Question: 1
Which AWS service allows you to run code without provisioning or managing servers?

A. Amazon EC2
B. AWS Lambda
C. AWS ECS
D. Amazon Lightsail

✅ Answer: B. AWS Lambda

Question: 2
What is the benefit of deploying resources across multiple Availability Zones in AWS?

A. Reduces latency
B. Increases application fault tolerance
C. Provides more storage
D. Reduces cost

✅ Answer: B. Increases application fault tolerance

Question: 3
Under the AWS shared responsibility model, which task is AWS responsible for?

A. Managing customer data
B. Patching the guest operating system
C. Physical security of the data centers
D. Configuring network security groups

✅ Answer: C. Physical security of the data centers

Question: 4
Which AWS service helps monitor and collect log files, metrics, and events?

A. Amazon Inspector
B. AWS CloudTrail
C. Amazon CloudWatch
D. AWS Config

✅ Answer: C. Amazon CloudWatch

Question: 5
Which pricing model allows you to reserve compute capacity at a reduced cost?

A. Free Tier
B. On-Demand Instances
C. Reserved Instances
D. Spot Instances

✅ Answer: C. Reserved Instances

Question: 6
Which of the following is an AWS managed NoSQL database service?

A. Amazon RDS
B. Amazon Aurora
C. Amazon DynamoDB
D. Amazon Redshift

✅ Answer: C. Amazon DynamoDB

Question: 7
What is the purpose of AWS Identity and Access Management (IAM)?

A. To monitor infrastructure performance
B. To manage DNS records
C. To securely control access to AWS services and resources
D. To track billing and usage

✅ Answer: C. To securely control access to AWS services and resources

Question: 8
Which AWS service provides object-level storage for files and media?

A. Amazon EBS
B. Amazon EC2
C. Amazon S3
D. Amazon RDS

✅ Answer: C. Amazon S3

Question: 9
What tool can you use to estimate monthly AWS service costs?

A. AWS CloudTrail
B. AWS Cost Explorer
C. AWS Pricing Calculator
D. AWS Budgets

✅ Answer: C. AWS Pricing Calculator

Question: 10
Which support plan gives access to a Technical Account Manager (TAM)?

A. Developer
B. Business
C. Basic
D. Enterprise

✅ Answer: D. Enterprise

Question: 11
Which AWS service automates infrastructure provisioning using code?

A. Amazon CloudFront
B. AWS CloudFormation
C. AWS CodePipeline
D. AWS Elastic Beanstalk

✅ Answer: B. AWS CloudFormation

Question: 12
Which AWS service allows you to host and manage containerized applications?

A. Amazon RDS
B. Amazon EC2
C. Amazon ECS
D. AWS IAM

✅ Answer: C. Amazon ECS

Question: 13
What is the AWS service that lets you set alarms and automate actions based on resource metrics?

A. AWS Config
B. Amazon CloudWatch
C. AWS CloudTrail
D. AWS Systems Manager

✅ Answer: B. Amazon CloudWatch

Question: 14
Which of the following best describes a Region in AWS?

A. A single data center
B. A group of edge locations
C. A physical location with multiple Availability Zones
D. A logical grouping of users

✅ Answer: C. A physical location with multiple Availability Zones

Question: 15
What feature does Amazon S3 use to protect against accidental deletion?

A. Multi-AZ
B. Versioning
C. Auto Scaling
D. CloudTrail

✅ Answer: B. Versioning

Question: 16
What is the main benefit of using Amazon CloudFront?

A. Secure data encryption
B. Host dynamic websites
C. Content delivery with low latency
D. Monitoring traffic in real time

✅ Answer: C. Content delivery with low latency
📘 Explanation: Amazon CloudFront is a Content Delivery Network (CDN) that caches content at edge locations around the world, which helps deliver static and dynamic web content with low latency and high transfer speeds.

Question: 17
Which AWS service should you use to store frequently accessed key-value data?

