Deploy Your Cloud Basics Before Exam Day

Take on 25 practice questions across four Cloud Practitioner domains
Start Free Practice
No Credit Card Required
HOW TO PREPARE

Everything You Need to Know First

Warm-up topics before the test.
  • Basic IT Concepts: General understanding of servers, storage, networking, and how applications run.
  • Cloud Computing Fundamentals: Awareness of cloud benefits and deployment models like public, private, and hybrid.
  • AWS at a Glance: Familiarity with core services like EC2, S3, and IAM, plus how AWS pricing and billing work.
PRACTICE TEST

Put Your Knowledge to the Test

25 multiple-choice questions, including ones built around command output
A company with many AWS accounts wants one bill for all of them and wants their combined usage to count toward volume pricing tiers. Which feature provides this?
AWS Budgets
AWS Billing Conductor
Consolidated billing in AWS Organizations
AWS Cost Explorer
C
Consolidated billing produces one bill and aggregates usage across member accounts for volume pricing. Billing Conductor customizes pricing for showback, while Budgets and Cost Explorer track and analyze spending.
Billing Pricing and Support
25
Select One
A company runs a production database on Amazon EC2 around the clock. Its usage is steady and predictable, and it will keep running for at least the next year. The company also runs stateless batch jobs that can be interrupted and restarted at any time. Which two purchasing options minimize cost for these workloads?
On-Demand Instances for the batch jobs
Dedicated Hosts for the database
Spot Instances for the batch jobs
A Savings Plan or Reserved Instances for the database
C
Spot offers the deepest discounts for interruptible work, and commitment-based pricing suits steady usage that will last for the commitment term. On-Demand costs more for both patterns, and Dedicated Hosts and Capacity Reservations address licensing or capacity needs rather than cost.
Billing Pricing and Support
24
Select Two
D
A company is planning a new workload and wants an estimate of its monthly AWS cost before building anything. Which tool should it use?
AWS Cost Explorer
AWS Budgets
AWS Cost and Usage Report
AWS Pricing Calculator
D
AWS Pricing Calculator estimates the cost of a proposed workload from its planned services and usage. Cost Explorer analyzes existing costs and usage and can forecast future spending from historical data. AWS Budgets lets you configure spending thresholds and alerts, including before a workload starts generating charges. The Cost and Usage Report provides detailed billing and usage records.
Billing Pricing and Support
23
Select One
A company wants to add a conversational chatbot to its website that understands both voice and text input. Which managed AWS service is designed to build this interface?
Amazon Lex
Amazon Polly
Amazon Comprehend
Amazon Transcribe
A
Amazon Lex builds conversational interfaces that accept voice and text. Polly converts text to speech, Transcribe converts speech to text, and Comprehend analyzes text; none of them builds a chatbot on its own.
Cloud Technology and Services
22
Select One
A company wants its application to survive the failure of a single data center while keeping network latency between application tiers low. What should it do?
Deploy the application to several edge locations
Deploy the application in one Availability Zone in each of two Regions
Deploy the application to an AWS Local Zone
Deploy the application across multiple Availability Zones in one Region
D
Availability Zones are physically separate within a Region and connected by low-latency links, so a multi-AZ design survives a data center failure while keeping tiers close. Edge locations serve cached content, and a Local Zone is a single location.
Cloud Technology and Services
21
Select One
A company needs a dedicated private network connection from its data center to AWS that does not travel over the public internet. Which service meets this requirement?
AWS Site-to-Site VPN
AWS Direct Connect
AWS Transit Gateway
Amazon CloudFront
B
AWS Direct Connect provides dedicated network connectivity between an on-premises location and AWS without using the public internet. Site-to-Site VPN provides encrypted tunnels and can operate over the internet or, with the appropriate configuration, over Direct Connect. Transit Gateway connects VPCs and on-premises networks through a central hub but does not itself provide a dedicated physical connection. CloudFront is a content delivery network.
Cloud Technology and Services
20
Select One
An application needs a serverless NoSQL database as its durable primary data store, with single-digit millisecond performance at any scale. Which service fits?
Amazon ElastiCache
Amazon Neptune
Amazon DynamoDB
Amazon RDS for PostgreSQL
C
DynamoDB is a serverless NoSQL key-value and document database with single-digit millisecond performance at scale. ElastiCache is an in-memory cache rather than a primary durable store, Neptune is a graph database, and RDS is relational.
Cloud Technology and Services
19
Select One
An application needs a MySQL-compatible relational database whose storage is automatically replicated six ways across three Availability Zones. Which service provides this storage architecture?
