Skip to content
advanced Phase 10 · AWS Certification Prep

Practice Questions

Solve practice exam questions and review explanations for weak areas.

2h
0 problems
Topic Progress 0%

Practice Exam Strategy

Practice Exam Strategy

How to Use Practice Exams

1. Take a baseline exam (no studying)
   → Identify weak areas

2. Study weak areas (2-3 weeks)

3. Take timed practice exams
   → Simulate real exam conditions

4. Review ALL answers (correct and incorrect)
   → Understand why each answer is right/wrong

5. Repeat until consistently scoring 80%+

Exam Simulation Rules

  • No pausing during timed exams
  • No looking up answers
  • No phone/distractions
  • Same time of day as real exam
  • Same format (online or testing center)

Score Targets

Score Action
< 60% Study more, retake in 1 week
60-70% Review weak areas, retake in 3 days
70-80% Focus on weak topics, retake in 1 week
> 80% Ready for exam

Sample Questions: Cloud Concepts

Sample Questions: Cloud Concepts

Question 1

A company wants to migrate their on-premises data center to AWS. They need to maintain compliance with regulatory requirements that mandate data residency in specific geographic locations. Which AWS feature should they use?

A) AWS Organizations
B) AWS Regions
C) AWS Availability Zones
D) AWS Local Zones

Answer

B) AWS Regions

AWS Regions are geographic locations where AWS infrastructure is deployed. Data residency requirements are met by selecting specific Regions. Organizations help with multi-account management, Availability Zones are within Regions for HA, and Local Zones extend a Region to metro areas.

Question 2

Which AWS service provides a managed NoSQL database with single-digit millisecond performance at any scale?

A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon ElastiCache

Answer

C) Amazon DynamoDB

DynamoDB is AWS's fully managed NoSQL database service. It provides single-digit millisecond performance at any scale. RDS and Aurora are relational databases, and ElastiCache is an in-memory caching service.

Question 3

A startup wants to run a new application but is unsure about the traffic patterns. They want to minimize costs while maintaining high availability. Which pricing model is MOST cost-effective?

A) Reserved Instances
B) Spot Instances
C) On-Demand Instances with Auto Scaling
D) Dedicated Hosts

Answer

C) On-Demand Instances with Auto Scaling

For unpredictable traffic, On-Demand with Auto Scaling provides cost efficiency by scaling with demand. Reserved Instances require commitment, Spot Instances can be interrupted, and Dedicated Hosts are for compliance requirements.

Sample Questions: Security

Sample Questions: Security

Question 1

A company needs to encrypt data at rest in an S3 bucket using a customer-managed key. Which service should they use?

A) AWS Shield
B) AWS KMS
C) AWS WAF
D) AWS Certificate Manager

Answer

B) AWS KMS

AWS KMS (Key Management Service) creates and manages encryption keys. It integrates with S3 for server-side encryption with customer-managed keys. Shield is DDoS protection, WAF is web application firewall, and ACM manages SSL/TLS certificates.

Question 2

A developer needs to store database credentials securely and rotate them automatically every 30 days. Which service should they use?

A) AWS Systems Manager Parameter Store
B) AWS Secrets Manager
C) AWS KMS
D) AWS IAM

Answer

B) AWS Secrets Manager

Secrets Manager provides automatic rotation for secrets like database credentials. It has built-in Lambda rotation functions. Parameter Store can store secrets but requires manual rotation. KMS manages encryption keys, and IAM manages access.

Question 3

A security team needs to detect unauthorized API calls across all AWS accounts. Which service should they enable?

A) AWS Config
B) AWS CloudTrail
C) Amazon GuardDuty
D) AWS Security Hub

Answer

B) AWS CloudTrail

CloudTrail logs all API calls across accounts for auditing. GuardDuty detects threats, Config tracks resource compliance, and Security Hub aggregates security findings.

Sample Questions: Architecture

Sample Questions: Architecture

Question 1

A company is designing a web application that must handle 100,000 concurrent users. The application uses a three-tier architecture with web, application, and database layers. Which combination of services provides the HIGHEST availability?

A) EC2 in single AZ, RDS in single AZ
B) EC2 Auto Scaling across 3 AZs, RDS Multi-AZ
C) EC2 in 3 AZs, RDS read replica
D) Lambda, DynamoDB, CloudFront

Answer

B) EC2 Auto Scaling across 3 AZs, RDS Multi-AZ

Auto Scaling across multiple AZs provides fault tolerance. RDS Multi-AZ provides automatic failover. Option A has no redundancy, C lacks automatic failover, and D may not handle the specific three-tier requirement.

Question 2

A media company needs to deliver video content globally with low latency and high throughput. Which service should they use?

A) Amazon S3 with Transfer Acceleration
B) Amazon CloudFront
C) AWS Global Accelerator
D) Amazon Route 53 with latency-based routing

Answer

B) Amazon CloudFront

CloudFront is a CDN that caches content at edge locations globally, providing low latency and high throughput. S3 Transfer Acceleration is for uploads, Global Accelerator is for non-HTTP traffic, and Route 53 is DNS.

Question 3

A company needs to decouple their application components and process messages in the order they are received. Which service should they use?

A) Amazon SNS
B) Amazon SQS Standard Queue
C) Amazon SQS FIFO Queue
D) Amazon EventBridge

Answer

C) Amazon SQS FIFO Queue

FIFO queues guarantee exactly-once processing and maintain message order. Standard queues provide at-least-once delivery without ordering. SNS is pub/sub, and EventBridge is event routing.

Common Distractors and Patterns

Common Distractors and Patterns

Common Distractors

Pattern Example Why It's Wrong
Overly broad "Use IAM for everything" Too vague, specific service exists
Wrong service "Use S3 for database" Wrong use case
Partial answer "Enable encryption" (missing key mgmt) Incomplete
Old technology "Use Classic Load Balancer" Deprecated
Free tier "Use free tier for production" Not scalable

Question Patterns

  1. "MOST cost-effective": Consider all costs, not just compute
  2. "LEAST operational overhead": Prefer managed services
  3. "HIGHEST availability": Multi-AZ minimum, Multi-Region for DR
  4. "LEAST privilege": Minimum permissions needed
  5. "BEST practice": Follow Well-Architected Framework

Red Flags in Questions

  • "Single AZ" → Usually wrong for production
  • "Root account" → Security risk
  • "Hardcoded credentials" → Never correct
  • "All permissions" → Violates least privilege
  • "On-premises" → Usually wants cloud solution

Time-Saving Tips

  1. Read the question stem first (not answers)
  2. Identify key requirements in the question
  3. Eliminate 2 obviously wrong answers first
  4. Choose between remaining 2 answers
  5. If unsure, trust first instinct
  6. Mark and move on if taking > 2 minutes