Find a practice exam
Flexible search understands AI-901, ai901, ai 901, 901, ai, network plus, and saa c03.
No matching practice exams yet.
AWS Cloud Practitioner Practice Test
Start a free 30-question AWS Cloud Practitioner daily set with source-backed explanations, local progress, and a fresh rotation every morning.
AWS Cloud Practitioner
AWS Certified Cloud Practitioner
Why this page works
- Thirty focused questions every day
- Source links on every explanation
- Local progress saved automatically
- Email sync path ready for later
- Apps provide deeper drills when available
Use this AWS Cloud Practitioner practice test to review AWS Certified Cloud Practitioner. Questions rotate daily and each explanation links to the source used to validate the answer.
7-day score keeper
Answer questions today and this will become a rolling 7-day scorecard.
Keep today’s practice moving
Guest progress saves automatically on this device. Add an email later when you want a magic link that keeps your daily CLF-C02 practice in sync across browsers.
Guest progress saves on this device automatically
150 verified questions are currently in the live bank. Questions updated at Apr 13, 2026, 4:07 PM CDT. The daily set rotates at 10:00 AM local time, and each explanation links back to the source used to write it. Use the web set for quick practice, then switch to the app when available for larger banks and deeper review.
Use these official AWS resources alongside the daily practice set. They cover the provider's own exam page, study guide, or prep material.
Need adjacent AWS practice pages too? AWS practice hub.
When evaluating requirements for repeatable processes in AWS, which access method should be considered?
A. Incorrect: AWS Management Console is incorrect because it does not answer this stem as directly as Infrastructure as Code (IaC).
B. Correct: Infrastructure as Code (IaC) is the correct answer because for repeatable processes in AWS, Infrastructure as Code (IaC) should be considered.
C. Incorrect: Manual configuration via CLI is incorrect because it does not answer this stem as directly as Infrastructure as Code (IaC).
D. Incorrect: On-premises deployment models is incorrect because it does not answer this stem as directly as Infrastructure as Code (IaC).
What is a key benefit of replicating an IAM Identity Center instance to multiple AWS Regions?
A. Correct: Simplification of workforce user access to applications or AWS accounts through one place is the correct answer because replicating an IAM Identity Center instance simplifies workforce user access to applications or AWS accounts through one place, streamlining and simplifying the process.
B. Incorrect: Automatic deployment of AWS managed services in each Region is incorrect because it does not answer this stem as directly as Simplification of workforce user access to applications or AWS accounts through one place.
C. Incorrect: Creation of new IAM roles across multiple Regions simultaneously is incorrect because it does not answer this stem as directly as Simplification of workforce user access to applications or AWS accounts through one place.
D. Incorrect: Enhanced security by restricting access to specific Regions is incorrect because it does not answer this stem as directly as Simplification of workforce user access to applications or AWS accounts through one place.
How does the concept of economies of scale benefit cloud computing compared to on-premises environments?
A. Incorrect: Economies of scale in cloud computing reduce variable costs is incorrect because it does not answer this stem as directly as Cloud providers can negotiate lower hardware prices due to larger volume purchases, passing savings to customers..
B. Incorrect: Fixed costs are significantly higher in cloud computing is incorrect because it does not answer this stem as directly as Cloud providers can negotiate lower hardware prices due to larger volume purchases, passing savings to customers..
C. Incorrect: On-premises environments offer better cost savings through economies of scale is incorrect because it does not answer this stem as directly as Cloud providers can negotiate lower hardware prices due to larger volume purchases, passing savings to customers..
D. Correct: Cloud providers can negotiate lower hardware prices due to larger volume purchases, passing savings to customers is the correct answer because cloud providers can negotiate lower hardware prices due to larger volume purchases, passing savings to customers. Economies of scale allow cloud providers to negotiate lower hardware prices due to bulk purchases, which they can pass on as cost savings to their customers.
Which AWS tool can be used to generate cost estimates for adding an EC2 instance to handle weekly traffic spikes?
A. Incorrect: AWS Cost Explorer is incorrect because it does not answer this stem as directly as AWS Pricing Calculator.
B. Incorrect: AWS Budgets is incorrect because it does not answer this stem as directly as AWS Pricing Calculator.
C. Incorrect: AWS Trusted Advisor is incorrect because it does not answer this stem as directly as AWS Pricing Calculator.
