AWS Cloud Practitioner 1000 Practice Questions

❓ Question 1:

What type of storage does Amazon S3 provide?

A) Block storage
B) File storage
C) Object storage
D) In-memory storage

✅ Correct Answer: C) Object storage

Explanation: Amazon S3 is an object storage service. It stores data as objects within
buckets. Each object includes the data itself, a key, and metadata.

❓ Question 2:

What is the primary purpose of EC2 Auto Scaling?

A) Managing user accounts
B) Encrypting storage volumes
C) Automatically adjusting the number of EC2 instances based on traffic
D) Executing Lambda functions

✅ Correct Answer: C) Automatically adjusting the number of EC2 instances based on

traffic
Explanation: EC2 Auto Scaling helps maintain application availability by automatically
adding or removing EC2 instances according to traffic or load conditions.

❓ Question 3:

What does AWS IAM manage?

A) Storage classes
B) Network connections
C) Identities and access permissions
D) Database queries

✅ Correct Answer: C) Identities and access permissions

Explanation: IAM (Identity and Access Management) is used to control who can access
AWS resources and what actions they can perform.

❓ Question 4:

Which of the following is a serverless compute service?

A) Amazon EC2
B) Amazon RDS
C) AWS Lambda
D) Amazon EBS

✅ Correct Answer: C) AWS Lambda

Explanation: AWS Lambda is a serverless compute service. It runs code in response to
events and automatically manages the compute resources required.

❓ Question 5:

Which AWS service is used for content delivery?

A) Amazon CloudWatch
B) AWS CloudTrail
C) Amazon CloudFront
D) Amazon VPC

✅ Correct Answer: C) Amazon CloudFront

Explanation: CloudFront is AWS's Content Delivery Network (CDN) that delivers data,
videos, and applications to users with low latency from the nearest edge location.

❓ Question 6:

Which of the following is a benefit of using Amazon RDS?

A) Automatically increasing EC2 instance size
B) Manually configuring SQL servers
C) Automated database backup, patching, and maintenance
D) Managing NoSQL databases

✅ Correct Answer: C) Automated database backup, patching, and maintenance

Explanation: Amazon RDS automates administrative tasks such as backups, software
patching, monitoring, and scaling of a relational database.

❓ Question 7:

Which AWS service provides a virtual network dedicated to your AWS account?
A) Amazon CloudFront
B) Amazon VPC
C) AWS Direct Connect
D) AWS Organizations

✅ Correct Answer: B) Amazon VPC

Explanation: Amazon Virtual Private Cloud (VPC) allows you to launch AWS resources into
a virtual network that you define. It’s logically isolated from other AWS accounts.

❓ Question 8:
Which service would you use to monitor AWS resource usage and performance
metrics?
A) AWS CloudTrail
B) AWS Inspector
C) Amazon CloudWatch
D) AWS Config

✅ Correct Answer: C) Amazon CloudWatch

Explanation: Amazon CloudWatch collects and tracks metrics, monitors logs, and
automatically reacts to changes in your AWS resources.

❓ Question 9:

What is a benefit of using the AWS Cloud?

A) Increased upfront capital expenses
B) Fixed capacity infrastructure
C) Elasticity and scalability
D) Manual provisioning of resources

✅ Correct Answer: C) Elasticity and scalability

Explanation: AWS offers elasticity and scalability, meaning you can automatically adjust
resources as needed, scaling up or down based on demand.

❓ Question 10:

Which AWS support plan includes access to a Technical Account Manager (TAM)?
A) Basic
B) Developer
C) Business
D) Enterprise

✅ Correct Answer: D) Enterprise

Explanation: Only the Enterprise Support Plan offers a dedicated Technical Account
Manager (TAM), along with concierge support and white-glove service.

❓ Question 11:

Which AWS service is designed to simplify migration of databases to AWS?

A) AWS Glue
B) AWS DMS
C) Amazon Aurora
D) Amazon RDS

✅ Correct Answer: B) AWS DMS

Explanation: AWS Database Migration Service (DMS) helps you migrate databases to AWS
quickly and securely, with minimal downtime.
❓ Question 12:

Which of the following is an AWS responsibility under the Shared Responsibility

Model?
A) Securing customer data
B) Managing customer credentials
C) Securing the physical infrastructure
D) Configuring security groups

✅ Correct Answer: C) Securing the physical infrastructure

Explanation: In the Shared Responsibility Model, AWS is responsible for the security "of" the
cloud, which includes the physical infrastructure.

❓ Question 13:

What does the AWS Free Tier offer for new customers?
A) Unlimited free usage for all services
B) One-time usage credit only
C) Free trials for selected services with usage limits
D) No-cost access to support plans

✅ Correct Answer: C) Free trials for selected services with usage limits
Explanation: AWS Free Tier provides limited-time access (often 12 months) to specific
services within free usage thresholds.

❓ Question 14:

Which AWS service can help distribute incoming application traffic across multiple
targets?
A) Amazon CloudFront
B) AWS Shield
C) Amazon Route 53
D) Elastic Load Balancing

✅ Correct Answer: D) Elastic Load Balancing

Explanation: Elastic Load Balancing automatically distributes incoming traffic across
multiple EC2 instances or other resources to ensure high availability.

❓ Question 15:

What is the purpose of AWS Organizations?

A) To monitor usage of EC2 instances
B) To consolidate billing and manage multiple AWS accounts
C) To create virtual private networks
D) To distribute content globally
✅ Correct Answer: B) To consolidate billing and manage multiple AWS accounts
Explanation: AWS Organizations lets you centrally manage and govern multiple AWS
accounts within your organization and apply consolidated billing.

❓ Question 16:

Which AWS service lets you run containerized applications without managing servers
or clusters?
A) Amazon EC2
B) AWS Lambda
C) Amazon ECS with Fargate
D) Amazon EKS

✅ Correct Answer: C) Amazon ECS with Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that works with
Amazon ECS, allowing you to run containers without managing the underlying infrastructure.

❓ Question 17:

Which AWS service is best suited for long-term, infrequently accessed data storage at
the lowest cost?
A) Amazon S3 Standard
B) Amazon S3 Intelligent-Tiering
C) Amazon S3 Glacier
D) Amazon EBS

✅ Correct Answer: C) Amazon S3 Glacier

Explanation: Amazon S3 Glacier is designed for archival and long-term backup. It offers the
lowest-cost storage option, suitable for data that is rarely accessed.

❓ Question 18:

Which service helps you estimate the monthly costs of your AWS architecture?
A) AWS CloudFormation
B) AWS Cost Explorer
C) AWS Trusted Advisor
D) AWS Pricing Calculator

✅ Correct Answer: D) AWS Pricing Calculator

Explanation: AWS Pricing Calculator helps you estimate your monthly AWS usage and costs
based on the services and configurations you plan to use.

❓ Question 19:

Which of the following best describes the pay-as-you-go pricing model?

A) Pay a fixed fee regardless of usage
B) Pay only for the resources you use
C) Pay in advance for one year of service
D) Pay extra for every API call

✅ Correct Answer: B) Pay only for the resources you use

Explanation: The pay-as-you-go model allows customers to pay only for what they use, with
no upfront cost or long-term commitment.

❓ Question 20:

Which AWS service provides Domain Name System (DNS) functionality?

A) AWS Route 53
B) AWS Direct Connect
C) Amazon CloudFront
D) AWS VPN

✅ Correct Answer: A) AWS Route 53

Explanation: Amazon Route 53 is a scalable and highly available Domain Name System
(DNS) web service.

❓ Question 21:

Which feature of AWS helps protect against DDoS attacks?

A) AWS Key Management Service
B) AWS Shield
C) AWS Artifact
D) AWS WAF

✅ Correct Answer: B) AWS Shield

Explanation: AWS Shield provides protection against Distributed Denial of Service (DDoS)
attacks. AWS Shield Advanced offers enhanced protection for more complex use cases.

❓ Question 22:

Which AWS database service is fully managed and designed for NoSQL workloads?
A) Amazon Aurora
B) Amazon RDS
C) Amazon Redshift
D) Amazon DynamoDB

✅ Correct Answer: D) Amazon DynamoDB

Explanation: DynamoDB is a fully managed NoSQL database service designed for key-
value and document data models.

❓ Question 23:
Which of the following is NOT a benefit of using the AWS Cloud?
A) Capital expenses replaced by variable costs
B) Elasticity
C) Full control over physical infrastructure
D) Global reach

✅ Correct Answer: C) Full control over physical infrastructure

Explanation: In AWS, customers do not have control over the physical infrastructure, as
AWS manages it. Customers manage their resources "in" the cloud, not the underlying
hardware.

❓ Question 24:

Which AWS service helps analyze log data in real-time?

A) Amazon S3
B) Amazon Athena
C) Amazon Kinesis
D) AWS CloudTrail

✅ Correct Answer: C) Amazon Kinesis

Explanation: Amazon Kinesis is used to collect, process, and analyze real-time, streaming
data like logs, videos, or telemetry.

❓ Question 25:

Which AWS tool provides best practices and cost-saving recommendations?

A) AWS Cost Explorer
B) AWS Trusted Advisor
C) AWS Management Console
D) AWS CloudFormation

✅ Correct Answer: B) AWS Trusted Advisor

Explanation: AWS Trusted Advisor offers real-time guidance to help provision your
resources following AWS best practices for security, performance, and cost optimization.

❓ Question 26:

What does the AWS Well-Architected Framework help you with?

A) Estimating your bill
B) Designing secure, high-performing, resilient, and efficient infrastructure
C) Encrypting your database
D) Managing billing alerts

✅ Correct Answer: B)
Explanation: The AWS Well-Architected Framework provides best practices and guidelines
for building secure, reliable, scalable, and efficient cloud architectures.
❓ Question 27:

Which AWS service helps manage encryption keys for your applications?
A) AWS Secrets Manager
B) Amazon RDS
C) AWS KMS (Key Management Service)
D) Amazon Cognito

✅ Correct Answer: C) AWS KMS (Key Management Service)

Explanation: AWS Key Management Service (KMS) allows you to create and manage
cryptographic keys and control their use across AWS services.

❓ Question 28:

What AWS service allows you to automate infrastructure deployment using code?
A) Amazon Inspector
B) AWS CloudFormation
C) Amazon EC2
D) AWS CodePipeline

✅ Correct Answer: B) AWS CloudFormation

Explanation: AWS CloudFormation is an Infrastructure as Code (IaC) service that lets you
model and provision AWS resources using templates.

❓ Question 29:

What is the benefit of using Amazon Aurora over traditional RDS databases?
A) It's cheaper than DynamoDB
B) It provides serverless Lambda integration
C) It offers up to 5x better performance than MySQL
D) It supports NoSQL only

✅ Correct Answer: C) It offers up to 5x better performance than MySQL

Explanation: Amazon Aurora is a high-performance, MySQL- and PostgreSQL-compatible
relational database offering better performance and availability.

❓ Question 30:

Which AWS service is used to centrally manage access across multiple AWS
accounts?
A) AWS IAM
B) AWS Organizations
C) AWS KMS
D) Amazon EC2
✅ Correct Answer: B) AWS Organizations
Explanation: AWS Organizations allows centralized management of billing and access
control across multiple AWS accounts within an organization.

❓ Question 31:

What does Amazon S3 offer to ensure high durability?

A) Backup to Glacier
B) Replication to EC2
C) Automatically stores copies across multiple Availability Zones
D) Built-in antivirus scanning

✅ Correct Answer: C) Automatically stores copies across multiple Availability Zones

Explanation: Amazon S3 stores data redundantly across multiple AZs, providing
99.999999999% (11 9’s) durability.

❓ Question 32:

Which service can help you run big data frameworks like Apache Spark and Hadoop?
A) Amazon Athena
B) Amazon Redshift
C) Amazon EMR
D) Amazon QuickSight

✅ Correct Answer: C) Amazon EMR

Explanation: Amazon EMR (Elastic MapReduce) is used for processing and analyzing large
amounts of data using open-source tools like Spark, Hadoop, Hive, etc.

❓ Question 33:

What is the purpose of an AWS Availability Zone?

A) Distribute global content
B) Serve as a local region endpoint
C) Provide isolated data center within a region for fault tolerance
D) Provide free tier access

✅ Correct Answer: C) Provide isolated data center within a region for fault tolerance
Explanation: Each AWS Region consists of multiple isolated Availability Zones to provide
high availability and fault tolerance.

❓ Question 34:

Which service allows you to deploy and manage containerized applications at scale?
A) Amazon EC2
B) AWS Lambda
C) Amazon ECS
D) Amazon S3

✅ Correct Answer: C) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) is a highly scalable container
orchestration service that supports Docker containers.

❓ Question 35:

What is a key feature of AWS CloudTrail?

A) Sends alerts when EC2 is overloaded
B) Monitors performance of S3 buckets
C) Records and tracks user activity and API usage
D) Optimizes database performance

✅ Correct Answer: C) Records and tracks user activity and API usage
Explanation: AWS CloudTrail provides event history of your AWS account activity, including
actions taken through the console, SDKs, and CLI.

❓ Question 36:

Which AWS support plan is best for experimentation and testing?

A) Enterprise
B) Basic
C) Developer
D) Business

✅ Correct Answer: C) Developer

Explanation: The Developer support plan is designed for early development and testing,
offering business hours access to Cloud Support Associates.

❓ Question 37:

Which of the following is an AWS database service that is fully managed, scalable, and
designed for NoSQL applications?
A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon ElastiCache

✅ Correct Answer: C) Amazon DynamoDB

Explanation: DynamoDB is a fully managed, scalable NoSQL database service designed for
applications that require low-latency data access.

❓ Question 38:
Which AWS service allows you to track and manage your AWS resources and
compliance?
A) AWS CloudTrail
B) AWS Config
C) Amazon Inspector
D) AWS Trusted Advisor

✅ Correct Answer: B) AWS Config

Explanation: AWS Config helps you track and manage AWS resource configurations,
ensuring compliance with governance and regulatory standards.

❓ Question 39:

What is the primary function of Amazon Elastic File System (EFS)?

A) Store high-performance data for machine learning models
B) Provide block storage for EC2 instances
C) Provide scalable file storage that can be accessed by multiple EC2 instances
D) Store large amounts of unstructured data

✅ Correct Answer: C) Provide scalable file storage that can be accessed by multiple
EC2 instances
Explanation: Amazon EFS is a scalable file storage service that allows multiple EC2
instances to access the same data concurrently.

❓ Question 40:

Which of the following AWS services is used for web application firewall protection?
A) Amazon Shield
B) AWS WAF
C) AWS Firewall Manager
D) Amazon VPC

✅ Correct Answer: B) AWS WAF

Explanation: AWS Web Application Firewall (WAF) helps protect your web applications from
common web exploits, such as SQL injection and cross-site scripting.

❓ Question 41:

What AWS service allows you to deploy, manage, and scale Docker containers?
A) Amazon ECS
B) AWS Lambda
C) AWS Elastic Beanstalk
D) Amazon RDS

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) is used for managing Docker
containers and scaling them according to traffic demands.
❓ Question 42:

Which service would you use to create an isolated network environment in AWS?
A) Amazon VPC
B) Amazon CloudFront
C) AWS Direct Connect
D) AWS S3

✅ Correct Answer: A) Amazon VPC

Explanation: Amazon Virtual Private Cloud (VPC) allows you to create isolated networks
within AWS to launch your resources.

❓ Question 43:

Which service would you use for real-time log analysis and monitoring?
A) Amazon CloudWatch Logs
B) AWS Glue
C) Amazon S3
D) AWS DMS

✅ Correct Answer: A) Amazon CloudWatch Logs

Explanation: Amazon CloudWatch Logs allows you to collect, monitor, and analyze logs
from your AWS resources in real-time.

❓ Question 44:

Which service enables secure and private connections between your on-premises
data center and AWS?
A) AWS VPN
B) AWS Direct Connect
C) Amazon VPC
D) AWS CloudTrail

✅ Correct Answer: B) AWS Direct Connect

Explanation: AWS Direct Connect provides a dedicated, private network connection from
your on-premises data center to AWS.

❓ Question 45:

What AWS service provides a fully managed, scalable, and cost-effective data
warehouse?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Redshift
D) AWS Glue
✅ Correct Answer: C) Amazon Redshift
Explanation: Amazon Redshift is a fully managed data warehouse that makes it simple to
analyze large amounts of data with high performance.

❓ Question 46:

Which AWS service enables you to run code in response to events without
provisioning or managing servers?
A) AWS Lambda
B) Amazon EC2
C) Amazon ECS
D) AWS Fargate

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda is a serverless compute service that runs code in response to
events, automatically managing the underlying infrastructure.

❓ Question 47:

Which service helps you manage application-level access to your AWS resources?
A) Amazon EC2
B) AWS IAM (Identity and Access Management)
C) AWS CloudTrail
D) AWS Lambda

✅ Correct Answer: B) AWS IAM (Identity and Access Management)

Explanation: AWS IAM enables you to manage access to AWS services and resources
securely by defining who can access what and under what conditions.

❓ Question 48:

What is the benefit of using Amazon CloudFront?

A) Secure your data at rest
B) Distribute content globally with low latency
C) Store backup data
D) Monitor your resources

✅ Correct Answer: B) Distribute content globally with low latency

Explanation: Amazon CloudFront is a Content Delivery Network (CDN) service that helps
distribute content globally with low latency by caching content at edge locations.

❓ Question 49:

Which AWS service helps you manage and analyze data pipelines for processing large
amounts of data?
A) AWS Glue
B) Amazon Kinesis
C) Amazon Athena
D) AWS Data Pipeline

✅ Correct Answer: D) AWS Data Pipeline

Explanation: AWS Data Pipeline is a web service that helps you process and move data
between different AWS services and on-premises resources at scheduled intervals.

❓ Question 50:

Which service would you use to perform a migration of an on-premises SQL Server
database to AWS?
A) AWS DMS (Database Migration Service)
B) Amazon Redshift
C) Amazon S3
D) Amazon RDS

✅ Correct Answer: A) AWS DMS (Database Migration Service)

Explanation: AWS DMS helps migrate databases to AWS quickly and securely, including
SQL Server, with minimal downtime.

❓ Question 51:

What is the purpose of AWS Elastic Beanstalk?

A) Provision compute resources for high-performance computing
B) Create and manage a containerized application environment
C) Simplify the deployment of applications on AWS
D) Automate database migrations to the cloud

✅ Correct Answer: C) Simplify the deployment of applications on AWS

Explanation: AWS Elastic Beanstalk simplifies application deployment by automatically
managing the environment, provisioning resources, and scaling.

❓ Question 52:

Which AWS service allows you to create a scalable, managed, and secure distributed
cache for your application?
A) Amazon S3
B) Amazon CloudFront
C) Amazon ElastiCache
D) AWS Lambda

✅ Correct Answer: C) Amazon ElastiCache

Explanation: Amazon ElastiCache is a fully managed, in-memory cache service that can
improve the performance of your application by caching frequently accessed data.
❓ Question 53:

Which service allows you to create private, dedicated connections from your on-
premises infrastructure to AWS?
A) AWS VPN
B) Amazon VPC
C) AWS Direct Connect
D) AWS Shield

✅ Correct Answer: C) AWS Direct Connect

Explanation: AWS Direct Connect provides a dedicated, high-speed connection from your
on-premises data center to AWS, bypassing the internet.

❓ Question 54:

What does Amazon EC2 Auto Scaling help with?

A) Automates the creation of instances based on demand
B) Automatically adjusts the size of storage volumes
C) Provisions on-demand instances for testing
D) Allocates network bandwidth

✅ Correct Answer: A) Automates the creation of instances based on demand

Explanation: EC2 Auto Scaling automatically adjusts the number of EC2 instances based on
traffic demand, helping ensure that the application is always running optimally.

❓ Question 55:

Which AWS service provides a scalable data lake solution?

A) Amazon S3
B) AWS Glue
C) Amazon Redshift
D) Amazon Lake Formation

✅ Correct Answer: D) Amazon Lake Formation

Explanation: Amazon Lake Formation helps you set up, manage, and secure a data lake,
making it easier to prepare data for analytics.

❓ Question 56:

Which AWS service is used to deploy and manage machine learning models?
A) Amazon SageMaker
B) AWS Lambda
C) Amazon RDS
D) AWS Glue
✅ Correct Answer: A) Amazon SageMaker
Explanation: Amazon SageMaker is a fully managed service that enables you to build, train,
and deploy machine learning models quickly.

❓ Question 57:

Which service allows you to manage the configuration of AWS resources across
regions and accounts?
A) AWS Config
B) AWS CloudFormation
C) AWS CloudTrail
D) AWS Systems Manager

✅ Correct Answer: A) AWS Config

Explanation: AWS Config helps you track AWS resource configurations and compliance,
allowing you to manage resources across multiple regions and accounts.

❓ Question 58:

What service would you use to securely store, access, and manage your application
secrets, like API keys?
A) Amazon RDS
B) AWS Secrets Manager
C) AWS KMS
D) AWS IAM

✅ Correct Answer: B) AWS Secrets Manager

Explanation: AWS Secrets Manager allows you to securely store and manage sensitive data
such as passwords, API keys, and other credentials.

❓ Question 59:

Which AWS service allows you to run serverless applications by managing both
infrastructure and scaling automatically?
A) AWS Lambda
B) Amazon EC2
C) Amazon ECS
D) AWS Fargate

✅ Correct Answer: D) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine that works with Amazon ECS
and EKS, allowing you to run containers without managing the infrastructure.

❓ Question 60:

Which AWS service is used for monitoring and managing logs from AWS resources?
A) Amazon CloudWatch
B) Amazon GuardDuty
C) AWS Config
D) AWS WAF

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch helps you monitor, log, and set alarms for AWS
resources, enabling you to respond quickly to changes in your environment.

❓ Question 61:

Which service would you use to create a highly available, multi-region architecture
with load balancing?
A) Amazon CloudFront
B) AWS Elastic Load Balancing (ELB)
C) Amazon Route 53
D) AWS Direct Connect

✅ Correct Answer: B) AWS Elastic Load Balancing (ELB)

Explanation: AWS Elastic Load Balancing (ELB) automatically distributes incoming
application traffic across multiple targets, such as EC2 instances, in one or more Availability
Zones.

❓ Question 62:

What does Amazon EC2 Spot Instances allow you to do?

A) Run instances on a 24/7 basis
B) Run instances at a significantly lower cost using unused capacity
C) Ensure uninterrupted access to compute resources
D) Automatically provision EC2 instances based on demand

✅ Correct Answer: B) Run instances at a significantly lower cost using unused

capacity
Explanation: EC2 Spot Instances allow you to bid for unused EC2 capacity at a lower price,
providing a cost-effective option for flexible, interruption-tolerant workloads.

❓ Question 63:

Which service provides protection against DDoS (Distributed Denial of Service)

attacks?
A) AWS Shield
B) Amazon WAF
C) Amazon Route 53
D) AWS Firewall Manager
✅ Correct Answer: A) AWS Shield
Explanation: AWS Shield provides DDoS protection to safeguard applications from attacks
that target the network or application layers.

❓ Question 64:

What is the primary use case for AWS Elastic File System (EFS)?
A) Distributed computing
B) Storing object data in a scalable way
C) File-based storage shared across multiple EC2 instances
D) Block storage for EC2 instances

✅ Correct Answer: C) File-based storage shared across multiple EC2 instances

Explanation: EFS provides scalable and shared file storage for use with EC2 instances,
allowing multiple instances to access the same file system concurrently.

❓ Question 65:

What AWS service would you use to store and run your Docker containerized
applications?
A) AWS Lambda
B) Amazon ECS
C) Amazon EC2
D) AWS Elastic Beanstalk

✅ Correct Answer: B) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) allows you to run and manage
Docker containers at scale on AWS.

❓ Question 66:

Which service helps you optimize your AWS architecture and resources for cost
management?
A) AWS Cost Explorer
B) AWS Trusted Advisor
C) AWS CloudTrail
D) Amazon GuardDuty

✅ Correct Answer: B) AWS Trusted Advisor

Explanation: AWS Trusted Advisor provides real-time guidance to help you provision
resources following best practices, including cost optimization, performance, and security.

❓ Question 67:

Which of the following AWS services is used for object storage?

A) Amazon EBS
B) Amazon S3
C) Amazon RDS
D) Amazon EFS

✅ Correct Answer: B) Amazon S3

Explanation: Amazon S3 (Simple Storage Service) is designed for storing and retrieving any
amount of data at any time, and is ideal for object storage.

❓ Question 68:

Which AWS service helps you manage the lifecycle of a machine learning model?
A) Amazon SageMaker
B) AWS Lambda
C) Amazon Rekognition
D) AWS Glue

✅ Correct Answer: A) Amazon SageMaker

Explanation: Amazon SageMaker is a fully managed service for building, training, and
deploying machine learning models at scale.

❓ Question 69:

Which AWS service is used to automatically back up and restore your EC2 instances?
A) Amazon CloudWatch
B) AWS Backup
C) AWS Elastic Load Balancer
D) Amazon EC2 Auto Scaling

✅ Correct Answer: B) AWS Backup

Explanation: AWS Backup automates the process of backing up AWS resources, including
EC2 instances, EBS volumes, RDS databases, and more.

❓ Question 70:

Which AWS service provides automated server patch management and compliance
monitoring for your EC2 instances?
A) AWS Systems Manager
B) Amazon EC2 Auto Scaling
C) AWS Config
D) AWS Elastic Beanstalk

✅ Correct Answer: A) AWS Systems Manager

Explanation: AWS Systems Manager provides operational insights and automates patch
management, helping you maintain the security and compliance of your EC2 instances.
❓ Question 71:

Which of the following AWS services can be used to improve the performance of a
web application by caching data closer to end users?
A) AWS CloudFront
B) Amazon RDS
C) AWS Direct Connect
D) Amazon Route 53

✅ Correct Answer: A) AWS CloudFront

Explanation: Amazon CloudFront is a Content Delivery Network (CDN) that caches your
data at edge locations worldwide, reducing latency and improving application performance.

❓ Question 72:

Which AWS service allows you to automate the process of discovering and managing
your applications across your infrastructure?
A) AWS CloudFormation
B) AWS Config
C) AWS Systems Manager
D) AWS Application Discovery Service

✅ Correct Answer: D) AWS Application Discovery Service

Explanation: AWS Application Discovery Service helps you discover and visualize your on-
premises applications and their dependencies before migrating them to AWS.

❓ Question 73:

Which AWS service allows you to connect your on-premises network to AWS using a
VPN connection?
A) AWS Direct Connect
B) Amazon VPC
C) AWS VPN
D) AWS Transit Gateway

✅ Correct Answer: C) AWS VPN

Explanation: AWS VPN provides secure connections between your on-premises network
and AWS, allowing communication through encrypted tunnels.

❓ Question 74:

Which AWS service provides managed message queuing that helps decouple
application components?
A) Amazon SQS
B) AWS Lambda
C) Amazon SNS
D) Amazon Kinesis
✅ Correct Answer: A) Amazon SQS
Explanation: Amazon SQS (Simple Queue Service) allows you to decouple and scale
microservices, distributed systems, and serverless applications by sending, storing, and
receiving messages between application components.

❓ Question 75:

Which AWS service is primarily used for identity and access management within AWS
resources?
A) AWS IAM
B) AWS Cognito
C) Amazon CloudWatch
D) AWS Organizations

✅ Correct Answer: A) AWS IAM

Explanation: AWS Identity and Access Management (IAM) enables you to securely manage
access to AWS services and resources by defining who can access what and under what
conditions.

❓ Question 76:

Which AWS service allows you to create, manage, and monitor a multi-region
architecture?
A) AWS Route 53
B) Amazon S3
C) AWS Global Accelerator
D) AWS Direct Connect

✅ Correct Answer: C) AWS Global Accelerator

Explanation: AWS Global Accelerator helps improve the performance of your applications by
routing traffic through the optimal AWS edge location, which enhances the availability and
performance of your application in multiple regions.

❓ Question 77:

Which AWS service would you use to securely transfer large amounts of data to AWS?
A) AWS Snowball
B) AWS Direct Connect
C) Amazon EC2
D) Amazon CloudFront

✅ Correct Answer: A) AWS Snowball

Explanation: AWS Snowball is a physical device that helps you securely transfer large
amounts of data to AWS. It is useful for data migrations when transferring over the internet is
impractical.
❓ Question 78:

Which AWS service provides an easy way to build and manage a secure, highly
available, and scalable DNS service?
A) Amazon Route 53
B) AWS Shield
C) Amazon CloudFront
D) Amazon VPC

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable Domain Name System (DNS) service that
helps you route end-user requests to endpoints in a reliable and cost-effective way.

❓ Question 79:

Which AWS service can you use to automate the building and testing of code before it
is deployed to production?
A) AWS CodeDeploy
B) AWS CodePipeline
C) AWS CodeBuild
D) AWS CodeCommit

✅ Correct Answer: B) AWS CodePipeline

Explanation: AWS CodePipeline is a fully managed continuous integration and continuous
delivery (CI/CD) service that helps you automate the build, test, and deploy phases of your
release process.

❓ Question 80:

Which AWS service provides managed infrastructure for running Docker containers?
A) Amazon EC2
B) AWS Lambda
C) Amazon ECS
D) AWS Fargate

✅ Correct Answer: C) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) is a fully managed service for running
and managing Docker containers at scale.

❓ Question 81:

Which AWS service would you use to automate the provisioning and management of a
large number of EC2 instances?
A) Amazon EC2 Auto Scaling
B) AWS Lambda
C) AWS CloudFormation
D) AWS Systems Manager
✅ Correct Answer: C) AWS CloudFormation
Explanation: AWS CloudFormation allows you to model and provision AWS resources in a
secure, automated, and repeatable manner, making it easier to manage EC2 instances and
other AWS resources.

❓ Question 82:

Which AWS service provides a way to run applications without managing servers?
A) AWS Lambda
B) Amazon EC2
C) AWS Fargate
D) Amazon Elastic Beanstalk

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda lets you run code without provisioning or managing servers. You
only pay for the compute time consumed by your code.

❓ Question 83:

Which AWS service can you use to monitor the health of your resources and
applications?
A) Amazon CloudWatch
B) AWS GuardDuty
C) AWS CloudTrail
D) AWS Trusted Advisor

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch provides monitoring for AWS resources and applications,
including metrics, logs, and alarms, to help you track the health and performance of your
environment.

❓ Question 84:

Which AWS service would you use to connect multiple VPCs together to enable
communication between them?
A) AWS VPN
B) AWS Direct Connect
C) Amazon VPC Peering
D) AWS Transit Gateway

✅ Correct Answer: D) AWS Transit Gateway

Explanation: AWS Transit Gateway connects VPCs and on-premises networks to simplify
network management and enable communication across them.

❓ Question 85:
Which AWS service provides a fully managed graph database service?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Neptune
D) Amazon Redshift

✅ Correct Answer: C) Amazon Neptune

Explanation: Amazon Neptune is a fully managed graph database service designed for
storing and querying highly connected data.

❓ Question 86:

Which AWS service allows you to send notifications to users or services when certain
events occur in your AWS account?
A) Amazon SNS
B) Amazon SQS
C) Amazon SES
D) AWS Lambda

✅ Correct Answer: A) Amazon SNS

Explanation: Amazon SNS (Simple Notification Service) allows you to send notifications,
emails, and messages to subscribers or other AWS services when specific events occur.

❓ Question 87:

Which AWS service allows you to store, retrieve, and share files in a distributed file
system?
A) Amazon EFS
B) Amazon S3
C) Amazon Glacier
D) Amazon FSx

✅ Correct Answer: A) Amazon EFS

Explanation: Amazon Elastic File System (EFS) provides scalable, distributed file storage
that can be accessed concurrently by multiple EC2 instances.

❓ Question 88:

Which AWS service allows you to analyze data directly in Amazon S3 using SQL
queries without needing to move the data?
A) Amazon Athena
B) Amazon Redshift
C) AWS Glue
D) AWS Lambda
✅ Correct Answer: A) Amazon Athena
Explanation: Amazon Athena allows you to run SQL queries directly against data stored in
Amazon S3 without moving it, making it easier to analyze data stored in a variety of formats.

❓ Question 89:

Which AWS service helps you prevent unauthorized access to your applications by
filtering incoming traffic based on specific rules?
A) Amazon EC2 Security Groups
B) AWS Shield
C) AWS WAF
D) Amazon Route 53

✅ Correct Answer: C) AWS WAF

Explanation: AWS Web Application Firewall (WAF) helps protect your applications from
common web exploits by allowing you to set custom rules to filter incoming traffic.

❓ Question 90:

Which AWS service allows you to provide temporary, limited access to your AWS
resources?
A) AWS IAM
B) AWS STS (Security Token Service)
C) AWS Cognito
D) AWS Shield

✅ Correct Answer: B) AWS STS (Security Token Service)

Explanation: AWS Security Token Service (STS) provides temporary security credentials
that allow limited access to AWS resources for a defined duration.

❓ Question 91:

Which AWS service is used to perform data transformation and loading tasks in an
ETL pipeline?
A) Amazon Athena
B) AWS Glue
C) Amazon S3
D) AWS Data Pipeline

✅ Correct Answer: B) AWS Glue

Explanation: AWS Glue is a fully managed ETL (Extract, Transform, Load) service that helps
you prepare and transform your data for analytics.

❓ Question 92:
Which AWS service provides a managed environment for running web applications,
such as PHP, Python, and Ruby, without needing to manage the infrastructure?
A) AWS Lambda
B) Amazon EC2
C) AWS Elastic Beanstalk
D) Amazon RDS

✅ Correct Answer: C) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a fully managed service that allows you to deploy
and manage web applications without managing the underlying infrastructure.

