that allow unrestricted access to a resource.
Related: AWS Trusted Advisor · security groups" "aws-certified-cloud-practitioner-exam-clf-co2 domain::2"
"Which credential components are required to gain programmatic access to an AWS account?
A. An access key ID
B. A secret access key
C. A user ID
D. A primary key
E. A secondary key" "A, B
Programmatic access requires an access key ID and a secret access key assigned to an IAM user. User IDs and primary/secondary keys do not grant account access.
Related: AWS Identity and Access Management (IAM) · AWS CLI" "aws-certified-cloud-practitioner-exam-clf-co2 domain::2"
"Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?
A. Amazon FSx for Windows File Server
B. Amazon WorkSpaces virtual Windows desktop
C. AWS Directory Service for Microsoft Active Directory
D. Amazon RDS for Microsoft SQL Server" "B
A WorkSpaces desktop is a virtual machine the customer runs: you own its OS updates and installed applications. FSx, Directory Service, and RDS are managed services where AWS patches the underlying software.
Related: AWS shared responsibility model · Amazon WorkSpaces · Amazon FSx · Amazon RDS" "aws-certified-cloud-practitioner-exam-clf-co2 domain::2"
"Which AWS service should be used to implement encryption in transit?
A. AWS Certificate Manager (ACM)
B. AWS Security Hub
C. AWS Shield
D. AWS Resource Access Manager (AWS RAM)" "A
AWS Certificate Manager (ACM) provisions, stores, and renews SSL/TLS certificates, which implement encryption in transit via TLS.
Related: AWS Certificate Manager (ACM)" "aws-certified-cloud-practitioner-exam-clf-co2 domain::2"
"Which task is the customer's responsibility for AWS Lambda, according to the AWS shared responsibility model?
A. Encryption of the application data at rest
B. Management of the application platform
C. Patching of the guest operating system
D. Security of the physical infrastructure" "A
Lambda is serverless, so AWS owns the platform, the guest OS, and the physical infrastructure. The customer's remaining share is their code and their data — including encrypting it at rest.
Related: AWS shared responsibility model · AWS Lambda · AWS Key Management Service (KMS)" "aws-certified-cloud-practitioner-exam-clf-co2 domain::2"
"A user needs to automatically discover, classify, and protect sensitive data stored in Amazon S3. Which AWS service can meet these requirements?
A. Amazon GuardDuty
B. Amazon Macie
C. Amazon Inspector
D. AWS Secrets Manager" "B
Amazon Macie uses machine learning and pattern matching to automatically discover, classify, and protect sensitive data such as PII in Amazon S3.
Related: Amazon Macie · Amazon S3" "aws-certified-cloud-practitioner-exam-clf-co2 domain::2"
"Which security-related services or features does AWS offer? (Select TWO.)
A. Complete PCI compliance for customer applications that run on AWS
B. AWS Trusted Advisor security checks
C. Data encryption
D. Automated penetration testing
E. Amazon S3 copyrighted content detection" "B, C
Trusted Advisor runs security checks (open security groups, MFA on root, exposed keys) and AWS offers encryption at rest and in transit across services. AWS compliance covers the infrastructure only — your application's PCI compliance is yours. There is no automated pen-testing or copyrighted-content detection service.
Related: AWS Trusted Advisor · AWS Key Management Service (KMS) · AWS Artifact" "aws-certified-cloud-practitioner-exam-clf-co2 domain::2"
"Which tasks are the customer's responsibility according to the AWS shared responsibility model?
A. Configure security groups for Amazon EC2 instances.
B. Configure IAM users according to the principle of least privilege.
C. Control physical access to the data center that contains a customer's VPC.
D. Patch the operating system that AWS Lambda functions use.
E. Install patches on Amazon RDS DB instances." "A, B
Under the shared responsibility model the customer configures security groups for their EC2 instances and defines IAM users/policies under least privilege. AWS owns physical data-center access and patches managed services (Lambda OS, RDS engine).