A. Amazon RDS
B. Amazon ElastiCache
C. Amazon Redshift
D. AWS CloudHSM

✅ Answer: B. Amazon ElastiCache
📘 Explanation: ElastiCache is an in-memory data store compatible with Redis or Memcached, ideal for caching frequently accessed data to improve application performance.

Question: 18
What AWS feature allows customers to isolate their cloud resources?

A. Availability Zones
B. Virtual Private Cloud (VPC)
C. IAM Roles
D. Edge Locations

✅ Answer: B. Virtual Private Cloud (VPC)
📘 Explanation: A VPC allows you to launch AWS resources into a virtual network that you define. It offers complete control over network configuration, including IP ranges, subnets, route tables, and security settings.

Question: 19
Which AWS service records user activity and API usage for compliance and auditing?

A. AWS CloudTrail
B. Amazon CloudWatch
C. AWS Config
D. AWS Trusted Advisor

✅ Answer: A. AWS CloudTrail
📘 Explanation: AWS CloudTrail logs all API calls made within your account, including who made the call, when, and from where. It’s crucial for auditing, compliance, and security investigations.

Question: 20
What is a benefit of the AWS Well-Architected Framework?

A. Reduces monthly AWS bills
B. Provides security updates for AWS services
C. Helps assess and improve cloud workloads using best practices
D. Guarantees 100% uptime for workloads

✅ Answer: C. Helps assess and improve cloud workloads using best practices
📘 Explanation: The AWS Well-Architected Framework offers a consistent approach to evaluating architectures and implementing scalable, secure, and high-performing systems using AWS best practices across five pillars.

Question: 21
Which AWS service offers virtual network isolation for enhanced security and control over your environment?
A. AWS Lambda
B. Amazon EC2
C. Amazon VPC
D. Amazon S3

✅ Answer: C. Amazon VPC

📘 Explanation: Amazon Virtual Private Cloud (VPC) allows you to create a logically isolated network within AWS to define your own IP ranges, subnets, and route tables.

Question: 22
Which support plan is best suited for organizations needing 24/7 access to AWS Cloud engineers?
A. Developer
B. Basic
C. Business
D. Enterprise

✅ Answer: C. Business
📘 Explanation: The Business support plan includes 24/7 access to Cloud Support Engineers via email, chat, and phone.

Question: 23
What AWS tool lets you analyze and visualize spending over time?
A. AWS Cost Explorer
B. AWS CloudTrail
C. AWS Trusted Advisor
D. AWS Billing Dashboard

✅ Answer: A. AWS Cost Explorer
📘 Explanation: AWS Cost Explorer helps users track and analyze AWS usage and costs with graphical visualizations over daily or monthly timeframes.

Question: 24
Which AWS service helps developers automate application deployment?
A. AWS CodeDeploy
B. AWS IAM
C. Amazon CloudWatch
D. AWS CloudTrail

✅ Answer: A. AWS CodeDeploy
📘 Explanation: AWS CodeDeploy automates code deployment to Amazon EC2 instances, on-premises servers, or AWS Lambda functions.

Question: 25
What is the main benefit of using AWS Auto Scaling?
A. Manual scaling
B. Reducing network latency
C. Automatically adjusting resources to meet demand
D. Backup and recovery

✅ Answer: C. Automatically adjusting resources to meet demand
📘 Explanation: Auto Scaling ensures your application has the right amount of compute capacity at all times by adding or removing EC2 instances as needed.

Question: 26
Which AWS service helps detect malicious activity and unauthorized behavior?
A. AWS Config
B. AWS Shield
C. Amazon GuardDuty
D. AWS Budgets

✅ Answer: C. Amazon GuardDuty
📘 Explanation: GuardDuty is a threat detection service that continuously monitors for malicious activity and delivers detailed security findings.

Question: 27
What is the benefit of using consolidated billing under AWS Organizations?
A. Increased security
B. Unified cloud resources
C. Aggregate billing across accounts to simplify payment
D. Improved compute performance

✅ Answer: C. Aggregate billing across accounts to simplify payment
📘 Explanation: Consolidated billing allows multiple AWS accounts to share one bill and potentially receive volume discounts.