Amazon Aurora
Amazon RDS for MySQL
MySQL installed on Amazon EC2
Amazon Redshift
A
Aurora's cluster volume stores six copies of data across three Availability Zones. RDS for MySQL uses EBS-based storage with a different replication model, and Redshift is a data warehouse.
Cloud Technology and Services
18
Select One
A hospital stores medical images that are accessed about once a quarter. When an image is requested, it must be returned within milliseconds. The data must survive the loss of an Availability Zone, and the access pattern is known and predictable. Which S3 storage class offers the lowest storage cost for this pattern?
S3 Standard
S3 Standard-Infrequent Access
S3 Glacier Deep Archive
S3 Glacier Instant Retrieval
D
Glacier Instant Retrieval is designed for data accessed about once a quarter that still needs millisecond retrieval, at lower storage cost than Standard-IA. Standard-IA suits roughly monthly access, and Deep Archive retrieval takes hours.
Cloud Technology and Services
17
Select One
Which service provides block-level storage volumes that attach to Amazon EC2 instances?
Amazon S3
Amazon EBS
Amazon EFS
Amazon S3 Glacier Flexible Retrieval
B
Amazon EBS provides block storage volumes for EC2. S3 and S3 Glacier are object storage, and EFS is a shared file system.
Cloud Technology and Services
16
Select One
A team wants to run a containerized web API without provisioning, patching, or scaling any EC2 instances. Which option meets this requirement?
Amazon ECS on Amazon EC2 instances
AWS Elastic Beanstalk with an EC2 environment
Amazon ECS with AWS Fargate
Amazon EC2 Auto Scaling group
C
Fargate is serverless compute for containers, so there are no EC2 instances to manage. ECS on EC2, Elastic Beanstalk EC2 environments, and Auto Scaling groups all run on instances in the customer's account.
Cloud Technology and Services
15
Select One
An external auditor asks the company for the AWS SOC 2 report and other AWS compliance documentation. Where can the company download these documents?
AWS Artifact
AWS Audit Manager
AWS Security Hub
AWS Config
A
AWS Artifact provides on-demand access to AWS compliance reports such as SOC reports, plus certain agreements. Audit Manager helps customers collect evidence about their own AWS usage, not download AWS's reports.
Security and Compliance
14
Select One
A company wants to automatically discover and classify personally identifiable information (PII) stored in its Amazon S3 buckets. Which service should it use?
Amazon GuardDuty
Amazon Inspector
AWS Shield Advanced
Amazon Macie
D
Macie uses machine learning and pattern matching to discover sensitive data such as PII in S3. GuardDuty detects threats, Inspector finds software vulnerabilities, and Shield Advanced protects against DDoS attacks.
Security and Compliance
13
Select One
A security team must identify which IAM principal made the API call that deleted an S3 bucket yesterday. Which service records the API call and the identity that made it?
Amazon CloudWatch metrics
AWS CloudTrail
Amazon Inspector
AWS Trusted Advisor
B
CloudTrail records API calls, including the identity of the caller, the time, and the source. CloudWatch metrics record numeric measurements, Inspector scans for vulnerabilities, and Trusted Advisor gives best-practice recommendations.
Security and Compliance
12
Select One
A company has 40 AWS accounts in AWS Organizations. Employees should sign in once with the company's existing identity provider and then access only the accounts assigned to them. Which service should the company use?
IAM users created in each account
Amazon Cognito user pools
AWS IAM Identity Center
AWS Directory Service Simple AD
C
IAM Identity Center connects to an external identity provider and gives workforce users single sign-on to assigned accounts in an organization. Cognito targets customer identities for applications, and per-account IAM users do not provide centralized sign-on.
Security and Compliance
11
Select One
A company has just created a new AWS account. Which action follows AWS best practices for the account root user?
Enable MFA and use the root user only for tasks that require it
Create root user access keys for automation scripts
Share the root user password with each administrator
Use the root user for daily administration and enable CloudTrail
A
AWS recommends protecting the root user with MFA, not creating root access keys, and reserving the root user for the few tasks that require it. Logging does not make routine root use safe.
Security and Compliance
10
Select One
An application running on Amazon EC2 needs to write objects to one S3 bucket. What is the most secure way to give the application credentials?
Create an IAM user and store its access keys in the application configuration file
Store an IAM user's access keys in AWS Secrets Manager and rotate them weekly
Use the root user's access keys and restrict them with a bucket policy
Attach an IAM role to the instance through an instance profile
D
