- 1
A startup wants to launch a web application without purchasing any physical hardware. They want to pay only for the resources they consume. Which cloud computing benefit does this describe?
Show answer
Answer: B
Pay-as-you-go (or on-demand) pricing is a core economic benefit of cloud computing — no upfront hardware investment, you pay for what you use. Elasticity is about scaling resources. Fault tolerance is about surviving failures. Global reach refers to deploying across regions.
- 2
Which AWS service provides scalable object storage designed for storing and retrieving any amount of data from anywhere on the internet?
Show answer
Answer: C
Amazon S3 (Simple Storage Service) is object storage — it stores files as objects in buckets with virtually unlimited capacity. EBS provides block storage volumes for EC2 instances. EFS provides managed file storage (NFS). Storage Gateway is a hybrid storage service that connects on-premises environments to AWS storage.
- 3 Select all that apply
Which TWO of the following are responsibilities of the customer under the AWS Shared Responsibility Model? (Select two.)
Show answer
Answer: A, D
Under the Shared Responsibility Model, AWS manages the security "of" the cloud (physical infrastructure, hypervisors, global network), while the customer manages security "in" the cloud (IAM configuration, data encryption, OS patching on EC2, firewall rules). Managing IAM and encrypting your data are always customer responsibilities.
- 4
An AWS Region consists of multiple Availability Zones, each made up of one or more discrete data centres.
Show answer
Answer: A
Each AWS Region contains multiple Availability Zones (typically 3 or more). Each AZ consists of one or more data centres with independent power, cooling, and networking. This design enables high availability — deploying across AZs protects against single data centre failures.
- 5
A company needs to run a relational database in AWS but does not want to manage patching, backups, or the underlying operating system. Which service should they use?
Show answer
Answer: D
Amazon RDS (Relational Database Service) is a managed service — AWS handles patching, backups, replication, and OS maintenance. You choose your database engine (MySQL, PostgreSQL, etc.) and focus on your data. EC2 with a database is self-managed (IaaS). DynamoDB is a NoSQL database, not relational. ElastiCache is for in-memory caching.
- 6
Which AWS service allows you to define and provision infrastructure using code in a declarative template format?
Show answer
Answer: A
CloudFormation lets you define your infrastructure as code in JSON or YAML templates. AWS provisions and configures the resources to match your template — it's declarative and repeatable. CodeDeploy automates application deployments. Config tracks resource configuration changes. Systems Manager provides operational tools for managing EC2 instances.
- 7 Select all that apply
Which TWO of the following are benefits of using multiple Availability Zones for an application? (Select two.)
Show answer
Answer: B, C
Deploying across multiple AZs means your application survives if one data centre (or AZ) goes down, increasing availability. There is actually a small data transfer cost between AZs, so it doesn't reduce costs. Multi-AZ alone doesn't guarantee compliance — that depends on the specific regulations and your configuration.
- 8
Which AWS service provides a content delivery network (CDN) that caches content at edge locations around the world to reduce latency for end users?
Show answer
Answer: C
CloudFront is AWS's CDN — it caches static and dynamic content at edge locations worldwide, serving users from the nearest location. Route 53 is DNS. Global Accelerator optimises network paths to your application but doesn't cache content. Elastic Load Balancing distributes traffic across targets within a Region.
- 9
An administrator wants to grant a developer permission to launch EC2 instances but not terminate them. Which AWS service should they use to configure this?
Show answer
Answer: B
IAM lets you create fine-grained permissions — you can allow ec2:RunInstances while denying ec2:TerminateInstances. Cognito manages user authentication for applications (not AWS resource access). Organizations manages multiple AWS accounts. Shield provides DDoS protection.
- 10
The AWS Free Tier provides unlimited free usage of all AWS services for the first 12 months after account creation.
Show answer
Answer: B
The Free Tier is not unlimited and does not cover all services. It offers three types of offers: 12-month free (limited quantities of specific services like EC2, S3, RDS), always free (services like Lambda with limited monthly invocations), and short-term trials. Exceeding the free tier limits incurs standard charges.
- 11
A company needs to run short-lived batch processing jobs that can tolerate interruptions. Which EC2 purchasing option would be the most cost-effective?