D. Correct: AWS Pricing Calculator is the correct answer because the AWS Pricing Calculator is specifically designed to create cost estimates for using AWS services, including adding an EC2 instance.
Which AWS service provides a managed Kubernetes environment for running containers, offering robust security features but requiring more operational overhead compared to serverless options?
A. Incorrect: Amazon ECS is incorrect because it does not answer this stem as directly as Amazon EKS.
B. Incorrect: AWS AppSync is incorrect because it does not answer this stem as directly as Amazon EKS.
C. Incorrect: AWS Fargate is incorrect because it does not answer this stem as directly as Amazon EKS.
D. Correct: Amazon EKS is the correct answer because amazon EKS provides a managed Kubernetes environment for running containers, offering robust security features but requiring more operational overhead.
Which AWS service is best for protecting web applications from SQL injection attacks?
A. Incorrect: AWS Security Hub is incorrect because it does not answer this stem as directly as AWS Web Application Firewall (AWS WAF).
B. Incorrect: Amazon Inspector is incorrect because it does not answer this stem as directly as AWS Web Application Firewall (AWS WAF).
C. Incorrect: AWS Shield is incorrect because it does not answer this stem as directly as AWS Web Application Firewall (AWS WAF).
D. Correct: AWS Web Application Firewall (AWS WAF) is the correct answer because aWS WAF can inspect and filter web requests to help protect web applications from attacks such as SQL injection.
What is a key benefit of using the Bring Your Own License (BYOL) model in cloud environments?
A. Incorrect: Increases fixed costs is incorrect because it does not answer this stem as directly as Reduces variable costs.
B. Correct: Reduces variable costs is the correct answer because the BYOL model allows customers to bring their existing licenses, which can reduce the cost associated with purchasing new licenses.
C. Incorrect: Decreases automation benefits is incorrect because it does not answer this stem as directly as Reduces variable costs.
D. Incorrect: Eliminates economies of scale is incorrect because it does not answer this stem as directly as Reduces variable costs.
Which purchasing option allows you to pay a lower hourly rate for EC2 instances in exchange for committing to use them continuously over a one-year or three-year term?
A. Incorrect: On-Demand Instances is incorrect because it does not answer this stem as directly as Reserved Instances.
B. Incorrect: Spot Instances is incorrect because it does not answer this stem as directly as Reserved Instances.
C. Correct: Reserved Instances is the correct answer because reserved Instances offer a significant discount on On-Demand rates in exchange for a commitment to use the instance continuously over a one-year or three-year term.
D. Incorrect: Savings Plans is incorrect because it does not answer this stem as directly as Reserved Instances.
Which AWS storage option is ideal for temporary data that does not need to be backed up or preserved?
A. Incorrect: Amazon EFS is incorrect because it does not answer this stem as directly as Instance Store.
B. Correct: Instance Store is the correct answer because instance store provides temporary block-level storage for Amazon EC2 instances, suitable for caching, storing logs, and other temporary data.
C. Incorrect: Amazon FSx is incorrect because it does not answer this stem as directly as Instance Store.
D. Incorrect: AWS Storage Gateway is incorrect because it does not answer this stem as directly as Instance Store.
Which AWS service continuously monitors, analyzes, and processes logs in your AWS environment to identify suspicious activity?
A. Incorrect: AWS Config is incorrect because it does not answer this stem as directly as Amazon GuardDuty.
B. Incorrect: AWS CloudTrail is incorrect because it does not answer this stem as directly as Amazon GuardDuty.
C. Incorrect: AWS WAF is incorrect because it does not answer this stem as directly as Amazon GuardDuty.
D. Correct: Amazon GuardDuty is the correct answer because amazon GuardDuty is specifically designed for continuous monitoring and analysis of AWS data sources and logs to detect potential threats.
What AWS service is utilized to migrate large datasets from on-premises storage to the cloud, supporting migration strategies?
A. Incorrect: AWS Lambda for serverless computing is incorrect because it does not answer this stem as directly as AWS Snowball for data transfer.