An instance role delivers temporary credentials that rotate automatically, so no long-term keys exist to leak. Storing IAM user keys, even in Secrets Manager, still relies on long-term credentials, and root keys should never be used by applications.
Security and Compliance
9
Select One
A Lambda function uses an AWS-managed runtime, a .zip deployment package, and automatic runtime updates. Under the AWS shared responsibility model, which two tasks are AWS responsibilities?
Patching the operating system and applying managed runtime updates
Writing function code that validates its input
Scoping the permissions of the function's execution role
Maintaining the physical servers that host the Lambda service
A
For this configuration, AWS manages the underlying infrastructure and operating system and applies managed runtime updates automatically. Customers remain responsible for their code, dependencies, IAM permissions, and the data their functions process. Custom runtimes, container images, and other runtime update modes shift more responsibility to the customer.
Security and Compliance
8
Select Two
D
A company runs its database on Amazon RDS for PostgreSQL. Under the AWS shared responsibility model, which task is the customer's responsibility?
Patching the operating system of the underlying database host
Managing database user accounts and their permissions
Replacing failed storage hardware in the Availability Zone
Controlling physical access to the data center
B
With a managed service such as RDS, AWS manages the host operating system, hardware, and facilities. The customer still manages database users, network access, and data protection settings.
Security and Compliance
7
Select One
A company wants to reduce the environmental impact of a workload that has variable demand. Which action aligns most directly with the Sustainability pillar of the AWS Well-Architected Framework?
Provision capacity for the highest expected peak and keep it running
Replicate every dataset to all AWS Regions for durability
Scale resources to match demand and use managed services
Keep development environments running outside working hours
C
The Sustainability pillar emphasizes maximizing utilization and removing idle resources, and managed services share infrastructure efficiently. Overprovisioning, unnecessary replication, and idle environments all increase resource consumption.
Cloud Concepts
6
Select One
A company is planning its migration to AWS. Which two statements correctly describe AWS migration strategies?
Retire means moving an application to a larger instance type.
Rehost moves an application to AWS without changing its architecture.
Retain means decommissioning an application that is no longer needed.
Replatform makes targeted optimizations, such as moving to a managed database, without changing the core architecture.
B
Rehost is "lift and shift", and Replatform is "lift, tinker, and shift". Retire means decommissioning an application, Retain means keeping it where it is for now, and Refactor means re-architecting it, often to cloud-native services.
Cloud Concepts
5
Select Two
D
An application must continue serving users when a single Availability Zone fails, and it must recover automatically from component failures. Which AWS Well-Architected Framework pillar most directly addresses this requirement?
Reliability
Performance efficiency
Operational excellence
Cost optimization
A
The Reliability pillar covers a workload's ability to perform its function correctly and recover from failure, including multi-AZ design. Performance efficiency focuses on using resources efficiently, not on failure recovery.
Cloud Concepts
4
Select One
A company's cloud adoption plan must address staff training, new job roles, and organizational change management. Which AWS Cloud Adoption Framework (AWS CAF) perspective focuses on these concerns?
Governance
Platform
Operations
People
D
The People perspective covers culture, organizational structure, training, and change management. Governance covers program and risk management, Platform covers architecture, and Operations covers running cloud services.
Cloud Concepts
3
Select One
A startup wants to avoid a large upfront purchase of data center hardware and instead pay each month only for the resources it consumes. Which advantage of cloud computing does this describe?
Go global in minutes
Benefit from massive economies of scale
Trade fixed expense for variable expense
Stop spending money running and maintaining data centers
C
This advantage replaces upfront capital investment in hardware with paying only for what is consumed. The other advantages concern global reach, lower prices from aggregate usage, and removing data center operations work.
Cloud Concepts
2
Select One
A retailer's traffic triples during a weekend sale and returns to normal on Monday. The company wants capacity to follow demand automatically so that it does not pay for idle servers. Which cloud concept does this describe?
High availability
Elasticity
Fault tolerance
Economies of scale
B
Elasticity is the ability to acquire and release resources automatically as demand changes. High availability and fault tolerance concern surviving failures, and economies of scale explain why AWS can offer lower prices.
Cloud Concepts
1
Select One
DOMAIN Question 01/00