❓ Question 93:

Which AWS service can help you establish a dedicated network connection from your
on-premises environment to AWS?
A) AWS Direct Connect
B) AWS VPN
C) Amazon Route 53
D) Amazon VPC

✅ Correct Answer: A) AWS Direct Connect

Explanation: AWS Direct Connect provides a dedicated network connection between your
on-premises infrastructure and AWS, bypassing the internet for improved performance and
security.

❓ Question 94:

Which AWS service is designed for running serverless applications that scale
automatically based on demand?
A) AWS Lambda
B) Amazon EC2
C) AWS Fargate
D) Amazon ECS

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda enables you to run code without provisioning or managing
servers, automatically scaling based on demand.

❓ Question 95:

Which AWS service enables you to store and manage your application secrets and
credentials?
A) AWS IAM
B) AWS Secrets Manager
C) AWS Key Management Service (KMS)
D) AWS Cognito
✅ Correct Answer: B) AWS Secrets Manager
Explanation: AWS Secrets Manager allows you to securely store and manage sensitive
information such as API keys, passwords, and credentials.

❓ Question 96:

Which AWS service is used to ensure that resources are provisioned and configured
in a consistent, repeatable manner?
A) AWS CloudFormation
B) AWS Config
C) AWS Systems Manager
D) AWS CodePipeline

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation is a service that allows you to define and provision AWS
infrastructure using code, ensuring consistency and repeatability across your environments.

❓ Question 97:

Which AWS service is used for scalable domain name management and routing of
internet traffic?
A) Amazon Route 53
B) AWS Elastic Load Balancer
C) AWS CloudFront
D) Amazon VPC

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable DNS (Domain Name System) service that
helps you route end-user requests to endpoints like EC2 instances or CloudFront
distributions.

❓ Question 98:

Which AWS service provides an automated way to create and manage a private cloud
within the AWS Cloud?
A) Amazon EC2
B) Amazon VPC
C) AWS Direct Connect
D) AWS Fargate

✅ Correct Answer: B) Amazon VPC

Explanation: Amazon VPC (Virtual Private Cloud) allows you to create a private network
within AWS, enabling secure communication between AWS resources.

❓ Question 99:
Which AWS service helps you maintain and enforce security policies and practices for
your AWS account?
A) AWS IAM
B) AWS Config
C) AWS Shield
D) AWS Organizations

✅ Correct Answer: B) AWS Config

Explanation: AWS Config continuously monitors and records your AWS resource
configurations, helping you assess compliance with internal policies and external regulations.

❓ Question 100:

Which service is used to automatically scale your Amazon EC2 instances based on
demand?
A) AWS Lambda
B) Amazon EC2 Auto Scaling
C) AWS Elastic Load Balancer
D) Amazon CloudWatch

✅ Correct Answer: B) Amazon EC2 Auto Scaling

Explanation: Amazon EC2 Auto Scaling automatically adjusts the number of EC2 instances
in response to traffic patterns, ensuring your application maintains optimal performance at all
times.

❓ Question 101:

Which AWS service allows you to monitor your AWS resources and applications in
real time using custom metrics and logs?
A) AWS CloudTrail
B) AWS CloudWatch
C) AWS Config
D) AWS X-Ray

✅ Correct Answer: B) AWS CloudWatch

Explanation: AWS CloudWatch allows you to monitor and observe AWS resources and
applications in real-time with custom metrics, logs, and alarms.

❓ Question 102:

Which AWS service is used to prevent Distributed Denial of Service (DDoS) attacks on
your AWS applications?
A) AWS Shield
B) AWS WAF
C) AWS GuardDuty
D) Amazon Inspector
✅ Correct Answer: A) AWS Shield
Explanation: AWS Shield is a managed DDoS protection service that safeguards AWS
applications from attacks.

❓ Question 103:

Which service provides a managed service for running Apache Hadoop and Spark
clusters on AWS?
A) Amazon EC2
B) AWS Lambda
C) Amazon EMR
D) AWS Glue

✅ Correct Answer: C) Amazon EMR

Explanation: Amazon EMR (Elastic MapReduce) provides a managed Hadoop framework
that can be used for processing large amounts of data in the cloud using frameworks like
Hadoop and Spark.

❓ Question 104:

Which AWS service enables you to create and manage relational databases with
automated backups and scaling?
A) Amazon RDS
B) Amazon Redshift
C) Amazon Aurora
D) Amazon DynamoDB

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) allows you to set up, operate, and
scale a relational database in the cloud, with automatic backups and scaling capabilities.

❓ Question 105:

Which AWS service would you use to store large amounts of archival data at a lower
cost?
A) Amazon Glacier
B) Amazon S3
C) Amazon EBS
D) Amazon EFS

✅ Correct Answer: A) Amazon Glacier

Explanation: Amazon Glacier is an archival storage service that provides low-cost storage
for data that is rarely accessed but needs to be retained for long periods.

❓ Question 106:
Which AWS service allows you to run containerized applications on a serverless
infrastructure?
A) Amazon ECS
B) AWS Lambda
C) AWS Fargate
D) Amazon EKS

✅ Correct Answer: C) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that allows you to
run containerized applications without managing the underlying infrastructure.

❓ Question 107:

Which AWS service would you use to enable your applications to securely connect to
AWS resources without the need for a VPN?
A) AWS Direct Connect
B) AWS VPN
C) AWS Identity and Access Management (IAM)
D) AWS PrivateLink

✅ Correct Answer: D) AWS PrivateLink

Explanation: AWS PrivateLink enables secure, private connectivity between VPCs and AWS
services, ensuring that traffic does not travel over the public internet.

❓ Question 108:

Which AWS service provides a managed NoSQL database with low latency and high
throughput?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Aurora
D) Amazon ElastiCache

✅ Correct Answer: B) Amazon DynamoDB

Explanation: Amazon DynamoDB is a managed NoSQL database service designed for low-
latency and high-throughput applications.

❓ Question 109:

Which AWS service provides a fully managed solution for deploying machine learning
models into production?
A) Amazon Rekognition
B) Amazon SageMaker
C) AWS Lambda
D) AWS Elastic Beanstalk
✅ Correct Answer: B) Amazon SageMaker
Explanation: Amazon SageMaker is a fully managed service that enables you to build, train,
and deploy machine learning models at scale.

❓ Question 110:

Which AWS service is designed to help developers and IT operations teams

automatically build, test, and deploy applications?
A) AWS CodePipeline
B) AWS CodeDeploy
C) AWS CodeBuild
D) AWS CodeCommit

✅ Correct Answer: A) AWS CodePipeline

Explanation: AWS CodePipeline is a continuous integration and continuous delivery (CI/CD)
service that automates the process of building, testing, and deploying applications.

❓ Question 111:

Which AWS service would you use to monitor your AWS resources and detect unusual
activity?
A) AWS CloudTrail
B) AWS GuardDuty
C) AWS CloudWatch
D) AWS Shield

✅ Correct Answer: B) AWS GuardDuty

Explanation: AWS GuardDuty is a threat detection service that continuously monitors for
malicious or unauthorized behavior to protect your AWS accounts and workloads.

❓ Question 112:

Which AWS service provides managed encryption for data at rest and in transit?
A) AWS IAM
B) AWS KMS
C) AWS Shield
D) AWS WAF

✅ Correct Answer: B) AWS KMS

Explanation: AWS Key Management Service (KMS) provides managed encryption for data
at rest and in transit by creating and controlling the encryption keys used to encrypt your
data.

❓ Question 113:
Which AWS service enables you to automatically scale your application’s
infrastructure based on demand?
A) Amazon CloudWatch
B) AWS Auto Scaling
C) AWS Lambda
D) AWS Elastic Beanstalk

✅ Correct Answer: B) AWS Auto Scaling

Explanation: AWS Auto Scaling helps you automatically scale your infrastructure by
adjusting the number of resources based on your application’s needs.

❓ Question 114:

Which AWS service would you use to run a large-scale, distributed SQL-based query
engine for analytics?
A) Amazon Aurora
B) Amazon Redshift
C) Amazon DynamoDB
D) Amazon RDS

✅ Correct Answer: B) Amazon Redshift

Explanation: Amazon Redshift is a fully managed data warehouse that allows you to run
large-scale, distributed SQL queries for business analytics.

❓ Question 115:

Which AWS service is designed to run and manage containerized applications using
Kubernetes?
A) Amazon ECS
B) AWS Fargate
C) Amazon EKS
D) AWS Lambda

✅ Correct Answer: C) Amazon EKS

Explanation: Amazon EKS (Elastic Kubernetes Service) is a fully managed service that
makes it easy to run and manage Kubernetes clusters on AWS.

❓ Question 116:

Which AWS service is used to analyze and search large datasets using SQL-like
queries?
A) Amazon Athena
B) Amazon Redshift
C) Amazon RDS
D) AWS Glue
✅ Correct Answer: A) Amazon Athena
Explanation: Amazon Athena is an interactive query service that allows you to analyze data
stored in Amazon S3 using standard SQL-like queries.

❓ Question 117:

Which AWS service allows you to automate security assessments of your applications
to identify vulnerabilities?
A) Amazon Inspector
B) AWS Config
C) AWS Shield
D) AWS WAF

✅ Correct Answer: A) Amazon Inspector

Explanation: Amazon Inspector is an automated security assessment service that helps
identify vulnerabilities and security best practices for your applications.

❓ Question 118:

Which AWS service would you use to establish a secure, dedicated network
connection between your on-premises data center and AWS?
A) AWS VPN
B) AWS Direct Connect
C) Amazon VPC Peering
D) AWS PrivateLink

✅ Correct Answer: B) AWS Direct Connect

Explanation: AWS Direct Connect establishes a dedicated, private network connection from
your on-premises data center to AWS, offering more consistent network performance.

❓ Question 119:

Which AWS service is used to run relational databases on AWS, with automatic
backups, scaling, and patch management?
A) Amazon EC2
B) Amazon RDS
C) AWS Lambda
D) Amazon S3

✅ Correct Answer: B) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) provides fully managed relational
databases with automated backups, patch management, and scaling features.

❓ Question 120:
Which AWS service provides a managed, scalable object storage solution that is
highly durable and cost-effective?
A) Amazon EBS
B) Amazon S3
C) Amazon Glacier
D) Amazon EFS

✅ Correct Answer: B) Amazon S3

Explanation: Amazon S3 (Simple Storage Service) is a scalable object storage service that
is highly durable and cost-effective for storing and retrieving any amount of data.

❓ Question 121:

Which AWS service would you use to launch and manage virtual servers on-demand?
A) Amazon EC2
B) Amazon RDS
C) Amazon EBS
D) AWS Lambda

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon EC2 (Elastic Compute Cloud) provides scalable virtual servers that
you can use to run applications and services in the cloud.

❓ Question 122:

Which AWS service allows you to create a private network for your AWS resources
with complete control over routing and security?
A) AWS Direct Connect
B) Amazon VPC
C) AWS PrivateLink
D) Amazon Route 53

✅ Correct Answer: B) Amazon VPC

Explanation: Amazon VPC (Virtual Private Cloud) allows you to create a private network
with complete control over IP addressing, routing, and security policies.

❓ Question 123:

Which AWS service is designed for fast, low-latency, and scalable file storage for use
with Amazon EC2 instances?
A) Amazon EBS
B) Amazon EFS
C) Amazon S3
D) Amazon Glacier
✅ Correct Answer: B) Amazon EFS
Explanation: Amazon EFS (Elastic File System) provides scalable file storage that can be
accessed by multiple EC2 instances simultaneously with low latency.

❓ Question 124:

Which AWS service allows you to run and manage Docker containers in the cloud?
A) Amazon ECS
B) AWS Lambda
C) AWS Fargate
D) Amazon EKS

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) is a fully managed service that
enables you to run and manage Docker containers in the cloud.

❓ Question 125:

Which AWS service would you use to deploy an application without managing
servers?
A) AWS Lambda
B) AWS EC2
C) AWS Elastic Beanstalk
D) Amazon RDS

✅ Correct Answer: C) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a platform as a service (PaaS) that allows you to
deploy applications without managing the underlying infrastructure.

❓ Question 126:

Which AWS service is used to create and manage web applications in a highly
scalable, serverless environment?
A) AWS Lambda
B) Amazon EC2
C) AWS Fargate
D) Amazon Lightsail

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda allows you to run serverless applications that automatically scale
based on demand without managing any servers.

❓ Question 127:

Which AWS service would you use to deliver content globally with low latency and
high transfer speeds?
A) Amazon S3
B) AWS CloudFront
C) Amazon Route 53
D) AWS Direct Connect

✅ Correct Answer: B) AWS CloudFront

Explanation: AWS CloudFront is a content delivery network (CDN) service that delivers
content globally with low latency and high transfer speeds.

❓ Question 128:

Which AWS service provides tools for automating software development and release
pipelines?
A) AWS CodePipeline
B) AWS CodeBuild
C) AWS CodeDeploy
D) AWS CloudFormation

✅ Correct Answer: A) AWS CodePipeline

Explanation: AWS CodePipeline is a fully managed continuous integration and continuous
delivery (CI/CD) service for automating the software release process.

❓ Question 129:

Which AWS service would you use to store and manage sensitive information such as
passwords and API keys?
A) AWS KMS
B) AWS Secrets Manager
C) AWS IAM
D) AWS CloudHSM

✅ Correct Answer: B) AWS Secrets Manager

Explanation: AWS Secrets Manager securely stores and manages sensitive information
such as passwords, API keys, and database credentials.

❓ Question 130:

Which AWS service allows you to create and manage cloud-native applications using
containers without managing the underlying infrastructure?
A) Amazon EKS
B) AWS Lambda
C) AWS Fargate
D) AWS ECS

✅ Correct Answer: C) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers, allowing you to
run containers without managing the underlying infrastructure.
❓ Question 131:

Which AWS service allows you to implement a scalable, high-performance data

warehouse for analytics?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Redshift
D) Amazon Athena

✅ Correct Answer: C) Amazon Redshift

Explanation: Amazon Redshift is a fully managed, petabyte-scale data warehouse service
that enables fast querying and analytics.

❓ Question 132:

Which AWS service helps in securely distributing traffic across multiple AWS
instances to improve availability?
A) AWS Auto Scaling
B) AWS Elastic Load Balancing (ELB)
C) AWS Route 53
D) Amazon CloudFront

✅ Correct Answer: B) AWS Elastic Load Balancing (ELB)

Explanation: AWS ELB automatically distributes incoming traffic across multiple AWS
instances to improve application availability and fault tolerance.

❓ Question 133:

Which AWS service is best suited for running serverless APIs?

A) AWS Lambda
B) Amazon EC2
C) Amazon API Gateway
D) Amazon S3

✅ Correct Answer: C) Amazon API Gateway

Explanation: Amazon API Gateway is a fully managed service that allows you to create,
publish, and manage APIs at any scale.

❓ Question 134:

Which AWS service is used for real-time streaming of data and analytics?
A) Amazon Kinesis
B) Amazon SQS
C) Amazon SNS
D) Amazon RDS
✅ Correct Answer: A) Amazon Kinesis
Explanation: Amazon Kinesis provides real-time processing of streaming data at massive
scale, enabling you to ingest, process, and analyze streaming data.

❓ Question 135:

Which AWS service enables you to run a fully managed NoSQL database with
automatic scaling and high availability?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon ElastiCache
D) Amazon Aurora

✅ Correct Answer: B) Amazon DynamoDB

Explanation: Amazon DynamoDB is a managed NoSQL database service that provides fast
performance with automatic scaling and high availability.

❓ Question 136:

Which AWS service enables the management of containers and Kubernetes clusters
without manually managing the infrastructure?
A) AWS Lambda
B) Amazon ECS
C) Amazon EKS
D) AWS Fargate

✅ Correct Answer: C) Amazon EKS

Explanation: Amazon EKS is a fully managed service for running Kubernetes clusters
without the need to manage the underlying infrastructure.

❓ Question 137:

Which AWS service is used to create a virtual private network (VPN) between an on-
premises network and an AWS VPC?
A) AWS Direct Connect
B) AWS VPN
C) Amazon Route 53
D) AWS WAF

✅ Correct Answer: B) AWS VPN

Explanation: AWS VPN enables secure communication between your on-premises network
and your AWS Virtual Private Cloud (VPC).

❓ Question 138:
Which AWS service would you use to automate the provisioning and management of
resources in AWS using code?
A) AWS CloudFormation
B) AWS Elastic Beanstalk
C) AWS Lambda
D) Amazon EC2

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to automate the creation and management of
AWS resources using infrastructure as code.

❓ Question 139:

Which AWS service provides real-time recommendations for optimizing AWS

resources based on usage patterns?
A) AWS Trusted Advisor
B) AWS Cost Explorer
C) Amazon CloudWatch
D) AWS Config

✅ Correct Answer: A) AWS Trusted Advisor

Explanation: AWS Trusted Advisor provides real-time guidance to help you follow best
practices for provisioning and optimizing AWS resources.

❓ Question 140:

Which AWS service provides a fully managed search service to index and search large
amounts of data?
A) Amazon Kinesis
B) Amazon CloudSearch
C) Amazon Elasticsearch Service
D) AWS Lambda

✅ Correct Answer: B) Amazon CloudSearch

Explanation: Amazon CloudSearch is a managed service that makes it easy to set up,
manage, and scale a search solution for your website or application.

❓ Question 141:

Which AWS service provides a scalable cloud storage service that is designed to store
and retrieve any amount of data at any time?
A) Amazon S3
B) AWS EBS
C) AWS Glacier
D) Amazon EFS
✅ Correct Answer: A) Amazon S3
Explanation: Amazon S3 (Simple Storage Service) is a highly scalable object storage
service that allows you to store and retrieve any amount of data.

❓ Question 142:

Which AWS service allows you to monitor your AWS resources and applications in
real-time?
A) Amazon CloudWatch
B) AWS CloudTrail
C) AWS Config
D) Amazon RDS

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch is a monitoring service for AWS resources and
applications that provides real-time visibility into performance and operational health.

❓ Question 143:

Which AWS service enables you to securely manage and rotate your encryption keys?
A) AWS KMS
B) AWS CloudHSM
C) Amazon RDS
D) AWS Secrets Manager

✅ Correct Answer: A) AWS KMS

Explanation: AWS Key Management Service (KMS) allows you to create, manage, and
rotate encryption keys for your applications and services.

❓ Question 144:

Which AWS service is used for automating the provisioning and configuration of AWS
resources?
A) AWS Lambda
B) AWS CloudFormation
C) AWS Config
D) AWS Systems Manager

✅ Correct Answer: B) AWS CloudFormation

Explanation: AWS CloudFormation allows you to automate the provisioning and
management of AWS resources using templates and infrastructure as code.

❓ Question 145:

Which AWS service allows you to manage and scale containerized applications using
Docker?
A) Amazon ECS
B) Amazon EC2
C) AWS Fargate
D) Amazon EKS

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) allows you to run and manage
Docker containers in a scalable and secure environment.

❓ Question 146:

Which AWS service allows you to create, manage, and scale a secure content delivery
network (CDN)?
A) Amazon CloudFront
B) AWS Direct Connect
C) Amazon Route 53
D) AWS WAF

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a content delivery network (CDN) service that securely
delivers content with low latency and high transfer speeds to global users.

❓ Question 147:

Which AWS service provides a fully managed, scalable relational database service?
A) Amazon Aurora
B) Amazon RDS
C) Amazon DynamoDB
D) Amazon ElastiCache

✅ Correct Answer: B) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) provides fully managed relational
databases with support for automated backups, patch management, and scaling.

❓ Question 148:

Which AWS service enables you to monitor and automatically scale the compute
capacity for your applications?
A) AWS Auto Scaling
B) AWS CloudFormation
C) Amazon CloudWatch
D) AWS Lambda

✅ Correct Answer: A) AWS Auto Scaling

Explanation: AWS Auto Scaling enables you to automatically scale your compute capacity to
meet the demands of your application in real-time.
❓ Question 149:

Which AWS service allows you to run a distributed NoSQL database with automatic
scaling?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Aurora
D) Amazon ElastiCache

✅ Correct Answer: A) Amazon DynamoDB

Explanation: Amazon DynamoDB is a managed NoSQL database that automatically scales
to accommodate varying traffic levels while maintaining high performance.

❓ Question 150:

Which AWS service provides managed serverless compute capabilities to run code in
response to events without provisioning or managing servers?
A) AWS Lambda
B) AWS EC2
C) Amazon S3
D) Amazon ECS

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda is a serverless compute service that lets you run code in
response to events, automatically scaling as needed without requiring server management.

❓ Question 151:

Which AWS service allows you to automate software deployment and manage updates
to your applications?
A) AWS CodeDeploy
B) AWS CodePipeline
C) AWS CodeBuild
D) AWS Lambda

✅ Correct Answer: A) AWS CodeDeploy

Explanation: AWS CodeDeploy automates the deployment of applications to instances or
serverless Lambda functions, ensuring consistency and scalability.

❓ Question 152:

Which AWS service is used for scalable, serverless web applications with a focus on
front-end and back-end services?
A) AWS Lambda
B) AWS Elastic Beanstalk
C) Amazon S3
D) Amazon Lightsail
✅ Correct Answer: B) AWS Elastic Beanstalk
Explanation: AWS Elastic Beanstalk simplifies the process of deploying and scaling web
applications and services with support for multiple programming languages.

❓ Question 153:

Which AWS service is used to manage and store sensitive data such as database
credentials and API keys?
A) AWS Secrets Manager
B) AWS KMS
C) Amazon RDS
D) AWS Config

✅ Correct Answer: A) AWS Secrets Manager

Explanation: AWS Secrets Manager helps you securely store and manage sensitive
information such as API keys, credentials, and other secrets.

❓ Question 154:

Which AWS service provides a fully managed, scalable object storage service with
data retrieval features for long-term archival storage?
A) Amazon Glacier
B) Amazon S3
C) Amazon EFS
D) Amazon EBS

✅ Correct Answer: A) Amazon Glacier

Explanation: Amazon Glacier is designed for long-term archival storage with lower retrieval
times, ideal for data that is infrequently accessed.

❓ Question 155:

Which AWS service allows you to track API calls across all AWS resources for auditing
purposes?
A) AWS CloudTrail
B) Amazon CloudWatch
C) AWS Config
D) AWS IAM

✅ Correct Answer: A) AWS CloudTrail

Explanation: AWS CloudTrail records API calls and activities in your AWS account, helping
you monitor and audit AWS resource usage.

❓ Question 156:
Which AWS service would you use to distribute traffic to multiple endpoints to provide
high availability for your application?
A) AWS Lambda
B) Amazon Route 53
C) Amazon S3
D) AWS Elastic Load Balancing (ELB)

✅ Correct Answer: D) AWS Elastic Load Balancing (ELB)

Explanation: AWS ELB automatically distributes incoming application traffic across multiple
resources, improving application availability.

❓ Question 157:

Which AWS service allows you to create a virtual private network (VPN) to securely
connect to your on-premises data center?
A) AWS Direct Connect
B) AWS VPN
C) Amazon Route 53
D) AWS WAF

✅ Correct Answer: B) AWS VPN

Explanation: AWS VPN establishes a secure connection between your on-premises network
and AWS VPC, ensuring secure communication over the internet.

❓ Question 158:

Which AWS service can be used to monitor the health and performance of AWS
services and your AWS infrastructure?
A) Amazon CloudWatch
B) AWS Trusted Advisor
C) AWS Config
D) AWS CloudTrail

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch provides real-time monitoring of AWS resources and
applications, including metrics, logs, and alarms for health and performance.

❓ Question 159:

Which AWS service allows you to quickly launch and manage a virtual private server
with minimal configuration?
A) Amazon EC2
B) Amazon Lightsail
C) AWS Fargate
D) AWS Elastic Beanstalk
✅ Correct Answer: B) Amazon Lightsail
Explanation: Amazon Lightsail is designed for simplicity and ease of use, allowing users to
quickly launch and manage virtual private servers with minimal configuration.

❓ Question 160:

Which AWS service enables you to run code in response to events such as object
uploads to Amazon S3 or changes in a DynamoDB table?
A) AWS Lambda
B) Amazon EC2
C) Amazon SNS
D) Amazon SQS

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda runs code automatically in response to events like object
uploads or changes to other AWS resources, allowing serverless computing.

❓ Question 161:

Which AWS service allows you to monitor and analyze resource utilization, application
performance, and operational health of your AWS environment?
A) AWS CloudTrail
B) Amazon CloudWatch
C) AWS Trusted Advisor
D) AWS Config

✅ Correct Answer: B) Amazon CloudWatch

Explanation: Amazon CloudWatch provides monitoring for AWS resources and applications,
tracking metrics and logs for performance and operational health.

❓ Question 162:

Which AWS service allows you to securely manage user identities and access to AWS
services?
A) AWS IAM
B) AWS KMS
C) AWS SSO
D) AWS Shield

✅ Correct Answer: A) AWS IAM

Explanation: AWS Identity and Access Management (IAM) enables you to manage access
to AWS resources securely by controlling user permissions.

❓ Question 163:
Which AWS service provides the ability to provision and scale virtual servers with
customizable operating systems and configurations?
A) AWS EC2
B) AWS Lambda
C) Amazon Lightsail
D) AWS Fargate

✅ Correct Answer: A) AWS EC2

Explanation: Amazon EC2 (Elastic Compute Cloud) provides scalable virtual servers with
customizable configurations, allowing you to run applications in the cloud.

❓ Question 164:

Which AWS service helps with deploying and managing Docker containers at scale
without needing to manage the underlying infrastructure?
A) Amazon ECS
B) Amazon EKS
C) AWS Fargate
D) AWS Lambda

✅ Correct Answer: C) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine that allows you to run containers
without managing the underlying EC2 instances.

❓ Question 165:

Which AWS service provides a scalable and managed content delivery network (CDN)
for delivering websites, videos, and APIs to global users?
A) Amazon CloudFront
B) AWS Direct Connect
C) Amazon S3
D) AWS WAF

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a global CDN that securely delivers content to end-
users with low latency and high transfer speeds.

❓ Question 166:

Which AWS service enables you to host a NoSQL database that automatically scales
and provides low-latency access?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon ElastiCache
D) Amazon Aurora
✅ Correct Answer: A) Amazon DynamoDB
Explanation: Amazon DynamoDB is a fully managed NoSQL database service that provides
fast and predictable performance with seamless scaling.

❓ Question 167:

Which AWS service allows you to set up a secure, isolated network for your resources
and applications?
A) Amazon VPC
B) AWS Direct Connect
C) Amazon Route 53
D) Amazon CloudFront

✅ Correct Answer: A) Amazon VPC

Explanation: Amazon Virtual Private Cloud (VPC) enables you to create a secure and
isolated network for running your AWS resources, with complete control over network
configuration.

❓ Question 168:

Which AWS service is designed to provide real-time streaming data analytics and
processing?
A) Amazon Kinesis
B) Amazon RDS
C) AWS Glue
D) AWS Lambda

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis enables you to collect, process, and analyze real-time
streaming data at scale, providing insights in seconds.

❓ Question 169:

Which AWS service provides a fully managed, scalable data lake solution for storing
structured and unstructured data?
A) Amazon S3
B) AWS DataSync
C) AWS Lake Formation
D) Amazon Redshift

✅ Correct Answer: C) AWS Lake Formation

Explanation: AWS Lake Formation is a fully managed service that helps you set up, secure,
and manage a data lake in AWS, enabling you to store all your data in one place.

❓ Question 170:
Which AWS service is used to automate the deployment pipeline for continuous
integration and continuous delivery (CI/CD)?
A) AWS CodePipeline
B) AWS CodeBuild
C) AWS CodeDeploy
D) AWS CodeCommit

✅ Correct Answer: A) AWS CodePipeline

Explanation: AWS CodePipeline automates the CI/CD pipeline, allowing you to define the
stages for deploying code changes and automatically triggering updates.

❓ Question 171:

Which AWS service is used to provide network security by controlling traffic at the
subnet level within a VPC?
A) AWS WAF
B) Amazon EC2 Security Groups
C) AWS Network ACLs
D) AWS Shield

✅ Correct Answer: C) AWS Network ACLs

Explanation: AWS Network Access Control Lists (ACLs) provide an additional layer of
security for controlling traffic to and from subnets within a VPC.

❓ Question 172:

Which AWS service helps to ensure compliance with various regulatory standards and
provides audit trails for all AWS accounts?
A) AWS Config
B) AWS CloudTrail
C) AWS Shield
D) AWS Security Hub

✅ Correct Answer: B) AWS CloudTrail

Explanation: AWS CloudTrail records API calls and activities, providing an audit trail for your
AWS account to monitor and ensure compliance.

❓ Question 173:

Which AWS service provides a managed Elasticsearch service for real-time analytics
and log analysis?
A) Amazon RDS
B) Amazon CloudWatch Logs
C) Amazon Elasticsearch Service
D) Amazon Redshift
✅ Correct Answer: C) Amazon Elasticsearch Service
Explanation: Amazon Elasticsearch Service provides a fully managed service for running
and managing Elasticsearch clusters, enabling real-time log analytics.

❓ Question 174:

Which AWS service helps you deploy a scalable and highly available application while
automatically managing the underlying infrastructure?
A) AWS Elastic Beanstalk
B) AWS Lambda
C) Amazon EC2
D) AWS Fargate

✅ Correct Answer: A) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a fully managed service that allows you to deploy
scalable web applications without managing the underlying infrastructure.

❓ Question 175:

Which AWS service helps you ensure the availability of your applications and reduce
the impact of failures in your infrastructure?
A) AWS Auto Scaling
B) AWS CloudFormation
C) Amazon RDS
D) AWS Backup

✅ Correct Answer: A) AWS Auto Scaling

Explanation: AWS Auto Scaling adjusts the number of EC2 instances or other resources in
response to demand, ensuring high availability and reliability.

❓ Question 176:

Which AWS service provides an easy-to-use interface to launch and manage virtual
servers for running applications?
A) Amazon EC2
B) Amazon Lightsail
C) AWS Lambda
D) Amazon EFS

✅ Correct Answer: B) Amazon Lightsail

Explanation: Amazon Lightsail offers a simple interface for launching and managing virtual
private servers, suitable for smaller applications and use cases.

❓ Question 177:
Which AWS service helps you securely store, manage, and deploy secrets such as
database credentials, API keys, and passwords?
A) AWS KMS
B) AWS Secrets Manager
C) AWS IAM
D) Amazon RDS

✅ Correct Answer: B) AWS Secrets Manager

Explanation: AWS Secrets Manager helps you securely store, manage, and access
sensitive information such as credentials, API keys, and passwords.

❓ Question 178:

Which AWS service helps you protect web applications from common web exploits
and attacks?
A) AWS WAF
B) AWS Shield
C) AWS CloudFront
D) AWS Security Hub

✅ Correct Answer: A) AWS WAF

Explanation: AWS Web Application Firewall (WAF) helps protect your web applications from
common web exploits like SQL injection and cross-site scripting.

❓ Question 179:

Which AWS service allows you to create a highly available and scalable relational
database service with support for multiple database engines?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Redshift
D) Amazon Aurora

✅ Correct Answer: B) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) provides a managed relational
database platform that supports multiple database engines like MySQL, PostgreSQL, and
MariaDB.

❓ Question 180:

Which AWS service allows you to securely connect your on-premises data center to
your VPC via a dedicated network connection?
A) AWS VPN
B) AWS Direct Connect
C) Amazon Route 53
D) AWS Lambda
✅ Correct Answer: B) AWS Direct Connect
Explanation: AWS Direct Connect provides a dedicated network connection from your on-
premises data center to AWS, offering consistent performance and lower latency.

❓ Question 181:

Which AWS service is designed to provide real-time analytics on large-scale data

streams and can be used for log and event data analysis?
A) Amazon Kinesis
B) AWS Lambda
C) AWS Glue
D) Amazon Redshift

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis enables real-time analytics on large streams of data, allowing
you to capture and process data such as logs, events, and other real-time data.

❓ Question 182:

Which AWS service helps you configure, automate, and manage the deployment of
applications in your AWS environment?
A) AWS CodePipeline
B) AWS Elastic Beanstalk
C) AWS CloudFormation
D) AWS CodeDeploy

✅ Correct Answer: C) AWS CloudFormation

Explanation: AWS CloudFormation allows you to define and provision AWS infrastructure
resources in a safe, repeatable manner using templates, automating deployment.

❓ Question 183:

Which AWS service allows you to host scalable web applications and APIs while
automatically scaling the underlying infrastructure?
A) Amazon EC2
B) AWS Elastic Beanstalk
C) AWS Lambda
D) AWS Fargate

✅ Correct Answer: B) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk handles deploying and managing web applications
automatically, including scaling, monitoring, and patching the infrastructure.

❓ Question 184:
Which AWS service is used to store and manage large amounts of static content such
as images, videos, and backups?
A) Amazon S3
B) Amazon Glacier
C) AWS Lambda
D) Amazon EFS

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 is an object storage service designed to store and manage large
volumes of static data such as images, videos, and backups.

❓ Question 185:

Which AWS service provides a managed database solution for handling large-scale,
complex relational database workloads?
A) Amazon DynamoDB
B) Amazon Aurora
C) Amazon RDS
D) Amazon ElastiCache

✅ Correct Answer: B) Amazon Aurora

Explanation: Amazon Aurora is a fully managed relational database that combines the
performance and availability of high-end commercial databases with the cost-effectiveness of
open-source databases.

❓ Question 186:

Which AWS service helps you manage and monitor the health of your applications by
tracking the performance and operational state of AWS resources?
A) AWS CloudTrail
B) AWS CloudWatch
C) AWS Config
D) AWS Auto Scaling

✅ Correct Answer: B) AWS CloudWatch

Explanation: Amazon CloudWatch allows you to monitor AWS resources and applications in
real-time by tracking performance metrics and operational health.