Question: 28
Which AWS service provides recommendations for cost optimization and performance improvements?
A. AWS CloudFormation
B. AWS Trusted Advisor
C. Amazon Inspector
D. AWS WAF

✅ Answer: B. AWS Trusted Advisor
📘 Explanation: Trusted Advisor inspects your AWS environment and provides real-time guidance on cost optimization, performance, security, and fault tolerance.

Question: 29
Which storage class is the most cost-effective for long-term data archiving in Amazon S3?
A. S3 Standard
B. S3 One Zone-IA
C. S3 Glacier
D. S3 Intelligent-Tiering

✅ Answer: C. S3 Glacier
📘 Explanation: Amazon S3 Glacier is optimized for data archiving and backup. It offers low-cost storage with retrieval times ranging from minutes to hours.

Question: 30
Which AWS service enables DNS management for domain names?
A. AWS CloudFront
B. Amazon Route 53
C. Amazon VPC
D. AWS Direct Connect

✅ Answer: B. Amazon Route 53
📘 Explanation: Route 53 is AWS’s scalable Domain Name System (DNS) web service that connects user requests to internet applications.

Question: 31
Which service can help you secure your applications from DDoS attacks?
A. Amazon VPC
B. AWS WAF
C. AWS Shield
D. AWS Config

✅ Answer: C. AWS Shield
📘 Explanation: AWS Shield provides automatic protection against Distributed Denial of Service (DDoS) attacks for your applications running on AWS.

Question: 32
Which AWS service can help you manage policies and permissions across multiple accounts?
A. AWS Config
B. AWS Organizations
C. AWS IAM
D. Amazon Inspector

✅ Answer: B. AWS Organizations
📘 Explanation: AWS Organizations allows centralized management of multiple AWS accounts and enables you to apply policies across those accounts.

Question: 33
Which of the following is a serverless compute service?
A. AWS Fargate
B. Amazon RDS
C. Amazon EC2
D. AWS Elastic Beanstalk

✅ Answer: A. AWS Fargate
📘 Explanation: AWS Fargate is a serverless compute engine for containers that lets you run containers without managing servers or clusters.

Question: 34
What is the primary benefit of using Amazon RDS over managing your own database on EC2?
A. Cheaper pricing
B. Better user interface
C. Automated patching, backups, and maintenance
D. Unlimited storage

✅ Answer: C. Automated patching, backups, and maintenance
📘 Explanation: Amazon RDS is a managed database service that automates common administrative tasks like backups and software patching.

Question: 35
Which feature of AWS allows you to recover from failures quickly and continue business operations?
A. Fault tolerance
B. Elasticity
C. Scalability
D. Agility

✅ Answer: A. Fault tolerance
📘 Explanation: Fault tolerance ensures that a system can continue operating properly in the event of a failure of one or more components.

Question: 36
Which AWS service offers a visual workflow to automate operational tasks across services?
A. AWS Lambda
B. AWS Step Functions
C. AWS CloudTrail
D. Amazon SWF

✅ Answer: B. AWS Step Functions
📘 Explanation: AWS Step Functions lets you coordinate multiple AWS services into serverless workflows, using visual workflows for orchestration.

Question: 37
Which of the following services is primarily used for content caching and CDN functionality?
A. Amazon EFS
B. Amazon CloudFront
C. AWS DataSync
D. Amazon QuickSight

✅ Answer: B. Amazon CloudFront
📘 Explanation: CloudFront is a content delivery network (CDN) that securely delivers data and applications with low latency.

Question: 38
What does AWS use to physically separate resources in different geographic locations?
A. Availability Zones
B. Regions
C. Edge Locations
D. Subnets

✅ Answer: B. Regions
📘 Explanation: Regions are separate geographic areas that contain multiple, isolated Availability Zones. Each region is physically separated for fault tolerance.

Question: 39
Which AWS service enables the setup of a dedicated network connection from your premises to AWS?
A. AWS VPN
B. AWS Direct Connect
C. Amazon VPC Peering
D. AWS Transit Gateway

✅ Answer: B. AWS Direct Connect
📘 Explanation: AWS Direct Connect establishes a dedicated private connection between your on-premises network and AWS, offering lower latency and higher bandwidth.

