✅ Section 1: Cloud Concepts
1. Which of the following is a benefit of cloud computing?
A. High capital expenditure
B. Physical server maintenance
C. On-demand capacity
D. Manual scaling of resources
✔️ Answer: C. On-demand capacity
2. What are the five characteristics of cloud computing according to NIST?
A. Rapid elasticity, On-demand self-service, Measured service, Resource pooling, Broad network access
B. Redundancy, Latency, Scalability, Agility, Storage
C. Availability, Security, Speed, Cost, Performance
D. None of the above
✔️ Answer: A. Rapid elasticity, On-demand self-service, Measured service, Resource pooling, Broad network access
✅ Section 2: AWS Cloud Architecture
3. Which AWS service can be used to launch a virtual server?
A. Amazon S3
B. Amazon EC2
C. AWS Lambda
D. AWS RDS
✔️ Answer: B. Amazon EC2
4. What service helps you easily scale and deploy web applications?
A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS Elastic Beanstalk
D. Amazon Glacier
✔️ Answer: C. AWS Elastic Beanstalk
✅ Section 3: Security and Compliance
5. Which AWS service allows you to manage permissions across AWS services?
A. Amazon RDS
B. AWS IAM
C. Amazon EC2
D. Amazon VPC
✔️ Answer: B. AWS IAM
6. What is the shared responsibility model?
A. AWS manages everything
B. Customer manages everything
C. AWS manages infrastructure; customer manages data and configurations
D. Customer manages infrastructure; AWS manages applications
✔️ Answer: C. AWS manages infrastructure; customer manages data and configurations
✅ Section 4: Cloud Billing and Pricing
7. Which AWS pricing model is used for EC2 Spot Instances?
A. Pay-as-you-go
B. Reserved
C. On-demand
D. Variable based on unused capacity
✔️ Answer: D. Variable based on unused capacity
8. What tool can help estimate the monthly cost of AWS services?
A. AWS Cost Explorer
B. AWS TCO Calculator
C. AWS Pricing Calculator
D. AWS Billing Console
✔️ Answer: C. AWS Pricing Calculator
✅ Section 5: Core AWS Services
9. Which AWS service is used for object storage?
A. Amazon S3
B. Amazon EBS
C. Amazon RDS
D. Amazon Redshift
✔️ Answer: A. Amazon S3
10. What does Amazon CloudFront do?
A. Stores data
B. Provides content delivery (CDN)
C. Hosts virtual servers
D. Manages databases
✔️ Answer: B. Provides content delivery (CDN)
✅ Section 6: Support Plans
11. Which AWS Support Plan includes access to a Technical Account Manager (TAM)?
A. Basic
B. Developer
C. Business
D. Enterprise
✔️ Answer: D. Enterprise
12. Which support plan is suitable for developers experimenting in AWS?
A. Enterprise
B. Business
C. Developer
D. Basic
✔️ Answer: C. Developer
✅ Section 7: Well-Architected Framework
13. What are the five pillars of the AWS Well-Architected Framework?
A. Cost, Speed, Performance, Network, Backup
B. Security, Reliability, Performance Efficiency, Cost Optimization, Operational Excellence
C. Design, Deployment, Management, Migration, Monitoring
D. Encryption, Access Control, Logging, Monitoring, Response
✔️ Answer: B. Security, Reliability, Performance Efficiency, Cost Optimization, Operational Excellence
14. Which pillar focuses on the ability to recover from infrastructure or service failures?
A. Cost Optimization
B. Operational Excellence
C. Performance Efficiency
D. Reliability
✔️ Answer: D. Reliability
✅ Section 8: Global Infrastructure
15. What is an AWS Availability Zone?
A. A physical data center
B. A CDN endpoint
C. One or more data centers in a region with isolated power/networking
D. A global DNS service
✔️ Answer: C. One or more data centers in a region with isolated power/networking