0 of 0 answered

A Course Built Around Your Needs

AWS Certified Cloud Practitioner (CLF-C02)

Beginner
Associate
Professional
15.00
Hours
Play icon
Prepare for AWS Certified Cloud Practitioner exam with comprehensive coverage of cloud fundamentals, security, services, billing, and global infrastructure.
Michael Forrester
Details
WHY HANDS-ON PRACTICE

Knowledge, Earned by Doing

The Cloud Practitioner exam rewards understanding the cloud, not memorizing every service.

Build Real Exam Speed

The exam gives you 90 minutes for 65 questions, an average of about 83 seconds each. Repeated practice trains you to match a scenario to the right service fast, so you're not re-reading options under time pressure.

Know Your Weak Domains‍

Review every question you missed and spot the topics that need more work. Better to find them here than on exam day.

Realistic Scenario Questions

Exam-style questions, that are a mix of service recall and scenario-based items.

Reduce Exam-Day Anxiety‍

Familiarity with multiple-choice format removes surprises, so nerves don't cost you marks.

Reinforce Through Repetition

Spaced repetition on frequently tested concepts, like the shared responsibility model, pricing models, and global infrastructure, moves them from look it up to just know it.

Benchmark Against a Passing Score‍

Compare your score with AWS's 700/1000 passing threshold and identify topics to review before exam-day.

HEAR FROM OUR LEARNERS

Real Learners. Real Results

Alhamdulillah 🙏! Thrilled to announce that I am now officially a Certified Kubernetes Administrator (CKA)! While Kubernetes, cluster orchestration, and container security are already central to my daily DevSecOps work, earning this certification is a great validation of those hands-on skills.Thanks to Mumshad Mannambeth and the KodeKloud team—their course and hands-on labs helped me a lot in preparing for this exam.The learning never stops! 🚀

Read Full Post
Imtiaz Ali
DevOps | SRE | Multi-Cloud | DevSecOps

Freshly certified: Certified Kubernetes Administrator (CKA)! 🚀Passing this hands-on, live-terminal exam was a great challenge. Paired with my AWS Certified DevOps Engineer – Professional, it reinforces my focus on bridging enterprise multi-account cloud governance with production-grade Kubernetes runtime operations.A special shoutout and big thank you to Mumshad Mannambeth, the KodeKloud team, and the Cloud Native Computing Foundation (CNCF) and Kubernetes (Official) community. The Certified Kubernetes Administrator (CKA) course was hands-down the best preparation for the live terminal environment! 🛠️Next stop: continuing to build resilient, developer-first platform foundations!