B. Incorrect: Amazon S3 Glacier for long-term archiving is incorrect because it does not answer this stem as directly as AWS Snowball for data transfer.
C. Correct: AWS Snowball for data transfer is the correct answer because aWS Snowball is used to migrate large datasets from on-premises storage to the cloud, supporting migration strategies.
D. Incorrect: Amazon RDS for database management is incorrect because it does not answer this stem as directly as AWS Snowball for data transfer.
What dataset does AWS Cost Explorer use to display your costs and usage?
A. Incorrect: Internal dataset is incorrect because it does not answer this stem as directly as Same dataset.
B. Incorrect: Custom dataset is incorrect because it does not answer this stem as directly as Same dataset.
C. Incorrect: External dataset is incorrect because it does not answer this stem as directly as Same dataset.
D. Correct: Same dataset is the correct answer because this is correct because 'Cost Explorer uses the same dataset'.
Which AWS service enables you to execute code in response to events without managing servers?
A. Incorrect: Amazon Route 53 is incorrect because it does not answer this stem as directly as AWS Lambda.
B. Incorrect: Amazon CloudWatch is incorrect because it does not answer this stem as directly as AWS Lambda.
C. Correct: AWS Lambda is the correct answer because aWS Lambda is a serverless compute service that executes code in response to events, such as changes in data.
D. Incorrect: Amazon AppStream is incorrect because it does not answer this stem as directly as AWS Lambda.
Which AWS service provides protection against DDoS attacks?
A. Incorrect: AWS WAF is incorrect because it does not answer this stem as directly as AWS Shield.
B. Incorrect: Amazon Inspector is incorrect because it does not answer this stem as directly as AWS Shield.
C. Correct: AWS Shield is the correct answer because aWS Shield is designed to protect your applications from DDoS attacks.
D. Incorrect: Amazon GuardDuty is incorrect because it does not answer this stem as directly as AWS Shield.
Which AWS Cloud benefit allows for rapid deployment of applications across multiple regions?
A. Correct: Global reach is the correct answer because global reach is a benefit that enables the rapid deployment of applications across multiple regions.
B. Incorrect: Elasticity is incorrect because it does not answer this stem as directly as Global reach.
C. Incorrect: Agility is incorrect because it does not answer this stem as directly as Global reach.
D. Incorrect: High availability is incorrect because it does not answer this stem as directly as Global reach.
When considering data transfer costs in AWS, which of the following is true regarding incoming data transfer?
A. Incorrect: Outgoing data transfer within a region is charged at $0.12 per GB is incorrect because it does not answer this stem as directly as Incoming data transfer from the internet to AWS is free..
B. Incorrect: Incoming data transfer between regions incurs charges is incorrect because it does not answer this stem as directly as Incoming data transfer from the internet to AWS is free..
C. Correct: Incoming data transfer from the internet to AWS is free is the correct answer because incoming data transfer from the internet to AWS is free. AWS does not charge for incoming data transfer from the internet to AWS.
D. Incorrect: Data transfer between S3 buckets in different accounts costs extra is incorrect because it does not answer this stem as directly as Incoming data transfer from the internet to AWS is free..
Which AWS service is primarily used for building scalable applications by automating the software release process?
A. Incorrect: Amazon Connect is incorrect because it does not answer this stem as directly as AWS CodePipeline.
B. Incorrect: Amazon Simple Queue Service (SQS) is incorrect because it does not answer this stem as directly as AWS CodePipeline.
C. Correct: AWS CodePipeline is the correct answer because aWS CodePipeline is a developer tool service that helps in building scalable applications by automating the software release process.
D. Incorrect: Amazon WorkSpaces is incorrect because it does not answer this stem as directly as AWS CodePipeline.
Using AWS Artifact, which type of document can you download to verify compliance with ISO standards?
A. Incorrect: System and Organization Controls (SOC) is incorrect because it does not answer this stem as directly as Compliance reports.
B. Incorrect: Agreements is incorrect because it does not answer this stem as directly as Compliance reports.
C. Incorrect: On-demand downloads is incorrect because it does not answer this stem as directly as Compliance reports.
D. Correct: Compliance reports is the correct answer because aWS Artifact includes reports on compliance with International Organization for Standardization (ISO) standards.