16. Which AWS component helps users route traffic to the lowest-latency region?
A. CloudTrail
B. Route 53
C. IAM
D. S3 Transfer Acceleration
✔️ Answer: B. Route 53
✅ Section 9: Monitoring and Analytics
17. What does Amazon CloudWatch do?
A. Encrypts data
B. Monitors AWS resources and applications
C. Manages IAM roles
D. Hosts containers
✔️ Answer: B. Monitors AWS resources and applications
18. Which service records API calls made in your AWS account?
A. AWS IAM
B. Amazon GuardDuty
C. AWS Config
D. AWS CloudTrail
✔️ Answer: D. AWS CloudTrail
✅ Section 10: Storage Services
19. What type of storage is Amazon EBS used for?
A. Object storage
B. File storage
C. Block storage
D. Cold storage
✔️ Answer: C. Block storage
20. Which AWS service provides long-term archival storage at low cost?
A. Amazon EBS
B. Amazon S3 Glacier
C. Amazon RDS
D. Amazon Redshift
✔️ Answer: B. Amazon S3 Glacier
✅ Section 11: Compute Services
21. A developer wants to run code without managing servers. Which service should they use?
A. Amazon EC2
B. AWS Lambda
C. Amazon ECS
D. Amazon Lightsail
✔️ Answer: B. AWS Lambda
22. What is the main benefit of AWS Auto Scaling?
A. Predicts customer demand
B. Automatically adjusts compute capacity based on traffic
C. Increases storage on S3 buckets
D. Changes EC2 instance types
✔️ Answer: B. Automatically adjusts compute capacity based on traffic
✅ Section 12: Database Services
23. Which AWS database service is suitable for a NoSQL application needing millisecond latency?
A. Amazon RDS
B. Amazon Redshift
C. Amazon DynamoDB
D. Amazon Aurora
✔️ Answer: C. Amazon DynamoDB
24. A company needs a fully managed relational database. Which service is best?
A. Amazon DynamoDB
B. Amazon Aurora
C. Amazon Redshift
D. Amazon ElastiCache
✔️ Answer: B. Amazon Aurora
✅ Section 13: Identity & Access Management
25. What is the purpose of IAM roles?
A. Define password policies
B. Grant temporary access to services
C. Encrypt EC2 instances
D. Store user credentials
✔️ Answer: B. Grant temporary access to services
26. Which principle should you follow when assigning permissions in AWS?
A. Administrator rights
B. Default deny
C. Least privilege
D. All access
✔️ Answer: C. Least privilege
✅ Section 14: Cost Management
27. A company wants to avoid unexpected charges. What tool helps set up alerts?
A. AWS Billing Dashboard
B. AWS Trusted Advisor
C. AWS Cost Explorer
D. AWS Budgets
✔️ Answer: D. AWS Budgets
28. Which tool offers recommendations to reduce costs, improve security, and performance?
A. AWS Trusted Advisor
B. AWS Config
C. AWS Shield
D. AWS Support Center
✔️ Answer: A. AWS Trusted Advisor
✅ Section 15: Responsibility Model Scenarios
29. Who is responsible for configuring IAM policies in AWS?
A. AWS
B. The customer
C. Third-party vendors
D. AWS Support
✔️ Answer: B. The customer
30. In the shared responsibility model, AWS is responsible for:
A. Configuring firewall rules
B. Data classification
C. Managing underlying infrastructure
D. Managing user credentials
✔️ Answer: C. Managing underlying infrastructure
🧪 Bonus Scenario-Based Practice
31. A startup wants to prototype quickly with minimal setup. Which service is ideal?
A. Amazon EC2
B. Amazon S3
C. AWS Elastic Beanstalk
D. AWS IAM
✔️ Answer: C. AWS Elastic Beanstalk
32. A company needs high durability and availability for static website content. Which service should they use?
A. Amazon RDS
B. Amazon S3
C. Amazon EBS
D. Amazon DynamoDB
✔️ Answer: B. Amazon S3
33. Which AWS feature provides DDoS protection automatically?
A. AWS IAM
B. Amazon EC2
C. AWS Shield Standard
D. AWS Firewall Manager
✔️ Answer: C. AWS Shield Standard
✅ Section 16: Application Integration Services
34. Which AWS service is used for decoupling application components using message queues?
A. AWS Lambda
B. Amazon SNS
C. Amazon SQS
D. Amazon API Gateway