Read Full Post
Gaurav Dubey
Cloud Architect | Platform Engineer | AWS DevOps Pro | CKA

Cherishing one of my dreams - CKS Certified! ✨Last year, in October, when I cracked my CKA, my colleagues asked, “When is CKS?” 😂And I was like… bro. 😅Because it felt so much bigger. I also knew it wasn’t just Kubernetes anymore, but Kubernetes with a special layer of security - yeah, tightened Kubernetes.Back then, I used to look up to CKS like a child gazing at one of the stars in the sky.⭐Now, fast forward to today - I cleared it last week and officially became a Certified Kubernetes Security Specialist (CKS), thanks to the Cloud Native Computing Foundation (CNCF), The Linux Foundation and my company Aivar Innovations. 🎉That moment felt so special, and I’m incredibly grateful to all my colleagues, friends, and family for all the support. ❤️A mention of the resources I used: KodeKloud by Mumshad Mannambeth and Kim Wüstkamp’s CKS courses. I also had my colleagues supporting me with my doubts and anxieties before the exam. 😂Looking forward to applying everything I’ve learned in my work and continuing to grow in the Cloud Native and Kubernetes space. 🚀So, cheers to everyone who dreams, aspires, and inspires. Keep going and keep up the good work! 🥂And as I always say - God, keep it coming!! ✨

Read Full Post
Rima Sidique
DevOps Engineer | AI & DevOps Enthusiast

I've successfully passed CKA certification. Shout-out to Mumshad Mannambeth for his great CKA course and labs and to Omkar Shelke Killercoda CKA scenarios. Links: - https://lnkd.in/eZPVHJeR- https://lnkd.in/eEVyZdaZ

Read Full Post
Gabriel Rodríguez
DevSecOps Engineer

🎉 The Kubernetes journey continues… and this time, happy to say I’m officially a Kubestronaut! 🧑🚀🚀🎖️ 1 out of 242 in France and 1 out of 4217 worldwide!⏳✈️ It’s been quite a journey. From my early days working with Kubernetes, thanks to the opportunity Prof. Timur Friedman gave me to contribute to the EdgeNet project, to securing my internship as a DevOps Engineer at Sonos, Inc. — and fast-forward five years, here I am today, a Senior DevOps Engineer at Sonos, Inc. working extensively with Kubernetes everyday.💌 A special thank you to Jose Alfredo Alvarez Aldana for your support, guidance, and for everything you taught me along the way. I was really lucky to have the opportunity to work alongside you early in my journey. 🙏💯 A big thank you to Mumshad Mannambeth for building KodeKloud! The platform has been incredibly helpful throughout this journey, both for learning and preparing for the exams.And of course, shout out to all the people who supported, challenged, and inspired me along the way. ❤️Never give up 💪Keep smiling 😃

Read Full Post
Rima Sidique
DevOps Engineer | AI & DevOps Enthusiast

Alhamdulillah 🙏! Thrilled to announce that I am now officially a Certified Kubernetes Administrator (CKA)! While Kubernetes, cluster orchestration, and container security are already central to my daily DevSecOps work, earning this certification is a great validation of those hands-on skills.Thanks to Mumshad Mannambeth and the KodeKloud team—their course and hands-on labs helped me a lot in preparing for this exam.The learning never stops! 🚀

Read Full Post
Imtiaz Ali
DevOps | SRE | Multi-Cloud | DevSecOps

Freshly certified: Certified Kubernetes Administrator (CKA)! 🚀Passing this hands-on, live-terminal exam was a great challenge. Paired with my AWS Certified DevOps Engineer – Professional, it reinforces my focus on bridging enterprise multi-account cloud governance with production-grade Kubernetes runtime operations.A special shoutout and big thank you to Mumshad Mannambeth, the KodeKloud team, and the Cloud Native Computing Foundation (CNCF) and Kubernetes (Official) community. The Certified Kubernetes Administrator (CKA) course was hands-down the best preparation for the live terminal environment! 🛠️Next stop: continuing to build resilient, developer-first platform foundations!