How does AWS Cloud's global infrastructure benefit businesses in terms of deployment speed?
A. Incorrect: It requires longer setup times for new regions is incorrect because it does not answer this stem as directly as It enables rapid deployment across multiple geographic locations..
B. Correct: It enables rapid deployment across multiple geographic locations is the correct answer because it enables rapid deployment across multiple geographic locations. AWS Cloud's global infrastructure allows businesses to quickly deploy applications in various regions around the world, enhancing speed of deployment and global reach.
C. Incorrect: It limits the availability to a single region only is incorrect because it does not answer this stem as directly as It enables rapid deployment across multiple geographic locations..
D. Incorrect: It increases dependency on local data centers is incorrect because it does not answer this stem as directly as It enables rapid deployment across multiple geographic locations..
Which AWS storage tier is most cost-effective for storing large amounts of data that are accessed infrequently but must be retained for long periods?
A. Correct: Amazon S3 Glacier Deep Archive is the correct answer because the S3 storage class documentation describes S3 Glacier Deep Archive as the lowest-cost storage class for long-lived archive data that is rarely accessed.
B. Incorrect: Amazon S3 Standard is incorrect because it does not answer this stem as directly as Amazon S3 Glacier Deep Archive.
C. Incorrect: Amazon EBS General Purpose SSD is incorrect because it does not answer this stem as directly as Amazon S3 Glacier Deep Archive.
D. Incorrect: Amazon RDS Multi-AZ Deployment is incorrect because it does not answer this stem as directly as Amazon S3 Glacier Deep Archive.
What is the primary purpose of Amazon EC2 Auto Scaling?
A. Incorrect: To manage storage volumes is incorrect because it does not answer this stem as directly as To automatically adjust the number of EC2 instances based on demand.
B. Incorrect: To distribute traffic evenly across instances is incorrect because it does not answer this stem as directly as To automatically adjust the number of EC2 instances based on demand.
C. Correct: To automatically adjust the number of EC2 instances based on demand is the correct answer because amazon EC2 Auto Scaling adjusts the number of EC2 instances in response to changes in load.
D. Incorrect: To provide content delivery network services is incorrect because it does not answer this stem as directly as To automatically adjust the number of EC2 instances based on demand.
What does IAM manage that controls access in AWS services when using temporary security credentials or IAM users?
A. Incorrect: IAM manages permissions for S3 buckets is incorrect because it does not answer this stem as directly as IAM manages permissions that control access..
B. Incorrect: IAM manages billing for service usage is incorrect because it does not answer this stem as directly as IAM manages permissions that control access..
C. Incorrect: IAM manages encryption keys for data is incorrect because it does not answer this stem as directly as IAM manages permissions that control access..
D. Correct: IAM manages permissions that control access is the correct answer because iAM manages permissions that control access. According to the source, IAM is used to manage permissions that control access in AWS services when using IAM users or temporary security credentials.
Which pillar of the AWS Well-Architected Framework focuses on protecting information and systems from unauthorized access, leakage, or theft?
A. Correct: Security is the correct answer because the Security pillar is specifically concerned with protecting information and systems.
B. Incorrect: Operational Excellence is incorrect because it does not answer this stem as directly as Security.
C. Incorrect: Reliability is incorrect because it does not answer this stem as directly as Security.
D. Incorrect: Performance Efficiency is incorrect because it does not answer this stem as directly as Security.
Which AWS tool provides recommendations to optimize your resources for cost efficiency?
A. Correct: AWS Trusted Advisor is the correct answer because aWS Trusted Advisor offers real-time recommendations designed to improve the availability, reliability, performance, and cost of your AWS environment.
B. Incorrect: AWS Health API is incorrect because it does not answer this stem as directly as AWS Trusted Advisor.
C. Incorrect: AWS Partner Network is incorrect because it does not answer this stem as directly as AWS Trusted Advisor.
D. Incorrect: AWS re:Post is incorrect because it does not answer this stem as directly as AWS Trusted Advisor.
When designing a highly available application on AWS, why is it important to use multiple Availability Zones within the same AWS Region?