❓ Question 187:

Which AWS service provides a scalable, managed service for provisioning containers
and orchestrating their deployment?
A) Amazon ECS
B) AWS Fargate
C) Amazon EKS
D) AWS Lambda
✅ Correct Answer: C) Amazon EKS
Explanation: Amazon Elastic Kubernetes Service (EKS) is a fully managed service that
makes it easy to run Kubernetes clusters at scale and orchestrate the deployment of
containerized applications.

❓ Question 188:

Which AWS service allows you to establish private connectivity between your on-
premises infrastructure and your AWS cloud environment?
A) AWS VPN
B) AWS Direct Connect
C) Amazon Route 53
D) AWS Shield

✅ Correct Answer: B) AWS Direct Connect

Explanation: AWS Direct Connect provides dedicated network connections between your
on-premises infrastructure and AWS, ensuring private and secure connectivity.

❓ Question 189:

Which AWS service allows you to manage access to your AWS resources by defining
permission policies and user roles?
A) AWS IAM
B) AWS WAF
C) AWS Shield
D) AWS Secrets Manager

✅ Correct Answer: A) AWS IAM

Explanation: AWS Identity and Access Management (IAM) allows you to control access to
AWS services by creating and managing users, groups, and permission policies.

❓ Question 190:

Which AWS service is used to automatically back up data stored on Amazon EC2
instances and Amazon RDS databases?
A) AWS Backup
B) AWS Elastic Block Store (EBS)
C) AWS Glacier
D) Amazon S3

✅ Correct Answer: A) AWS Backup

Explanation: AWS Backup is a fully managed backup service that automates and
centralizes the backup of data from EC2 instances, RDS databases, and other AWS
resources.

❓ Question 191:
Which AWS service provides an environment for developers to run code without
managing servers?
A) Amazon EC2
B) AWS Lambda
C) Amazon RDS
D) AWS Elastic Beanstalk

✅ Correct Answer: B) AWS Lambda

Explanation: AWS Lambda is a serverless computing service that allows you to run code
without provisioning or managing servers, scaling automatically in response to demand.

❓ Question 192:

Which AWS service helps you deploy and manage machine learning models at scale?
A) Amazon SageMaker
B) AWS Glue
C) AWS Lambda
D) Amazon Rekognition

✅ Correct Answer: A) Amazon SageMaker

Explanation: Amazon SageMaker is a fully managed service that provides tools to build,
train, and deploy machine learning models at scale.

❓ Question 193:

Which AWS service provides a highly available and scalable managed DNS service for
routing internet traffic to resources in AWS?
A) Amazon Route 53
B) AWS Direct Connect
C) Amazon CloudFront
D) AWS WAF

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable and highly available Domain Name System
(DNS) web service that helps route internet traffic to AWS resources.

❓ Question 194:

Which AWS service is used to provision and manage relational databases in the
cloud?
A) Amazon Aurora
B) Amazon DynamoDB
C) Amazon RDS
D) Amazon ElastiCache
✅ Correct Answer: C) Amazon RDS
Explanation: Amazon RDS (Relational Database Service) allows you to set up, operate, and
scale relational databases in the cloud, supporting multiple database engines.

❓ Question 195:

Which AWS service allows you to deploy and manage Docker containers without
managing the underlying infrastructure?
A) AWS Lambda
B) AWS Fargate
C) Amazon ECS
D) Amazon EKS

✅ Correct Answer: B) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that lets you run
Docker containers without managing the underlying infrastructure.

❓ Question 196:

Which AWS service provides a fully managed, scalable data warehouse solution for
running fast and complex queries?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Redshift
D) AWS DataSync

✅ Correct Answer: C) Amazon Redshift

Explanation: Amazon Redshift is a managed data warehouse service that allows you to run
fast, complex queries on large datasets.

❓ Question 197:

Which AWS service helps you to identify potential security risks and provide
recommendations for improving the security of your AWS resources?
A) AWS Config
B) AWS Inspector
C) AWS Shield
D) AWS Trusted Advisor

✅ Correct Answer: D) AWS Trusted Advisor

Explanation: AWS Trusted Advisor analyzes your AWS environment and provides real-time
recommendations to help you improve security, cost-efficiency, and performance.

❓ Question 198:
Which AWS service is used for sending push notifications to mobile devices, web
browsers, and email?
A) Amazon SNS
B) Amazon SES
C) AWS Lambda
D) AWS CloudFormation

✅ Correct Answer: A) Amazon SNS

Explanation: Amazon Simple Notification Service (SNS) allows you to send messages or
notifications to a large number of recipients across various platforms, including mobile and
email.

❓ Question 199:

Which AWS service allows you to manage and scale applications built with Docker
containers?
A) Amazon EC2
B) AWS Elastic Beanstalk
C) Amazon ECS
D) AWS Lambda

✅ Correct Answer: C) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is a fully managed service that helps
you run and scale Docker containers, allowing you to easily manage containerized
applications.

❓ Question 200:

Which AWS service provides a scalable and fully managed object storage solution for
backup, archiving, and big data analytics?
A) Amazon S3
B) Amazon Glacier
C) Amazon EFS
D) AWS Snowball

✅ Correct Answer: B) Amazon Glacier

Explanation: Amazon Glacier is a low-cost archival storage service designed for long-term
data backup and archival storage, offering retrieval times ranging from minutes to hours.

❓ Question 201:

Which AWS service provides a managed platform for developing and deploying mobile
and web applications at scale?
A) AWS Elastic Beanstalk
B) AWS Amplify
C) AWS Lambda
D) Amazon Lightsail
✅ Correct Answer: B) AWS Amplify
Explanation: AWS Amplify is a development platform that enables building, deploying, and
managing mobile and web applications at scale, with various services for back-end and front-
end development.

❓ Question 202:

Which AWS service provides infrastructure as code to manage and automate the
provisioning of AWS resources?
A) AWS CloudFormation
B) AWS CodeDeploy
C) AWS Lambda
D) AWS Elastic Beanstalk

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation enables you to define your infrastructure as code,
allowing for the automated provisioning and management of AWS resources using templates.

❓ Question 203:

Which AWS service allows you to store and share files with low-latency access at a
petabyte scale?
A) Amazon S3
B) Amazon EFS
C) Amazon FSx
D) Amazon EBS

✅ Correct Answer: C) Amazon FSx

Explanation: Amazon FSx provides fully managed, scalable file systems that allow low-
latency access and are designed to meet high-performance needs.

❓ Question 204:

Which AWS service allows you to track changes to your AWS resources and
configurations over time?
A) AWS Config
B) AWS CloudTrail
C) AWS CloudWatch
D) AWS Lambda

✅ Correct Answer: A) AWS Config

Explanation: AWS Config allows you to track changes in the configuration of your AWS
resources and provides historical configuration snapshots and compliance assessment.

❓ Question 205:
Which AWS service provides managed, scalable NoSQL databases that support key-
value and document data models?
A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon ElastiCache

✅ Correct Answer: C) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed, scalable NoSQL database service that
supports both key-value and document data models.

❓ Question 206:

Which AWS service provides automatic and continuous backups for Amazon EC2
instances?
A) AWS Backup
B) Amazon S3
C) Amazon EC2 Snapshots
D) AWS Elastic Beanstalk

✅ Correct Answer: A) AWS Backup

Explanation: AWS Backup provides centralized backup management for AWS services,
including automatic backups for Amazon EC2 instances and other AWS resources.

❓ Question 207:

Which AWS service is used for real-time communication and collaboration for team
members across devices?
A) Amazon Chime
B) Amazon WorkDocs
C) AWS WorkSpaces
D) Amazon SNS

✅ Correct Answer: A) Amazon Chime

Explanation: Amazon Chime is a communications service that allows teams to meet, chat,
and collaborate across devices with voice, video, and screen sharing capabilities.

❓ Question 208:

Which AWS service is a fully managed continuous integration and delivery (CI/CD)
service that automates building, testing, and deploying code?
A) AWS CodePipeline
B) AWS CodeBuild
C) AWS CodeDeploy
D) AWS Lambda
✅ Correct Answer: A) AWS CodePipeline
Explanation: AWS CodePipeline is a fully managed CI/CD service that automates the
building, testing, and deployment of applications, allowing for continuous delivery.

❓ Question 209:

Which AWS service provides a fully managed message queuing service to decouple
and scale microservices and distributed systems?
A) Amazon SNS
B) Amazon SQS
C) AWS Lambda
D) AWS CloudTrail

✅ Correct Answer: B) Amazon SQS

Explanation: Amazon Simple Queue Service (SQS) is a fully managed message queuing
service that decouples and scales microservices, distributed systems, and serverless
applications.

❓ Question 210:

Which AWS service helps you deliver content globally with low latency and high
transfer speeds?
A) AWS CloudFront
B) AWS Global Accelerator
C) AWS Lambda
D) Amazon S3

✅ Correct Answer: A) AWS CloudFront

Explanation: Amazon CloudFront is a content delivery network (CDN) that delivers static
and dynamic content globally with low latency and high transfer speeds.

❓ Question 211:

Which AWS service allows you to set up a secure, private connection between your
on-premises data center and AWS?
A) AWS VPN
B) AWS Direct Connect
C) AWS Transit Gateway
D) AWS Shield

✅ Correct Answer: B) AWS Direct Connect

Explanation: AWS Direct Connect allows you to establish a secure, private connection from
your on-premises data center to AWS, ensuring consistent performance and lower latency.

❓ Question 212:
Which AWS service helps you manage API requests, including authentication, access
control, and traffic management?
A) Amazon API Gateway
B) AWS Lambda
C) Amazon Route 53
D) Amazon CloudWatch

✅ Correct Answer: A) Amazon API Gateway

Explanation: Amazon API Gateway enables you to create, deploy, and manage secure APIs,
providing features for authentication, traffic management, and authorization.

❓ Question 213:

Which AWS service allows you to search for and analyze logs from AWS resources
and applications?
A) AWS CloudWatch Logs
B) AWS X-Ray
C) AWS Lambda
D) Amazon CloudFront

✅ Correct Answer: A) AWS CloudWatch Logs

Explanation: AWS CloudWatch Logs helps you collect and monitor log files from AWS
resources and applications, making it easier to search and analyze logs in real time.

❓ Question 214:

Which AWS service provides a fully managed, serverless relational database service?
A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon Redshift

✅ Correct Answer: B) Amazon Aurora

Explanation: Amazon Aurora is a fully managed, serverless relational database engine
compatible with MySQL and PostgreSQL, providing high availability and automatic scaling.

❓ Question 215:

Which AWS service helps you automatically scale resources to meet demand for your
applications without manual intervention?
A) AWS Auto Scaling
B) Amazon EC2
C) AWS Elastic Beanstalk
D) Amazon S3
✅ Correct Answer: A) AWS Auto Scaling
Explanation: AWS Auto Scaling automatically adjusts the capacity of your resources, such
as EC2 instances, to meet the demand of your application without manual intervention.

❓ Question 216:

Which AWS service is used to deploy and manage virtual desktops for end users in a
managed environment?
A) Amazon WorkSpaces
B) Amazon EC2
C) AWS Lambda
D) Amazon WorkDocs

✅ Correct Answer: A) Amazon WorkSpaces

Explanation: Amazon WorkSpaces is a fully managed, secure desktop-as-a-service (DaaS)
solution that allows you to provision virtual desktops for end users.

❓ Question 217:

Which AWS service helps you manage your global application delivery and improve
the availability of your application through routing decisions?
A) AWS Global Accelerator
B) Amazon CloudFront
C) AWS Transit Gateway
D) Amazon Route 53

✅ Correct Answer: A) AWS Global Accelerator

Explanation: AWS Global Accelerator improves the availability and performance of your
applications by routing traffic to optimal endpoints based on performance and health.

❓ Question 218:

Which AWS service helps to secure and protect your AWS resources from common
web exploits?
A) AWS WAF
B) AWS Shield
C) Amazon CloudWatch
D) AWS Inspector

✅ Correct Answer: A) AWS WAF

Explanation: AWS WAF (Web Application Firewall) helps protect your AWS applications
from common web exploits that could affect availability, security, or consume excessive
resources.

❓ Question 219:
Which AWS service provides an environment for quickly building, testing, and
deploying serverless applications?
A) AWS Lambda
B) AWS Elastic Beanstalk
C) AWS CodePipeline
D) AWS Amplify

✅ Correct Answer: D) AWS Amplify

Explanation: AWS Amplify provides a platform to build, test, and deploy serverless
applications rapidly, offering an easy way to integrate with other AWS services.

❓ Question 220:

Which AWS service allows you to create and manage user permissions and policies
for controlling access to AWS resources?
A) AWS IAM
B) AWS Cognito
C) AWS Shield
D) AWS Directory Service

✅ Correct Answer: A) AWS IAM

Explanation: AWS Identity and Access Management (IAM) is used to manage access
permissions to AWS resources by creating and controlling user roles and policies.

❓ Question 221:

Which AWS service provides a central place to manage your AWS billing, cost
management, and usage reports?
A) AWS Cost Explorer
B) AWS Cost and Usage Report
C) AWS Budgets
D) AWS Billing and Cost Management Dashboard

✅ Correct Answer: D) AWS Billing and Cost Management Dashboard

Explanation: The AWS Billing and Cost Management Dashboard provides a central location
for managing billing information, viewing cost and usage reports, and tracking cost allocation.

❓ Question 222:

Which AWS service provides a fully managed, scalable NoSQL database designed for
applications that require consistent, single-digit millisecond latency?
A) Amazon DynamoDB
B) Amazon Aurora
C) Amazon Redshift
D) Amazon ElastiCache
✅ Correct Answer: A) Amazon DynamoDB
Explanation: Amazon DynamoDB is a fully managed, scalable NoSQL database that
delivers consistent, single-digit millisecond response times, ideal for high-performance
applications.

❓ Question 223:

Which AWS service helps you automate the software release process by coordinating
builds, tests, and deployments in CI/CD pipelines?
A) AWS CodePipeline
B) AWS CodeDeploy
C) AWS CodeBuild
D) AWS CloudFormation

✅ Correct Answer: A) AWS CodePipeline

Explanation: AWS CodePipeline is a fully managed CI/CD service that automates the
building, testing, and deployment of code to accelerate software release cycles.

❓ Question 224:

Which AWS service enables you to monitor, log, and set alarms for AWS resources
and applications?
A) Amazon CloudWatch
B) AWS CloudTrail
C) AWS Config
D) AWS X-Ray

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch provides monitoring, logging, and alerting capabilities for
AWS resources and applications, allowing you to track performance and operational health.

❓ Question 225:

Which AWS service provides fully managed file storage that can be accessed from
multiple EC2 instances concurrently?
A) Amazon S3
B) Amazon EFS
C) Amazon FSx
D) Amazon Glacier

✅ Correct Answer: B) Amazon EFS

Explanation: Amazon Elastic File System (EFS) provides scalable file storage that can be
accessed concurrently by multiple EC2 instances, making it ideal for shared file storage.

❓ Question 226:
Which AWS service enables you to create and manage virtual private networks (VPNs)
for secure connections between your on-premises network and AWS?
A) AWS VPN
B) AWS Direct Connect
C) Amazon CloudFront
D) AWS Transit Gateway

✅ Correct Answer: A) AWS VPN

Explanation: AWS VPN allows you to securely connect your on-premises network to AWS
through an encrypted VPN connection over the internet.

❓ Question 227:

Which AWS service helps you protect your AWS resources against DDoS attacks?
A) AWS Shield
B) AWS WAF
C) AWS GuardDuty
D) AWS Inspector

✅ Correct Answer: A) AWS Shield

Explanation: AWS Shield is a managed Distributed Denial of Service (DDoS) protection
service that helps safeguard your AWS resources from malicious DDoS attacks.

❓ Question 228:

Which AWS service helps you build and run containerized applications with
Kubernetes?
A) Amazon ECS
B) Amazon EKS
C) AWS Fargate
D) AWS Lambda

✅ Correct Answer: B) Amazon EKS

Explanation: Amazon Elastic Kubernetes Service (EKS) is a fully managed service that
makes it easy to run Kubernetes clusters and manage containerized applications at scale.

❓ Question 229:

Which AWS service helps you easily create a highly available and scalable website or
web application?
A) Amazon S3
B) Amazon Lightsail
C) AWS Elastic Beanstalk
D) AWS CloudFormation

✅ Correct Answer: C) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a platform as a service (PaaS) that simplifies
deploying, managing, and scaling web applications, making it easy to create a scalable web
application.

❓ Question 230:

Which AWS service enables you to provide your users with secure, scalable
authentication and authorization for web and mobile applications?
A) AWS IAM
B) Amazon Cognito
C) AWS Directory Service
D) AWS Shield

✅ Correct Answer: B) Amazon Cognito

Explanation: Amazon Cognito provides user authentication, authorization, and user
management for web and mobile applications, allowing you to secure user data and integrate
with other AWS services.

❓ Question 231:

Which AWS service helps you automatically detect security vulnerabilities in your
applications?
A) AWS Inspector
B) AWS Shield
C) AWS WAF
D) Amazon GuardDuty

✅ Correct Answer: A) AWS Inspector

Explanation: AWS Inspector is a security assessment service that automatically evaluates
the security of applications and infrastructure, detecting vulnerabilities and providing
recommendations for improvement.

❓ Question 232:

Which AWS service helps you optimize your cost and usage by providing detailed
reports and recommendations for reducing costs?
A) AWS Cost Explorer
B) AWS Budgets
C) AWS Trusted Advisor
D) AWS CloudTrail

✅ Correct Answer: C) AWS Trusted Advisor

Explanation: AWS Trusted Advisor provides cost optimization recommendations, helping
you reduce AWS usage and expenses by offering best practices for improving your AWS
environment.

❓ Question 233:
Which AWS service allows you to run containers on a serverless infrastructure?
A) AWS Lambda
B) Amazon ECS
C) Amazon EKS
D) AWS Fargate

✅ Correct Answer: D) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine that allows you to run containers
without managing the underlying infrastructure, making it easier to run containerized
applications.

❓ Question 234:

Which AWS service helps you migrate large amounts of data from your on-premises
data center to AWS?
A) AWS DataSync
B) AWS Snowball
C) AWS Glue
D) AWS Storage Gateway

✅ Correct Answer: B) AWS Snowball

Explanation: AWS Snowball is a physical data transport solution that allows you to securely
transfer large amounts of data from on-premises to AWS.

❓ Question 235:

Which AWS service provides fully managed relational databases, including MySQL,
PostgreSQL, and MariaDB?
A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon Redshift

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) provides fully managed relational
databases, including support for MySQL, PostgreSQL, MariaDB, and other popular database
engines.

❓ Question 236:

Which AWS service helps you monitor the health and performance of your
applications in real time?
A) AWS X-Ray
B) Amazon CloudWatch
C) AWS CloudTrail
D) AWS CloudFormation
✅ Correct Answer: B) Amazon CloudWatch
Explanation: Amazon CloudWatch provides real-time monitoring of applications and AWS
resources, allowing you to track performance, health, and operational metrics.

❓ Question 237:

Which AWS service allows you to store large amounts of data for archiving and
backup purposes with low-cost storage?
A) Amazon S3
B) Amazon Glacier
C) Amazon EBS
D) Amazon EFS

✅ Correct Answer: B) Amazon Glacier

Explanation: Amazon Glacier is a low-cost storage service designed for data archiving and
backup, offering secure and durable storage at a fraction of the cost of standard storage
services.

❓ Question 238:

Which AWS service allows you to set up and manage a global content delivery
network (CDN)?
A) Amazon CloudFront
B) AWS Global Accelerator
C) Amazon S3
D) Amazon Route 53

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a content delivery network (CDN) that accelerates the
delivery of web content to users around the world by caching content at edge locations.

❓ Question 239:

Which AWS service provides a fully managed search and analytics service for large
amounts of log and event data?
A) Amazon Elasticsearch Service
B) Amazon Athena
C) AWS Glue
D) Amazon Redshift

✅ Correct Answer: A) Amazon Elasticsearch Service

Explanation: Amazon Elasticsearch Service is a fully managed service that allows you to
search, analyze, and visualize large amounts of log and event data in real time.

❓ Question 240:
Which AWS service provides a scalable, fully managed DNS (Domain Name System)
service?
A) Amazon Route 53
B) AWS CloudFront
C) AWS WAF
D) Amazon S3

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable, fully managed DNS service that provides
domain registration, DNS routing, and health checking for applications and resources.

❓ Question 241:

Which AWS service helps you protect your applications from common web attacks
like SQL injection and cross-site scripting (XSS)?
A) AWS WAF
B) AWS Shield
C) AWS GuardDuty
D) Amazon Inspector

✅ Correct Answer: A) AWS WAF

Explanation: AWS WAF (Web Application Firewall) helps protect your web applications by
filtering traffic and blocking common web exploits like SQL injection and XSS attacks.

❓ Question 242:

Which AWS service provides a fully managed distributed in-memory cache that helps
improve the performance of web applications?
A) Amazon S3
B) Amazon RDS
C) Amazon ElastiCache
D) Amazon EFS

✅ Correct Answer: C) Amazon ElastiCache

Explanation: Amazon ElastiCache provides a fully managed in-memory data store and
cache, helping to accelerate applications by reducing the time required to access data from
databases.

❓ Question 243:

Which AWS service allows you to set up automated backups for Amazon RDS
databases?
A) AWS Backup
B) Amazon RDS Snapshots
C) Amazon CloudWatch
D) AWS DataSync
✅ Correct Answer: B) Amazon RDS Snapshots
Explanation: Amazon RDS Snapshots allow you to create backups of your Amazon RDS
databases, which can be restored to a specific point in time.

❓ Question 244:

Which AWS service helps you build, train, and deploy machine learning models at
scale?
A) Amazon SageMaker
B) AWS Lambda
C) Amazon Polly
D) Amazon Rekognition

✅ Correct Answer: A) Amazon SageMaker

Explanation: Amazon SageMaker is a fully managed service that allows you to build, train,
and deploy machine learning models quickly and at scale.

❓ Question 245:

Which AWS service provides automated threat detection and continuous monitoring
for AWS accounts and workloads?
A) AWS GuardDuty
B) Amazon Inspector
C) AWS Config
D) AWS Shield

✅ Correct Answer: A) AWS GuardDuty

Explanation: AWS GuardDuty is a continuous security monitoring service that helps protect
AWS accounts and workloads by detecting threats such as unusual API calls and potentially
unauthorized activities.

❓ Question 246:

Which AWS service helps you automate the deployment of applications using
containers on EC2 instances?
A) AWS Fargate
B) Amazon ECS
C) AWS Lambda
D) Amazon EKS

✅ Correct Answer: B) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is a fully managed service for running
containerized applications on a cluster of EC2 instances.

❓ Question 247:
Which AWS service helps you automate infrastructure deployment using code?
A) AWS CloudFormation
B) AWS Lambda
C) AWS CodeDeploy
D) AWS CodePipeline

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to define and provision AWS infrastructure as
code, automating the deployment of AWS resources based on templates.

❓ Question 248:

Which AWS service provides a fully managed, scalable data warehouse solution for
performing big data analytics?
A) Amazon DynamoDB
B) Amazon Redshift
C) AWS Glue
D) Amazon RDS

✅ Correct Answer: B) Amazon Redshift

Explanation: Amazon Redshift is a fully managed, petabyte-scale data warehouse service
designed for fast and scalable big data analytics.

❓ Question 249:

Which AWS service helps you store and manage sensitive information such as API
keys, passwords, and database credentials?
A) Amazon S3
B) AWS Secrets Manager
C) AWS KMS
D) AWS IAM

✅ Correct Answer: B) AWS Secrets Manager

Explanation: AWS Secrets Manager helps you store and manage sensitive information such
as database credentials, API keys, and other secrets used by your applications.

❓ Question 250:

Which AWS service helps you manage user identities and permissions for
applications hosted on AWS?
A) AWS IAM
B) Amazon Cognito
C) AWS Directory Service
D) Amazon RDS
✅ Correct Answer: A) AWS IAM
Explanation: AWS Identity and Access Management (IAM) enables you to manage user
identities and access permissions for AWS resources, ensuring secure access control.

❓ Question 251:

Which AWS service allows you to run virtual servers with customizable hardware and
software configurations?
A) Amazon EC2
B) AWS Lambda
C) AWS Fargate
D) Amazon Lightsail

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon EC2 (Elastic Compute Cloud) allows you to launch virtual servers with
customizable configurations for computing, memory, and storage to meet the needs of your
applications.

❓ Question 252:

Which AWS service helps you to integrate your applications with various AWS
services and other applications by using event-driven architecture?
A) AWS Step Functions
B) AWS SNS
C) AWS SQS
D) AWS EventBridge

✅ Correct Answer: D) AWS EventBridge

Explanation: AWS EventBridge is a fully managed event bus that helps you integrate
applications using event-driven architecture, enabling real-time data processing and
integration with AWS services.

❓ Question 253:

Which AWS service provides a simple way to monitor and analyze log data from
multiple AWS services and applications in one place?
A) Amazon CloudWatch Logs
B) AWS CloudTrail
C) AWS X-Ray
D) AWS CloudFormation

✅ Correct Answer: A) Amazon CloudWatch Logs

Explanation: Amazon CloudWatch Logs enables you to collect and monitor log files from
various AWS services and applications, providing insights into the performance and behavior
of your systems.
❓ Question 254:

Which AWS service provides on-demand cloud computing resources such as CPU,
memory, and storage?
A) Amazon EC2
B) AWS S3
C) Amazon EBS
D) AWS Lambda

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon EC2 provides resizable compute capacity in the cloud, offering virtual
servers (instances) with on-demand resources such as CPU, memory, and storage.

❓ Question 255:

Which AWS service allows you to store static web content, such as images, HTML,
and videos?
A) Amazon S3
B) Amazon CloudFront
C) AWS Lambda
D) Amazon EFS

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 (Simple Storage Service) is designed to store large amounts of
data, including static web content such as images, videos, and HTML files.

❓ Question 256:

Which AWS service provides an integrated development environment for building and
deploying serverless applications?
A) AWS CloudFormation
B) AWS Lambda
C) AWS Amplify
D) Amazon ECS

✅ Correct Answer: C) AWS Amplify

Explanation: AWS Amplify is a development platform that allows you to build and deploy
serverless web and mobile applications using a set of tools and services provided by AWS.

❓ Question 257:

Which AWS service helps you monitor your AWS resources and applications by
collecting metrics, logs, and events?
A) Amazon CloudWatch
B) AWS Inspector
C) AWS CloudTrail
D) AWS X-Ray
✅ Correct Answer: A) Amazon CloudWatch
Explanation: Amazon CloudWatch is used to monitor your AWS resources and applications,
collecting metrics, logs, and events to help you maintain operational health and performance.

❓ Question 258:

Which AWS service enables you to automatically scale your EC2 instances based on
traffic demands?
A) AWS Auto Scaling
B) Amazon CloudWatch
C) Amazon Route 53
D) AWS Lambda

✅ Correct Answer: A) AWS Auto Scaling

Explanation: AWS Auto Scaling automatically adjusts the number of EC2 instances based
on traffic or demand, ensuring that applications are adequately scaled to handle load
changes.

❓ Question 259:

Which AWS service allows you to run fully managed databases with automatic
backups and scaling?
A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon Redshift

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) allows you to run fully managed
databases, including automatic backups, patching, and scaling for relational databases.

❓ Question 260:

Which AWS service helps you manage the lifecycle of secrets such as API keys and
database credentials?
A) AWS Secrets Manager
B) Amazon S3
C) AWS KMS
D) Amazon RDS

✅ Correct Answer: A) AWS Secrets Manager

Explanation: AWS Secrets Manager allows you to store, manage, and retrieve sensitive
information like API keys, database credentials, and other secrets.

❓ Question 261:
Which AWS service allows you to create and manage a virtual private cloud (VPC)
within the AWS cloud?
A) AWS Direct Connect
B) Amazon VPC
C) AWS CloudFormation
D) Amazon EC2

✅ Correct Answer: B) Amazon VPC

Explanation: Amazon VPC (Virtual Private Cloud) allows you to create and manage a
private network within the AWS cloud, providing control over IP address ranges, subnets,
route tables, and network gateways.

❓ Question 262:

Which AWS service helps you protect your applications from DDoS attacks?
A) AWS Shield
B) Amazon CloudFront
C) AWS WAF
D) Amazon Route 53

✅ Correct Answer: A) AWS Shield

Explanation: AWS Shield is a managed DDoS protection service that helps safeguard
applications running on AWS against large-scale, sophisticated DDoS attacks.

❓ Question 263:

Which AWS service allows you to create a secure and scalable content delivery
network (CDN)?
A) AWS Direct Connect
B) Amazon S3
C) Amazon CloudFront
D) AWS Lambda

✅ Correct Answer: C) Amazon CloudFront

Explanation: Amazon CloudFront is a content delivery network (CDN) that distributes
content globally to improve website and application performance by caching static content at
edge locations.

❓ Question 264:

Which AWS service helps you automatically adjust your application’s scaling based
on performance metrics like CPU utilization or network traffic?
A) AWS Auto Scaling
B) AWS CloudFormation
C) Amazon EC2
D) Amazon Route 53
✅ Correct Answer: A) AWS Auto Scaling
Explanation: AWS Auto Scaling automatically adjusts the number of instances in your
application based on performance metrics to handle varying loads.

❓ Question 265:

Which AWS service provides a highly available, scalable file storage service for use
with Amazon EC2 instances?
A) Amazon S3
B) Amazon EFS
C) Amazon Glacier
D) Amazon EBS

✅ Correct Answer: B) Amazon EFS

Explanation: Amazon EFS (Elastic File System) is a scalable and managed file storage
service that is used with Amazon EC2 instances, providing shared access to file storage over
a network.

❓ Question 266:

Which AWS service allows you to set up and manage an online marketplace for selling
and buying digital products?
A) AWS Marketplace
B) Amazon Storefront
C) AWS Business Hub
D) Amazon S3

✅ Correct Answer: A) AWS Marketplace

Explanation: AWS Marketplace is an online store that allows you to buy and sell digital
products, including software and solutions that run on AWS.

❓ Question 267:

Which AWS service allows you to automate the creation and management of EC2
instances using pre-configured templates?
A) AWS CloudFormation
B) Amazon EC2 Auto Scaling
C) AWS Elastic Beanstalk
D) AWS Lambda

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to define and provision AWS infrastructure as
code using templates, automating the deployment and management of resources like EC2
instances.

❓ Question 268:
Which AWS service provides an easy-to-use platform to monitor application
performance and troubleshoot errors in real time?
A) AWS X-Ray
B) AWS CloudWatch
C) AWS CloudTrail
D) AWS Lambda

✅ Correct Answer: A) AWS X-Ray

Explanation: AWS X-Ray helps developers monitor and analyze the performance of
applications, identify bottlenecks, and troubleshoot errors in real time.

❓ Question 269:

Which AWS service allows you to run code in response to specific events, such as
changes to data or HTTP requests?
A) Amazon EC2
B) AWS Lambda
C) AWS Elastic Beanstalk
D) Amazon CloudWatch

✅ Correct Answer: B) AWS Lambda

Explanation: AWS Lambda allows you to run code in response to events, such as file
uploads to Amazon S3 or HTTP requests, without provisioning or managing servers.

❓ Question 270:

Which AWS service provides a scalable and managed database service that supports
NoSQL workloads?
A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon Redshift

✅ Correct Answer: C) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service that provides
fast and scalable database performance for web-scale applications.

❓ Question 271:

Which AWS service allows you to set up a hybrid cloud by connecting on-premises
data centers to AWS cloud resources?
A) AWS Direct Connect
B) Amazon VPC
C) AWS Lambda
D) AWS Storage Gateway
✅ Correct Answer: A) AWS Direct Connect
Explanation: AWS Direct Connect allows you to establish a dedicated network connection
between your on-premises data center and AWS, enabling hybrid cloud setups with low
latency and high bandwidth.

❓ Question 272:

Which AWS service helps you build and deploy machine learning models without
needing to manage the underlying infrastructure?
A) AWS SageMaker
B) AWS Lambda
C) Amazon EC2
D) AWS Deep Learning AMIs

✅ Correct Answer: A) AWS SageMaker

Explanation: Amazon SageMaker is a fully managed service that allows you to build, train,
and deploy machine learning models without needing to manage the infrastructure.

❓ Question 273:

Which AWS service allows you to host a managed Kubernetes cluster for deploying
containerized applications?
A) Amazon EC2
B) AWS Fargate
C) Amazon EKS
D) Amazon ECS

✅ Correct Answer: C) Amazon EKS

Explanation: Amazon EKS (Elastic Kubernetes Service) is a fully managed service that
enables you to run Kubernetes clusters on AWS, simplifying the deployment of containerized
applications.

❓ Question 274:

Which AWS service provides serverless compute that lets you run code in response to
events, and automatically scales based on demand?
A) AWS EC2
B) AWS Fargate
C) AWS Lambda
D) Amazon Elastic Beanstalk

✅ Correct Answer: C) AWS Lambda

Explanation: AWS Lambda is a serverless compute service that allows you to run code in
response to events without provisioning or managing servers. It automatically scales based
on the incoming request volume.
❓ Question 275:

Which AWS service allows you to perform automated security assessments of your
applications to identify vulnerabilities?
A) Amazon Inspector
B) AWS WAF
C) AWS GuardDuty
D) AWS Config

✅ Correct Answer: A) Amazon Inspector

Explanation: Amazon Inspector is a service that automatically assesses the security of your
applications and provides reports on vulnerabilities or deviations from best practices.

❓ Question 276:

Which AWS service enables the creation of a secure, isolated network that connects
multiple AWS resources within the same region?
A) Amazon VPC
B) AWS Direct Connect
C) Amazon CloudFront
D) Amazon Route 53

✅ Correct Answer: A) Amazon VPC

Explanation: Amazon VPC (Virtual Private Cloud) enables the creation of an isolated
network where you can launch AWS resources like EC2 instances, RDS databases, and
more, within a private network.