Related: AWS shared responsibility model · security groups · AWS Identity and Access Management (IAM)" "aws-certified-cloud-practitioner-exam-clf-co2 domain::2"
"Which of the functionalities are characteristics of Amazon S3?
A. An object store
B. A durable storage system
C. A network file system
D. A local file store
E. A global file system" "A, B
Amazon S3 is an object store and a durable storage service. It is not a network, local, or global file system.
Related: Amazon S3" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"A company requires an encrypted connection between the company's on-premises servers and AWS. The connection must use the company's existing internet connection. Which solution will meet these requirements?
A. Amazon Connect
B. AWS Site-to-Site VPN
C. Amazon CloudFront
D. AWS Direct Connect" "B
AWS Site-to-Site VPN creates an encrypted IPsec tunnel between on-premises and AWS over the existing public internet. Direct Connect is private but does not use your internet connection.
Related: AWS Site-to-Site VPN · AWS VPN · AWS Direct Connect" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"A company requires a relational database on AWS that records new customer orders from a website. Which AWS service or feature will meet this requirement?
A. Amazon DynamoDB
B. Amazon Aurora
C. Amazon Elastic Block Store (Amazon EBS)
D. AWS Global Accelerator" "B
Amazon Aurora is a MySQL- and PostgreSQL-compatible relational database built for the cloud, meeting the relational requirement. DynamoDB is NoSQL, EBS is block storage, and Global Accelerator is networking.
Related: Amazon Aurora · Amazon RDS · Amazon DynamoDB" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"A business-critical application requires multi-Region deployment to meet availability service level agreements (SLAs). Which AWS service or feature should be used for network routing and load balancing for this application?
A. Amazon Route 53
B. Application Load Balancer (ALB)
C. Amazon API Gateway
D. AWS Site-to-Site VPN" "A
Route 53 routes DNS traffic across Regions with health checks and routing policies (latency, failover, geolocation). An ALB only balances traffic within a single Region, so it cannot span the deployment.
Related: Amazon Route 53 · Application Load Balancer (ALB) · Regions" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"A company wants to establish a consistent and private connection from the company's on-premises data center to the AWS Cloud. Which AWS service will meet these requirements?
A. AWS Direct Connect
B. AWS Site-to-Site VPN
C. Amazon Connect
D. AWS Client VPN" "A
AWS Direct Connect is a dedicated, private fiber link—consistent and private because your company is the sole user of the cable, bypassing the public internet.
Related: AWS Direct Connect · AWS VPN" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"A company is hosting a static website from a single Amazon S3 bucket. Which AWS service will achieve lower latency and high transfer speeds?
A. AWS Elastic Beanstalk
B. Amazon DynamoDB Accelerator (DAX)
C. Amazon Route 53
D. Amazon CloudFront" "D
Amazon CloudFront caches the site's static content at edge locations near users, lowering latency and raising transfer speeds versus serving from the single S3 bucket.
Related: Amazon CloudFront · edge locations · Amazon S3" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"What should AWS edge locations be used for? (Select TWO.)
A. Hosting applications and databases
B. Delivering content closer to users
C. Running NoSQL database caching services
D. Reducing the load on Amazon EC2 based web servers
E. Sending notification messages to end users" "B, D
Edge locations cache content near users through CloudFront, which both cuts latency and offloads requests from the origin web servers. They do not host applications, databases, or notification services.
Related: edge locations · Amazon CloudFront · Amazon EC2" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"A web developer has limited knowledge of AWS networking services such as Amazon VPC, Elastic Load Balancing, and Auto Scaling, but wants to host a highly available web application. Which AWS service would automatically handle the deployment and reduce the complexity for the developer?
A. AWS CodeDeploy
B. AWS Resource Access Manager
C. AWS Elastic Beanstalk
D. AWS CloudFormation" "C
Elastic Beanstalk is the PaaS answer: upload code and it provisions the load balancer, Auto Scaling group, and instances for you. CloudFormation also builds the stack but requires you to describe every resource — the opposite of reducing complexity here.