Show answer
Answer: D
Spot Instances offer up to 90% discount compared to On-Demand pricing, but AWS can reclaim them with 2 minutes notice when capacity is needed. This makes them ideal for fault-tolerant, interruptible workloads like batch processing, data analysis, and CI/CD builds. Reserved Instances suit steady-state workloads. Dedicated Hosts are for licensing or compliance requirements.
- 12
Which AWS service provides recommendations to help you reduce costs, improve performance, and address security gaps in your AWS environment?
Show answer
Answer: A
Trusted Advisor inspects your AWS environment and provides recommendations across five categories: cost optimisation, performance, security, fault tolerance, and service limits. CloudTrail logs API activity. Inspector assesses EC2 and container workloads for vulnerabilities. Cost Explorer visualises and analyses spending but doesn't provide cross-category recommendations.
- 13 Select all that apply
Which THREE of the following are pillars of the AWS Well-Architected Framework? (Select three.)
Show answer
Answer: A, C, E
The six pillars of the Well-Architected Framework are: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimisation, and Sustainability. Elasticity and scalability are cloud concepts but not named pillars of the framework.
- 14
Which AWS service records all API calls made in your account, including who made the call, when, and from which IP address?
Show answer
Answer: C
CloudTrail logs every API call made to your AWS account — who called what, when, from where, and whether it succeeded. This is essential for auditing and compliance. CloudWatch monitors metrics and logs. Config tracks resource configuration history. X-Ray traces application requests for debugging.
- 15
A company wants to consolidate billing for multiple AWS accounts and apply service control policies across all of them. Which service should they use?
Show answer
Answer: B
AWS Organizations lets you centrally manage multiple AWS accounts — consolidated billing, service control policies (SCPs) to restrict what accounts can do, and organisational units (OUs) for grouping accounts. IAM manages users within a single account. Control Tower builds on top of Organizations to automate multi-account setup. Budgets tracks spending but doesn't manage accounts.
- 16
Amazon VPC allows you to launch AWS resources into a logically isolated virtual network that you define.
Show answer
Answer: A
A Virtual Private Cloud (VPC) is a logically isolated section of the AWS cloud where you define your own network — IP ranges, subnets, route tables, and gateways. Resources like EC2 instances and RDS databases launch into your VPC, giving you control over the network environment.
- 17
Which AWS support plan provides access to a Technical Account Manager (TAM)?
Show answer
Answer: D
Only the Enterprise support plan includes a designated Technical Account Manager. The TAM provides proactive guidance, architectural reviews, and helps coordinate AWS support. Basic is free with limited support. Developer provides business-hours email support. Business adds 24/7 phone support and faster response times but no TAM.
- 18 Put these in order
Place the following steps in the correct order to deploy a highly available web application on AWS.
Show answer
Correct order
- C Create a VPC with subnets in at least two Availability Zones
- D Launch EC2 instances and place an Application Load Balancer in front of them
- A Configure an Auto Scaling group to maintain the desired number of instances
- B Test failover by terminating an instance and verifying replacement
First set up the network foundation — a VPC with subnets across multiple AZs. Then launch the EC2 instances and an ALB to distribute traffic. Add Auto Scaling to automatically replace failed instances and handle demand changes. Finally test that failover works by terminating an instance and confirming the Auto Scaling group replaces it.
- 19
Which AWS service is a fully managed NoSQL database that provides single-digit millisecond performance at any scale?
Show answer
Answer: A
DynamoDB is AWS's managed NoSQL (key-value and document) database, designed for consistent low-latency performance regardless of scale. RDS and Aurora are relational database services. Redshift is a data warehouse for analytics workloads, not transactional NoSQL.
- 20 Select all that apply
Which TWO of the following are features of Amazon S3? (Select two.)
Show answer
Answer: B, D
S3 supports lifecycle policies (automatically move objects from Standard to Glacier, for example) and versioning (keep every version of an object, enabling recovery from accidental deletes). Block-level storage is EBS. POSIX file system access is EFS. S3 latency is typically single-digit milliseconds, not sub-millisecond.