❓ Question 277:

Which AWS service allows you to manage, monitor, and govern your AWS resources
and infrastructure at scale?
A) AWS Config
B) AWS Systems Manager
C) AWS CloudTrail
D) AWS CloudFormation

✅ Correct Answer: B) AWS Systems Manager

Explanation: AWS Systems Manager provides a unified interface for managing, automating,
and governing your AWS resources, ensuring consistent and efficient operation at scale.

❓ Question 278:

Which AWS service can be used to create and manage cloud-based resources such as
applications, databases, and storage using a graphical interface?
A) AWS Elastic Beanstalk
B) Amazon CloudFormation
C) AWS Lambda
D) Amazon EC2

✅ Correct Answer: A) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a platform as a service (PaaS) that enables you to
deploy and manage applications without worrying about the infrastructure, using a graphical
user interface.

❓ Question 279:

Which AWS service helps you manage DNS records for your domains and route traffic
to various AWS resources?
A) Amazon Route 53
B) AWS Direct Connect
C) Amazon VPC
D) AWS WAF

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable DNS service that helps you route internet traffic
to various AWS resources, manage domain registrations, and configure routing policies.

❓ Question 280:

Which AWS service is designed for easily managing and deploying infrastructure as
code?
A) AWS CloudFormation
B) AWS Lambda
C) Amazon EC2
D) AWS Systems Manager

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to manage and provision AWS infrastructure
resources as code by defining them in a template and using AWS services to deploy and
manage the resources.

❓ Question 281:

Which AWS service enables you to create highly available, fault-tolerant, and scalable
databases with automatic replication across multiple AWS regions?
A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon ElastiCache

✅ Correct Answer: B) Amazon Aurora

Explanation: Amazon Aurora is a fully managed relational database service that provides
high availability, fault tolerance, and automatic replication across multiple AWS regions.
❓ Question 282:

Which AWS service helps you analyze data in real time and run complex queries on
massive datasets?
A) Amazon Redshift
B) Amazon Athena
C) Amazon S3
D) AWS Glue

✅ Correct Answer: B) Amazon Athena

Explanation: Amazon Athena is a serverless interactive query service that allows you to
analyze data stored in Amazon S3 using SQL without managing any infrastructure.

❓ Question 283:

Which AWS service provides a managed environment for running Docker containers
at scale?
A) Amazon EC2
B) AWS Fargate
C) Amazon EKS
D) Amazon ECS

✅ Correct Answer: D) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) is a fully managed service for running
Docker containers at scale, simplifying the orchestration and management of containerized
applications.

❓ Question 284:

Which AWS service helps you automatically manage and monitor compliance with
industry standards and regulatory requirements?
A) AWS Config
B) AWS CloudTrail
C) AWS Shield
D) AWS GuardDuty

✅ Correct Answer: A) AWS Config

Explanation: AWS Config enables you to assess, monitor, and audit the configuration of
AWS resources, ensuring compliance with internal policies, industry regulations, and best
practices.

❓ Question 285:

Which AWS service allows you to manage the encryption keys used to secure your
data across various AWS services?
A) AWS KMS
B) AWS IAM
C) Amazon RDS
D) Amazon S3

✅ Correct Answer: A) AWS KMS

Explanation: AWS KMS (Key Management Service) is a fully managed service that allows
you to create and control the encryption keys used to secure data across multiple AWS
services.

❓ Question 286:

Which AWS service allows you to create and manage a virtual private network (VPN)
between your on-premises network and AWS?
A) AWS Direct Connect
B) Amazon VPC
C) AWS VPN
D) AWS Transit Gateway

✅ Correct Answer: C) AWS VPN

Explanation: AWS VPN allows you to create an encrypted VPN connection between your
on-premises network and AWS, providing a secure communication channel over the internet.

❓ Question 287:

Which AWS service helps you build and deploy APIs for your backend services?
A) AWS API Gateway
B) AWS Lambda
C) Amazon EC2
D) Amazon DynamoDB

✅ Correct Answer: A) AWS API Gateway

Explanation: AWS API Gateway is a fully managed service that allows you to create,
publish, and manage APIs for your backend services, providing scalability and security.

❓ Question 288:

Which AWS service provides a fully managed, scalable, and secure way to store and
retrieve any amount of data at any time?
A) Amazon EFS
B) Amazon S3
C) AWS Glacier
D) Amazon RDS

✅ Correct Answer: B) Amazon S3

Explanation: Amazon S3 (Simple Storage Service) is a scalable and secure object storage
service that allows you to store and retrieve any amount of data at any time from anywhere
on the web.

❓ Question 289:

Which AWS service provides automated backups and disaster recovery capabilities
for applications running in the cloud?
A) AWS Backup
B) Amazon EC2
C) AWS Systems Manager
D) Amazon Route 53

✅ Correct Answer: A) AWS Backup

Explanation: AWS Backup is a fully managed backup service that automates and
centralizes backup management for AWS resources, helping with disaster recovery and
compliance.

❓ Question 290:

Which AWS service allows you to run containerized applications in a serverless

environment without managing the underlying infrastructure?
A) Amazon EKS
B) Amazon ECS
C) AWS Lambda
D) AWS Fargate

✅ Correct Answer: D) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that lets you run
containerized applications without managing the underlying servers or clusters.

❓ Question 291:

Which AWS service is used to automate the deployment of infrastructure using code
templates?
A) AWS CloudFormation
B) AWS Elastic Beanstalk
C) AWS CodePipeline
D) AWS CodeDeploy

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to define and provision AWS infrastructure
using code, allowing you to automate the deployment and management of resources in a
repeatable and consistent manner.

❓ Question 292:
Which AWS service enables you to monitor, log, and set alarms for metrics in AWS
resources?
A) AWS CloudTrail
B) Amazon CloudWatch
C) AWS Config
D) AWS Lambda

✅ Correct Answer: B) Amazon CloudWatch

Explanation: Amazon CloudWatch is a monitoring service that allows you to track metrics,
set alarms, and log data for AWS resources, helping you maintain application performance
and health.

❓ Question 293:

Which AWS service is designed for deploying and managing machine learning models
in production?
A) Amazon SageMaker
B) AWS Lambda
C) AWS Deep Learning AMIs
D) Amazon EC2

✅ Correct Answer: A) Amazon SageMaker

Explanation: Amazon SageMaker is a fully managed service designed for building, training,
and deploying machine learning models at scale in production environments.

❓ Question 294:

Which AWS service helps you store and retrieve objects in the cloud with low-cost
archival storage?
A) Amazon S3
B) AWS Glacier
C) Amazon EFS
D) Amazon RDS

✅ Correct Answer: B) AWS Glacier

Explanation: AWS Glacier is a low-cost, archival storage service designed for data that is
infrequently accessed, providing secure and durable storage for long-term backups and
archives.

❓ Question 295:

Which AWS service is used to manage Docker containers in a scalable environment?

A) Amazon ECS
B) Amazon S3
C) AWS Fargate
D) AWS Lambda
✅ Correct Answer: A) Amazon ECS
Explanation: Amazon ECS (Elastic Container Service) is a highly scalable, high-
performance container orchestration service that allows you to run and manage Docker
containers on AWS.

❓ Question 296:

Which AWS service provides a managed service to stream and analyze large amounts
of real-time data?
A) AWS Kinesis
B) Amazon S3
C) Amazon EC2
D) Amazon Redshift

✅ Correct Answer: A) AWS Kinesis

Explanation: AWS Kinesis is a platform for real-time data streaming, allowing you to collect,
process, and analyze large streams of data for applications like analytics and real-time
monitoring.

❓ Question 297:

Which AWS service provides a global content delivery network (CDN) for accelerating
the delivery of your website content?
A) Amazon CloudFront
B) AWS S3
C) Amazon EC2
D) Amazon Route 53

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a content delivery network (CDN) that caches and
delivers your content to users with low latency, ensuring faster load times for your website.

❓ Question 298:

Which AWS service allows you to provision virtual machines in the cloud and
configure them as needed?
A) Amazon EC2
B) AWS Lambda
C) AWS Fargate
D) AWS ECS

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon EC2 (Elastic Compute Cloud) allows you to provision and manage
virtual machines (called instances) in the cloud, offering flexible compute capacity.

❓ Question 299:
Which AWS service helps you monitor security-related events within your AWS
environment and detect threats?
A) AWS GuardDuty
B) AWS Shield
C) AWS WAF
D) AWS Config

✅ Correct Answer: A) AWS GuardDuty

Explanation: AWS GuardDuty is a threat detection service that continuously monitors for
malicious or unauthorized behavior to protect your AWS accounts and workloads.

❓ Question 300:

Which AWS service enables you to manage and deploy machine learning models
using pre-built algorithms and frameworks?
A) AWS SageMaker
B) Amazon Aurora
C) AWS Lambda
D) Amazon EC2

✅ Correct Answer: A) AWS SageMaker

Explanation: Amazon SageMaker provides a fully managed environment for building,
training, and deploying machine learning models, including pre-built algorithms and
frameworks.

❓ Question 301:

Which AWS service allows you to create and manage virtual machines in the cloud for
scalable compute capacity?
A) Amazon EC2
B) AWS Fargate
C) Amazon S3
D) AWS Lambda

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon EC2 (Elastic Compute Cloud) allows you to create and manage virtual
machines, known as instances, to scale compute capacity as needed for your applications.

❓ Question 302:

Which AWS service enables you to manage and monitor security policies and
compliance requirements for your AWS resources?
A) AWS Config
B) Amazon CloudWatch
C) AWS IAM
D) AWS Security Hub
✅ Correct Answer: D) AWS Security Hub
Explanation: AWS Security Hub provides a comprehensive view of your security state within
AWS and helps you monitor and manage compliance with security best practices.

❓ Question 303:

Which AWS service allows you to automate the deployment and operation of
applications in the cloud without managing the infrastructure?
A) AWS Elastic Beanstalk
B) Amazon EC2
C) AWS Lambda
D) AWS CloudFormation

✅ Correct Answer: A) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a fully managed service that handles the
deployment, scaling, and monitoring of web applications and services without requiring users
to manage the underlying infrastructure.

❓ Question 304:

Which AWS service allows you to store and access data as objects with a pay-per-use
model for various use cases, such as backups and big data analytics?
A) Amazon S3
B) AWS EBS
C) Amazon RDS
D) Amazon Glacier

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 (Simple Storage Service) is an object storage service that provides
scalable, low-cost storage for a variety of data types, with a pay-per-use model.

❓ Question 305:

Which AWS service provides a fully managed NoSQL database service for applications
that require single-digit millisecond latency at any scale?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Aurora
D) Amazon ElastiCache

✅ Correct Answer: A) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database that provides fast
and predictable performance with single-digit millisecond latency at any scale.

❓ Question 306:
Which AWS service enables you to create a private, isolated network within the AWS
cloud?
A) AWS VPC
B) Amazon EC2
C) AWS Direct Connect
D) AWS Transit Gateway

✅ Correct Answer: A) AWS VPC

Explanation: Amazon VPC (Virtual Private Cloud) allows you to create a private, isolated
network within the AWS cloud where you can launch AWS resources and control network
settings.

❓ Question 307:

Which AWS service is used to create, manage, and configure security groups, network
ACLs, and other network configurations in your AWS infrastructure?
A) AWS VPC
B) AWS IAM
C) AWS WAF
D) AWS GuardDuty

✅ Correct Answer: A) AWS VPC

Explanation: Amazon VPC enables you to configure and manage your network settings,
such as security groups, subnets, route tables, and network ACLs, to ensure secure
communication between your resources.

❓ Question 308:

Which AWS service helps protect applications from distributed denial-of-service

(DDoS) attacks and provides automated traffic monitoring?
A) AWS Shield
B) AWS WAF
C) Amazon GuardDuty
D) AWS Config

✅ Correct Answer: A) AWS Shield

Explanation: AWS Shield is a managed service that helps protect AWS applications from
DDoS attacks, providing automatic detection and mitigation for attacks.

❓ Question 309:

Which AWS service provides a managed relational database engine with full SQL
support and scalability?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Aurora
D) Amazon Redshift
✅ Correct Answer: A) Amazon RDS
Explanation: Amazon RDS (Relational Database Service) is a fully managed service that
supports multiple relational database engines (e.g., MySQL, PostgreSQL, SQL Server) with
full SQL support and scalable performance.

❓ Question 310:

Which AWS service enables you to run containerized applications in a highly available
and scalable environment without managing the underlying infrastructure?
A) AWS Fargate
B) Amazon ECS
C) AWS Lambda
D) Amazon EC2

✅ Correct Answer: A) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that lets you run
containers without needing to manage the underlying infrastructure or clusters.

❓ Question 311:

Which AWS service allows you to automate the process of moving data between on-
premises data centers and the cloud?
A) AWS Direct Connect
B) AWS DataSync
C) AWS Storage Gateway
D) Amazon S3 Transfer Acceleration

✅ Correct Answer: B) AWS DataSync

Explanation: AWS DataSync is a fully managed service that simplifies and automates the
transfer of data between on-premises storage and AWS services like Amazon S3 or Amazon
EFS.

❓ Question 312:

Which AWS service helps you control access to your AWS resources using identity
and policies?
A) AWS IAM
B) AWS WAF
C) Amazon CloudWatch
D) AWS KMS

✅ Correct Answer: A) AWS IAM

Explanation: AWS IAM (Identity and Access Management) allows you to manage access to
AWS services and resources by creating and controlling user identities and their
permissions.
❓ Question 313:

Which AWS service allows you to manage the configuration and change control of
AWS resources?
A) AWS Config
B) AWS Systems Manager
C) AWS CloudTrail
D) AWS CloudFormation

✅ Correct Answer: A) AWS Config

Explanation: AWS Config is a service that provides visibility into resource configurations,
tracks changes, and helps with compliance auditing for your AWS environment.

❓ Question 314:

Which AWS service provides automatic scaling for applications based on traffic
demand?
A) AWS Auto Scaling
B) Amazon EC2
C) AWS Lambda
D) Amazon CloudFront

✅ Correct Answer: A) AWS Auto Scaling

Explanation: AWS Auto Scaling automatically adjusts the number of compute resources to
match the traffic demand, ensuring optimal performance and cost efficiency.

❓ Question 315:

Which AWS service allows you to monitor and log API calls made to AWS services in
your account?
A) AWS CloudTrail
B) Amazon CloudWatch
C) AWS GuardDuty
D) AWS Config

✅ Correct Answer: A) AWS CloudTrail

Explanation: AWS CloudTrail enables you to monitor and log API calls made on your AWS
account, helping you track changes and ensure compliance.

❓ Question 316:

Which AWS service provides fully managed, scalable file storage accessible from
Amazon EC2 instances?
A) Amazon S3
B) AWS EFS
C) AWS Glacier
D) Amazon RDS
✅ Correct Answer: B) AWS EFS
Explanation: Amazon EFS (Elastic File System) is a fully managed, scalable file storage
service that is accessible from Amazon EC2 instances, offering a shared file system.

❓ Question 317:

Which AWS service helps protect web applications from common web exploits by
filtering HTTP traffic?
A) AWS Shield
B) AWS WAF
C) Amazon GuardDuty
D) AWS CloudFront

✅ Correct Answer: B) AWS WAF

Explanation: AWS WAF (Web Application Firewall) is a managed service that helps protect
web applications from common web exploits by filtering and monitoring HTTP requests.

❓ Question 318:

Which AWS service is a fully managed service for building, training, and deploying
machine learning models?
A) Amazon SageMaker
B) AWS Lambda
C) Amazon EC2
D) AWS Elastic Beanstalk

✅ Correct Answer: A) Amazon SageMaker

Explanation: Amazon SageMaker is a fully managed service that allows you to build, train,
and deploy machine learning models at scale.

❓ Question 319:

Which AWS service provides a fully managed Kubernetes service for running
containerized applications at scale?
A) Amazon EKS
B) Amazon ECS
C) AWS Fargate
D) Amazon EC2

✅ Correct Answer: A) Amazon EKS

Explanation: Amazon EKS (Elastic Kubernetes Service) is a fully managed service that
allows you to run Kubernetes on AWS, enabling the orchestration of containerized
applications.

❓ Question 320:
Which AWS service provides a managed relational database engine with support for
MySQL, PostgreSQL, and MariaDB?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Aurora
D) AWS ElastiCache

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) is a managed relational database
service that supports multiple database engines, including MySQL, PostgreSQL, MariaDB,
and others.

❓ Question 321:

Which AWS service provides a fully managed service for deploying, managing, and
scaling Docker containers?
A) AWS Lambda
B) Amazon ECS
C) AWS Elastic Beanstalk
D) Amazon RDS

✅ Correct Answer: B) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) is a fully managed service for
deploying, managing, and scaling Docker containers in a cloud environment.

❓ Question 322:

Which AWS service is used to store and manage cryptographic keys used to protect
your data?
A) AWS KMS
B) Amazon S3
C) AWS IAM
D) AWS Shield

✅ Correct Answer: A) AWS KMS

Explanation: AWS KMS (Key Management Service) is a fully managed service that allows
you to create and control encryption keys used to encrypt your data.

❓ Question 323:

Which AWS service is used to migrate large amounts of data from on-premises
storage to the cloud in a secure and efficient way?
A) AWS DataSync
B) AWS Storage Gateway
C) AWS Snowball
D) AWS S3 Transfer Acceleration
✅ Correct Answer: C) AWS Snowball
Explanation: AWS Snowball is a petabyte-scale data transport solution that helps you
securely transfer large amounts of data to AWS.

❓ Question 324:

Which AWS service provides fully managed NoSQL database services with low-latency
and scalability for web and mobile applications?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Aurora
D) AWS ElastiCache

✅ Correct Answer: A) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service designed for
applications requiring low-latency, high-throughput performance at any scale.

❓ Question 325:

Which AWS service enables you to create an isolated network environment to run your
AWS resources?
A) AWS VPC
B) Amazon EC2
C) AWS Direct Connect
D) AWS Route 53

✅ Correct Answer: A) AWS VPC

Explanation: AWS VPC (Virtual Private Cloud) allows you to define and create an isolated
network within AWS, where you can control IP addresses, subnets, and routing.

❓ Question 326:

Which AWS service is used for continuous integration and continuous delivery (CI/CD)
automation?
A) AWS CodePipeline
B) AWS Lambda
C) AWS Elastic Beanstalk
D) Amazon S3

✅ Correct Answer: A) AWS CodePipeline

Explanation: AWS CodePipeline is a fully managed CI/CD service that automates the steps
in your software release process for fast and reliable application and infrastructure updates.

❓ Question 327:
Which AWS service provides a managed service for running and scaling SQL
databases?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon S3
D) Amazon Aurora

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) is a fully managed service that
helps you run and scale SQL databases, such as MySQL, PostgreSQL, and SQL Server.

❓ Question 328:

Which AWS service allows you to manage and scale containerized applications using
Kubernetes?
A) AWS ECS
B) AWS Lambda
C) Amazon EKS
D) AWS Elastic Beanstalk

✅ Correct Answer: C) Amazon EKS

Explanation: Amazon EKS (Elastic Kubernetes Service) is a fully managed service that
makes it easy to run Kubernetes clusters on AWS, allowing you to deploy and manage
containerized applications.

❓ Question 329:

Which AWS service is used to protect web applications from common web exploits
like SQL injection and cross-site scripting?
A) AWS WAF
B) AWS Shield
C) Amazon GuardDuty
D) AWS CloudTrail

✅ Correct Answer: A) AWS WAF

Explanation: AWS WAF (Web Application Firewall) is a service that protects your web
applications from common web exploits such as SQL injection and cross-site scripting (XSS).

❓ Question 330:

Which AWS service enables you to monitor, visualize, and analyze metrics for your
cloud resources and applications?
A) Amazon CloudWatch
B) AWS Config
C) Amazon S3
D) AWS CloudTrail
✅ Correct Answer: A) Amazon CloudWatch
Explanation: Amazon CloudWatch is a monitoring service for AWS cloud resources and the
applications you run on AWS, allowing you to collect and track metrics, set alarms, and
visualize data.

❓ Question 331:

Which AWS service provides a managed environment to run applications with support
for multiple programming languages and frameworks?
A) AWS Lambda
B) Amazon EC2
C) AWS Elastic Beanstalk
D) Amazon RDS

✅ Correct Answer: C) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a fully managed service for deploying and scaling
web applications and services, supporting multiple programming languages and frameworks.

❓ Question 332:

Which AWS service is used for automating infrastructure deployment through code?
A) AWS CloudFormation
B) Amazon EC2
C) AWS OpsWorks
D) AWS Lambda

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to model, provision, and manage AWS
resources using templates written in code, automating the infrastructure deployment process.

❓ Question 333:

Which AWS service provides serverless compute capacity for running containerized
applications without managing the underlying infrastructure?
A) AWS Fargate
B) Amazon ECS
C) AWS Lambda
D) Amazon EC2

✅ Correct Answer: A) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that runs
containers without requiring the user to manage the underlying infrastructure.

❓ Question 334:
Which AWS service provides a fully managed DNS service to route end-user requests
to various AWS services?
A) Amazon Route 53
B) AWS CloudFront
C) Amazon VPC
D) AWS Direct Connect

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable Domain Name System (DNS) web service that
routes end-user requests to applications hosted in AWS.

❓ Question 335:

Which AWS service helps detect unusual or unauthorized activity in your AWS
environment and provides security alerts?
A) AWS GuardDuty
B) AWS Shield
C) Amazon Inspector
D) AWS IAM

✅ Correct Answer: A) AWS GuardDuty

Explanation: AWS GuardDuty is a threat detection service that continuously monitors your
AWS environment for malicious activity and unauthorized behavior, providing security alerts.

❓ Question 336:

Which AWS service allows you to create and manage a virtual private network (VPN)
connection between your on-premises infrastructure and AWS?
A) AWS Direct Connect
B) Amazon VPC
C) AWS VPN
D) AWS Transit Gateway

✅ Correct Answer: C) AWS VPN

Explanation: AWS VPN allows you to create an encrypted connection between your on-
premises network and your AWS environment over the public internet.

❓ Question 337:

Which AWS service provides serverless execution of code in response to events

without provisioning or managing servers?
A) AWS Lambda
B) Amazon EC2
C) AWS Fargate
D) AWS Elastic Beanstalk
✅ Correct Answer: A) AWS Lambda
Explanation: AWS Lambda is a serverless compute service that runs code in response to
events without the need to provision or manage servers.

❓ Question 338:

Which AWS service provides a managed service for running PostgreSQL, MySQL,
MariaDB, and Oracle databases?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Aurora
D) AWS ElastiCache

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) is a fully managed service that
supports relational databases such as PostgreSQL, MySQL, MariaDB, and Oracle.

❓ Question 339:

Which AWS service allows you to scale your database storage automatically and
optimize performance for web applications?
A) Amazon Aurora
B) Amazon RDS
C) AWS DynamoDB
D) AWS ElastiCache

✅ Correct Answer: A) Amazon Aurora

Explanation: Amazon Aurora is a fully managed relational database service that
automatically scales storage and optimizes performance for web applications.

❓ Question 340:

Which AWS service enables real-time analytics on streaming data from sources like
IoT devices or logs?
A) AWS Kinesis
B) AWS Redshift
C) Amazon RDS
D) Amazon S3

✅ Correct Answer: A) AWS Kinesis

Explanation: AWS Kinesis provides services for real-time processing and analytics of
streaming data, such as data from IoT devices, logs, and social media feeds.

❓ Question 341:
Which AWS service provides a managed service for relational databases that supports
Amazon Aurora and other engines?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon ElastiCache
D) AWS Lambda

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS is a fully managed relational database service that supports
multiple database engines, including Amazon Aurora, MySQL, PostgreSQL, and Oracle.

❓ Question 342:

Which AWS service allows you to provision virtualized compute resources in the
cloud?
A) AWS Lambda
B) Amazon EC2
C) Amazon S3
D) AWS Auto Scaling

✅ Correct Answer: B) Amazon EC2

Explanation: Amazon EC2 (Elastic Compute Cloud) provides scalable virtual servers
(instances) to run applications in the cloud.

❓ Question 343:

Which AWS service is used for running containerized applications at scale using
Docker and Kubernetes?
A) Amazon ECS
B) Amazon EC2
C) AWS Lambda
D) AWS Elastic Beanstalk

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) is a fully managed container
orchestration service that allows you to run containerized applications using Docker or
Kubernetes.

❓ Question 344:

Which AWS service helps you monitor and track activity across your AWS resources
and services?
A) AWS CloudWatch
B) AWS CloudTrail
C) AWS Config
D) Amazon CloudFront
✅ Correct Answer: B) AWS CloudTrail
Explanation: AWS CloudTrail enables you to monitor and track API activity across your AWS
resources and services, providing audit trails and security visibility.

❓ Question 345:

Which AWS service helps you optimize cost and manage usage for AWS services?
A) AWS Pricing Calculator
B) AWS Budgets
C) AWS Cost Explorer
D) All of the above

✅ Correct Answer: D) All of the above

Explanation: AWS Pricing Calculator, AWS Budgets, and AWS Cost Explorer are all tools
that help you manage costs and optimize AWS usage based on your organization's needs.

❓ Question 346:

Which AWS service allows you to set up a secure VPN connection between your on-
premises network and AWS?
A) AWS VPN
B) AWS Direct Connect
C) Amazon Route 53
D) Amazon VPC

✅ Correct Answer: A) AWS VPN

Explanation: AWS VPN enables you to securely connect your on-premises network to your
AWS environment over an encrypted connection.

❓ Question 347:

Which AWS service provides a managed database for both operational and analytical
workloads?
A) Amazon Aurora
B) Amazon DynamoDB
C) Amazon Redshift
D) Amazon S3

✅ Correct Answer: C) Amazon Redshift

Explanation: Amazon Redshift is a fully managed data warehouse service designed for both
operational and analytical workloads with fast query performance.

❓ Question 348:

Which AWS service allows you to store objects such as images, videos, and backups
with easy access over HTTP?
A) Amazon S3
B) Amazon EFS
C) AWS Lambda
D) AWS Snowball

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 (Simple Storage Service) provides highly scalable object storage
for a wide range of data types, such as images, videos, and backups.

❓ Question 349:

Which AWS service is designed for scalable, low-latency, and in-memory data storage
to support real-time applications?
A) AWS ElastiCache
B) Amazon RDS
C) Amazon S3
D) AWS Lambda

✅ Correct Answer: A) AWS ElastiCache

Explanation: AWS ElastiCache is a managed service that provides in-memory caching,
enabling low-latency and high-performance data storage for real-time applications.

❓ Question 350:

Which AWS service provides a fully managed content delivery network (CDN) to
deliver your content globally with low latency?
A) Amazon CloudFront
B) AWS WAF
C) AWS Shield
D) Amazon Route 53

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a global content delivery network (CDN) that delivers
content, such as web pages, videos, and APIs, with low latency to users worldwide.

❓ Question 351:

Which AWS service is best for automating infrastructure provisioning and

management through code?
A) AWS CloudFormation
B) Amazon EC2
C) AWS Lambda
D) Amazon S3

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to automate the provisioning and
management of AWS resources through infrastructure as code.
❓ Question 352:

Which AWS service allows you to detect and monitor security threats in your AWS
environment?
A) AWS Shield
B) AWS GuardDuty
C) Amazon CloudWatch
D) AWS CloudTrail

✅ Correct Answer: B) AWS GuardDuty

Explanation: AWS GuardDuty continuously monitors your AWS environment for security
threats and malicious activity, helping you detect and respond to potential risks.

❓ Question 353:

Which AWS service is designed for managing DNS records and routing traffic for your
domain names?
A) Amazon Route 53
B) AWS WAF
C) AWS CloudFront
D) Amazon EC2

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable DNS service that allows you to manage DNS
records and route traffic for your domain names.

❓ Question 354:

Which AWS service helps you manage your virtual private cloud (VPC) by creating and
controlling network interfaces?
A) AWS VPC
B) AWS Direct Connect
C) AWS VPN
D) AWS Elastic Load Balancing

✅ Correct Answer: A) AWS VPC

Explanation: AWS VPC allows you to create and manage a virtual private cloud for
networking your AWS resources and controlling network interfaces.

❓ Question 355:

Which AWS service allows you to securely manage and store cryptographic keys for
your data?
A) AWS KMS
B) Amazon S3
C) Amazon EC2
D) AWS IAM

✅ Correct Answer: A) AWS KMS

Explanation: AWS KMS (Key Management Service) helps you create, store, and manage
cryptographic keys used to encrypt and decrypt your data securely.

❓ Question 356:

Which AWS service helps you analyze large amounts of data stored in Amazon S3
using SQL queries?
A) Amazon Athena
B) Amazon S3 Select
C) Amazon Redshift
D) Amazon Aurora

✅ Correct Answer: A) Amazon Athena

Explanation: Amazon Athena allows you to run SQL queries directly on data stored in
Amazon S3 without the need to move the data or set up a database.

❓ Question 357:

Which AWS service allows you to provision and manage your virtualized hardware
resources in the cloud?
A) Amazon EC2
B) AWS Lambda
C) Amazon S3
D) Amazon RDS

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon EC2 provides scalable virtual machines (instances) for running
applications in the cloud.

❓ Question 358:

Which AWS service provides a managed environment for deploying, scaling, and
managing web applications and services?
A) AWS Elastic Beanstalk
B) Amazon EC2
C) AWS Lambda
D) Amazon RDS

✅ Correct Answer: A) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk simplifies the deployment and management of web
applications by automatically handling the provisioning, load balancing, scaling, and
monitoring.
❓ Question 359:

Which AWS service allows you to protect your resources from DDoS attacks by
automatically detecting and mitigating them?
A) AWS Shield
B) AWS WAF
C) Amazon GuardDuty
D) AWS VPN

✅ Correct Answer: A) AWS Shield

Explanation: AWS Shield is a managed DDoS protection service that automatically detects
and mitigates potential DDoS attacks to ensure the availability of your AWS resources.

❓ Question 360:

Which AWS service provides a managed environment to run MySQL, PostgreSQL, and
other relational databases?
A) Amazon RDS
B) AWS Lambda
C) Amazon S3
D) Amazon EC2

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS is a managed service for running relational databases, including
MySQL, PostgreSQL, and more, with automatic backups, patching, and scaling.

❓ Question 361:

Which AWS service allows you to run Docker containers without managing the
underlying infrastructure?
A) Amazon ECS
B) Amazon EC2
C) AWS Fargate
D) AWS Lambda

✅ Correct Answer: C) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that runs Docker
containers without requiring users to manage the underlying infrastructure.

❓ Question 362:

Which AWS service allows you to store, analyze, and share big data?
A) Amazon Redshift
B) Amazon S3
C) AWS Data Pipeline
D) AWS Glue
✅ Correct Answer: A) Amazon Redshift
Explanation: Amazon Redshift is a fast, fully managed data warehouse that allows you to
store and analyze large datasets, making it ideal for big data analytics.

❓ Question 363:

Which AWS service allows you to automate code deployment and monitor the health
of your applications?
A) AWS CodeDeploy
B) AWS Elastic Beanstalk
C) AWS Lambda
D) AWS CloudFormation

✅ Correct Answer: A) AWS CodeDeploy

Explanation: AWS CodeDeploy automates code deployment to a variety of compute
services, such as EC2 and Lambda, and monitors the health of the application during
deployment.

❓ Question 364:

Which AWS service is used for monitoring the health and performance of AWS
resources and applications?
A) AWS CloudWatch
B) Amazon Route 53
C) AWS CloudTrail
D) Amazon S3

✅ Correct Answer: A) AWS CloudWatch

Explanation: AWS CloudWatch provides monitoring and observability for AWS resources
and applications, tracking metrics and log data in real time.

❓ Question 365:

Which AWS service provides a managed service for data warehousing and real-time
analytics?
A) Amazon Redshift
B) AWS Glue
C) Amazon S3
D) AWS Kinesis

✅ Correct Answer: A) Amazon Redshift

Explanation: Amazon Redshift is a fully managed data warehouse that provides real-time
analytics on large datasets, helping organizations analyze data quickly and effectively.

❓ Question 366:
Which AWS service helps you manage AWS resources and their configurations
through automated compliance checks?
A) AWS Config
B) Amazon EC2
C) AWS CloudFormation
D) AWS CloudTrail

✅ Correct Answer: A) AWS Config

Explanation: AWS Config provides a service to track and manage AWS resource
configurations, helping ensure compliance with policies and regulations.

❓ Question 367:

Which AWS service provides an environment for running web applications without
managing servers or infrastructure?
A) AWS Elastic Beanstalk
B) Amazon EC2
C) AWS Lambda
D) Amazon S3

✅ Correct Answer: A) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk simplifies deploying and scaling web applications by
automatically managing the infrastructure, such as server provisioning and load balancing.

❓ Question 368:

Which AWS service provides centralized logging, monitoring, and troubleshooting of

AWS resources and applications?
A) AWS CloudWatch
B) AWS X-Ray
C) Amazon S3
D) AWS Lambda

✅ Correct Answer: B) AWS X-Ray

Explanation: AWS X-Ray helps developers analyze and debug distributed applications,
providing insights into performance bottlenecks and errors in the application.

❓ Question 369:

Which AWS service is used for running serverless functions in response to events like
HTTP requests or object uploads?
A) AWS Lambda
B) AWS Fargate
C) AWS EC2
D) Amazon RDS
✅ Correct Answer: A) AWS Lambda
Explanation: AWS Lambda allows you to run serverless functions that automatically execute
in response to events like HTTP requests or object uploads to Amazon S3.

❓ Question 370:

Which AWS service allows you to run virtualized network appliances, such as firewalls
or routers, in the cloud?
A) AWS Direct Connect
B) AWS VPN
C) AWS Marketplace
D) AWS Transit Gateway

✅ Correct Answer: C) AWS Marketplace

Explanation: AWS Marketplace allows you to find, buy, and deploy various third-party
virtualized network appliances, including firewalls, routers, and other network management
tools.