Question: 40
Which tool helps you detect configuration changes and compliance issues in your AWS environment?
A. AWS CloudTrail
B. Amazon GuardDuty
C. AWS Config
D. AWS WAF

✅ Answer: C. AWS Config
📘 Explanation: AWS Config continuously monitors and records your AWS resource configurations and helps assess compliance with desired configurations.

Question: 41
Which of the following is an AWS value proposition that describes a user’s ability to scale infrastructure based on demand?

A. High availability
B. Cost optimization
C. Elasticity
D. Durability

✅ Answer: C. Elasticity
📘 Explanation: Elasticity refers to the ability of AWS infrastructure to automatically scale resources up or down based on changing demand. This allows users to efficiently manage workloads while minimizing costs, making it one of the key benefits of cloud computing.

Question: 42
Which AWS service enables you to easily provision and manage a group of related AWS resources?

A. AWS CloudTrail
B. AWS CloudFormation
C. AWS Systems Manager
D. AWS Config

✅ Answer: B. AWS CloudFormation
📘 Explanation: AWS CloudFormation allows you to define infrastructure as code, making it easy to provision, manage, and update AWS resources in a predictable and consistent way.

Question: 43
What is the primary benefit of using AWS Auto Scaling?

A. Manages AWS billing
B. Scales resources manually
C. Automatically adjusts capacity to maintain performance
D. Increases instance storage

✅ Answer: C. Automatically adjusts capacity to maintain performance
📘 Explanation: AWS Auto Scaling monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost.

Question: 44
Which AWS service is primarily used to store and retrieve any amount of data at any time?

A. Amazon RDS
B. Amazon EC2
C. Amazon S3
D. Amazon EBS

✅ Answer: C. Amazon S3
📘 Explanation: Amazon Simple Storage Service (S3) is an object storage service that offers scalability, data availability, security, and performance for storing and retrieving any amount of data.

Question: 45
Which of the following best describes the AWS shared responsibility model?

A. AWS is responsible for all cloud security
B. Customers manage everything in the cloud
C. AWS and customers share responsibility for security and compliance
D. AWS only manages billing

✅ Answer: C. AWS and customers share responsibility for security and compliance
📘 Explanation: In the shared responsibility model, AWS manages the infrastructure (security of the cloud), while customers are responsible for configuring and managing their services and data (security in the cloud).

Question: 46
Which AWS pricing model allows customers to pay for compute capacity by the hour or second with no long-term commitments?

A. Reserved Instances
B. On-Demand Instances
C. Spot Instances
D. Dedicated Hosts

✅ Answer: B. On-Demand Instances
📘 Explanation: On-Demand Instances let you pay for compute capacity by the hour or second without long-term contracts, offering flexibility and ease of use.

Question: 47
Which service helps protect AWS accounts by requiring a second factor of authentication?

A. AWS CloudTrail
B. AWS Shield
C. AWS IAM
D. AWS MFA

✅ Answer: D. AWS MFA
📘 Explanation: Multi-Factor Authentication (MFA) adds an extra layer of protection by requiring users to enter a one-time password from a device in addition to their username and password.

Question: 48
What is the primary function of Amazon Route 53?

A. Domain name registration and DNS routing
B. Web hosting
C. Security compliance
D. Object storage

✅ Answer: A. Domain name registration and DNS routing
📘 Explanation: Amazon Route 53 is a scalable and highly available Domain Name System (DNS) web service that translates domain names into IP addresses and offers domain registration services.

Question: 49
Which AWS tool helps users visualize their AWS spending and usage patterns?

A. AWS Budgets
B. AWS Pricing Calculator
C. AWS CloudTrail
D. AWS Cost Explorer

✅ Answer: D. AWS Cost Explorer
📘 Explanation: AWS Cost Explorer provides graphs and reports to visualize your AWS spending patterns and helps you analyze cost and usage over time.