A. Incorrect: To reduce latency between users is incorrect because it does not answer this stem as directly as To improve fault tolerance and availability in case of zone failures.
B. Incorrect: To ensure data durability across different geographic locations is incorrect because it does not answer this stem as directly as To improve fault tolerance and availability in case of zone failures.
C. Incorrect: To comply with international data protection regulations is incorrect because it does not answer this stem as directly as To improve fault tolerance and availability in case of zone failures.
D. Correct: To improve fault tolerance and availability in case of zone failures is the correct answer because using multiple Availability Zones within the same AWS Region improves fault tolerance and availability by ensuring that your application can continue to operate even if one zone experiences an outage.
Under the AWS shared responsibility model, who is responsible for securing access to customer resources?
A. Incorrect: AWS is incorrect because it does not answer this stem as directly as Customer.
B. Correct: Customer is the correct answer because the customer is responsible for securing access to their own resources under the AWS shared responsibility model.
C. Incorrect: Both AWS and Customer is incorrect because it does not answer this stem as directly as Customer.
D. Incorrect: Third-party vendors is incorrect because it does not answer this stem as directly as Customer.
What is a key benefit of implementing automation in cloud environments?
A. Incorrect: Reducing the need for rightsizing is incorrect because it does not answer this stem as directly as Improving cost savings through efficiency.
B. Incorrect: Increasing fixed costs is incorrect because it does not answer this stem as directly as Improving cost savings through efficiency.
C. Correct: Improving cost savings through efficiency is the correct answer because this is correct because understanding the benefits of automation, which includes improving cost savings through efficiency.
D. Incorrect: Decreasing economies of scale is incorrect because it does not answer this stem as directly as Improving cost savings through efficiency.
What feature of AWS Budgets allows you to receive alerts when your costs approach or exceed defined limits?
A. Incorrect: Notifications is incorrect because it does not answer this stem as directly as Alerts.
B. Correct: Alerts is the correct answer because this is correct because you can set spending limits and receive alerts.
C. Incorrect: Thresholds is incorrect because it does not answer this stem as directly as Alerts.
D. Incorrect: Triggers is incorrect because it does not answer this stem as directly as Alerts.
Which component in an Amazon VPC is used to allocate IPv6 GUA addresses to EC2 instances?
A. Incorrect: NAT Gateway is incorrect because it does not answer this stem as directly as IP Address Manager.
B. Incorrect: Route Table is incorrect because it does not answer this stem as directly as IP Address Manager.
C. Correct: IP Address Manager is the correct answer because the IP Address Manager can be used to allocate IPv6 GUA addresses to resources in your VPC, such as EC2 instances.
D. Incorrect: Network Load Balancer is incorrect because it does not answer this stem as directly as IP Address Manager.
Which AWS service shifts responsibility to the customer for managing both operating system updates and database software patches?
A. Correct: Amazon EC2 is the correct answer because in Amazon EC2, customers are responsible for maintaining the operating system and applications.
B. Incorrect: Amazon RDS is incorrect because it does not answer this stem as directly as Amazon EC2.
C. Incorrect: AWS Lambda is incorrect because it does not answer this stem as directly as Amazon EC2.
D. Incorrect: AWS AppSync is incorrect because it does not answer this stem as directly as Amazon EC2.
How are AWS Cloud Practitioner questions generated?
dotCreds builds AWS Cloud Practitioner practice questions from public exam objectives and AWS certification and documentation references. The questions are written for realistic study practice, not copied from exam dumps.
How are explanations sourced?
Each question includes an explanation and, when available, a source link back to the provider documentation or reference used to validate the answer. That keeps the practice tied to study material you can actually review.
What score do I get?
The page tracks today's answered count and accuracy for the 30-question daily set, then saves a 7-day score history on this device so you can see your recent practice trend.
Why use this site?
The site is the fastest way to start AWS Cloud Practitioner practice without installing anything. It is built for daily recall, quick weak-topic discovery, and source-backed explanations you can review immediately.
Why use the app when available?
The web page is the quick free sampler. If a dotCreds app is available for AWS Cloud Practitioner, the app is better for larger banks, focused weak-domain drills, longer review sessions, and mobile study routines.