❓ Question 371:

Which AWS service is used to allow customers to connect their on-premises network
directly to AWS over a private connection?
A) AWS VPN
B) AWS Direct Connect
C) Amazon CloudFront
D) AWS CloudTrail

✅ Correct Answer: B) AWS Direct Connect

Explanation: AWS Direct Connect provides a dedicated private network connection from
your on-premises network to AWS, which can offer lower latency and more consistent
performance compared to standard internet connections.

❓ Question 372:

Which AWS service allows you to deploy and manage a fully managed Kubernetes
environment in the cloud?
A) AWS Lambda
B) Amazon ECS
C) Amazon EKS
D) Amazon EC2

✅ Correct Answer: C) Amazon EKS

Explanation: Amazon EKS (Elastic Kubernetes Service) is a managed service that simplifies
running Kubernetes on AWS by taking care of the control plane and scaling automatically.

❓ Question 373:
Which AWS service can automatically scale resources to meet demand by adjusting
the number of instances in response to traffic?
A) AWS Auto Scaling
B) AWS Lambda
C) Amazon EC2
D) AWS Elastic Load Balancer

✅ Correct Answer: A) AWS Auto Scaling

Explanation: AWS Auto Scaling automatically adjusts the number of EC2 instances and
other resources based on demand, ensuring optimal performance and cost-efficiency.

❓ Question 374:

Which AWS service provides highly durable and available object storage for backups,
archives, and data storage?
A) Amazon S3
B) Amazon RDS
C) Amazon EC2
D) Amazon EFS

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 provides durable and highly available object storage for various
types of data, including backups, archives, and static files.

❓ Question 375:

Which AWS service enables real-time streaming of data for analytics, machine
learning, and more?
A) AWS Kinesis
B) Amazon S3
C) Amazon Redshift
D) AWS Lambda

✅ Correct Answer: A) AWS Kinesis

Explanation: AWS Kinesis allows for real-time data streaming, enabling analytics,
processing, and machine learning on high-volume streaming data.

❓ Question 376:

Which AWS service provides a fully managed platform to build, deploy, and scale
applications quickly using the Docker container format?
A) AWS Elastic Beanstalk
B) Amazon ECS
C) AWS Lambda
D) Amazon RDS
✅ Correct Answer: B) Amazon ECS
Explanation: Amazon ECS (Elastic Container Service) is a fully managed container
orchestration service that allows you to run Docker containers at scale.

❓ Question 377:

Which AWS service is used for protecting web applications from common web
exploits and DDoS attacks?
A) AWS WAF
B) AWS Shield
C) Amazon CloudFront
D) AWS Direct Connect

✅ Correct Answer: A) AWS WAF

Explanation: AWS WAF (Web Application Firewall) protects web applications from common
web exploits such as SQL injection and XSS, as well as DDoS attacks when combined with
AWS Shield.

❓ Question 378:

Which AWS service provides a fully managed database for non-relational data
(NoSQL)?
A) Amazon DynamoDB
B) Amazon Aurora
C) Amazon RDS
D) AWS Lambda

✅ Correct Answer: A) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service designed for
high availability and scalability, ideal for applications that require low-latency data access.

❓ Question 379:

Which AWS service allows you to easily automate the deployment of security patches,
application updates, and system configurations?
A) AWS Systems Manager
B) AWS Lambda
C) Amazon EC2
D) Amazon Inspector

✅ Correct Answer: A) AWS Systems Manager

Explanation: AWS Systems Manager provides operational insights and automation for
managing resources, including deploying security patches and managing configurations at
scale.

❓ Question 380:
Which AWS service allows you to run SQL-based queries on your data stored in
Amazon S3 without moving the data into a database?
A) Amazon Redshift
B) Amazon Athena
C) AWS Glue
D) Amazon EMR

✅ Correct Answer: B) Amazon Athena

Explanation: Amazon Athena enables you to run SQL queries directly on data stored in
Amazon S3, making it easy to analyze and process large datasets without needing to move
the data into a database.

❓ Question 381:

Which AWS service provides you with a way to analyze and monitor all AWS API
activity across your account?
A) AWS CloudTrail
B) AWS Config
C) Amazon CloudWatch
D) AWS Shield

✅ Correct Answer: A) AWS CloudTrail

Explanation: AWS CloudTrail records and logs API calls made in your AWS account,
providing full visibility into your AWS environment's API activity for monitoring and auditing.

❓ Question 382:

Which AWS service is designed for content delivery and caching to reduce the latency
of serving static and dynamic web content?
A) Amazon CloudFront
B) Amazon S3
C) AWS Lambda
D) AWS Elastic Beanstalk

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a Content Delivery Network (CDN) service that caches
content in multiple locations worldwide to reduce latency and improve the delivery of content
to users.

❓ Question 383:

Which AWS service provides fully managed relational databases with support for
multiple database engines?
A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon Redshift
✅ Correct Answer: A) Amazon RDS
Explanation: Amazon RDS (Relational Database Service) is a fully managed database
service that supports multiple database engines, including MySQL, PostgreSQL, MariaDB,
Oracle, and SQL Server.

❓ Question 384:

Which AWS service allows you to store large amounts of data in a hierarchical file
system?
A) Amazon EFS
B) Amazon S3
C) Amazon EBS
D) Amazon Glacier

✅ Correct Answer: A) Amazon EFS

Explanation: Amazon EFS (Elastic File System) is a fully managed, scalable file storage
service that can be used to store large amounts of data in a shared file system with a
hierarchical structure.

❓ Question 385:

Which AWS service allows you to run serverless applications by automatically scaling
functions in response to events?
A) AWS Lambda
B) Amazon EC2
C) Amazon ECS
D) AWS Fargate

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda is a serverless computing service that automatically scales
applications in response to events, allowing you to run code without provisioning or
managing servers.

❓ Question 386:

Which AWS service allows you to manage multi-region and multi-account AWS
infrastructure using Infrastructure as Code (IaC)?
A) AWS CloudFormation
B) AWS Elastic Beanstalk
C) AWS OpsWorks
D) AWS Lambda

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to model, provision, and manage AWS
infrastructure using templates, enabling you to automate the deployment of resources across
multiple regions and accounts.
❓ Question 387:

Which AWS service provides fully managed machine learning models for common
business tasks such as image and text analysis?
A) Amazon SageMaker
B) AWS Lambda
C) AWS Rekognition
D) Amazon Polly

✅ Correct Answer: C) AWS Rekognition

Explanation: AWS Rekognition provides fully managed machine learning models for image
and video analysis, including tasks such as object detection, facial analysis, and text
recognition.

❓ Question 388:

Which AWS service allows you to migrate large amounts of data into AWS using a
physical device for large-scale data transfers?
A) AWS Snowball
B) AWS DataSync
C) Amazon S3
D) AWS Direct Connect

✅ Correct Answer: A) AWS Snowball

Explanation: AWS Snowball is a data transport solution that allows you to securely transfer
large amounts of data into AWS using a physical appliance, making it ideal for large-scale
data migrations.

❓ Question 389:

Which AWS service helps to set up and manage DNS records for your domain names,
providing high availability and low latency?
A) Amazon Route 53
B) AWS CloudTrail
C) Amazon S3
D) AWS WAF

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable DNS web service that allows you to configure
DNS records for domain names, providing high availability and low latency for routing traffic
to AWS resources.

❓ Question 390:

Which AWS service enables you to run applications on a virtual machine within the
cloud, providing full control over the operating system?
A) Amazon EC2
B) AWS Lambda
C) Amazon RDS
D) Amazon Lightsail

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon EC2 (Elastic Compute Cloud) allows you to run virtual machines
(instances) in the cloud, providing full control over the operating system, software, and
configurations of your instances.

❓ Question 391:

Which AWS service allows you to automate the provisioning and management of
infrastructure through code?
A) AWS Lambda
B) AWS CloudFormation
C) AWS Systems Manager
D) AWS CodeDeploy

✅ Correct Answer: B) AWS CloudFormation

Explanation: AWS CloudFormation allows you to define and provision AWS infrastructure
using code, enabling automation and repeatability in managing your cloud resources.

❓ Question 392:

Which AWS service enables you to store files in a scalable and secure object storage
solution?
A) Amazon S3
B) Amazon EFS
C) Amazon RDS
D) Amazon DynamoDB

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 (Simple Storage Service) is a scalable object storage service that
allows you to store and retrieve any amount of data securely and efficiently.

❓ Question 393:

Which AWS service helps protect your web applications from common exploits, such
as SQL injection and cross-site scripting (XSS)?
A) AWS WAF
B) AWS Shield
C) Amazon CloudFront
D) Amazon Inspector
✅ Correct Answer: A) AWS WAF
Explanation: AWS WAF (Web Application Firewall) helps protect web applications from
common exploits like SQL injection, cross-site scripting (XSS), and other web attacks.

❓ Question 394:

Which AWS service provides a fully managed relational database with the ability to
automatically replicate across multiple availability zones?
A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon Redshift

✅ Correct Answer: B) Amazon Aurora

Explanation: Amazon Aurora is a fully managed relational database that provides high
performance and scalability, with built-in replication across multiple availability zones for high
availability.

❓ Question 395:

Which AWS service is used for running a containerized application without having to
manage the underlying infrastructure?
A) Amazon ECS
B) Amazon EC2
C) AWS Fargate
D) AWS Lambda

✅ Correct Answer: C) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that allows you to
run containerized applications without having to manage the underlying infrastructure.

❓ Question 396:

Which AWS service allows you to automate security assessments of your AWS
resources to identify vulnerabilities?
A) AWS Inspector
B) AWS Shield
C) Amazon GuardDuty
D) AWS Config

✅ Correct Answer: A) AWS Inspector

Explanation: AWS Inspector is an automated security assessment service that helps identify
vulnerabilities and deviations from best practices in your AWS resources.

❓ Question 397:
Which AWS service allows you to centrally manage and store your log data for
compliance and troubleshooting?
A) AWS CloudWatch Logs
B) AWS Lambda
C) Amazon S3
D) AWS X-Ray

✅ Correct Answer: A) AWS CloudWatch Logs

Explanation: AWS CloudWatch Logs enables you to collect, monitor, and store logs from
your AWS resources and applications for troubleshooting, compliance, and auditing.

❓ Question 398:

Which AWS service allows you to analyze large datasets in real-time from multiple
data sources?
A) Amazon Redshift
B) Amazon EMR
C) AWS Glue
D) AWS Kinesis

✅ Correct Answer: D) AWS Kinesis

Explanation: AWS Kinesis allows you to process and analyze streaming data in real-time
from multiple data sources, such as logs, social media, and IoT devices.

❓ Question 399:

Which AWS service is designed to run event-driven, serverless applications that are
triggered by events such as HTTP requests or object uploads to S3?
A) AWS Lambda
B) Amazon EC2
C) Amazon S3
D) AWS Fargate

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda is a serverless compute service that runs your code in response
to various events, such as HTTP requests or changes in data stored in S3, without requiring
you to manage servers.

❓ Question 400:

Which AWS service allows you to set up a secure, private network connection
between your on-premises network and AWS?
A) AWS Direct Connect
B) AWS VPN
C) AWS Transit Gateway
D) Amazon VPC
✅ Correct Answer: A) AWS Direct Connect
Explanation: AWS Direct Connect enables you to establish a dedicated, private network
connection between your on-premises data center and AWS, improving performance and
reducing costs compared to using the public internet.

❓ Question 401:

Which AWS service allows you to automate the creation of deployment pipelines for
continuous integration and continuous delivery (CI/CD)?
A) AWS CodePipeline
B) AWS CodeDeploy
C) AWS CodeBuild
D) AWS Lambda

✅ Correct Answer: A) AWS CodePipeline

Explanation: AWS CodePipeline is a fully managed service that automates the continuous
integration and delivery (CI/CD) pipeline, enabling the automated building, testing, and
deployment of applications.

❓ Question 402:

Which AWS service provides the ability to manage DNS records for domain names,
including routing and health checks?
A) Amazon Route 53
B) Amazon CloudFront
C) Amazon S3
D) AWS WAF

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable DNS web service that allows you to configure
DNS records, health checks, and routing for your domain names and web traffic.

❓ Question 403:

Which AWS service helps to centrally manage user access to AWS resources with
granular permissions?
A) AWS IAM
B) AWS Cognito
C) Amazon S3
D) AWS WAF

✅ Correct Answer: A) AWS IAM

Explanation: AWS Identity and Access Management (IAM) allows you to securely control
access to AWS services and resources, providing fine-grained access controls and
permissions for users and groups.
❓ Question 404:

Which AWS service provides monitoring and observability of applications and

infrastructure, including metrics, logs, and alerts?
A) Amazon CloudWatch
B) AWS X-Ray
C) AWS CloudTrail
D) AWS Inspector

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch provides monitoring and observability for AWS resources,
applications, and services, enabling you to collect and track metrics, logs, and set alarms.

❓ Question 405:

Which AWS service is used for long-term, low-cost archive storage of data that is
infrequently accessed?
A) Amazon S3 Glacier
B) Amazon S3 Standard
C) Amazon EFS
D) Amazon RDS

✅ Correct Answer: A) Amazon S3 Glacier

Explanation: Amazon S3 Glacier is a low-cost, highly durable storage service designed for
long-term data archival and backup. It is ideal for data that is rarely accessed but still needs
to be preserved.

❓ Question 406:

Which AWS service can be used to manage the configuration of AWS resources,
ensuring compliance and governance?
A) AWS Config
B) AWS CloudTrail
C) AWS CloudFormation
D) AWS Systems Manager

✅ Correct Answer: A) AWS Config

Explanation: AWS Config is a service that provides configuration history and configuration
change management, allowing you to track resource configurations and assess compliance
with governance rules.

❓ Question 407:

Which AWS service provides a highly scalable, managed database service for running
graph-based workloads?
A) Amazon Neptune
B) Amazon DynamoDB
C) Amazon RDS
D) Amazon Redshift

✅ Correct Answer: A) Amazon Neptune

Explanation: Amazon Neptune is a fully managed graph database service designed to work
with graph models, allowing users to build and run applications that require graph data
models.

❓ Question 408:

Which AWS service helps you automatically scale your Amazon EC2 instances and
other resources to meet changing demand?
A) AWS Auto Scaling
B) AWS Lambda
C) Amazon Elastic Load Balancing
D) Amazon CloudWatch

✅ Correct Answer: A) AWS Auto Scaling

Explanation: AWS Auto Scaling automatically adjusts the number of EC2 instances and
other resources based on demand, helping ensure that applications run smoothly without
over-provisioning.

❓ Question 409:

Which AWS service provides a fast, low-cost service to transcribe speech into text?
A) Amazon Transcribe
B) Amazon Polly
C) Amazon Rekognition
D) AWS Lambda

✅ Correct Answer: A) Amazon Transcribe

Explanation: Amazon Transcribe provides automatic speech recognition (ASR) to convert
speech into written text, making it easy to add speech-to-text functionality to applications.

❓ Question 410:

Which AWS service is used to analyze large datasets and perform SQL-like queries on
data stored in Amazon S3?
A) Amazon Athena
B) Amazon Redshift
C) AWS Glue
D) AWS Lambda

✅ Correct Answer: A) Amazon Athena

Explanation: Amazon Athena allows you to run SQL queries directly on data stored in
Amazon S3 without needing to move the data into a database, providing a cost-effective and
efficient analytics solution.
❓ Question 411:

Which AWS service helps you to manage application secrets such as API keys and
database credentials?
A) AWS Secrets Manager
B) AWS Lambda
C) Amazon S3
D) AWS KMS

✅ Correct Answer: A) AWS Secrets Manager

Explanation: AWS Secrets Manager is a service that helps you securely store and manage
secrets such as database credentials, API keys, and other sensitive data.

❓ Question 412:

Which AWS service provides a fully managed, scalable, and secure database for
applications that require fast, predictable performance with seamless scaling?
A) Amazon DynamoDB
B) Amazon Aurora
C) Amazon RDS
D) Amazon ElastiCache

✅ Correct Answer: A) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service that provides
fast and predictable performance with seamless scaling for applications requiring low-latency
access to data.

❓ Question 413:

Which AWS service provides a managed solution to automate software delivery for
fast and reliable application updates?
A) AWS CodeDeploy
B) AWS CodePipeline
C) AWS CodeBuild
D) AWS Lambda

✅ Correct Answer: A) AWS CodeDeploy

Explanation: AWS CodeDeploy automates the deployment of applications to EC2 instances,
on-premises servers, and Lambda functions, ensuring reliable and consistent application
updates.

❓ Question 414:

Which AWS service helps to provide real-time threat detection for your AWS accounts
by analyzing AWS CloudTrail logs?
A) Amazon GuardDuty
B) AWS Inspector
C) AWS Shield
D) AWS Config

✅ Correct Answer: A) Amazon GuardDuty

Explanation: Amazon GuardDuty is a threat detection service that monitors AWS accounts
for malicious activity, unauthorized behavior, and potential security threats by analyzing
CloudTrail logs, VPC Flow Logs, and DNS logs.

❓ Question 415:

Which AWS service allows you to use machine learning to identify objects, people,
text, scenes, and activities in images and videos?
A) AWS Rekognition
B) AWS Polly
C) Amazon Lex
D) AWS Lambda

✅ Correct Answer: A) AWS Rekognition

Explanation: AWS Rekognition provides image and video analysis capabilities, enabling
applications to detect and recognize objects, faces, text, and scenes in visual data.

❓ Question 416:

Which AWS service allows you to monitor and manage the operational health of your
AWS resources and applications, offering tools for incident management and
troubleshooting?
A) AWS Systems Manager
B) Amazon CloudWatch
C) AWS CloudTrail
D) AWS X-Ray

✅ Correct Answer: B) Amazon CloudWatch

Explanation: Amazon CloudWatch is used to monitor AWS resources and applications,
providing real-time operational data such as metrics, logs, and alarms for troubleshooting
and managing application health.

❓ Question 417:

Which AWS service allows you to create virtual private clouds (VPCs) to securely
connect your cloud resources with your on-premises data centers?
A) Amazon VPC
B) AWS VPN
C) AWS Direct Connect
D) AWS Transit Gateway
✅ Correct Answer: A) Amazon VPC
Explanation: Amazon Virtual Private Cloud (VPC) enables you to create isolated networks
within the AWS cloud, securely connecting cloud resources with on-premises systems.

❓ Question 418:

Which AWS service helps you manage and scale containerized applications across
multiple EC2 instances?
A) Amazon ECS
B) AWS Lambda
C) AWS Fargate
D) Amazon EKS

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is a fully managed service for
deploying and managing containerized applications on AWS, using Docker containers and
scaling them across EC2 instances.

❓ Question 419:

Which AWS service provides a managed Apache Kafka service for building real-time
streaming data applications?
A) Amazon Kinesis
B) AWS Glue
C) Amazon MSK
D) Amazon Redshift

✅ Correct Answer: C) Amazon MSK

Explanation: Amazon MSK (Managed Streaming for Kafka) is a fully managed service that
allows you to run Apache Kafka for real-time streaming data applications, providing easy
scaling and management.

❓ Question 420:

Which AWS service allows you to run a containerized application without managing
servers?
A) AWS Lambda
B) Amazon ECS
C) Amazon EKS
D) AWS Fargate

✅ Correct Answer: D) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers, allowing you to
run containerized applications without managing the underlying EC2 infrastructure.

❓ Question 421:
Which AWS service provides a scalable message queuing service that allows
asynchronous communication between distributed applications?
A) Amazon SQS
B) Amazon SNS
C) Amazon Kinesis
D) AWS Lambda

✅ Correct Answer: A) Amazon SQS

Explanation: Amazon Simple Queue Service (SQS) is a fully managed message queuing
service that allows asynchronous communication between distributed systems and
decouples application components.

❓ Question 422:

Which AWS service provides a fully managed, scalable search and analytics service
that can be used for log or application data analysis?
A) Amazon Elasticsearch Service
B) Amazon Kinesis
C) AWS Glue
D) AWS Lambda

✅ Correct Answer: A) Amazon Elasticsearch Service

Explanation: Amazon Elasticsearch Service is a fully managed search and analytics service,
commonly used for analyzing large volumes of log data or application data, and can be
integrated with other AWS services.

❓ Question 423:

Which AWS service allows you to store and query large amounts of structured and
unstructured data in a relational data warehouse?
A) Amazon Aurora
B) Amazon Redshift
C) Amazon DynamoDB
D) Amazon RDS

✅ Correct Answer: B) Amazon Redshift

Explanation: Amazon Redshift is a fully managed data warehouse service that enables fast
querying and analysis of large datasets, both structured and unstructured.

❓ Question 424:

Which AWS service allows you to perform serverless data integration and ETL
(extract, transform, load) tasks?
A) AWS Glue
B) Amazon S3
C) Amazon Redshift
D) Amazon EMR
✅ Correct Answer: A) AWS Glue
Explanation: AWS Glue is a serverless ETL (Extract, Transform, Load) service that allows
you to move and transform data between data stores, simplifying the integration of data for
analytics and machine learning tasks.

❓ Question 425:

Which AWS service provides the ability to monitor user activity and API usage within
your AWS environment by analyzing AWS CloudTrail logs?
A) AWS CloudTrail
B) AWS Config
C) AWS GuardDuty
D) AWS Shield

✅ Correct Answer: A) AWS CloudTrail

Explanation: AWS CloudTrail records and logs API activity in your AWS account, providing
you with detailed records of user and resource activity for auditing and monitoring.

❓ Question 426:

Which AWS service helps provide centralized visibility and control over your AWS
infrastructure by tracking changes to resources over time?
A) AWS CloudTrail
B) AWS Config
C) AWS Systems Manager
D) AWS X-Ray

✅ Correct Answer: B) AWS Config

Explanation: AWS Config provides a detailed view of resource configurations, tracking and
recording changes over time, helping you monitor compliance and governance across your
AWS environment.

❓ Question 427:

Which AWS service enables the management of user authentication and authorization
for web and mobile applications?
A) AWS IAM
B) AWS Cognito
C) AWS Lambda
D) Amazon VPC

✅ Correct Answer: B) AWS Cognito

Explanation: AWS Cognito enables user sign-up, sign-in, and access control for web and
mobile applications, helping manage user authentication and authorization.

❓ Question 428:
Which AWS service enables you to store data that is highly available and durable, with
low-latency access?
A) Amazon S3
B) Amazon Glacier
C) Amazon EBS
D) Amazon RDS

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 provides scalable, durable, and low-latency object storage,
allowing you to store and retrieve data with high availability and durability.

❓ Question 429:

Which AWS service allows you to securely connect your on-premises network to your
AWS VPC over the public internet using a VPN connection?
A) AWS VPN
B) AWS Direct Connect
C) Amazon VPC Peering
D) AWS Transit Gateway

✅ Correct Answer: A) AWS VPN

Explanation: AWS VPN enables you to establish a secure VPN connection between your
on-premises network and your AWS VPC, providing secure communication over the public
internet.

❓ Question 430:

Which AWS service allows you to build and deploy machine learning models with
minimal effort using pre-built algorithms?
A) AWS SageMaker
B) AWS Lambda
C) AWS Glue
D) AWS Rekognition

✅ Correct Answer: A) AWS SageMaker

Explanation: AWS SageMaker is a fully managed service that provides tools to build, train,
and deploy machine learning models with pre-built algorithms and easy integration into other
AWS services.

❓ Question 431:

Which AWS service can you use to create and manage a virtual private cloud (VPC)
with isolated networks and multiple subnets?
A) Amazon VPC
B) AWS Direct Connect
C) AWS Transit Gateway
D) AWS CloudFormation
✅ Correct Answer: A) Amazon VPC
Explanation: Amazon Virtual Private Cloud (VPC) allows you to create isolated networks in
the AWS cloud, enabling you to configure subnets, route tables, and security settings for your
cloud resources.

❓ Question 432:

Which AWS service allows you to build highly scalable applications and websites by
distributing incoming traffic across multiple Amazon EC2 instances?
A) Amazon Route 53
B) AWS Lambda
C) Amazon Elastic Load Balancing (ELB)
D) AWS Global Accelerator

✅ Correct Answer: C) Amazon Elastic Load Balancing (ELB)

Explanation: Amazon Elastic Load Balancing automatically distributes incoming application
traffic across multiple EC2 instances, ensuring the high availability and scalability of
applications.

❓ Question 433:

Which AWS service provides the ability to securely store and retrieve secrets, such as
database credentials and API keys?
A) AWS Secrets Manager
B) AWS Systems Manager
C) AWS Key Management Service (KMS)
D) AWS Lambda

✅ Correct Answer: A) AWS Secrets Manager

Explanation: AWS Secrets Manager helps securely store and manage secrets like database
credentials, API keys, and other sensitive information, providing automatic rotation and
access control.

❓ Question 434:

Which AWS service helps you securely store and manage encryption keys used for
data encryption in AWS services?
A) AWS KMS
B) Amazon CloudWatch
C) AWS GuardDuty
D) AWS Shield

✅ Correct Answer: A) AWS KMS

Explanation: AWS Key Management Service (KMS) is a fully managed service that allows
you to create, control, and manage encryption keys used to encrypt your data in AWS
services.
❓ Question 435:

Which AWS service can be used to analyze and visualize data in real-time from
streaming sources such as IoT devices?
A) Amazon Kinesis
B) AWS Glue
C) Amazon S3
D) Amazon Redshift

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis is a fully managed service for real-time streaming data
collection, processing, and analysis. It allows you to handle streaming data from sources
such as IoT devices and application logs.

❓ Question 436:

Which AWS service can be used to run a fully managed relational database that
supports multiple database engines like MySQL, PostgreSQL, and MariaDB?
A) Amazon Aurora
B) Amazon RDS
C) Amazon DynamoDB
D) Amazon Redshift

✅ Correct Answer: B) Amazon RDS

Explanation: Amazon Relational Database Service (RDS) is a fully managed database
service that supports multiple relational database engines such as MySQL, PostgreSQL,
MariaDB, Oracle, and SQL Server.

❓ Question 437:

Which AWS service allows you to automatically scale your applications based on
demand and ensure high availability?
A) Amazon EC2 Auto Scaling
B) Amazon RDS
C) AWS Lambda
D) AWS Elastic Beanstalk

✅ Correct Answer: A) Amazon EC2 Auto Scaling

Explanation: Amazon EC2 Auto Scaling automatically adjusts the number of EC2 instances
in response to traffic or demand, ensuring that your applications maintain high availability and
performance.

❓ Question 438:

Which AWS service provides automated infrastructure management and orchestration

for provisioning, deployment, and monitoring?
A) AWS CloudFormation
B) AWS CodeDeploy
C) AWS CodePipeline
D) AWS Elastic Beanstalk

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation automates the provisioning and management of AWS
resources by defining infrastructure as code. It enables you to model and deploy cloud
infrastructure in a consistent and repeatable manner.

❓ Question 439:

Which AWS service allows you to run Docker containers on a managed service
without having to manage the underlying infrastructure?
A) AWS Lambda
B) Amazon ECS
C) Amazon EKS
D) AWS Fargate

✅ Correct Answer: D) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that allows you to
run containerized applications without managing the underlying infrastructure, making it
easier to deploy and scale applications.

❓ Question 440:

Which AWS service helps protect web applications from common web exploits and
DDoS attacks?
A) AWS Shield
B) AWS WAF
C) AWS GuardDuty
D) AWS Inspector

✅ Correct Answer: B) AWS WAF

Explanation: AWS Web Application Firewall (WAF) helps protect web applications from
common web exploits, including SQL injection and cross-site scripting attacks, and provides
protection against DDoS attacks when combined with AWS Shield.

❓ Question 441:

Which AWS service allows you to deploy and manage applications using containers
without needing to manage the underlying EC2 instances?
A) AWS Fargate
B) Amazon ECS
C) Amazon EKS
D) AWS Lambda
✅ Correct Answer: A) AWS Fargate
Explanation: AWS Fargate is a serverless compute engine for containers, allowing you to
run containerized applications without managing the underlying EC2 infrastructure.

❓ Question 442:

Which AWS service provides a fully managed message queuing service for decoupling
microservices and distributed systems?
A) Amazon SQS
B) Amazon SNS
C) AWS Lambda
D) AWS CloudFormation

✅ Correct Answer: A) Amazon SQS

Explanation: Amazon Simple Queue Service (SQS) is a fully managed message queuing
service that allows you to decouple microservices, distributed systems, and serverless
applications.

❓ Question 443:

Which AWS service provides a global content delivery network (CDN) for distributing
content to end-users with low latency?
A) Amazon CloudFront
B) Amazon Route 53
C) AWS Global Accelerator
D) AWS Shield

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a global content delivery network (CDN) service that
distributes content to end-users with low latency by caching copies of content in multiple
edge locations around the world.

❓ Question 444:

Which AWS service allows you to set up a secure and dedicated network connection
from your on-premises data center to AWS?
A) AWS Direct Connect
B) AWS VPN
C) Amazon VPC Peering
D) AWS Transit Gateway

✅ Correct Answer: A) AWS Direct Connect

Explanation: AWS Direct Connect establishes a dedicated network connection from your on-
premises data center to AWS, offering higher bandwidth and more consistent network
performance compared to standard internet connections.
❓ Question 445:

Which AWS service helps you monitor your applications in real time by providing a
detailed view of application performance and latency?
A) Amazon CloudWatch
B) AWS X-Ray
C) AWS CloudTrail
D) AWS GuardDuty

✅ Correct Answer: B) AWS X-Ray

Explanation: AWS X-Ray helps monitor and analyze the performance of your applications in
real time by tracing requests and providing detailed insights into latency, errors, and
performance bottlenecks.

❓ Question 446:

Which AWS service can be used to send push notifications to mobile devices and
email recipients?
A) Amazon SNS
B) Amazon SQS
C) AWS Lambda
D) AWS IoT Core

✅ Correct Answer: A) Amazon SNS

Explanation: Amazon Simple Notification Service (SNS) is a fully managed messaging
service that allows you to send push notifications to mobile devices, email recipients, and
other endpoints.

❓ Question 447:

Which AWS service allows you to provision virtual machines with customizable CPU,
memory, and storage configurations on the cloud?
A) Amazon EC2
B) AWS Lambda
C) Amazon Lightsail
D) Amazon Elastic Beanstalk

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon Elastic Compute Cloud (EC2) allows you to provision and manage
virtual machines with customizable resources like CPU, memory, and storage, providing
flexibility for hosting applications in the cloud.

❓ Question 448:

Which AWS service is used to provide persistent block-level storage for EC2
instances?
A) Amazon S3
B) Amazon EBS
C) AWS Glacier
D) Amazon EFS

✅ Correct Answer: B) Amazon EBS

Explanation: Amazon Elastic Block Store (EBS) provides persistent block-level storage for
Amazon EC2 instances, allowing you to store data persistently and attach volumes to EC2
instances.

❓ Question 449:

Which AWS service provides a platform for building, training, and deploying machine
learning models at scale?
A) AWS Lambda
B) AWS SageMaker
C) AWS Glue
D) AWS Kinesis

✅ Correct Answer: B) AWS SageMaker

Explanation: AWS SageMaker is a fully managed platform that provides tools for building,
training, and deploying machine learning models at scale, making it easier to develop
machine learning applications.

❓ Question 450:

Which AWS service allows you to protect your website and applications from DDoS
attacks by providing scalable protection against such threats?
A) AWS WAF
B) AWS Shield
C) Amazon Inspector
D) AWS GuardDuty

✅ Correct Answer: B) AWS Shield

Explanation: AWS Shield provides DDoS protection for AWS applications and websites,
offering both standard and advanced levels of protection to defend against large-scale
attacks.

❓ Question 451:

Which AWS service helps you manage your serverless applications by providing
automatic scaling and routing for API requests?
A) AWS Lambda
B) Amazon API Gateway
C) AWS Elastic Beanstalk
D) AWS Fargate
✅ Correct Answer: B) Amazon API Gateway
Explanation: Amazon API Gateway enables you to create, publish, and manage APIs for
serverless applications, allowing for automatic scaling and request routing to AWS Lambda
functions or other back-end services.

❓ Question 452:

Which AWS service allows you to organize and manage multiple AWS accounts for
consolidated billing and access control?
A) AWS Organizations
B) AWS IAM
C) AWS Resource Groups
D) Amazon CloudWatch

✅ Correct Answer: A) AWS Organizations

Explanation: AWS Organizations allows you to consolidate multiple AWS accounts under a
single organization, enabling easier management of billing, access control, and policies
across accounts.

❓ Question 453:

Which AWS service provides a secure, durable, and scalable object storage solution
for storing and retrieving data, such as media files, backups, and logs?
A) Amazon S3
B) Amazon EFS
C) Amazon EBS
D) AWS Storage Gateway

✅ Correct Answer: A) Amazon S3

Explanation: Amazon Simple Storage Service (S3) is a scalable object storage service that
allows you to store and retrieve large amounts of data, including media files, backups, and
logs, with high durability.

❓ Question 454:

Which AWS service is a managed NoSQL database service designed for high-
performance and low-latency applications?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Aurora
D) Amazon Redshift

✅ Correct Answer: B) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service that provides
fast and predictable performance with low-latency data access, making it ideal for high-
performance applications.
❓ Question 455:

Which AWS service provides a fully managed, scalable, and high-performance data
warehouse for running complex analytical queries on large datasets?
A) Amazon RDS
B) Amazon Redshift
C) Amazon Aurora
D) AWS Glue

✅ Correct Answer: B) Amazon Redshift

Explanation: Amazon Redshift is a fully managed data warehouse service that allows you to
run complex SQL queries on large datasets, providing fast query performance and scalability
for analytics.

❓ Question 456:

Which AWS service enables you to quickly launch and manage virtual private servers
in the cloud?
A) Amazon EC2
B) AWS Lambda
C) Amazon Lightsail
D) AWS Elastic Beanstalk

✅ Correct Answer: C) Amazon Lightsail

Explanation: Amazon Lightsail is a simplified cloud service that makes it easy to launch and
manage virtual private servers with predefined configurations for developers and small
businesses.