Related: AWS Elastic Beanstalk · AWS CloudFormation · AWS CodeDeploy" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"An application development team needs a solution that sends an alert to an entire development team if a quality assurance test fails on an application. Which AWS service should the application development team use to meet the requirement?
A. Amazon EventBridge
B. Amazon Simple Notification Service (Amazon SNS)
C. Amazon Simple Queue Service (Amazon SQS)
D. Amazon Connect" "B
Amazon SNS is a pub/sub messaging service that pushes notifications (email, SMS, push) to all subscribers of a topic—ideal for alerting an entire team. SQS is a queue; EventBridge routes events.
Related: Amazon Simple Notification Service (SNS) · Amazon Simple Queue Service (SQS) · Amazon EventBridge" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"Which AWS services or features support data replication across AWS Regions? (Select TWO.)
A. Amazon S3
B. Amazon Elastic Block Store (Amazon EBS)
C. Amazon EC2 instance store
D. AWS Storage Gateway
E. Amazon RDS" "A, E
S3 has cross-Region replication, and RDS supports cross-Region read replicas and snapshot copies. EBS volumes are tied to one Availability Zone, instance store is ephemeral and local to the host, and Storage Gateway connects on-premises to a single Region.
Related: Amazon S3 · Amazon RDS · Amazon Elastic Block Store (EBS) · Regions" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"A company wants to create a learning application for students. The learning application must give students the option to choose a button to have the text read out loud to them. Which AWS machine learning service will meet this requirement?
A. Amazon Transcribe
B. Amazon Polly
C. Amazon Translate
D. Amazon Textract" "B
Amazon Polly is the text-to-speech service; it reads text aloud. Transcribe is speech-to-text, Translate translates languages, and Textract extracts text from documents.
Related: Amazon Polly" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"Which AWS service automatically handles application health monitoring?
A. Amazon API Gateway
B. AWS Elastic Beanstalk
C. AWS Lambda
D. AWS Config" "B
Elastic Beanstalk provisions the environment and monitors application health out of the box, reporting an environment health status. Config records resource configuration state, not application health.
Related: AWS Elastic Beanstalk · Amazon CloudWatch · AWS Config" "aws-certified-cloud-practitioner-exam-clf-co2 domain::3"
"Which AWS service allows customers to purchase unused Amazon EC2 capacity at an often discounted rate?
A. Spot Instances
B. Reserved Instances
C. On-Demand Instances
D. Dedicated Instances" "A
Spot Instances let you use spare, unused EC2 capacity at a steep discount (up to ~90%), in exchange for possible interruption with a 2-minute warning.
Related: Spot Instances · Instance Pricing Options" "aws-certified-cloud-practitioner-exam-clf-co2 domain::4"
"What is the MINIMUM AWS Support plan that provides technical support through phone calls?
A. Business
B. Basic
C. Developer
D. Enterprise" "A
Business Support is the minimum plan offering 24/7 phone and chat access to Cloud Support Engineers. Developer is email-only; Enterprise also has phone but is not the minimum.
Related: AWS Support" "aws-certified-cloud-practitioner-exam-clf-co2 domain::4"
"Where should users find a catalog of free or purchasable AWS-recognized providers of third-party solutions?
A. AWS Service Catalog
B. AWS Marketplace
C. AWS Partner Solutions
D. AWS CodeDeploy" "B
AWS Marketplace lists vetted third-party solutions for purchase. AWS Service Catalog is the opposite direction — your own organization's approved products for internal users.
Related: AWS Marketplace · AWS Service Catalog · AWS Partner Network" "aws-certified-cloud-practitioner-exam-clf-co2 domain::4"
"Each department within a company has its own independent AWS account and its own payment method. The company needs to centralize departmental governance and consolidate payments. How can the company achieve these objectives by using AWS services or features?
A. Create an organization in AWS Organizations with all features enabled within one account. Invite all accounts to join the organization.