✔️ Answer: C. Amazon SQS
35. What is the main use of Amazon SNS?
A. Running containers
B. Storing documents
C. Publishing messages to subscribers
D. Encrypting databases
✔️ Answer: C. Publishing messages to subscribers
✅ Section 17: Management and Governance
36. Which AWS service helps enforce compliance and track changes in configuration?
A. Amazon Inspector
B. AWS CloudTrail
C. AWS Config
D. AWS Shield
✔️ Answer: C. AWS Config
37. What is the main function of AWS Organizations?
A. Manage IAM roles
B. Consolidate billing and apply policies across multiple AWS accounts
C. Monitor EC2 performance
D. Manage container orchestration
✔️ Answer: B. Consolidate billing and apply policies across multiple AWS accounts
✅ Section 18: Developer Tools
38. Which service provides a complete DevOps toolchain on AWS?
A. AWS CodePipeline
B. AWS CloudTrail
C. AWS CloudFormation
D. Amazon EKS
✔️ Answer: A. AWS CodePipeline
39. What is AWS CloudFormation used for?
A. Monitoring EC2 instances
B. Automating resource provisioning using templates
C. Storing backups
D. Sending email notifications
✔️ Answer: B. Automating resource provisioning using templates
✅ Section 19: Networking & Content Delivery
40. What does Amazon VPC allow you to do?
A. Create a private network in AWS
B. Host a website
C. Upload files to S3
D. Monitor billing usage
✔️ Answer: A. Create a private network in AWS
41. What does AWS Direct Connect provide?
A. A virtual server
B. A dedicated network connection between on-premises and AWS
C. High availability zones
D. DNS resolution
✔️ Answer: B. A dedicated network connection between on-premises and AWS
✅ Section 20: Additional Services & Concepts
42. Which AWS service helps analyze vast amounts of data quickly?
A. Amazon Redshift
B. AWS Lambda
C. Amazon EC2
D. AWS Glue
✔️ Answer: A. Amazon Redshift
43. What is the main purpose of AWS WAF (Web Application Firewall)?
A. File storage
B. Detect intrusion
C. Protect web applications from common exploits
D. Encrypt APIs
✔️ Answer: C. Protect web applications from common exploits
44. Which of the following provides managed Kubernetes?
A. Amazon EKS
B. Amazon ECS
C. AWS Fargate
D. AWS Lambda
✔️ Answer: A. Amazon EKS
45. What is a benefit of Amazon CloudFront?
A. Encryption of storage
B. Reduces latency by delivering content through edge locations
C. IAM management
D. Hosting machine learning models
✔️ Answer: B. Reduces latency by delivering content through edge locations
🧩 Scenario-Based Questions
46. Your company wants to migrate a large e-commerce website to the cloud. What AWS services could help with high availability and scalability?
A. Amazon EC2, Amazon S3, Elastic Load Balancer, Auto Scaling
B. AWS CloudTrail, Amazon SNS, Amazon RDS
C. AWS Lambda, Amazon Inspector, Amazon VPC
D. Amazon Glacier, AWS IAM, Amazon ECS
✔️ Answer: A. Amazon EC2, Amazon S3, Elastic Load Balancer, Auto Scaling
47. You are building a serverless architecture for a mobile app. Which combination of services should you use?
A. EC2, RDS, Route 53
B. Lambda, API Gateway, DynamoDB
C. S3, EBS, CloudTrail
D. IAM, EBS, CloudWatch
✔️ Answer: B. Lambda, API Gateway, DynamoDB
48. A customer needs to archive video files they rarely access. Which storage class should they use?
A. Amazon S3 Standard
B. Amazon S3 Intelligent-Tiering
C. Amazon S3 Glacier Deep Archive
D. Amazon EBS
✔️ Answer: C. Amazon S3 Glacier Deep Archive
49. You want to restrict access to an S3 bucket based on user identity. What should you use?
A. EC2 Key Pairs
B. IAM Policies
C. VPC Peering
D. Route 53
✔️ Answer: B. IAM Policies
50. A company needs to scale their database automatically based on traffic. What should they use?
A. Amazon RDS with Read Replicas
B. Amazon S3
C. AWS IAM
D. AWS Artifact
✔️ Answer: A. Amazon RDS with Read Replicas
✅ Section 21: Cloud Economics and Billing (Advanced)