❓ Question 457:

Which AWS service enables you to store and analyze data in real time, especially for
IoT (Internet of Things) applications?
A) Amazon Kinesis
B) AWS Lambda
C) AWS IoT Core
D) Amazon S3

✅ Correct Answer: C) AWS IoT Core

Explanation: AWS IoT Core enables you to securely connect IoT devices to the cloud and
allows for real-time data processing, storage, and analysis, making it ideal for IoT
applications.

❓ Question 458:

Which AWS service provides a scalable, low-latency content delivery network for
secure and high-performance media streaming?
A) Amazon CloudFront
B) AWS Global Accelerator
C) AWS WAF
D) AWS Media Services

✅ Correct Answer: D) AWS Media Services

Explanation: AWS Media Services is a set of services that help you prepare, process, and
deliver high-quality video content securely at scale, with low-latency streaming.

❓ Question 459:

Which AWS service allows you to automate the deployment and management of
containerized applications?
A) Amazon EKS
B) Amazon ECS
C) AWS Lambda
D) AWS Fargate

✅ Correct Answer: B) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is a fully managed container
orchestration service that enables you to deploy, manage, and scale containerized
applications.

❓ Question 460:

Which AWS service provides a managed environment for deploying web applications
and services without managing the underlying infrastructure?
A) AWS Elastic Beanstalk
B) AWS Lambda
C) Amazon Lightsail
D) Amazon EC2

✅ Correct Answer: A) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a fully managed service that allows you to deploy,
manage, and scale web applications without worrying about the underlying infrastructure.

❓ Question 461:

Which AWS service provides a secure and scalable managed service for running
relational databases?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Redshift
D) Amazon Aurora

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon Relational Database Service (RDS) provides a secure, scalable, and
fully managed service for running relational databases like MySQL, PostgreSQL, Oracle, and
SQL Server.

❓ Question 462:

Which AWS service helps you automate your infrastructure by defining and deploying
your cloud resources as code?
A) AWS CloudFormation
B) AWS OpsWorks
C) Amazon EC2
D) AWS CloudTrail

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to define and provision AWS infrastructure
using templates, automating the process of deploying and managing resources in a
repeatable and predictable way.

❓ Question 463:

Which AWS service helps you track API calls and user activity across AWS services
for compliance and auditing purposes?
A) AWS CloudTrail
B) Amazon CloudWatch
C) AWS Config
D) AWS GuardDuty

✅ Correct Answer: A) AWS CloudTrail

Explanation: AWS CloudTrail records and tracks API calls and user activity across AWS
services, allowing you to audit and comply with regulatory requirements.

❓ Question 464:

Which AWS service allows you to schedule and automate recurring tasks, such as
backups and instance scaling?
A) AWS Lambda
B) AWS Systems Manager
C) Amazon CloudWatch Events
D) AWS Step Functions

✅ Correct Answer: C) Amazon CloudWatch Events

Explanation: Amazon CloudWatch Events allows you to automate tasks by creating event-
driven rules for scheduling tasks such as backups and scaling.

❓ Question 465:
Which AWS service provides a managed, secure file storage solution that can be
accessed by multiple EC2 instances and provides shared file systems?
A) Amazon EBS
B) Amazon EFS
C) Amazon S3
D) Amazon Glacier

✅ Correct Answer: B) Amazon EFS

Explanation: Amazon Elastic File System (EFS) provides scalable, shared file storage for
EC2 instances and allows multiple instances to access the same data simultaneously.

❓ Question 466:

Which AWS service allows you to control user access to AWS resources and services
using policies and roles?
A) AWS IAM
B) AWS Organizations
C) AWS Config
D) AWS CloudTrail

✅ Correct Answer: A) AWS IAM

Explanation: AWS Identity and Access Management (IAM) enables you to control user
access to AWS resources by assigning permissions through policies and roles.

❓ Question 467:

Which AWS service provides a fully managed service for deploying and running
containerized applications in Kubernetes clusters?
A) Amazon ECS
B) Amazon EKS
C) AWS Fargate
D) AWS Lambda

✅ Correct Answer: B) Amazon EKS

Explanation: Amazon Elastic Kubernetes Service (EKS) is a fully managed service for
deploying and managing containerized applications using Kubernetes clusters.

❓ Question 468:

Which AWS service provides a fully managed, highly scalable, and low-latency DNS
service for routing end-user requests to the appropriate resources?
A) AWS WAF
B) Amazon Route 53
C) AWS Global Accelerator
D) AWS CloudFront
✅ Correct Answer: B) Amazon Route 53
Explanation: Amazon Route 53 is a scalable and highly available Domain Name System
(DNS) web service that routes end-user requests to the appropriate AWS resources based
on policies and geographic location.

❓ Question 469:

Which AWS service is used to monitor and manage application logs, system logs, and
metrics in real time?
A) Amazon CloudWatch
B) AWS X-Ray
C) AWS Config
D) AWS CloudTrail

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch allows you to monitor logs, metrics, and events from
AWS services and applications in real time, providing insights into resource utilization and
performance.

❓ Question 470:

Which AWS service is a fully managed, serverless, and scalable event bus that makes
it easy to build event-driven architectures?
A) AWS Lambda
B) Amazon SQS
C) Amazon EventBridge
D) AWS Step Functions

✅ Correct Answer: C) Amazon EventBridge

Explanation: Amazon EventBridge is a serverless event bus that allows you to build event-
driven architectures by ingesting, filtering, and routing events from various AWS services and
external sources.

❓ Question 471:

Which AWS service is used to set up and manage a private network between an
Amazon VPC and your on-premises data center?
A) AWS VPN
B) AWS Direct Connect
C) Amazon Route 53
D) AWS Transit Gateway

✅ Correct Answer: B) AWS Direct Connect

Explanation: AWS Direct Connect establishes a dedicated private network connection
between your on-premises data center and Amazon VPC, providing better bandwidth and
lower latency compared to internet connections.
❓ Question 472:

Which AWS service provides managed, scalable, and fully automated email sending
for marketing, notifications, and transactional emails?
A) Amazon SNS
B) Amazon SES
C) AWS Lambda
D) Amazon SQS

✅ Correct Answer: B) Amazon SES

Explanation: Amazon Simple Email Service (SES) is a fully managed email sending service
for marketing, transactional, and notification emails, providing scalability and deliverability.

❓ Question 473:

Which AWS service allows you to replicate data from an on-premises data center to
AWS cloud storage for disaster recovery?
A) AWS Storage Gateway
B) Amazon S3
C) Amazon Glacier
D) AWS Backup

✅ Correct Answer: A) AWS Storage Gateway

Explanation: AWS Storage Gateway enables hybrid cloud storage by connecting on-
premises data centers to AWS, allowing for data replication to cloud storage for backup and
disaster recovery.

❓ Question 474:

Which AWS service provides a fully managed service to detect, investigate, and
respond to security threats in your AWS environment?
A) AWS Shield
B) AWS GuardDuty
C) AWS WAF
D) AWS CloudTrail

✅ Correct Answer: B) AWS GuardDuty

Explanation: AWS GuardDuty is a threat detection service that monitors your AWS
environment for malicious or unauthorized activity, enabling you to respond to security
threats in real time.

❓ Question 475:

Which AWS service allows you to create and manage a scalable cloud data warehouse
for real-time business intelligence and analytics?
A) Amazon Redshift
B) AWS Glue
C) Amazon RDS
D) AWS Data Pipeline

✅ Correct Answer: A) Amazon Redshift

Explanation: Amazon Redshift is a fully managed data warehouse service that allows you to
run complex queries on large datasets for real-time analytics and business intelligence.

❓ Question 476:

Which AWS service can be used to centrally manage your infrastructure security by
inspecting network traffic and controlling access to services?
A) AWS WAF
B) AWS Shield
C) AWS Security Hub
D) AWS Config

✅ Correct Answer: C) AWS Security Hub

Explanation: AWS Security Hub provides a central place to manage and monitor security
across AWS services, consolidating findings from multiple AWS security services and
providing a comprehensive view of your environment’s security posture.

❓ Question 477:

Which AWS service is used to automate the deployment of multi-tier applications on

AWS using preconfigured templates and environments?
A) AWS Elastic Beanstalk
B) Amazon EC2
C) AWS Fargate
D) AWS Lambda

✅ Correct Answer: A) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a platform-as-a-service (PaaS) that automates the
deployment of multi-tier web applications, providing preconfigured environments for common
application stacks.

❓ Question 478:

Which AWS service allows you to run code without provisioning or managing servers,
by simply uploading your code?
A) Amazon EC2
B) AWS Lambda
C) AWS Fargate
D) Amazon Lightsail
✅ Correct Answer: B) AWS Lambda
Explanation: AWS Lambda is a serverless computing service that allows you to run code
without managing infrastructure. You simply upload your code, and AWS Lambda
automatically runs it in response to events.

❓ Question 479:

Which AWS service provides a fully managed, scalable, and highly available database
for key-value and document-based NoSQL data?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Aurora
D) Amazon Neptune

✅ Correct Answer: B) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service designed for
high performance and low-latency applications, supporting key-value and document-based
data models.

❓ Question 480:

Which AWS service helps you automatically scale your EC2 instances based on
demand without manually configuring the scaling rules?
A) Amazon EC2 Auto Scaling
B) Amazon Elastic Load Balancer
C) Amazon CloudWatch
D) AWS Lambda

✅ Correct Answer: A) Amazon EC2 Auto Scaling

Explanation: Amazon EC2 Auto Scaling automatically adjusts the number of EC2 instances
based on traffic demand, ensuring that your application remains scalable and cost-efficient.

❓ Question 481:

Which AWS service provides a platform for running and managing Docker containers?
A) Amazon EC2
B) Amazon ECS
C) AWS Lambda
D) AWS Fargate

✅ Correct Answer: B) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is a fully managed service for running
Docker containers at scale, allowing you to deploy, manage, and scale containerized
applications.

❓ Question 482:
Which AWS service provides a fully managed, scalable, and secure messaging
platform for decoupling microservices?
A) AWS Lambda
B) Amazon SQS
C) Amazon SNS
D) Amazon MQ

✅ Correct Answer: B) Amazon SQS

Explanation: Amazon Simple Queue Service (SQS) is a fully managed messaging service
that enables decoupling of microservices, allowing for secure, reliable, and scalable
message queuing between distributed applications.

❓ Question 483:

Which AWS service helps you discover, organize, and track your AWS resources for
cost optimization and governance purposes?
A) AWS Config
B) AWS CloudTrail
C) AWS Cost Explorer
D) AWS Trusted Advisor

✅ Correct Answer: A) AWS Config

Explanation: AWS Config enables you to discover, track, and audit changes to your AWS
resources, providing visibility into resource configuration and compliance for cost
optimization and governance.

❓ Question 484:

Which AWS service is used for content delivery, providing low-latency and high-speed
delivery of websites, APIs, and video content?
A) Amazon CloudFront
B) AWS Direct Connect
C) AWS Storage Gateway
D) Amazon Route 53

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a Content Delivery Network (CDN) service that
distributes content to users globally with low latency, speeding up the delivery of websites,
APIs, and video.

❓ Question 485:

Which AWS service allows you to create a virtual private network (VPN) connection
between your on-premises data center and your AWS cloud environment?
A) AWS VPN
B) AWS Direct Connect
C) AWS Transit Gateway
D) Amazon VPC

✅ Correct Answer: A) AWS VPN

Explanation: AWS VPN allows you to create a secure, encrypted connection between your
on-premises data center and your AWS VPC, enabling secure communication over the
internet.

❓ Question 486:

Which AWS service enables you to orchestrate workflows and automate business
processes across AWS services and on-premises systems?
A) AWS Lambda
B) AWS Step Functions
C) AWS Glue
D) AWS CloudFormation

✅ Correct Answer: B) AWS Step Functions

Explanation: AWS Step Functions allows you to build and automate workflows, connecting
various AWS services into serverless workflows that help manage complex business
processes.

❓ Question 487:

Which AWS service provides the ability to run applications in isolated environments
called "containers," without managing servers?
A) AWS Lambda
B) AWS Fargate
C) AWS ECS
D) Amazon EC2

✅ Correct Answer: B) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that allows you to
run containers without the need to manage the underlying servers or infrastructure.

❓ Question 488:

Which AWS service provides real-time data streaming and analytics, allowing you to
process large volumes of streaming data from various sources?
A) AWS Lambda
B) Amazon Kinesis
C) Amazon SQS
D) Amazon SNS

✅ Correct Answer: B) Amazon Kinesis

Explanation: Amazon Kinesis is a fully managed service that allows you to stream, process,
and analyze real-time data at massive scale, with applications in log analysis, clickstream
analysis, and IoT.

❓ Question 489:

Which AWS service provides a highly scalable, serverless graph database for
connected data?
A) Amazon DynamoDB
B) Amazon Neptune
C) Amazon RDS
D) Amazon Aurora

✅ Correct Answer: B) Amazon Neptune

Explanation: Amazon Neptune is a fully managed graph database service that supports
both property graph and RDF graph models, making it ideal for connected data applications.

❓ Question 490:

Which AWS service helps you manage and provision your AWS resources through
infrastructure as code using templates?
A) AWS CloudFormation
B) AWS Elastic Beanstalk
C) AWS OpsWorks
D) AWS Systems Manager

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation enables you to define your AWS infrastructure as code
using templates, allowing you to automate the provisioning and management of AWS
resources in a repeatable way.

❓ Question 491:

Which AWS service allows you to run virtual machines in the cloud with full control
over the underlying hardware?
A) Amazon EC2
B) AWS Lambda
C) Amazon Lightsail
D) AWS Fargate

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon EC2 (Elastic Compute Cloud) provides scalable virtual machines in
the cloud, with full control over the operating system and applications running on them.

❓ Question 492:
Which AWS service enables you to create a highly available and scalable domain
name system (DNS) for your applications?
A) Amazon Route 53
B) AWS Global Accelerator
C) Amazon CloudFront
D) AWS WAF

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a highly available and scalable DNS service that allows
you to route traffic to your applications, manage domain names, and configure DNS failover.

❓ Question 493:

Which AWS service provides managed databases for relational, key-value, document,
and graph data models?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Aurora
D) Amazon Neptune

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) provides managed relational
databases for several database engines like MySQL, PostgreSQL, MariaDB, Oracle, and
SQL Server.

❓ Question 494:

Which AWS service provides a managed, scalable, and distributed data warehouse for
real-time analytics?
A) Amazon RDS
B) Amazon Redshift
C) Amazon DynamoDB
D) Amazon Elasticache

✅ Correct Answer: B) Amazon Redshift

Explanation: Amazon Redshift is a fully managed, scalable data warehouse service that
allows you to run real-time analytics on large datasets.

❓ Question 495:

Which AWS service provides a secure connection between your on-premises network
and your AWS VPC over a private, dedicated network link?
A) AWS VPN
B) AWS Direct Connect
C) AWS Transit Gateway
D) Amazon VPC Peering
✅ Correct Answer: B) AWS Direct Connect
Explanation: AWS Direct Connect allows you to establish a dedicated, private network
connection between your on-premises infrastructure and AWS, offering more reliable and
consistent network performance compared to the internet.

❓ Question 496:

Which AWS service provides a managed Kubernetes platform for deploying and
managing containerized applications?
A) Amazon EC2
B) Amazon ECS
C) Amazon EKS
D) AWS Fargate

✅ Correct Answer: C) Amazon EKS

Explanation: Amazon Elastic Kubernetes Service (EKS) is a fully managed service that
makes it easy to run Kubernetes on AWS without needing to install or manage your own
control plane.

❓ Question 497:

Which AWS service is used for continuous integration and continuous delivery (CI/CD)
to automate the release of software applications?
A) AWS CodePipeline
B) AWS Lambda
C) AWS Elastic Beanstalk
D) Amazon EC2

✅ Correct Answer: A) AWS CodePipeline

Explanation: AWS CodePipeline is a fully managed CI/CD service that automates the build,
test, and deploy phases of application release, allowing developers to quickly release
features and updates.

❓ Question 498:

Which AWS service allows you to monitor your AWS resources and applications in
real time?
A) Amazon CloudWatch
B) AWS Config
C) AWS CloudTrail
D) AWS X-Ray

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch is a monitoring service that provides real-time insights
into the performance of your AWS resources and applications, offering metrics, logs, and
alarms.
❓ Question 499:

Which AWS service can automatically scale applications to meet the changing
demands of traffic, adjusting capacity in real time?
A) AWS Auto Scaling
B) Amazon EC2
C) AWS Lambda
D) AWS Elastic Load Balancing

✅ Correct Answer: A) AWS Auto Scaling

Explanation: AWS Auto Scaling automatically adjusts the number of EC2 instances and
other resources to meet the demands of your application, ensuring scalability and cost
efficiency.

❓ Question 500:

Which AWS service is used to enforce access control policies for AWS resources and
ensures that resources are in compliance with security and governance standards?
A) AWS Identity and Access Management (IAM)
B) AWS Shield
C) AWS Security Hub
D) AWS Config

✅ Correct Answer: A) AWS Identity and Access Management (IAM)

Explanation: AWS IAM allows you to manage access to AWS services and resources
securely by creating and enforcing policies that define who can access your resources and
under what conditions.

❓ Question 501:

Which AWS service helps you monitor and manage your organization's security
posture across AWS accounts and services?
A) AWS Config
B) AWS Security Hub
C) Amazon GuardDuty
D) AWS Identity and Access Management (IAM)

✅ Correct Answer: B) AWS Security Hub

Explanation: AWS Security Hub provides a comprehensive view of your security posture by
aggregating, organizing, and prioritizing security findings from across AWS services and
partner tools.

❓ Question 502:

Which AWS service allows you to store and retrieve any amount of data at any time,
providing a durable, low-cost storage option?
A) Amazon S3
B) Amazon EBS
C) AWS Storage Gateway
D) Amazon Glacier

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 (Simple Storage Service) is a scalable object storage service that
provides durability, security, and low-cost storage for any amount of data.

❓ Question 503:

Which AWS service is specifically designed for distributed, low-latency applications

requiring real-time data storage and retrieval at scale?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon S3
D) AWS Aurora

✅ Correct Answer: A) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service that provides
fast and predictable performance with seamless scalability, ideal for real-time, low-latency
applications.

❓ Question 504:

Which AWS service allows you to quickly deploy a managed PostgreSQL-compatible

database with high availability and automatic backups?
A) Amazon RDS
B) Amazon Aurora
C) AWS DynamoDB
D) AWS Neptune

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) supports several database
engines, including PostgreSQL, and provides automated backups, patching, and high
availability options.

❓ Question 505:

Which AWS service helps you detect and respond to suspicious activity and potential
security threats in your AWS environment?
A) Amazon GuardDuty
B) AWS Shield
C) AWS WAF
D) Amazon CloudWatch
✅ Correct Answer: A) Amazon GuardDuty
Explanation: Amazon GuardDuty is a threat detection service that continuously monitors
your AWS environment for malicious or unauthorized activity, providing real-time alerts.

❓ Question 506:

Which AWS service allows you to easily deploy, manage, and scale applications using
pre-configured environments for popular programming languages?
A) AWS Lambda
B) AWS Elastic Beanstalk
C) Amazon EC2
D) AWS Fargate

✅ Correct Answer: B) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a platform-as-a-service (PaaS) offering that
automatically handles the deployment, scaling, and management of applications in popular
programming languages.

❓ Question 507:

Which AWS service helps you build and train machine learning models at scale?
A) Amazon SageMaker
B) AWS Lambda
C) Amazon Rekognition
D) Amazon Polly

✅ Correct Answer: A) Amazon SageMaker

Explanation: Amazon SageMaker is a fully managed service that enables you to build, train,
and deploy machine learning models at scale, with built-in tools for data labeling, model
training, and model hosting.

❓ Question 508:

Which AWS service provides a fully managed, scalable, and secure relational database
solution with automatic scaling?
A) Amazon Aurora
B) Amazon RDS
C) Amazon DynamoDB
D) AWS Glue

✅ Correct Answer: A) Amazon Aurora

Explanation: Amazon Aurora is a fully managed relational database service compatible with
MySQL and PostgreSQL, offering high performance and automatic scaling.

❓ Question 509:
Which AWS service enables you to connect your on-premises data center to AWS over
a dedicated, low-latency network connection?
A) AWS Direct Connect
B) AWS VPN
C) Amazon S3
D) Amazon Route 53

✅ Correct Answer: A) AWS Direct Connect

Explanation: AWS Direct Connect establishes a dedicated, low-latency, private network
connection between your on-premises data center and AWS, improving network performance
and security.

❓ Question 510:

Which AWS service allows you to manage and provision resources in a secure and
scalable environment using infrastructure as code?
A) AWS CloudFormation
B) AWS Lambda
C) AWS OpsWorks
D) AWS Elastic Beanstalk

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to define and provision AWS infrastructure as
code using templates, providing a way to automate resource management in a secure,
scalable manner.

❓ Question 511:

Which AWS service allows you to run code without provisioning or managing servers?
A) AWS Lambda
B) AWS Elastic Beanstalk
C) Amazon EC2
D) AWS Fargate

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda is a serverless compute service that allows you to run your code
without having to provision or manage servers, automatically scaling based on the amount of
traffic.

❓ Question 512:

Which AWS service helps to manage infrastructure by automating the provisioning of

resources using declarative templates?
A) AWS CloudFormation
B) Amazon EC2
C) AWS OpsWorks
D) AWS Systems Manager
✅ Correct Answer: A) AWS CloudFormation
Explanation: AWS CloudFormation allows you to automate the provisioning of infrastructure
by using declarative templates to define the resources and configurations needed.

❓ Question 513:

Which AWS service allows you to run applications in containers without managing the
underlying infrastructure?
A) AWS Lambda
B) Amazon EC2
C) AWS Fargate
D) Amazon S3

✅ Correct Answer: C) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that allows you to
run containers without managing the underlying EC2 instances or infrastructure.

❓ Question 514:

Which AWS service provides content delivery and a globally distributed network to
serve static and dynamic content?
A) Amazon S3
B) Amazon CloudFront
C) AWS Elastic Beanstalk
D) AWS WAF

✅ Correct Answer: B) Amazon CloudFront

Explanation: Amazon CloudFront is a content delivery network (CDN) service that delivers
content with low latency and high transfer speeds, utilizing a globally distributed network of
edge locations.

❓ Question 515:

Which AWS service helps you create and manage virtual private networks (VPN) to
connect your on-premises network to AWS?
A) AWS Direct Connect
B) Amazon VPC
C) AWS VPN
D) AWS Lambda

✅ Correct Answer: C) AWS VPN

Explanation: AWS VPN enables you to create a secure and private connection between
your on-premises network and AWS over the public internet or AWS Direct Connect.

❓ Question 516:
Which AWS service enables you to automate the management of your security posture
across AWS accounts and services?
A) AWS Config
B) AWS Security Hub
C) Amazon GuardDuty
D) AWS IAM

✅ Correct Answer: B) AWS Security Hub

Explanation: AWS Security Hub provides a comprehensive view of your security posture by
aggregating security findings from various AWS services and partner tools and helps
automate compliance checks.

❓ Question 517:

Which AWS service allows you to monitor and analyze log data from various AWS
resources in real time?
A) Amazon CloudWatch
B) AWS Config
C) AWS CloudTrail
D) Amazon Kinesis

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch provides real-time monitoring and analysis of log data,
metrics, and events from your AWS resources, helping you track performance and set
alarms.

❓ Question 518:

Which AWS service allows you to run a highly scalable and managed container
orchestration platform for Docker containers?
A) Amazon EC2
B) Amazon ECS
C) Amazon EKS
D) AWS Fargate

✅ Correct Answer: C) Amazon EKS

Explanation: Amazon Elastic Kubernetes Service (EKS) is a fully managed Kubernetes
service that simplifies the deployment, scaling, and management of containerized
applications using Kubernetes.

❓ Question 519:

Which AWS service allows you to manage and enforce identity and access policies to
AWS resources?
A) AWS IAM
B) AWS Shield
C) AWS WAF
D) AWS Config

✅ Correct Answer: A) AWS IAM

Explanation: AWS Identity and Access Management (IAM) enables you to manage and
control access to AWS services and resources by defining and enforcing user permissions.

❓ Question 520:

Which AWS service helps you automate data migration tasks and move large amounts
of data into AWS?
A) AWS Snowball
B) AWS DataSync
C) AWS Transfer for SFTP
D) Amazon S3 Transfer Acceleration

✅ Correct Answer: A) AWS Snowball

Explanation: AWS Snowball is a data transfer service that allows you to move large volumes
of data into AWS using physical devices, reducing the time and cost associated with large-
scale data migrations.

❓ Question 521:

Which AWS service is designed to automatically scale resources in response to

changes in demand for your application?
A) AWS Auto Scaling
B) Amazon Elastic Load Balancer
C) AWS CloudWatch
D) Amazon EC2

✅ Correct Answer: A) AWS Auto Scaling

Explanation: AWS Auto Scaling automatically adjusts the number of compute resources in
your environment to maintain performance and availability while reducing costs based on
demand.

❓ Question 522:

Which AWS service provides a fully managed, scalable file storage solution for use
with AWS compute instances?
A) Amazon S3
B) Amazon EFS
C) Amazon Glacier
D) AWS Storage Gateway

✅ Correct Answer: B) Amazon EFS

Explanation: Amazon Elastic File System (EFS) provides scalable, elastic file storage for
use with AWS cloud services and on-premises resources, offering easy integration with
compute instances.

❓ Question 523:

Which AWS service allows you to analyze and query structured and semi-structured
data directly in Amazon S3 using standard SQL queries?
A) Amazon RDS
B) Amazon Athena
C) Amazon Redshift
D) Amazon DynamoDB

✅ Correct Answer: B) Amazon Athena

Explanation: Amazon Athena allows you to analyze data stored in Amazon S3 using SQL
queries, making it easy to analyze large datasets without the need for data preparation.

❓ Question 524:

Which AWS service is designed to help protect your AWS infrastructure and
applications from DDoS attacks?
A) AWS Shield
B) AWS WAF
C) AWS GuardDuty
D) Amazon Macie

✅ Correct Answer: A) AWS Shield

Explanation: AWS Shield is a managed Distributed Denial of Service (DDoS) protection
service that safeguards AWS resources from both network and application layer attacks.

❓ Question 525:

Which AWS service allows you to implement API management, including traffic
management, authorization, and access control?
A) Amazon API Gateway
B) AWS Lambda
C) Amazon CloudFront
D) AWS AppSync

✅ Correct Answer: A) Amazon API Gateway

Explanation: Amazon API Gateway is a fully managed service that allows you to create,
publish, and manage APIs, including traffic management, authorization, and access control.

❓ Question 526:

Which AWS service enables you to build and run applications using Docker
containers?
A) AWS Elastic Beanstalk
B) Amazon ECS
C) AWS Lambda
D) Amazon EC2

✅ Correct Answer: B) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is a fully managed container
orchestration service that enables you to run Docker containers at scale.

❓ Question 527:

Which AWS service allows you to analyze user behavior and security risks associated
with your AWS environment?
A) AWS CloudTrail
B) AWS IAM
C) AWS Macie
D) Amazon Inspector

✅ Correct Answer: C) AWS Macie

Explanation: AWS Macie is a security service that uses machine learning to discover,
classify, and protect sensitive data, helping identify security risks and user behavior in your
environment.

❓ Question 528:

Which AWS service allows you to automate the deployment of applications by

managing the lifecycle of infrastructure and application components?
A) AWS Elastic Beanstalk
B) AWS CodeDeploy
C) AWS CloudFormation
D) AWS OpsWorks

✅ Correct Answer: D) AWS OpsWorks

Explanation: AWS OpsWorks is a configuration management service that provides
automation for managing infrastructure and application components, including the ability to
deploy applications and configurations.

❓ Question 529:

Which AWS service allows you to analyze data from multiple AWS services to gain
insights into security-related events and operational performance?
A) Amazon CloudWatch
B) AWS Config
C) AWS Trusted Advisor
D) AWS X-Ray
✅ Correct Answer: A) Amazon CloudWatch
Explanation: Amazon CloudWatch collects and analyzes data from multiple AWS services,
enabling you to gain insights into application performance, system-wide health, and security-
related events.

❓ Question 530:

Which AWS service is designed to help you manage your AWS accounts and their
associated billing and usage?
A) AWS Identity and Access Management (IAM)
B) AWS Organizations
C) Amazon CloudWatch
D) AWS Cost Explorer

✅ Correct Answer: B) AWS Organizations

Explanation: AWS Organizations helps you centrally manage multiple AWS accounts,
allowing you to group accounts, apply policies, and manage billing and usage across those
accounts.

❓ Question 531:

Which AWS service helps automate the deployment of infrastructure using

configuration management?
A) AWS OpsWorks
B) AWS Elastic Beanstalk
C) Amazon EC2
D) AWS CloudFormation

✅ Correct Answer: A) AWS OpsWorks

Explanation: AWS OpsWorks is a configuration management service that helps automate
the deployment, configuration, and management of infrastructure using tools like Chef and
Puppet.

❓ Question 532:

Which AWS service allows you to host a web application with automatic scaling based
on incoming traffic?
A) Amazon EC2
B) AWS Elastic Beanstalk
C) Amazon S3
D) Amazon Lambda

✅ Correct Answer: B) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a Platform as a Service (PaaS) offering that
automatically handles the deployment, scaling, and monitoring of web applications.
❓ Question 533:

Which AWS service enables you to create and manage isolated network environments
in the cloud?
A) AWS VPC
B) AWS CloudFormation
C) Amazon EC2
D) Amazon S3

✅ Correct Answer: A) AWS VPC

Explanation: Amazon Virtual Private Cloud (VPC) allows you to create isolated network
environments in the cloud, with control over IP address ranges, subnets, route tables, and
more.

❓ Question 534:

Which AWS service enables you to manage and analyze log data in real time,
providing actionable insights for security and operational monitoring?
A) AWS CloudTrail
B) Amazon CloudWatch Logs
C) AWS GuardDuty
D) AWS Inspector

✅ Correct Answer: B) Amazon CloudWatch Logs

Explanation: Amazon CloudWatch Logs allows you to monitor, store, and analyze log files
from Amazon EC2 instances and other AWS resources in real time.

❓ Question 535:

Which AWS service allows you to transfer large amounts of data into and out of AWS
using a physical device for faster migration?
A) AWS Snowball
B) AWS DataSync
C) AWS Transfer for SFTP
D) Amazon Kinesis

✅ Correct Answer: A) AWS Snowball

Explanation: AWS Snowball is a physical data transport solution that helps transfer large
amounts of data into and out of AWS quickly, securely, and cost-effectively.

❓ Question 536:

Which AWS service allows you to use machine learning models to analyze and identify
objects, scenes, and faces in images?
A) AWS Rekognition
B) AWS Polly
C) Amazon Lex
D) Amazon Translate

✅ Correct Answer: A) AWS Rekognition

Explanation: AWS Rekognition provides machine learning-based image and video analysis
services, such as object, scene, and facial recognition.

❓ Question 537:

Which AWS service enables you to create and manage scalable relational databases in
the cloud?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon ElastiCache
D) AWS Redshift

✅ Correct Answer: B) Amazon RDS

Explanation: Amazon Relational Database Service (RDS) provides scalable relational
databases in the cloud, supporting several database engines like MySQL, PostgreSQL, and
Oracle.

❓ Question 538:

Which AWS service provides real-time insights and analytics from streaming data,
such as logs and metrics?
A) Amazon Kinesis
B) AWS Athena
C) Amazon QuickSight
D) AWS Data Pipeline

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis is a platform for real-time data streaming and analytics,
helping process large amounts of streaming data for applications that require real-time
analysis.

❓ Question 539:

Which AWS service helps protect your web applications from common web exploits
like SQL injection and cross-site scripting (XSS)?
A) AWS WAF
B) AWS Shield
C) AWS Firewall Manager
D) AWS Config

✅ Correct Answer: A) AWS WAF

Explanation: AWS Web Application Firewall (WAF) protects your web applications by
filtering and monitoring HTTP requests to help prevent common attacks like SQL injection
and XSS.

❓ Question 540:

Which AWS service provides a managed NoSQL database that automatically scales to
handle workloads of any size?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Aurora
D) AWS Neptune

✅ Correct Answer: A) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service that provides
fast and predictable performance with seamless scalability for any application.

❓ Question 541:

Which AWS service allows you to monitor your AWS resources and applications in
real time by collecting and tracking metrics?
A) AWS CloudTrail
B) AWS CloudWatch
C) AWS GuardDuty
D) Amazon CloudFront

✅ Correct Answer: B) AWS CloudWatch

Explanation: Amazon CloudWatch is a monitoring service for AWS cloud resources and the
applications you run on AWS, providing data and actionable insights to monitor the health
and performance of your AWS environment.

❓ Question 542:

Which AWS service is used to distribute incoming application traffic across multiple
targets, such as EC2 instances?
A) AWS Load Balancer
B) Amazon Route 53
C) AWS Elastic Load Balancer
D) AWS Global Accelerator

✅ Correct Answer: C) AWS Elastic Load Balancer

Explanation: Amazon Elastic Load Balancer (ELB) automatically distributes incoming
application traffic across multiple targets, such as EC2 instances, to ensure scalability and
availability.

❓ Question 543:
Which AWS service is designed for building serverless applications using functions
that run in response to events?
A) Amazon EC2
B) AWS Lambda
C) Amazon ECS
D) AWS Batch

✅ Correct Answer: B) AWS Lambda

Explanation: AWS Lambda is a serverless compute service that lets you run code in
response to events, without provisioning or managing servers, making it ideal for serverless
applications.