Question: 50
Which of the following provides recommendations to improve AWS resource performance, security, and cost?

A. AWS Inspector
B. AWS Trusted Advisor
C. Amazon CloudWatch
D. AWS Config

✅ Answer: B. AWS Trusted Advisor
📘 Explanation: AWS Trusted Advisor offers real-time guidance to help provision your resources following AWS best practices in areas like cost optimization, performance, fault tolerance, and security.

Question: 51
Which AWS service is used to run virtual servers in the cloud?

A. Amazon RDS
B. Amazon EC2
C. Amazon S3
D. AWS Lambda

✅ Answer: B. Amazon EC2
📘 Explanation: Amazon Elastic Compute Cloud (EC2) provides scalable compute capacity in the cloud, allowing users to launch and manage virtual servers.

Question: 52
Which AWS service is best for content delivery to users with low latency?

A. Amazon CloudWatch
B. Amazon S3
C. Amazon CloudFront
D. AWS Global Accelerator

✅ Answer: C. Amazon CloudFront
📘 Explanation: Amazon CloudFront is a Content Delivery Network (CDN) that delivers content with low latency by caching it at edge locations around the world.

Question: 53
What is the purpose of Amazon RDS?

A. To store documents
B. To host static websites
C. To manage relational databases
D. To run serverless functions

✅ Answer: C. To manage relational databases
📘 Explanation: Amazon Relational Database Service (RDS) makes it easy to set up, operate, and scale a relational database in the cloud with automated backups, patching, and scaling.

Question: 54
Which AWS service provides real-time auditing of account activity?

A. Amazon GuardDuty
B. AWS Config
C. AWS CloudTrail
D. AWS IAM

✅ Answer: C. AWS CloudTrail
📘 Explanation: AWS CloudTrail logs all API calls made in your AWS account, enabling operational auditing, compliance monitoring, and security analysis.

Question: 55
Which AWS service is used for automating software deployment?

A. AWS CodeDeploy
B. AWS Batch
C. AWS CloudFormation
D. Amazon WorkSpaces

✅ Answer: A. AWS CodeDeploy
📘 Explanation: AWS CodeDeploy automates code deployments to any instance, making it easier to rapidly release new features while maintaining service availability.

Question: 56
Which feature allows you to isolate resources in a virtual network?

A. Availability Zones
B. Subnets
C. IAM Policies
D. Virtual Private Cloud (VPC)

✅ Answer: D. Virtual Private Cloud (VPC)
📘 Explanation: A VPC enables you to create a logically isolated section of the AWS cloud where you can define your own IP address range, subnets, route tables, and network gateways.

Question: 57
Which AWS service provides a fully managed message queue?

A. Amazon MQ
B. Amazon SQS
C. Amazon SNS
D. AWS Step Functions

✅ Answer: B. Amazon SQS
📘 Explanation: Amazon Simple Queue Service (SQS) is a fully managed message queuing service that enables decoupling and scaling of microservices, distributed systems, and serverless applications.

Question: 58
Which pillar of the AWS Well-Architected Framework focuses on protecting data and systems?

A. Performance Efficiency
B. Cost Optimization
C. Reliability
D. Security

✅ Answer: D. Security
📘 Explanation: The Security pillar focuses on protecting data, systems, and assets through risk assessments and mitigation strategies using AWS best practices.

Question: 59
What AWS service provides a scalable data warehouse solution?

A. Amazon DynamoDB
B. Amazon Aurora
C. Amazon Redshift
D. Amazon RDS

✅ Answer: C. Amazon Redshift
📘 Explanation: Amazon Redshift is a fully managed, petabyte-scale data warehouse service designed for analyzing data using standard SQL and existing business intelligence tools.

Question: 60
Which of the following allows consolidated billing for multiple AWS accounts?

A. AWS Billing Console
B. AWS Cost Explorer
C. AWS Organizations
D. AWS Budgets

✅ Answer: C. AWS Organizations
📘 Explanation: AWS Organizations lets you centrally manage billing and governance across multiple AWS accounts and enables consolidated billing for better cost management.