51. What is the main benefit of consolidated billing in AWS Organizations?
A. Enabling encryption for all accounts
B. Blocking services for linked accounts
C. Aggregated billing across all accounts for volume discounts
D. Disabling IAM users across accounts
✔️ Answer: C. Aggregated billing across all accounts for volume discounts
52. A company is using multiple AWS services and wants to identify areas to reduce costs. What should they use?
A. AWS Trusted Advisor – Cost Optimization checks
B. AWS Config
C. AWS Lambda
D. AWS CloudFormation
✔️ Answer: A. AWS Trusted Advisor – Cost Optimization checks
53. Which AWS pricing model is best for short-term, unpredictable workloads?
A. Reserved Instances
B. Spot Instances
C. On-Demand Instances
D. Dedicated Hosts
✔️ Answer: C. On-Demand Instances
54. How can you get volume discounts on AWS services?
A. By selecting a Business Support Plan
B. By using consolidated billing
C. By signing up for AWS Lambda
D. By deleting unused EC2 instances
✔️ Answer: B. By using consolidated billing
✅ Section 22: Security & Compliance (Advanced)
55. What AWS service helps detect suspicious activity and unauthorized behavior?
A. Amazon Macie
B. Amazon GuardDuty
C. AWS Inspector
D. AWS WAF
✔️ Answer: B. Amazon GuardDuty
56. Which AWS tool provides compliance reports and security documentation?
A. AWS Shield
B. AWS IAM
C. AWS Artifact
D. AWS Config
✔️ Answer: C. AWS Artifact
57. A user must access AWS from multiple devices using multi-factor authentication. What should be enabled?
A. IAM Role
B. Security Group
C. Access Keys
D. MFA (Multi-Factor Authentication)
✔️ Answer: D. MFA (Multi-Factor Authentication)
58. What is the purpose of security groups in AWS?
A. Assign IAM policies to EC2
B. Control inbound and outbound traffic for EC2 instances
C. Manage billing alerts
D. Encrypt EBS volumes
✔️ Answer: B. Control inbound and outbound traffic for EC2 instances
✅ Section 23: High Availability & Disaster Recovery
59. What AWS service automatically distributes incoming application traffic across multiple targets?
A. AWS WAF
B. Elastic Load Balancing (ELB)
C. Amazon CloudFront
D. Amazon Inspector
✔️ Answer: B. Elastic Load Balancing (ELB)
60. A customer needs automatic backups, multi-AZ failover, and high availability for a relational database. What should they use?
A. Amazon DynamoDB
B. Amazon EC2
C. Amazon RDS with Multi-AZ deployment
D. Amazon S3
✔️ Answer: C. Amazon RDS with Multi-AZ deployment
61. Which AWS storage service provides versioning to protect against accidental deletion?
A. Amazon S3
B. Amazon EBS
C. Amazon Glacier
D. Amazon CloudFront
✔️ Answer: A. Amazon S3
✅ Section 24: AWS Global Infrastructure (Advanced)
62. A customer wants the lowest latency for a global audience. Which service helps achieve this?
A. Amazon EC2
B. AWS WAF
C. Amazon CloudFront
D. AWS Artifact
✔️ Answer: C. Amazon CloudFront
63. Which is a geographical area that contains multiple Availability Zones?
A. Edge Location
B. Data Center
C. Region
D. Subnet
✔️ Answer: C. Region
64. What benefit does deploying resources in multiple Availability Zones provide?
A. Reduces billing costs
B. Increases latency
C. Increases availability and fault tolerance
D. Simplifies IAM policy creation
✔️ Answer: C. Increases availability and fault tolerance
65. What is the main purpose of AWS edge locations?
A. Hosting relational databases
B. Storing backups
C. Delivering content closer to users
D. Encrypting traffic
✔️ Answer: C. Delivering content closer to users
✅ Section 25: Serverless & Event-Driven Architecture
66. Your app needs to process images automatically after they are uploaded to S3. Which combination is best?
A. Amazon EC2 + S3
B. AWS Lambda + S3 Event Notifications
C. Amazon ECS + IAM Role
D. AWS Batch + CloudTrail
✔️ Answer: B. AWS Lambda + S3 Event Notifications
67. Which AWS service allows you to expose RESTful APIs for serverless applications?
A. Amazon API Gateway
B. AWS Step Functions
C. AWS CloudTrail
D. Amazon VPC
✔️ Answer: A. Amazon API Gateway
68. Which service lets you automate workflows between AWS services?
A. Amazon SNS
B. AWS Step Functions
C. Amazon Route 53
D. AWS CodePipeline
✔️ Answer: B. AWS Step Functions
✅ Section 26: Storage & Data Management (Advanced)
69. A company wants to store backups that are rarely accessed but must be immediately available when needed. Best choice?