❓ Question 544:

Which AWS service provides high-performance computing (HPC) capabilities in the

cloud for running complex computational workloads?
A) AWS EC2
B) Amazon Lightsail
C) Amazon EMR
D) AWS ParallelCluster

✅ Correct Answer: D) AWS ParallelCluster

Explanation: AWS ParallelCluster is a service that allows you to deploy and manage HPC
clusters in the cloud to run parallel computing workloads.

❓ Question 545:

Which AWS service allows you to build and manage a scalable containerized
application infrastructure?
A) Amazon ECS
B) AWS Lambda
C) AWS Fargate
D) Amazon S3

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is a highly scalable, fast container
management service that makes it easy to run and manage Docker containers.

❓ Question 546:

Which AWS service helps you manage and automate your infrastructure using code?
A) AWS CloudFormation
B) AWS OpsWorks
C) AWS Elastic Beanstalk
D) AWS Lambda
✅ Correct Answer: A) AWS CloudFormation
Explanation: AWS CloudFormation enables you to automate the setup, management, and
provisioning of AWS resources through infrastructure-as-code templates.

❓ Question 547:

Which AWS service provides a managed data lake solution for storing and analyzing
large amounts of data?
A) Amazon Redshift
B) Amazon S3
C) AWS Lake Formation
D) Amazon RDS

✅ Correct Answer: C) AWS Lake Formation

Explanation: AWS Lake Formation helps you set up a secure data lake in days and
automatically manages data ingestion, preparation, and transformation for analytics.

❓ Question 548:

Which AWS service provides a secure, low-cost, and highly durable storage option for
data archiving and backup?
A) Amazon Glacier
B) Amazon S3
C) AWS Snowball
D) Amazon EBS

✅ Correct Answer: A) Amazon Glacier

Explanation: Amazon Glacier is a secure, low-cost storage service designed for data
archiving and backup, offering long-term storage with retrieval times ranging from minutes to
hours.

❓ Question 549:

Which AWS service helps you build and scale a distributed database with low-latency,
high throughput, and automatic scaling?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Aurora
D) AWS ElastiCache

✅ Correct Answer: B) Amazon DynamoDB

Explanation: Amazon DynamoDB is a managed NoSQL database that offers low-latency,
high-throughput performance with automatic scaling, making it ideal for web-scale
applications.

❓ Question 550:
Which AWS service allows you to implement a content delivery network (CDN) to
speed up the delivery of your websites and applications?
A) AWS CloudFront
B) AWS Route 53
C) AWS Global Accelerator
D) Amazon Elastic Load Balancer

✅ Correct Answer: A) AWS CloudFront

Explanation: Amazon CloudFront is a Content Delivery Network (CDN) that delivers your
websites, applications, and other content with low latency and high transfer speeds by
distributing content to edge locations globally.

❓ Question 551:

Which AWS service allows users to run MySQL- and PostgreSQL-compatible relational
database engines with performance and availability of commercial databases at 1/10th
the cost?
A) Amazon Aurora
B) Amazon RDS
C) Amazon Redshift
D) Amazon DynamoDB

✅ Correct Answer: A) Amazon Aurora

Explanation: Amazon Aurora is a relational database service compatible with MySQL and
PostgreSQL, designed for performance and availability at a fraction of the cost of traditional
commercial databases.

❓ Question 552:

Which AWS service helps developers integrate messaging into their applications
through topics and subscribers?
A) Amazon MQ
B) Amazon SNS
C) Amazon SQS
D) AWS Step Functions

✅ Correct Answer: B) Amazon SNS

Explanation: Amazon Simple Notification Service (SNS) is a fully managed pub/sub
messaging service that allows applications to send messages to multiple subscribers.

❓ Question 553:

Which AWS service provides a secure and resizable compute capacity in the cloud?
A) AWS Lambda
B) Amazon EC2
C) Amazon Lightsail
D) AWS Fargate
✅ Correct Answer: B) Amazon EC2
Explanation: Amazon Elastic Compute Cloud (EC2) offers scalable computing capacity in
the cloud, enabling users to run virtual servers as needed.

❓ Question 554:

Which AWS service lets you schedule, orchestrate, and monitor data workflows?
A) AWS Glue
B) AWS Step Functions
C) AWS Data Pipeline
D) AWS Lambda

✅ Correct Answer: C) AWS Data Pipeline

Explanation: AWS Data Pipeline is a web service that helps you reliably process and move
data between AWS compute and storage services.

❓ Question 555:

Which AWS service helps enforce compliance by providing a detailed view of AWS
resource configurations and changes over time?
A) AWS Config
B) AWS CloudTrail
C) Amazon Inspector
D) AWS Shield

✅ Correct Answer: A) AWS Config

Explanation: AWS Config continuously monitors and records your AWS resource
configurations and allows you to assess compliance with internal policies.

❓ Question 556:

Which AWS service provides centralized logging for multiple AWS services and
accounts?
A) Amazon CloudWatch Logs
B) AWS X-Ray
C) AWS CloudTrail
D) AWS Systems Manager

✅ Correct Answer: C) AWS CloudTrail

Explanation: AWS CloudTrail records all API calls made on your account and delivers log
files for auditing and compliance.

❓ Question 557:

Which AWS service enables DevOps teams to store and version control source code?
A) AWS CodeBuild
B) AWS CodeDeploy
C) AWS CodeCommit
D) AWS Cloud9

✅ Correct Answer: C) AWS CodeCommit

Explanation: AWS CodeCommit is a source control service that hosts secure Git-based
repositories for version control.

❓ Question 558:

Which AWS service provides a unified user interface to automate operational tasks
across AWS resources?
A) AWS Systems Manager
B) AWS CloudFormation
C) AWS Trusted Advisor
D) AWS Config

✅ Correct Answer: A) AWS Systems Manager

Explanation: AWS Systems Manager gives you operational data from multiple AWS services
and allows you to automate operational tasks.

❓ Question 559:

Which AWS service provides a visual interface to create and run ETL (Extract,
Transform, Load) jobs?
A) AWS Glue
B) AWS Data Pipeline
C) AWS Step Functions
D) Amazon EMR

✅ Correct Answer: A) AWS Glue

Explanation: AWS Glue is a fully managed ETL service that makes it easy to prepare and
transform data for analytics.

❓ Question 560:

Which AWS service is used to run big data frameworks like Apache Hadoop and
Apache Spark?
A) AWS Glue
B) Amazon EMR
C) AWS Data Pipeline
D) Amazon Kinesis

✅ Correct Answer: B) Amazon EMR

Explanation: Amazon EMR (Elastic MapReduce) is a cloud big data platform for processing
massive amounts of data using open-source tools like Hadoop and Spark.
❓ Question 561:

Which AWS service enables you to detect potential security threats and anomalies in
your AWS accounts using machine learning?
A) AWS Shield
B) Amazon Inspector
C) AWS GuardDuty
D) AWS Macie

✅ Correct Answer: C) AWS GuardDuty

Explanation: AWS GuardDuty is a threat detection service that uses ML, anomaly detection,
and integrated threat intelligence to identify suspicious activity.

❓ Question 562:

Which AWS service enables you to automatically apply updates, patches, and run
scripts on your EC2 instances at scale?
A) AWS Config
B) AWS Systems Manager
C) AWS OpsWorks
D) AWS CloudTrail

✅ Correct Answer: B) AWS Systems Manager

Explanation: AWS Systems Manager allows you to automate operational tasks, such as
patching and updates, across your AWS infrastructure.

❓ Question 563:

Which AWS service enables serverless orchestration of distributed applications and

microservices using visual workflows?
A) AWS Lambda
B) AWS Step Functions
C) Amazon EventBridge
D) AWS CodePipeline

✅ Correct Answer: B) AWS Step Functions

Explanation: AWS Step Functions lets you coordinate multiple AWS services into serverless
workflows using a visual interface.

❓ Question 564:

Which AWS service allows you to register, resolve, and discover services using names
within your microservices architecture?
A) Amazon Route 53
B) AWS Cloud Map
C) AWS Directory Service
D) Amazon CloudFront

✅ Correct Answer: B) AWS Cloud Map

Explanation: AWS Cloud Map is a service discovery tool that allows services to register
themselves and discover other services by name.

❓ Question 565:

Which AWS service allows you to manage DNS and provides domain registration
services?
A) Amazon CloudFront
B) AWS Global Accelerator
C) Amazon Route 53
D) Amazon VPC

✅ Correct Answer: C) Amazon Route 53

Explanation: Amazon Route 53 is a scalable and highly available Domain Name System
(DNS) web service and also provides domain registration.

❓ Question 566:

Which AWS service is designed to protect your web applications from common web
exploits?
A) AWS Shield
B) AWS WAF
C) Amazon GuardDuty
D) AWS Inspector

✅ Correct Answer: B) AWS WAF

Explanation: AWS Web Application Firewall (WAF) helps protect your web applications from
common exploits such as SQL injection and cross-site scripting.

❓ Question 567:

Which AWS service provides automated security assessment to help improve the
security and compliance of applications deployed on AWS?
A) AWS Shield
B) AWS WAF
C) Amazon Inspector
D) AWS Config

✅ Correct Answer: C) Amazon Inspector

Explanation: Amazon Inspector automatically assesses applications for vulnerabilities and
deviations from best practices.
❓ Question 568:

Which AWS service is primarily used to ingest, buffer, and process real-time streaming
data?
A) Amazon SQS
B) Amazon Kinesis
C) AWS Lambda
D) AWS Step Functions

✅ Correct Answer: B) Amazon Kinesis

Explanation: Amazon Kinesis enables real-time data streaming, ingestion, and processing
for applications like analytics, machine learning, and log analysis.

❓ Question 569:

Which AWS service allows you to manage multiple AWS accounts centrally?
A) AWS Identity and Access Management (IAM)
B) AWS Organizations
C) AWS Control Tower
D) AWS Config

✅ Correct Answer: B) AWS Organizations

Explanation: AWS Organizations lets you centrally manage and govern multiple AWS
accounts, including consolidated billing and policy control.

❓ Question 570:

Which AWS service provides an easy way to deploy and scale web applications and
services without managing infrastructure?
A) AWS Elastic Beanstalk
B) AWS Lambda
C) Amazon EC2
D) AWS Fargate

✅ Correct Answer: A) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk automatically handles the deployment, from capacity
provisioning, load balancing, and auto-scaling to application health monitoring.

❓ Question 571:

Which AWS service enables you to connect your on-premises network securely to
AWS using a dedicated line?
A) AWS Site-to-Site VPN
B) Amazon VPC
C) AWS Direct Connect
D) AWS Transit Gateway
✅ Correct Answer: C) AWS Direct Connect
Explanation: AWS Direct Connect establishes a dedicated, private network connection
between your data center and AWS for high bandwidth and low latency.

❓ Question 572:

Which service is designed to accelerate content delivery using a global network of

edge locations?
A) Amazon VPC
B) Amazon CloudFront
C) AWS Global Accelerator
D) AWS Route 53

✅ Correct Answer: B) Amazon CloudFront

Explanation: Amazon CloudFront is a content delivery network (CDN) that speeds up the
delivery of static and dynamic content to users globally.

❓ Question 573:

Which service helps you monitor applications, understand and respond to system-
wide performance changes, and optimize resource utilization?
A) AWS Config
B) Amazon CloudWatch
C) AWS Trusted Advisor
D) AWS Systems Manager

✅ Correct Answer: B) Amazon CloudWatch

Explanation: Amazon CloudWatch collects monitoring and operational data in the form of
logs, metrics, and events, providing system-wide visibility.

❓ Question 574:

Which AWS service allows you to host a scalable and secure Domain Name System
(DNS)?
A) Amazon Route 53
B) AWS CloudMap
C) Amazon CloudFront
D) AWS App Mesh

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable DNS web service designed to route end users
to Internet applications efficiently.

❓ Question 575:
Which AWS tool provides real-time guidance to help you provision your resources
following AWS best practices?
A) AWS Systems Manager
B) AWS Config
C) AWS Trusted Advisor
D) Amazon CloudWatch

✅ Correct Answer: C) AWS Trusted Advisor

Explanation: AWS Trusted Advisor provides insights to help you follow AWS best practices
in areas like cost optimization, security, fault tolerance, and performance.

❓ Question 576:

Which service should be used to track user activity and API usage across your AWS
infrastructure?
A) Amazon CloudWatch
B) AWS CloudTrail
C) AWS Config
D) AWS X-Ray

✅ Correct Answer: B) AWS CloudTrail

Explanation: AWS CloudTrail enables governance, compliance, and operational and risk
auditing by logging API calls made within your AWS account.

❓ Question 577:

Which AWS service helps you centrally manage compliance across multiple AWS
accounts using rules?
A) AWS Config
B) AWS Organizations
C) AWS Control Tower
D) AWS CloudTrail

✅ Correct Answer: A) AWS Config

Explanation: AWS Config enables you to assess, audit, and evaluate the configurations of
your AWS resources to maintain compliance.

❓ Question 578:

Which AWS service is used for data lake storage, offering high durability and
scalability?
A) Amazon EBS
B) Amazon Glacier
C) Amazon S3
D) AWS Storage Gateway
✅ Correct Answer: C) Amazon S3
Explanation: Amazon Simple Storage Service (S3) provides object storage with scalability,
data availability, and security, and is commonly used as a data lake.

❓ Question 579:

Which AWS service enables application deployment using blue/green or canary

strategies?
A) AWS CodeBuild
B) AWS CodeCommit
C) AWS CodeDeploy
D) AWS CloudFormation

✅ Correct Answer: C) AWS CodeDeploy

Explanation: AWS CodeDeploy automates software deployments to compute services and
supports advanced deployment strategies like blue/green.

❓ Question 580:

Which AWS service allows you to easily move petabytes of data to AWS using
physical storage devices?
A) AWS Snowball
B) AWS Storage Gateway
C) Amazon S3 Transfer Acceleration
D) AWS DataSync

✅ Correct Answer: A) AWS Snowball

Explanation: AWS Snowball is a data transport solution that uses physical appliances to
transfer large amounts of data to and from AWS.

❓ Question 581:

Which AWS service enables you to automate infrastructure provisioning using

templates?
A) AWS Elastic Beanstalk
B) AWS CodePipeline
C) AWS CloudFormation
D) AWS CodeDeploy

✅ Correct Answer: C) AWS CloudFormation

Explanation: AWS CloudFormation uses templates to automate the provisioning and
management of AWS infrastructure as code.

❓ Question 582:
Which AWS database service is fully managed and designed for key-value and
document workloads?
A) Amazon RDS
B) Amazon Redshift
C) Amazon DynamoDB
D) Amazon ElastiCache

✅ Correct Answer: C) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database designed for low-
latency performance at any scale.

❓ Question 583:

Which service is best suited for managing secrets such as API keys and database
credentials?
A) AWS IAM
B) AWS KMS
C) AWS Secrets Manager
D) Amazon Cognito

✅ Correct Answer: C) AWS Secrets Manager

Explanation: AWS Secrets Manager helps you store, manage, and rotate secrets securely.

❓ Question 584:

Which service allows users to run containers without managing servers or clusters?
A) Amazon EC2
B) AWS Batch
C) Amazon ECS with EC2
D) AWS Fargate

✅ Correct Answer: D) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that removes the
need to provision and manage servers.

❓ Question 585:

Which AWS service can help detect personally identifiable information (PII) in S3
objects?
A) AWS Shield
B) AWS Macie
C) AWS WAF
D) Amazon Inspector

✅ Correct Answer: B) AWS Macie

Explanation: AWS Macie uses machine learning to discover, classify, and protect sensitive
data in Amazon S3.
❓ Question 586:

Which service allows federated users to log in with external identity providers such as
Google or Facebook?
A) AWS IAM
B) Amazon Cognito
C) AWS STS
D) AWS Directory Service

✅ Correct Answer: B) Amazon Cognito

Explanation: Amazon Cognito supports user sign-up, sign-in, and access control with
identity federation from social identity providers.

❓ Question 587:

Which service is best suited for real-time messaging between distributed

applications?
A) Amazon SNS
B) Amazon SQS
C) Amazon Kinesis
D) AWS AppSync

✅ Correct Answer: A) Amazon SNS

Explanation: Amazon Simple Notification Service (SNS) is a fully managed pub/sub
messaging service for sending messages in real time.

❓ Question 588:

Which AWS support plan provides access to the AWS Trusted Advisor full checks and
24/7 access to Cloud Support Engineers?
A) Basic
B) Developer
C) Business
D) Enterprise

✅ Correct Answer: C) Business

Explanation: The Business support plan includes full Trusted Advisor checks and access to
AWS support 24/7 via email, chat, and phone.

❓ Question 589:

What is the primary benefit of using AWS Elastic Load Balancer (ELB)?
A) To monitor metrics in real time
B) To encrypt traffic between services
C) To distribute traffic evenly across targets
D) To reduce storage costs

✅ Correct Answer: C) To distribute traffic evenly across targets

Explanation: ELB automatically distributes incoming application traffic across multiple
targets to ensure availability and fault tolerance.

❓ Question 590:

Which service allows you to automate data transfer between on-premises storage and
AWS storage services?
A) AWS Snowball
B) AWS DataSync
C) Amazon S3 Transfer Acceleration
D) AWS Direct Connect

✅ Correct Answer: B) AWS DataSync

Explanation: AWS DataSync simplifies and automates the transfer of data between on-
premises storage and AWS services.

❓ Question 591:

Which AWS service allows you to automatically scale your Amazon EC2 capacity up or
down?
A) AWS Elastic Load Balancer
B) AWS Auto Scaling
C) Amazon EC2 Spot Instances
D) AWS Lambda

✅ Correct Answer: B) AWS Auto Scaling

Explanation: AWS Auto Scaling automatically adjusts EC2 instances to maintain
performance and reduce cost based on demand.

❓ Question 592:

Which AWS service provides a virtual firewall to control inbound and outbound traffic
to EC2 instances?
A) AWS Shield
B) AWS WAF
C) Amazon VPC Security Groups
D) AWS Config

✅ Correct Answer: C) Amazon VPC Security Groups

Explanation: Security Groups act as virtual firewalls that control traffic to and from EC2
instances.
❓ Question 593:

Which service allows you to analyze streaming data in real-time?

A) Amazon Athena
B) AWS Glue
C) Amazon Kinesis Data Streams
D) Amazon Redshift

✅ Correct Answer: C) Amazon Kinesis Data Streams

Explanation: Amazon Kinesis allows real-time processing of streaming data for use cases
like log analysis and event tracking.

❓ Question 594:

Which AWS service enables serverless backend logic that executes in response to
events?
A) Amazon EC2
B) Amazon SQS
C) AWS Lambda
D) Amazon ECS

✅ Correct Answer: C) AWS Lambda

Explanation: AWS Lambda is a serverless compute service that runs code in response to
events and manages the compute resources automatically.

❓ Question 595:

Which AWS service is best for visualizing and analyzing operational data in a
dashboard?
A) Amazon CloudWatch
B) AWS X-Ray
C) AWS Glue
D) Amazon QuickSight

✅ Correct Answer: D) Amazon QuickSight

Explanation: Amazon QuickSight is a scalable, serverless business intelligence service for
creating interactive dashboards and reports.

❓ Question 596:

Which AWS service is used to provision and manage Kubernetes clusters?

A) Amazon ECS
B) AWS Fargate
C) Amazon EKS
D) AWS Lambda
✅ Correct Answer: C) Amazon EKS
Explanation: Amazon Elastic Kubernetes Service (EKS) is a managed service for running
Kubernetes on AWS without needing to install or manage control plane nodes.

❓ Question 597:

Which AWS service can provide DDoS protection for your applications?
A) AWS WAF
B) AWS Shield
C) AWS CloudTrail
D) Amazon CloudFront

✅ Correct Answer: B) AWS Shield

Explanation: AWS Shield provides automatic protection against DDoS attacks for your AWS
applications.

❓ Question 598:

Which AWS service allows centralized management and billing of multiple AWS
accounts?
A) AWS Organizations
B) AWS Control Tower
C) AWS Budgets
D) AWS IAM

✅ Correct Answer: A) AWS Organizations

Explanation: AWS Organizations helps you manage multiple AWS accounts from a single
location, including consolidated billing and account policies.

❓ Question 599:

Which AWS service provides fully managed email sending functionality?

A) Amazon SES
B) Amazon SNS
C) Amazon WorkMail
D) AWS Chime

✅ Correct Answer: A) Amazon SES

Explanation: Amazon Simple Email Service (SES) is a cost-effective, flexible, and scalable
email service for transactional and marketing emails.

❓ Question 600:

Which AWS service allows for secure management of encryption keys used to encrypt
data?
A) AWS Shield
B) AWS Secrets Manager
C) AWS KMS
D) AWS CloudHSM

✅ Correct Answer: C) AWS KMS

Explanation: AWS Key Management Service (KMS) allows you to create and manage
cryptographic keys and control their use across AWS services.

❓ Question 601:

Which AWS service allows developers to host, build, and deploy web applications
directly from a Git-based repository?
A) AWS CodePipeline
B) AWS CodeBuild
C) AWS Amplify
D) AWS Elastic Beanstalk

✅ Correct Answer: C) AWS Amplify

Explanation: AWS Amplify is a set of tools and services that enables front-end web and
mobile developers to quickly build, deploy, and host full-stack applications on AWS.

❓ Question 602:

Which AWS service allows you to archive infrequently accessed data at a very low
cost?
A) Amazon S3 Standard
B) Amazon S3 Intelligent-Tiering
C) Amazon S3 Glacier
D) Amazon EFS

✅ Correct Answer: C) Amazon S3 Glacier

Explanation: Amazon S3 Glacier is designed for long-term storage and archival of data at
the lowest cost, with retrieval times from minutes to hours.

❓ Question 603:

Which AWS service allows you to migrate databases with minimal downtime?
A) AWS Migration Hub
B) AWS Database Migration Service (DMS)
C) AWS Snowball
D) Amazon RDS

✅ Correct Answer: B) AWS Database Migration Service (DMS)

Explanation: AWS DMS helps you migrate databases to AWS quickly and securely, with
minimal downtime during the migration.
❓ Question 604:

Which service allows you to write custom logic to filter and transform incoming
messages before routing them to targets?
A) Amazon SQS
B) Amazon SNS
C) Amazon EventBridge
D) AWS Lambda

✅ Correct Answer: C) Amazon EventBridge

Explanation: Amazon EventBridge is a serverless event bus that makes it easy to connect
applications using data from your applications, integrated SaaS apps, and AWS services.

❓ Question 605:

Which AWS service provides managed Apache Hadoop and Spark clusters?
A) Amazon Athena
B) Amazon Redshift
C) Amazon EMR
D) AWS Glue

✅ Correct Answer: C) Amazon EMR

Explanation: Amazon EMR is the cloud big data platform for processing vast amounts of
data using open-source tools such as Hadoop, Spark, and Hive.

❓ Question 606:

What does AWS recommend to protect your root account?

A) Use IAM policies
B) Enable multi-factor authentication (MFA)
C) Rotate access keys
D) Use AWS Config

✅ Correct Answer: B) Enable multi-factor authentication (MFA)

Explanation: AWS strongly recommends enabling MFA on the root account to enhance
security.

❓ Question 607:

Which AWS service lets you automate operational tasks across AWS resources?
A) AWS Systems Manager
B) AWS CloudTrail
C) AWS Config
D) AWS IAM
✅ Correct Answer: A) AWS Systems Manager
Explanation: AWS Systems Manager provides visibility and control of your infrastructure and
helps automate operational tasks.

❓ Question 608:

Which AWS service enables you to define and enforce policies for security and
compliance across multiple accounts?
A) AWS IAM
B) AWS Control Tower
C) AWS Organizations
D) AWS Config

✅ Correct Answer: C) AWS Organizations

Explanation: AWS Organizations allows you to apply Service Control Policies (SCPs) to
help manage and govern multiple AWS accounts centrally.

❓ Question 609:

Which AWS service is used to monitor and visualize application performance in

distributed systems?
A) Amazon CloudWatch
B) AWS X-Ray
C) AWS Config
D) AWS Trusted Advisor

✅ Correct Answer: B) AWS X-Ray

Explanation: AWS X-Ray helps developers analyze and debug distributed applications,
providing insights into performance and bottlenecks.

❓ Question 610:

Which AWS service allows users to create and manage blockchain networks?
A) Amazon Managed Blockchain
B) Amazon Ledger Database
C) AWS Glue
D) AWS Quantum Ledger Database (QLDB)

✅ Correct Answer: A) Amazon Managed Blockchain

Explanation: Amazon Managed Blockchain is a fully managed service for creating and
managing scalable blockchain networks using popular frameworks like Hyperledger Fabric
and Ethereum.

❓ Question 611:
Which AWS service is used to centrally manage security findings from across AWS
accounts and services?
A) AWS Config
B) AWS Trusted Advisor
C) Amazon GuardDuty
D) AWS Security Hub

✅ Correct Answer: D) AWS Security Hub

Explanation: AWS Security Hub provides a comprehensive view of your security alerts and
security posture across AWS accounts.

❓ Question 612:

Which AWS service is ideal for sending mobile push notifications, emails, and SMS
messages?
A) Amazon MQ
B) AWS Step Functions
C) Amazon SNS
D) Amazon SQS

✅ Correct Answer: C) Amazon SNS

Explanation: Amazon Simple Notification Service (SNS) is used for sending messages to
subscribers via push, email, and SMS.

❓ Question 613:

Which AWS service allows you to visually build and run workflows using AWS
services?
A) AWS CodePipeline
B) AWS Step Functions
C) AWS Glue
D) AWS Batch

✅ Correct Answer: B) AWS Step Functions

Explanation: AWS Step Functions lets you coordinate multiple AWS services into serverless
workflows, using visual workflows.

❓ Question 614:

Which AWS service enables infrastructure as code by defining resources in JSON or

YAML?
A) AWS Systems Manager
B) AWS OpsWorks
C) AWS CloudFormation
D) AWS CodeDeploy
✅ Correct Answer: C) AWS CloudFormation
Explanation: AWS CloudFormation allows you to define and provision infrastructure as code
using YAML or JSON templates.

❓ Question 615:

Which AWS service helps detect threats like cryptocurrency mining or port scanning
within your AWS environment?
A) AWS Shield
B) AWS WAF
C) AWS CloudTrail
D) Amazon GuardDuty

✅ Correct Answer: D) Amazon GuardDuty

Explanation: Amazon GuardDuty is a threat detection service that continuously monitors for
malicious or unauthorized behavior.

❓ Question 616:

Which of the following AWS services helps track API activity on your account?
A) Amazon CloudWatch
B) AWS X-Ray
C) AWS CloudTrail
D) AWS Config

✅ Correct Answer: C) AWS CloudTrail

Explanation: AWS CloudTrail tracks user activity and API usage across your AWS account.

❓ Question 617:

Which AWS service allows for orchestration of Docker containers on a serverless

infrastructure?
A) Amazon ECS with EC2 launch type
B) Amazon EKS
C) AWS Fargate
D) Amazon EMR

✅ Correct Answer: C) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that works with
Amazon ECS and Amazon EKS.

❓ Question 618:

Which AWS service allows for transferring large amounts of data into AWS using
physical devices?
A) AWS Migration Hub
B) AWS Direct Connect
C) AWS Snowball
D) AWS VPN

✅ Correct Answer: C) AWS Snowball

Explanation: AWS Snowball is used for transferring large datasets into and out of AWS
using secure physical appliances.

❓ Question 619:

Which AWS service is a petabyte-scale data warehouse solution?

A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Redshift
D) Amazon Athena

✅ Correct Answer: C) Amazon Redshift

Explanation: Amazon Redshift is a fast, scalable data warehouse that makes it simple and
cost-effective to analyze large amounts of data.

❓ Question 620:

Which AWS service enables you to track configuration changes and compliance of
your AWS resources?
A) AWS CloudTrail
B) AWS Config
C) AWS Systems Manager
D) Amazon CloudWatch

✅ Correct Answer: B) AWS Config

Explanation: AWS Config continuously monitors and records your AWS resource
configurations and allows compliance auditing.

❓ Question 621:

Which AWS service provides a virtual network dedicated to your AWS account?
A) Amazon VPC
B) AWS Direct Connect
C) AWS Transit Gateway
D) AWS VPN

✅ Correct Answer: A) Amazon VPC

Explanation: Amazon Virtual Private Cloud (VPC) allows you to launch AWS resources into
a logically isolated virtual network.
❓ Question 622:

Which AWS service helps you set up and govern a secure, multi-account AWS
environment?
A) AWS IAM
B) AWS Control Tower
C) AWS Organizations
D) AWS Config

✅ Correct Answer: B) AWS Control Tower

Explanation: AWS Control Tower automates account setup, provides blueprints, and
governs multi-account AWS environments.

❓ Question 623:

Which AWS service allows you to run code in response to events without provisioning
or managing servers?
A) AWS CloudFormation
B) Amazon EC2
C) AWS Lambda
D) AWS Step Functions

✅ Correct Answer: C) AWS Lambda

Explanation: AWS Lambda lets you run code in response to events, such as changes to
data in an Amazon S3 bucket or updates to a DynamoDB table, without managing servers.

❓ Question 624:

Which AWS storage class is designed for objects that are rarely accessed and can be
retrieved within minutes to hours?
A) S3 Standard
B) S3 Intelligent-Tiering
C) S3 Glacier
D) S3 One Zone-IA

✅ Correct Answer: C) S3 Glacier

Explanation: Amazon S3 Glacier is ideal for archival data that is rarely accessed, offering
low-cost storage with retrieval times from minutes to hours.

❓ Question 625:

Which AWS service provides a pay-per-query interactive query service that makes it
easy to analyze data in Amazon S3?
A) Amazon Redshift
B) Amazon Athena
C) Amazon EMR
D) Amazon QuickSight
✅ Correct Answer: B) Amazon Athena
Explanation: Amazon Athena is a serverless query service that allows you to analyze data
directly in Amazon S3 using standard SQL.

❓ Question 626:

Which service helps developers and DevOps engineers to continuously deliver

software by automating the build, test, and deploy phases?
A) AWS CodeCommit
B) AWS CodeBuild
C) AWS CodeDeploy
D) AWS CodePipeline

✅ Correct Answer: D) AWS CodePipeline

Explanation: AWS CodePipeline automates the software release process, enabling
continuous integration and continuous delivery (CI/CD).

❓ Question 627:

Which AWS service can help identify unused or underutilized resources to reduce
costs?
A) AWS Budgets
B) AWS Cost Explorer
C) AWS Trusted Advisor
D) AWS Billing Dashboard

✅ Correct Answer: C) AWS Trusted Advisor

Explanation: AWS Trusted Advisor provides recommendations to optimize performance,
improve security, and reduce costs by identifying underutilized resources.

❓ Question 628:

Which AWS tool allows you to visually monitor, analyze, and set alarms for your AWS
resources and applications?
A) AWS CloudTrail
B) Amazon CloudWatch
C) AWS Config
D) AWS Systems Manager

✅ Correct Answer: B) Amazon CloudWatch

Explanation: Amazon CloudWatch is a monitoring and observability service built for DevOps
engineers, developers, and IT managers.

❓ Question 629:

Which AWS service offers managed distributed DDoS protection?

A) AWS WAF
B) AWS Shield
C) Amazon GuardDuty
D) AWS Firewall Manager

✅ Correct Answer: B) AWS Shield

Explanation: AWS Shield provides DDoS protection for applications running on AWS and
comes in two tiers: Standard and Advanced.

❓ Question 630:

Which AWS service allows you to store and retrieve secrets like database credentials
or API keys securely?
A) AWS KMS
B) AWS IAM
C) AWS Secrets Manager
D) AWS Shield

✅ Correct Answer: C) AWS Secrets Manager

Explanation: AWS Secrets Manager helps you protect access to your applications, services,
and IT resources without the upfront cost and complexity of managing your own hardware
security module (HSM) infrastructure.

❓ Question 631:

Which AWS service provides automated security assessments to help improve the
security and compliance of applications deployed on AWS?
A) AWS Shield
B) Amazon Inspector
C) AWS Trusted Advisor
D) AWS Config

✅ Correct Answer: B) Amazon Inspector

Explanation: Amazon Inspector automatically assesses applications for vulnerabilities or
deviations from best practices.

❓ Question 632:

Which AWS service is used for automated backup of EBS volumes and RDS
databases?
A) AWS Backup
B) AWS Storage Gateway
C) Amazon Glacier
D) AWS DataSync
✅ Correct Answer: A) AWS Backup
Explanation: AWS Backup provides centralized backup management for AWS services like
EBS, RDS, DynamoDB, EFS, and more.

❓ Question 633:

Which AWS service allows organizations to set custom policies to manage service
usage across accounts?
A) AWS IAM
B) AWS Organizations
C) AWS Config
D) AWS Control Tower

✅ Correct Answer: B) AWS Organizations

Explanation: AWS Organizations enables policy-based management of multiple AWS
accounts.

❓ Question 634:

Which AWS service provides a fully managed graph database?

A) Amazon Aurora
B) Amazon Neptune
C) Amazon RDS
D) Amazon Redshift

✅ Correct Answer: B) Amazon Neptune

Explanation: Amazon Neptune is a fully managed graph database service optimized for
storing and querying highly connected datasets.

❓ Question 635:

Which AWS service allows you to run relational databases in the cloud with managed
features like backups and patching?
A) Amazon Redshift
B) Amazon DynamoDB
C) Amazon RDS
D) Amazon EMR

✅ Correct Answer: C) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) makes it easy to set up, operate,
and scale a relational database in the cloud.

❓ Question 636:

Which service provides a way to automate common IT tasks like patching,

configuration, and software installation on EC2 instances?
A) AWS CloudFormation
B) AWS Systems Manager
C) Amazon CloudWatch
D) AWS Lambda

✅ Correct Answer: B) AWS Systems Manager

Explanation: AWS Systems Manager provides operational insights and lets you automate
tasks like software installation and patching.