B. Use the AWS Cost and Usage Reports page of the AWS Billing and Cost Management console.
C. Use AWS Systems Manager OpsCenter.
D. Configure AWS IAM Identity Center in each account." "A
AWS Organizations gives centralized governance and consolidated billing across many accounts. Inviting the department accounts into one organization meets both the governance and payment-consolidation requirements.
Related: AWS Organizations · consolidated billing" "aws-certified-cloud-practitioner-exam-clf-co2 domain::4"
"What can be used to reduce the cost of running Amazon EC2 instances? (Select TWO.)
A. Spot Instances for stateless and flexible workloads
B. Memory optimized instances for high-compute workloads
C. On-Demand Instances for high-cost and sustained workloads
D. Reserved Instances for sustained workloads
E. Spend limits set using AWS Budgets" "A, D
Spot suits interruption-tolerant, stateless work at up to ~90% off, and Reserved Instances discount steady, predictable workloads for a 1- or 3-year commitment. Budgets only alerts on spend — it does not cap or reduce it.
Related: Spot Instances · Reserved Instances · AWS Budgets · Instance Pricing Options" "aws-certified-cloud-practitioner-exam-clf-co2 domain::4"
"A company needs phone, email, and chat access 24 hours a day, 7 days a week. The response time must be less than 1 hour if a production system has a service interruption. Which AWS Support plan meets these requirements at the LOWEST cost?
A. AWS Basic Support
B. AWS Developer Support
C. AWS Business Support
D. AWS Enterprise Support" "C
Business Support is the cheapest plan with 24/7 phone, email, and chat plus a < 1 hour response for production system down. Enterprise also qualifies but costs more, and Developer is email-only during business hours.
Related: AWS Support · Business · Enterprise · Developer" "aws-certified-cloud-practitioner-exam-clf-co2 domain::4"
"How does AWS charge for AWS Lambda usage once the free tier has been exceeded?
A. By the total number of Lambda functions in an AWS account
B. By the programming language that is used for the Lambda function
C. By the time it takes for the Lambda function to run
D. By the number of requests made for a given Lambda function
E. By the number of versions of a specific Lambda function" "C, D
Lambda charges are based on the number of requests and the duration (compute time) your code runs. Language, function count, and number of versions do not affect cost.
Related: AWS Lambda" "aws-certified-cloud-practitioner-exam-clf-co2 domain::4"
"What does AWS Marketplace allow users to do? (Select TWO.)
A. Sell unused Amazon EC2 Spot Instances.
B. Sell solutions to other AWS users.
C. Buy third-party software that runs on AWS.
D. Purchase AWS security and compliance documents.
E. Order AWS Snowball Edge." "B, C
Marketplace is a two-sided catalog: vendors list solutions and customers buy third-party software billed through their AWS account. Compliance documents come free from AWS Artifact, and Snow devices are ordered from the AWS console.
Related: AWS Marketplace · AWS Artifact · Snowball Edge Storage Optimized Devices" "aws-certified-cloud-practitioner-exam-clf-co2 domain::4"
"Which AWS tool or feature compares prices of different services, creates rough estimates of the total monthly costs, and exports the estimates to a .csv file?
A. Cost Explorer
B. AWS Pricing Calculator
C. Consolidated billing
D. AWS Budgets" "B
Pricing Calculator estimates cost before you build and exports the estimate. Cost Explorer analyzes spend you have already incurred — the tell is 'estimate' versus 'historical'.
Related: AWS Pricing Calculator · AWS Cost Explorer · Cost Management" "aws-certified-cloud-practitioner-exam-clf-co2 domain::4"
"Which Amazon EC2 pricing model adjusts the cost based on supply and demand of EC2 instances?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Convertible Reserved Instances" "C
Spot prices float with spare capacity supply and demand in each Availability Zone. On-Demand and Reserved rates are fixed by the rate card and the commitment term.
Related: Spot Instances · On-Demand Instances · Instance Pricing Options" "aws-certified-cloud-practitioner-exam-clf-co2 domain::4"