A. Amazon S3 Glacier Deep Archive
B. Amazon S3 One Zone-IA
C. Amazon S3 Intelligent-Tiering
D. Amazon S3 Standard
✔️ Answer: C. Amazon S3 Intelligent-Tiering
70. Which AWS service is best for sharing files across multiple EC2 instances?
A. Amazon S3
B. Amazon EFS
C. Amazon RDS
D. Amazon Glacier
✔️ Answer: B. Amazon EFS
71. What is a benefit of Amazon S3’s versioning feature?
A. Automatically compresses files
B. Stores only the latest object version
C. Protects against accidental deletions and overwrites
D. Restricts access to buckets
✔️ Answer: C. Protects against accidental deletions and overwrites
✅ Section 27: Automation & Infrastructure as Code
72. What AWS service lets you model and provision AWS resources using templates?
A. AWS Config
B. AWS CloudFormation
C. Amazon EC2
D. AWS Glue
✔️ Answer: B. AWS CloudFormation
73. Which AWS service automates deployments using pipelines?
A. AWS CodeBuild
B. AWS CodeDeploy
C. AWS CodePipeline
D. AWS CodeCommit
✔️ Answer: C. AWS CodePipeline
74. Which service allows developers to securely store and manage code repositories?
A. AWS CodePipeline
B. AWS CodeBuild
C. AWS CodeCommit
D. Amazon CloudFront
✔️ Answer: C. AWS CodeCommit
✅ Section 28: AWS Cloud Adoption & Migration
75. Your company is planning to move from on-premise to AWS. Which AWS tool can help estimate total savings?
A. AWS Artifact
B. AWS Pricing Calculator
C. AWS TCO Calculator
D. AWS Config
✔️ Answer: C. AWS TCO Calculator
76. Which service provides a list of AWS best practices, potential cost savings, and security improvements?
A. AWS Cost Explorer
B. AWS Well-Architected Tool
C. AWS IAM
D. Amazon CloudWatch
✔️ Answer: B. AWS Well-Architected Tool
✅ Section 29: Compliance & Risk Management
77. What AWS service provides access to compliance reports, such as ISO or SOC?
A. AWS GuardDuty
B. AWS Shield
C. AWS Artifact
D. Amazon Macie
✔️ Answer: C. AWS Artifact
78. Which AWS service helps protect sensitive data using machine learning?
A. AWS Config
B. Amazon Macie
C. AWS CloudTrail
D. AWS IAM
✔️ Answer: B. Amazon Macie
✅ Section 30: AI/ML (Cloud Practitioner level)