Read Full Post
Gaurav Dubey
Cloud Architect | Platform Engineer | AWS DevOps Pro | CKA

Cherishing one of my dreams - CKS Certified! ✨Last year, in October, when I cracked my CKA, my colleagues asked, “When is CKS?” 😂And I was like… bro. 😅Because it felt so much bigger. I also knew it wasn’t just Kubernetes anymore, but Kubernetes with a special layer of security - yeah, tightened Kubernetes.Back then, I used to look up to CKS like a child gazing at one of the stars in the sky.⭐Now, fast forward to today - I cleared it last week and officially became a Certified Kubernetes Security Specialist (CKS), thanks to the Cloud Native Computing Foundation (CNCF), The Linux Foundation and my company Aivar Innovations. 🎉That moment felt so special, and I’m incredibly grateful to all my colleagues, friends, and family for all the support. ❤️A mention of the resources I used: KodeKloud by Mumshad Mannambeth and Kim Wüstkamp’s CKS courses. I also had my colleagues supporting me with my doubts and anxieties before the exam. 😂Looking forward to applying everything I’ve learned in my work and continuing to grow in the Cloud Native and Kubernetes space. 🚀So, cheers to everyone who dreams, aspires, and inspires. Keep going and keep up the good work! 🥂And as I always say - God, keep it coming!! ✨

Read Full Post
Rima Sidique
DevOps Engineer | AI & DevOps Enthusiast

I've successfully passed CKA certification. Shout-out to Mumshad Mannambeth for his great CKA course and labs and to Omkar Shelke Killercoda CKA scenarios. Links: - https://lnkd.in/eZPVHJeR- https://lnkd.in/eEVyZdaZ

Read Full Post
Gabriel Rodríguez
DevSecOps Engineer

🎉 The Kubernetes journey continues… and this time, happy to say I’m officially a Kubestronaut! 🧑🚀🚀🎖️ 1 out of 242 in France and 1 out of 4217 worldwide!⏳✈️ It’s been quite a journey. From my early days working with Kubernetes, thanks to the opportunity Prof. Timur Friedman gave me to contribute to the EdgeNet project, to securing my internship as a DevOps Engineer at Sonos, Inc. — and fast-forward five years, here I am today, a Senior DevOps Engineer at Sonos, Inc. working extensively with Kubernetes everyday.💌 A special thank you to Jose Alfredo Alvarez Aldana for your support, guidance, and for everything you taught me along the way. I was really lucky to have the opportunity to work alongside you early in my journey. 🙏💯 A big thank you to Mumshad Mannambeth for building KodeKloud! The platform has been incredibly helpful throughout this journey, both for learning and preparing for the exams.And of course, shout out to all the people who supported, challenged, and inspired me along the way. ❤️Never give up 💪Keep smiling 😃

Read Full Post
Rima Sidique
DevOps Engineer | AI & DevOps Enthusiast
FAQs

Frequently Asked Questions

Is this practice test free ? 

Yes! This practice test is completely free. You can take it as many times as you like to practice and assess your knowledge.

Do I need to install anything ? 

No. You don’t need to install anything. The practice test is completely browser-based, so you can start practicing directly online. 

What if I'm new to this domain?

That's completely fine , mock tests aren't just for the final week before your exam. Taking one early gives you a baseline: you'll see which topics you already grasp, which ones you've never encountered, and how the real exam frames its questions. Every attempt comes with detailed explanations for each answer, so even the questions you get wrong become a study guide. We'd suggest starting with one full mock test, reviewing the explanations carefully, then working through the linked learning material before attempting the next one. 

How closely does this mock test match the real exam?

The question style and pattern closely mirror the real certification exam, the way scenarios are framed, the answer options, and the level of reasoning required are all modelled on it. The main difference is length: this mock has 25 sample questions, while the actual exam typically presents 50-60 questions of this type. So treat this as a representative sample rather than a full-length simulation. The style will feel familiar on exam day; the stamina and time pressure of a longer paper is something you'll want to prepare for separately.