79. Which service allows developers to add natural language processing (NLP) to applications?
A. Amazon Polly
B. Amazon Lex
C. Amazon Comprehend
D. Amazon Forecast
✔️ Answer: C. Amazon Comprehend
80. A chatbot is being developed using AWS AI tools. Which service will power voice/text conversational interface?
A. Amazon Transcribe
B. Amazon Lex
C. Amazon Rekognition
D. Amazon Kendra
✔️ Answer: B. Amazon Lex
81. A company wants to analyze customer sentiment from reviews. Which AWS AI service should they use?
A. Amazon Translate
B. Amazon Textract
C. Amazon Comprehend
D. Amazon Forecast
✔️ Answer: C. Amazon Comprehend
✅ Section 31: Hybrid Cloud and Networking
82. Which AWS service helps connect on-premises environments to AWS over the internet securely?
A. Amazon VPC
B. AWS Direct Connect
C. AWS VPN
D. Amazon Route 53
✔️ Answer: C. AWS VPN
83. What is the difference between AWS Regions and Availability Zones?
A. Availability Zones are global; Regions are local
B. Regions are isolated geographic areas; Availability Zones are isolated data centers within a Region
C. Regions are virtual, AZs are physical
D. AZs are for billing, Regions are for deployment
✔️ Answer: B. Regions are isolated geographic areas; Availability Zones are isolated data centers within a Region
84. A company wants to resolve domain names and direct users to resources. Which service do they need?
A. Amazon Route 53
B. Amazon CloudFront
C. AWS Global Accelerator
D. Amazon GuardDuty
✔️ Answer: A. Amazon Route 53
✅ Section 32: Developer Tools & CI/CD
85. What service automates code compilation and testing in AWS?
A. AWS CodeDeploy
B. AWS CodeCommit
C. AWS CodeBuild
D. AWS CloudFormation
✔️ Answer: C. AWS CodeBuild
86. What is AWS CodeDeploy primarily used for?
A. Monitoring deployments
B. Hosting repositories
C. Managing infrastructure
D. Automating application deployments to EC2 and Lambda
✔️ Answer: D. Automating application deployments to EC2 and Lambda
87. Which service allows you to define full CI/CD workflows for applications?
A. AWS Lambda
B. AWS CodePipeline
C. Amazon EC2
D. Amazon RDS
✔️ Answer: B. AWS CodePipeline
✅ Section 33: Shared Responsibility Model – Deep Dive
88. In the shared responsibility model, who is responsible for data encryption?
A. AWS only
B. Customer only
C. Shared, depending on the service
D. Nobody, encryption is automatic
✔️ Answer: C. Shared, depending on the service
89. Who is responsible for updating the guest operating system in EC2?
A. AWS
B. AWS Support
C. Customer
D. Amazon CloudWatch
✔️ Answer: C. Customer
90. Which of the following is AWS responsible for in all service models?
A. Patching guest OS
B. Application code
C. Data integrity
D. Physical data center security
✔️ Answer: D. Physical data center security
✅ Section 34: Governance and Monitoring
91. Which service lets you define and enforce rules for your AWS resources?
A. AWS Config
B. AWS IAM
C. Amazon Inspector
D. AWS Trusted Advisor
✔️ Answer: A. AWS Config
92. What AWS service provides real-time monitoring of metrics?
A. Amazon CloudWatch
B. AWS Config
C. AWS Shield
D. AWS Trusted Advisor
✔️ Answer: A. Amazon CloudWatch
93. Which service automatically collects and logs API activity in your AWS account?
A. AWS CloudTrail
B. Amazon VPC
C. AWS IAM
D. Amazon Redshift
✔️ Answer: A. AWS CloudTrail
✅ Section 35: Real-World Use Cases & Miscellaneous
94. A startup wants to quickly test a simple web application in the cloud. Best option?
A. Amazon EC2
B. Amazon Lightsail
C. Amazon EFS
D. AWS CodePipeline
✔️ Answer: B. Amazon Lightsail
95. What AWS service is best suited to run Docker containers at scale?
A. AWS Lambda
B. Amazon ECS
C. AWS Config
D. AWS IAM
✔️ Answer: B. Amazon ECS
96. A business analyst wants to create dashboards and visualizations from data. Which AWS service is suitable?
A. AWS Glue
B. Amazon QuickSight
C. Amazon Athena
D. AWS CloudTrail
✔️ Answer: B. Amazon QuickSight
97. Which service helps run interactive SQL queries directly on S3 data?
A. Amazon Athena
B. Amazon Redshift
C. Amazon RDS
D. AWS Lambda
✔️ Answer: A. Amazon Athena
98. What service provides enterprise search across documents using AI?
A. Amazon Kendra
B. Amazon SageMaker
C. Amazon Translate
D. Amazon Rekognition
✔️ Answer: A. Amazon Kendra
99. Which service is used for media analysis, like facial recognition in images or videos?
A. Amazon Textract
B. Amazon Rekognition
C. Amazon Lex
D. Amazon Kendra
✔️ Answer: B. Amazon Rekognition
100. A customer wants to transcribe customer service calls to text. Which AI service should they use?
A. Amazon Translate
B. Amazon Comprehend
C. Amazon Transcribe
D. Amazon Polly
✔️ Answer: C. Amazon Transcribe