❓ Question 637:

Which AWS service is a managed Kubernetes service?

A) Amazon ECS
B) AWS Fargate
C) Amazon EKS
D) AWS Batch

✅ Correct Answer: C) Amazon EKS

Explanation: Amazon Elastic Kubernetes Service (EKS) is a managed service that makes it
easy to run Kubernetes on AWS.

❓ Question 638:

Which AWS tool lets you visualize your AWS spending and usage patterns over time?
A) AWS Budgets
B) AWS Cost Explorer
C) AWS Billing Dashboard
D) AWS TCO Calculator

✅ Correct Answer: B) AWS Cost Explorer

Explanation: AWS Cost Explorer helps you visualize, understand, and manage your AWS
costs and usage.

❓ Question 639:

Which service can help protect your web applications from common exploits and
vulnerabilities?
A) AWS IAM
B) AWS Shield
C) AWS Firewall Manager
D) AWS WAF

✅ Correct Answer: D) AWS WAF

Explanation: AWS Web Application Firewall (WAF) helps protect your applications from
common web exploits like SQL injection and cross-site scripting.
❓ Question 640:

Which of the following is a serverless interactive dashboard service for business

analytics?
A) Amazon Athena
B) Amazon EMR
C) Amazon QuickSight
D) Amazon Redshift

✅ Correct Answer: C) Amazon QuickSight

Explanation: Amazon QuickSight is a scalable, serverless, embeddable, machine learning-
powered business intelligence (BI) service built for the cloud.

❓ Question 641:

Which AWS service enables you to move petabyte-scale data from on-premises
storage to AWS?
A) AWS DataSync
B) AWS Snowball
C) Amazon S3 Transfer Acceleration
D) Amazon Kinesis

✅ Correct Answer: B) AWS Snowball

Explanation: AWS Snowball is a data transport solution that uses secure appliances to
transfer large amounts of data into and out of AWS.

❓ Question 642:

Which service lets you register and manage domain names directly within AWS?
A) Amazon CloudFront
B) Amazon Route 53
C) AWS Directory Service
D) AWS CloudTrail

✅ Correct Answer: B) Amazon Route 53

Explanation: Amazon Route 53 is a scalable domain name system (DNS) web service that
allows domain registration and routing.

❓ Question 643:

Which service would best help identify threats by analyzing AWS account activity?
A) AWS Shield
B) AWS CloudTrail
C) Amazon GuardDuty
D) AWS Inspector
✅ Correct Answer: C) Amazon GuardDuty
Explanation: Amazon GuardDuty is a threat detection service that continuously monitors for
malicious or unauthorized behavior.

❓ Question 644:

What AWS service is used to centrally manage governance across multiple AWS
accounts?
A) AWS Control Tower
B) AWS CloudFormation
C) AWS Systems Manager
D) AWS Budgets

✅ Correct Answer: A) AWS Control Tower

Explanation: AWS Control Tower helps set up and govern a secure, multi-account AWS
environment using best practices.

❓ Question 645:

Which AWS service is used to send notifications via SMS, email, or HTTP?
A) Amazon MQ
B) Amazon SNS
C) Amazon SQS
D) AWS Lambda

✅ Correct Answer: B) Amazon SNS

Explanation: Amazon Simple Notification Service (SNS) is a fully managed messaging
service for sending notifications.

❓ Question 646:

Which AWS service makes it easy to process large amounts of streaming data in real
time?
A) Amazon Kinesis
B) Amazon SQS
C) AWS Step Functions
D) AWS Glue

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis allows real-time processing of streaming data for analytics
and other applications.

❓ Question 647:

Which service would you use to host a static website with low cost and high
durability?
A) Amazon EC2
B) Amazon S3
C) Amazon RDS
D) AWS Lambda

✅ Correct Answer: B) Amazon S3

Explanation: Amazon S3 allows you to host static websites with low cost, scalability, and
durability.

❓ Question 648:

Which service enables developers to manage and deploy containers without

managing servers or clusters?
A) Amazon ECS with EC2
B) AWS Fargate
C) Amazon EKS
D) Amazon EMR

✅ Correct Answer: B) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that works with
both Amazon ECS and EKS.

❓ Question 649:

Which AWS service allows you to visualize infrastructure as code in YAML or JSON
format?
A) AWS Systems Manager
B) AWS CloudTrail
C) AWS CloudFormation
D) AWS CodeDeploy

✅ Correct Answer: C) AWS CloudFormation

Explanation: AWS CloudFormation lets you model and provision AWS resources using
templates written in YAML or JSON.

❓ Question 650:

Which AWS tool provides detailed billing reports and data exports?
A) AWS Cost Explorer
B) AWS Budgets
C) AWS Billing Dashboard
D) AWS Cost and Usage Report (CUR)

✅ Correct Answer: D) AWS Cost and Usage Report (CUR)

Explanation: AWS CUR provides the most detailed information available about your AWS
usage and costs.
❓ Question 651:

Which AWS service is used for end-to-end machine learning lifecycle management,
including data preparation, training, and deployment?
A) AWS Lambda
B) Amazon SageMaker
C) Amazon Rekognition
D) AWS Deep Learning AMIs

✅ Correct Answer: B) Amazon SageMaker

Explanation: Amazon SageMaker provides an end-to-end solution for building, training, and
deploying machine learning models.

❓ Question 652:

Which AWS service is used for scalable, high-performance data warehousing?

A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Redshift
D) AWS Data Pipeline

✅ Correct Answer: C) Amazon Redshift

Explanation: Amazon Redshift is a fully managed data warehouse that provides fast query
performance for analytics workloads.

❓ Question 653:

Which service allows you to manage keys and encrypt data on AWS using hardware
security modules?
A) AWS IAM
B) AWS KMS
C) AWS Secrets Manager
D) Amazon S3

✅ Correct Answer: B) AWS KMS

Explanation: AWS Key Management Service (KMS) allows you to create and control
encryption keys used to encrypt your data.

❓ Question 654:

Which AWS service is used for real-time monitoring of application performance and
user activity?
A) AWS CloudTrail
B) Amazon CloudWatch
C) AWS X-Ray
D) AWS Config
✅ Correct Answer: C) AWS X-Ray
Explanation: AWS X-Ray helps developers analyze and debug production applications by
providing insights into application performance.

❓ Question 655:

Which AWS service allows you to define, deploy, and manage APIs?
A) Amazon API Gateway
B) AWS Lambda
C) Amazon SQS
D) AWS WAF

✅ Correct Answer: A) Amazon API Gateway

Explanation: Amazon API Gateway is a fully managed service for creating, publishing, and
managing APIs at any scale.

❓ Question 656:

Which AWS service is a fully managed, scalable file storage solution for EC2
instances?
A) Amazon S3
B) Amazon EFS
C) Amazon Glacier
D) AWS Storage Gateway

✅ Correct Answer: B) Amazon EFS

Explanation: Amazon Elastic File System (EFS) provides scalable file storage for use with
EC2 instances.

❓ Question 657:

Which AWS service helps you collect and analyze log data from AWS resources and
on-premises servers?
A) AWS CloudTrail
B) Amazon Kinesis
C) Amazon CloudWatch Logs
D) AWS Systems Manager

✅ Correct Answer: C) Amazon CloudWatch Logs

Explanation: Amazon CloudWatch Logs helps you monitor, store, and access log files from
your AWS resources and on-premises systems.

❓ Question 658:

Which AWS service is used for creating and managing Docker containers at scale?
A) Amazon EC2
B) Amazon ECS
C) AWS Lambda
D) Amazon RDS

✅ Correct Answer: B) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is a fully managed container
orchestration service for Docker containers.

❓ Question 659:

Which AWS service is used to monitor and audit changes to your AWS resources?
A) AWS Config
B) AWS CloudTrail
C) Amazon CloudWatch
D) AWS Systems Manager

✅ Correct Answer: A) AWS Config

Explanation: AWS Config helps you track and audit changes to your AWS resources,
allowing for continuous monitoring and compliance.

❓ Question 660:

Which service is used to migrate databases from on-premises to AWS with minimal
downtime?
A) AWS Database Migration Service
B) Amazon Aurora
C) Amazon RDS
D) AWS Snowball

✅ Correct Answer: A) AWS Database Migration Service

Explanation: AWS Database Migration Service (DMS) helps you migrate databases to AWS
with minimal downtime.

❓ Question 661:

Which AWS service enables real-time streaming and processing of data from sources
like IoT devices and applications?
A) AWS Lambda
B) Amazon Kinesis
C) AWS DataSync
D) Amazon S3

✅ Correct Answer: B) Amazon Kinesis

Explanation: Amazon Kinesis is a platform for real-time streaming data and enables
processing of data from multiple sources.
❓ Question 662:

Which AWS service provides a managed solution for monitoring and analyzing cloud
applications in real time?
A) Amazon CloudWatch
B) AWS X-Ray
C) AWS Lambda
D) Amazon RDS

✅ Correct Answer: B) AWS X-Ray

Explanation: AWS X-Ray helps analyze and debug cloud applications in real time by
providing insights into performance bottlenecks and error rates.

❓ Question 663:

Which AWS service helps to protect your web applications from DDoS attacks?
A) AWS Shield
B) AWS WAF
C) Amazon CloudFront
D) AWS KMS

✅ Correct Answer: A) AWS Shield

Explanation: AWS Shield provides DDoS protection for AWS applications to safeguard
against large-scale attacks.

❓ Question 664:

Which AWS service allows you to create, view, and manage access policies for AWS
resources?
A) AWS IAM
B) AWS Config
C) Amazon Route 53
D) AWS Shield

✅ Correct Answer: A) AWS IAM

Explanation: AWS Identity and Access Management (IAM) allows you to create and manage
user access to AWS resources securely.

❓ Question 665:

Which service provides secure, scalable, and durable storage for backup, archiving,
and long-term data retention?
A) Amazon S3
B) Amazon EBS
C) Amazon Glacier
D) Amazon EFS
✅ Correct Answer: C) Amazon Glacier
Explanation: Amazon Glacier is a secure, scalable, low-cost storage service for data
archiving and long-term backup.

❓ Question 666:

Which AWS service helps automate the creation and deployment of infrastructure in a
repeatable manner using code?
A) AWS CloudFormation
B) AWS Elastic Beanstalk
C) Amazon EC2
D) AWS Lambda

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to define and provision AWS infrastructure
using templates in JSON or YAML format.

❓ Question 667:

Which AWS service is used to create and manage virtual machines in the cloud?
A) Amazon EC2
B) AWS Lambda
C) Amazon RDS
D) AWS Snowball

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon EC2 (Elastic Compute Cloud) provides scalable virtual servers to run
applications in the cloud.

❓ Question 668:

Which AWS service provides a scalable and managed database service for key-value
and document data?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Redshift
D) AWS Aurora

✅ Correct Answer: B) Amazon DynamoDB

Explanation: Amazon DynamoDB is a managed NoSQL database service designed for fast
and flexible key-value and document data storage.

❓ Question 669:

Which AWS service helps you protect your data and applications from malicious
attacks and vulnerabilities?
A) AWS Shield
B) AWS WAF
C) Amazon GuardDuty
D) AWS KMS

✅ Correct Answer: C) Amazon GuardDuty

Explanation: Amazon GuardDuty is a threat detection service that helps identify malicious
activity and unauthorized behavior in AWS accounts.

❓ Question 670:

Which AWS service simplifies application deployment and scaling without managing
infrastructure?
A) Amazon ECS
B) AWS Elastic Beanstalk
C) AWS Fargate
D) Amazon Lambda

✅ Correct Answer: B) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a fully managed service that automatically handles
the deployment, scaling, and monitoring of applications.

❓ Question 671:

Which AWS service allows you to monitor, store, and access log files from various
AWS resources and on-premises servers?
A) Amazon CloudWatch Logs
B) AWS CloudTrail
C) AWS X-Ray
D) Amazon Kinesis

✅ Correct Answer: A) Amazon CloudWatch Logs

Explanation: Amazon CloudWatch Logs enables you to collect and store logs from AWS
resources and on-premises servers for analysis and troubleshooting.

❓ Question 672:

Which service would you use to deploy a containerized application without having to
manage the underlying servers?
A) AWS Fargate
B) AWS Lambda
C) Amazon EC2
D) Amazon S3

✅ Correct Answer: A) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers, which allows you
to run containerized applications without managing servers.
❓ Question 673:

Which AWS service can be used to schedule tasks on a recurring basis, such as
backups or cleaning up old data?
A) AWS Lambda
B) Amazon CloudWatch Events
C) AWS Step Functions
D) Amazon EC2

✅ Correct Answer: B) Amazon CloudWatch Events

Explanation: Amazon CloudWatch Events allows you to automate the scheduling of tasks,
such as backups or maintenance operations, based on specific triggers.

❓ Question 674:

Which service helps you track changes to your AWS infrastructure and maintain
compliance with internal and external standards?
A) AWS Config
B) AWS CloudTrail
C) AWS Inspector
D) AWS Lambda

✅ Correct Answer: A) AWS Config

Explanation: AWS Config tracks changes to AWS resources and helps ensure that your
environment remains compliant with governance policies.

❓ Question 675:

Which AWS service allows you to set up, operate, and scale a managed relational
database?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Aurora
D) AWS Lambda

✅ Correct Answer: B) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) simplifies the setup, operation,
and scaling of a managed relational database in the cloud.

❓ Question 676:

Which AWS service provides a fully managed, low-latency global content delivery
network (CDN)?
A) Amazon S3
B) AWS CloudFront
C) AWS WAF
D) Amazon Route 53

✅ Correct Answer: B) AWS CloudFront

Explanation: AWS CloudFront is a content delivery network (CDN) that provides low-latency
delivery of content globally.

❓ Question 677:

Which AWS service allows you to easily connect AWS VPCs across different regions?
A) AWS Direct Connect
B) AWS VPN
C) Amazon Route 53
D) AWS Transit Gateway

✅ Correct Answer: D) AWS Transit Gateway

Explanation: AWS Transit Gateway allows you to easily connect VPCs across different
regions and manage network traffic.

❓ Question 678:

Which AWS service provides a managed environment to develop, test, and deploy
mobile applications?
A) AWS Mobile Hub
B) AWS Lambda
C) Amazon EC2
D) AWS Amplify

✅ Correct Answer: D) AWS Amplify

Explanation: AWS Amplify is a platform for developing, testing, and deploying mobile and
web applications with built-in support for analytics, APIs, and authentication.

❓ Question 679:

Which service would you use to migrate databases from on-premises to AWS with
minimal downtime?
A) Amazon Aurora
B) AWS Database Migration Service (DMS)
C) Amazon Redshift
D) AWS DataSync

✅ Correct Answer: B) AWS Database Migration Service (DMS)

Explanation: AWS Database Migration Service (DMS) helps you migrate databases to AWS
with minimal downtime and data disruption.

❓ Question 680:
Which AWS service provides a fully managed solution for running containerized
applications?
A) Amazon ECS
B) Amazon EC2
C) AWS Lambda
D) AWS Fargate

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) is a fully managed container
orchestration service for running containerized applications.

❓ Question 681:

Which AWS service is used to deploy and manage machine learning models and
experiments?
A) AWS Sagemaker
B) Amazon Rekognition
C) AWS Lambda
D) AWS IoT Core

✅ Correct Answer: A) AWS Sagemaker

Explanation: AWS Sagemaker is a fully managed service that helps developers and data
scientists to build, train, and deploy machine learning models.

❓ Question 682:

Which AWS service helps you to identify security vulnerabilities in your applications
and workloads?
A) AWS Shield
B) AWS Inspector
C) AWS WAF
D) Amazon GuardDuty

✅ Correct Answer: B) AWS Inspector

Explanation: AWS Inspector helps you perform automated security assessments of your
AWS workloads to identify vulnerabilities.

❓ Question 683:

Which AWS service helps to secure access to AWS applications and data by enabling
multi-factor authentication (MFA)?
A) AWS IAM
B) Amazon GuardDuty
C) AWS KMS
D) AWS WAF
✅ Correct Answer: A) AWS IAM
Explanation: AWS Identity and Access Management (IAM) enables you to configure multi-
factor authentication (MFA) for secure access management.

❓ Question 684:

Which service allows you to manage your DNS records and provide routing of traffic
to various AWS resources?
A) Amazon Route 53
B) AWS Direct Connect
C) Amazon CloudFront
D) Amazon Elastic Load Balancer

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable Domain Name System (DNS) web service
designed to route traffic to AWS resources efficiently.

❓ Question 685:

Which AWS service provides a secure connection between an on-premises data center
and AWS?
A) AWS Direct Connect
B) Amazon EC2
C) AWS VPN
D) AWS CloudTrail

✅ Correct Answer: A) AWS Direct Connect

Explanation: AWS Direct Connect provides a dedicated network connection from an on-
premises data center to AWS.

❓ Question 686:

Which AWS service provides a fully managed NoSQL database with a flexible schema
and high throughput?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Aurora
D) Amazon S3

✅ Correct Answer: B) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database that supports both
document and key-value data models with high availability and scalability.

❓ Question 687:
Which AWS service would you use to create a custom machine image for your EC2
instance?
A) AWS Lambda
B) Amazon EC2 Image Builder
C) AWS Elastic Beanstalk
D) Amazon S3

✅ Correct Answer: B) Amazon EC2 Image Builder

Explanation: Amazon EC2 Image Builder is a service that automates the creation,
maintenance, and testing of EC2 machine images.

❓ Question 688:

Which AWS service provides a scalable solution for real-time data streaming?
A) AWS Lambda
B) Amazon Kinesis
C) Amazon SQS
D) Amazon RDS

✅ Correct Answer: B) Amazon Kinesis

Explanation: Amazon Kinesis is designed for real-time data streaming, enabling you to
process and analyze data streams at scale.

❓ Question 689:

Which AWS service provides protection from DDoS attacks?

A) Amazon CloudFront
B) AWS Shield
C) Amazon VPC
D) AWS WAF

✅ Correct Answer: B) AWS Shield

Explanation: AWS Shield is a managed DDoS protection service that helps protect AWS
resources from distributed denial-of-service attacks.

❓ Question 690:

Which AWS service allows you to store data in an object-based storage system?
A) Amazon EBS
B) Amazon Glacier
C) Amazon S3
D) Amazon DynamoDB

✅ Correct Answer: C) Amazon S3

Explanation: Amazon S3 (Simple Storage Service) is an object-based storage service that
provides highly durable and scalable storage for a wide variety of data.
❓ Question 691:

Which AWS service helps you automate manual tasks in your IT environment?
A) AWS CloudFormation
B) AWS Systems Manager
C) Amazon EC2
D) AWS Lambda

✅ Correct Answer: B) AWS Systems Manager

Explanation: AWS Systems Manager provides automation capabilities for managing and
automating routine IT tasks across AWS resources.

❓ Question 692:

Which AWS service allows you to deploy, manage, and scale Docker containers?
A) AWS Lambda
B) Amazon ECS
C) AWS S3
D) Amazon RDS

✅ Correct Answer: B) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is used to deploy, manage, and scale
Docker containers across multiple EC2 instances.

❓ Question 693:

Which AWS service allows you to run code without provisioning or managing servers?
A) AWS Lambda
B) Amazon EC2
C) Amazon RDS
D) Amazon EFS

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda is a serverless computing service that runs code in response to
events without requiring you to provision or manage servers.

❓ Question 694:

Which AWS service allows you to perform continuous delivery of applications and
infrastructure?
A) AWS CloudFormation
B) AWS CodeDeploy
C) AWS EC2
D) AWS KMS
✅ Correct Answer: B) AWS CodeDeploy
Explanation: AWS CodeDeploy is a deployment service that automates the process of
deploying applications to instances, containers, and serverless environments.

❓ Question 695:

Which AWS service enables you to store and retrieve any amount of data at any time
from anywhere on the web?
A) Amazon S3
B) Amazon DynamoDB
C) Amazon Glacier
D) Amazon EFS

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 is an object storage service that allows you to store and retrieve
data from anywhere on the web.

❓ Question 696:

Which AWS service is used to monitor and troubleshoot the AWS cloud applications in
real-time?
A) Amazon CloudWatch
B) AWS X-Ray
C) Amazon EC2
D) AWS Lambda

✅ Correct Answer: B) AWS X-Ray

Explanation: AWS X-Ray helps analyze and debug cloud applications by providing detailed
insights into performance bottlenecks and errors.

❓ Question 697:

Which AWS service allows you to run SQL-based queries on structured data stored in
Amazon S3?
A) Amazon Athena
B) Amazon RDS
C) Amazon Redshift
D) Amazon DynamoDB

✅ Correct Answer: A) Amazon Athena

Explanation: Amazon Athena is an interactive query service that allows you to analyze
structured data stored in Amazon S3 using SQL.

❓ Question 698:
Which AWS service provides scalable and managed messaging queues to decouple
distributed applications?
A) Amazon SNS
B) Amazon SQS
C) Amazon EC2
D) AWS Lambda

✅ Correct Answer: B) Amazon SQS

Explanation: Amazon Simple Queue Service (SQS) provides scalable messaging queues to
decouple distributed applications and facilitate communication.

❓ Question 699:

Which AWS service allows you to use managed Kubernetes clusters to run and scale
containerized applications?
A) Amazon ECS
B) Amazon EKS
C) AWS Fargate
D) AWS Lambda

✅ Correct Answer: B) Amazon EKS

Explanation: Amazon EKS (Elastic Kubernetes Service) is a fully managed service that
helps you run Kubernetes clusters to deploy and scale containerized applications.

❓ Question 700:

Which AWS service provides fully managed machine learning capabilities to train
models using labeled data?
A) Amazon Rekognition
B) AWS Sagemaker
C) AWS Lex
D) Amazon Translate

✅ Correct Answer: B) AWS Sagemaker

Explanation: AWS Sagemaker provides fully managed machine learning capabilities,
including data labeling, training, and deployment of models.

❓ Question 701:

Which AWS service can be used to set up and manage an automatic scaling policy for
EC2 instances?
A) AWS Lambda
B) Amazon EC2 Auto Scaling
C) AWS CloudFormation
D) AWS Systems Manager
✅ Correct Answer: B) Amazon EC2 Auto Scaling
Explanation: Amazon EC2 Auto Scaling helps you automatically scale your EC2 instances
based on demand, ensuring optimal performance and cost management.

❓ Question 702:

Which service allows you to simplify and automate the process of deploying
applications on a serverless infrastructure?
A) AWS Lambda
B) AWS Elastic Beanstalk
C) Amazon EC2
D) AWS CodeDeploy

✅ Correct Answer: B) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk automates the deployment and scaling of applications
on AWS, managing the underlying infrastructure and providing a platform for serverless
applications.

❓ Question 703:

Which AWS service is designed to provide a managed environment for running

JavaScript-based applications on AWS?
A) AWS Lambda
B) AWS Amplify
C) Amazon EC2
D) AWS CodePipeline

✅ Correct Answer: B) AWS Amplify

Explanation: AWS Amplify is a fully managed service that allows developers to build, deploy,
and scale JavaScript-based applications, including serverless applications.

❓ Question 704:

Which AWS service is used to store and manage secrets, such as API keys and
database credentials?
A) AWS KMS
B) AWS Secrets Manager
C) Amazon S3
D) AWS CloudHSM

✅ Correct Answer: B) AWS Secrets Manager

Explanation: AWS Secrets Manager helps you securely store and manage secrets, such as
API keys, database credentials, and other sensitive information.

❓ Question 705:
Which AWS service provides a fully managed cloud database service that is
compatible with MySQL, PostgreSQL, and other relational databases?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Aurora
D) AWS DMS

✅ Correct Answer: B) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) provides a managed relational
database service that supports various database engines, including MySQL and
PostgreSQL.

❓ Question 706:

Which AWS service allows you to set up an isolated network within the AWS cloud?
A) AWS VPC
B) Amazon EC2
C) AWS Direct Connect
D) AWS CloudFront

✅ Correct Answer: A) AWS VPC

Explanation: AWS Virtual Private Cloud (VPC) allows you to create isolated networks within
the AWS cloud, providing control over your resources and security settings.

❓ Question 707:

Which AWS service allows you to manage DNS and route traffic to various AWS
resources like EC2, S3, and CloudFront?
A) AWS WAF
B) Amazon Route 53
C) AWS Lambda
D) Amazon CloudWatch

✅ Correct Answer: B) Amazon Route 53

Explanation: Amazon Route 53 is a scalable DNS web service that enables you to route
traffic to AWS resources, including EC2 instances and S3 buckets.

❓ Question 708:

Which AWS service provides a managed environment for creating and running
RESTful APIs at any scale?
A) Amazon API Gateway
B) AWS Lambda
C) AWS Step Functions
D) Amazon S3
✅ Correct Answer: A) Amazon API Gateway
Explanation: Amazon API Gateway is a fully managed service that makes it easy to create,
deploy, and scale RESTful APIs for your applications.

❓ Question 709:

Which AWS service allows you to analyze real-time data streams for use cases such
as log analysis and monitoring?
A) Amazon Kinesis
B) AWS Data Pipeline
C) Amazon Redshift
D) Amazon S3

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis provides real-time data streaming, allowing you to capture,
process, and analyze large amounts of data streams for various use cases.

❓ Question 710:

Which AWS service helps you monitor the security of your AWS environment by
continuously analyzing network traffic?
A) AWS WAF
B) Amazon GuardDuty
C) AWS Inspector
D) AWS Shield

✅ Correct Answer: B) Amazon GuardDuty

Explanation: Amazon GuardDuty is a threat detection service that continuously monitors
AWS resources for malicious activity, providing insights into potential security risks.

❓ Question 711:

Which AWS service is used to automate the deployment of infrastructure as code?

A) AWS CloudFormation
B) AWS Lambda
C) Amazon EC2
D) Amazon S3

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to automate the deployment of infrastructure
by defining your resources in code, providing an easy way to manage and provision AWS
resources.

❓ Question 712:
Which service allows you to run Windows applications on a virtual desktop from
anywhere?
A) Amazon WorkSpaces
B) AWS Lambda
C) Amazon EC2
D) AWS Elastic Beanstalk

✅ Correct Answer: A) Amazon WorkSpaces

Explanation: Amazon WorkSpaces is a managed Desktop-as-a-Service (DaaS) solution that
allows you to run virtual desktops for your users anywhere.

❓ Question 713:

Which AWS service enables you to run a scalable database solution that is fully
managed and compatible with PostgreSQL?
A) Amazon Aurora
B) Amazon RDS
C) Amazon DynamoDB
D) Amazon S3

✅ Correct Answer: B) Amazon RDS

Explanation: Amazon RDS supports various relational databases, including PostgreSQL,
and allows you to easily manage and scale your database solution.

❓ Question 714:

Which AWS service is primarily used to manage containerized applications and their
orchestration on AWS?
A) Amazon ECS
B) AWS Lambda
C) AWS Fargate
D) Amazon RDS

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) is used to run and scale
containerized applications, providing a highly scalable container orchestration service.

❓ Question 715:

Which service provides security management for AWS environments and allows for
detailed auditing of access and activity?
A) AWS KMS
B) AWS CloudTrail
C) AWS IAM
D) AWS WAF
✅ Correct Answer: B) AWS CloudTrail
Explanation: AWS CloudTrail provides detailed logs of API calls and user activity in your
AWS environment, helping with auditing, monitoring, and security management.

❓ Question 716:

Which AWS service is designed to help you monitor, analyze, and act on metrics from
AWS services?
A) AWS CloudWatch
B) Amazon Route 53
C) AWS Shield
D) Amazon GuardDuty

✅ Correct Answer: A) AWS CloudWatch

Explanation: AWS CloudWatch allows you to collect, monitor, and analyze metrics for AWS
services and resources, helping with operational monitoring and performance management.

❓ Question 717:

Which service enables you to create and manage highly scalable, reliable, and low-
latency data storage for mobile and web applications?
A) Amazon DynamoDB
B) Amazon S3
C) Amazon CloudFront
D) Amazon Aurora

✅ Correct Answer: A) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database that provides fast
and predictable performance, making it ideal for mobile and web applications.

❓ Question 718:

Which AWS service is used to manage API Gateway access and monitor requests for a
given API?
A) Amazon API Gateway
B) AWS WAF
C) Amazon CloudWatch
D) AWS Lambda

✅ Correct Answer: C) Amazon CloudWatch

Explanation: Amazon CloudWatch integrates with API Gateway to monitor API calls, log
requests, and create metrics based on the requests.

❓ Question 719:
Which AWS service can you use to securely store and manage cryptographic keys for
your applications?
A) AWS KMS
B) AWS Secrets Manager
C) AWS IAM
D) Amazon RDS

✅ Correct Answer: A) AWS KMS

Explanation: AWS Key Management Service (KMS) is used to securely create and manage
cryptographic keys for your applications, ensuring that sensitive data is protected.

❓ Question 720:

Which AWS service enables you to manage serverless applications using

containerized components?
A) AWS Lambda
B) Amazon ECS
C) AWS Step Functions
D) Amazon EKS

✅ Correct Answer: C) AWS Step Functions

Explanation: AWS Step Functions enables you to coordinate serverless applications and
microservices using workflows with containerized components.

❓ Question 721:

Which AWS service provides a fully managed NoSQL database with fast performance
for applications requiring low-latency data access?
A) Amazon RDS
B) Amazon DynamoDB
C) AWS Aurora
D) Amazon Redshift

✅ Correct Answer: B) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database that provides fast
and predictable performance with low latency, ideal for web and mobile applications.

❓ Question 722:

Which AWS service allows you to run code without provisioning or managing servers?
A) AWS Lambda
B) AWS EC2
C) AWS Fargate
D) Amazon RDS
✅ Correct Answer: A) AWS Lambda
Explanation: AWS Lambda is a serverless compute service that runs code in response to
events and automatically manages the underlying infrastructure.

❓ Question 723:

Which AWS service is used to automatically scale EC2 instances based on traffic
demand?
A) AWS Lambda
B) AWS Auto Scaling
C) Amazon EC2
D) AWS CloudFormation

✅ Correct Answer: B) AWS Auto Scaling

Explanation: AWS Auto Scaling automatically adjusts the number of EC2 instances based
on traffic demand, ensuring application performance and cost-efficiency.

❓ Question 724:

Which AWS service helps you monitor and secure your content delivery by filtering
web traffic for your application?
A) Amazon CloudFront
B) AWS WAF
C) AWS Shield
D) AWS Route 53

✅ Correct Answer: B) AWS WAF

Explanation: AWS WAF (Web Application Firewall) helps protect your web applications from
common web exploits and allows you to filter web traffic to ensure application security.

❓ Question 725:

Which AWS service is used to securely manage and rotate database credentials?
A) AWS KMS
B) AWS Secrets Manager
C) AWS IAM
D) Amazon RDS

✅ Correct Answer: B) AWS Secrets Manager

Explanation: AWS Secrets Manager allows you to securely store and rotate sensitive
credentials, such as database passwords, API keys, and other secrets.

❓ Question 726:

Which service is used to automate the process of deploying and managing containers
without managing the underlying infrastructure?
A) Amazon EKS
B) AWS Fargate
C) AWS Lambda
D) Amazon ECS

✅ Correct Answer: B) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that allows you to
run containers without managing the underlying infrastructure.

❓ Question 727:

Which AWS service is used to provide content delivery and caching for websites and
applications globally?
A) Amazon CloudFront
B) Amazon S3
C) AWS Elastic Load Balancing
D) AWS Lambda

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a content delivery network (CDN) that securely delivers
content to users with low latency, caching data at edge locations for faster access.

❓ Question 728:

Which AWS service is used to store large amounts of unstructured data, such as
backups and media files?
A) Amazon EBS
B) Amazon S3
C) Amazon Glacier
D) AWS Storage Gateway

✅ Correct Answer: B) Amazon S3

Explanation: Amazon S3 (Simple Storage Service) is a scalable storage solution for large
amounts of unstructured data like backups, media files, and more.

❓ Question 729:

Which AWS service provides a fully managed serverless data warehouse that can
analyze data with SQL queries?
A) Amazon Redshift
B) Amazon Aurora
C) Amazon RDS
D) Amazon Athena

✅ Correct Answer: A) Amazon Redshift

Explanation: Amazon Redshift is a fully managed data warehouse that allows you to
perform fast SQL queries on large datasets for analytics purposes.
❓ Question 730:

Which AWS service helps developers to create, test, and deploy applications with
automation and continuous integration?
A) AWS CodeDeploy
B) AWS CodePipeline
C) AWS CodeCommit
D) AWS CodeBuild

✅ Correct Answer: B) AWS CodePipeline

Explanation: AWS CodePipeline is a fully managed continuous delivery service that
automates the build, test, and deploy phases of your application development lifecycle.

❓ Question 731:

Which AWS service provides a scalable DNS web service to route end-user requests
to endpoints, such as Amazon EC2 instances?
A) Amazon Route 53
B) Amazon CloudFront
C) AWS Direct Connect
D) AWS Elastic Load Balancer

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable Domain Name System (DNS) service that
routes end-user requests to endpoints such as EC2 instances.

❓ Question 732:

Which service provides a managed Apache Kafka service for building real-time
streaming data pipelines and applications?
A) AWS Glue
B) Amazon Kinesis
C) Amazon MSK
D) Amazon S3

✅ Correct Answer: C) Amazon MSK

Explanation: Amazon MSK (Managed Streaming for Apache Kafka) is a fully managed
service that makes it easy to build and run applications that use Apache Kafka for real-time
data processing.

❓ Question 733:

Which service provides automated threat detection and continuous monitoring to

protect AWS accounts from malicious activity?
A) AWS GuardDuty
B) AWS Shield
C) AWS WAF
D) AWS Inspector

✅ Correct Answer: A) AWS GuardDuty

Explanation: AWS GuardDuty is a continuous monitoring service that analyzes AWS
account activity to detect and respond to potential threats and malicious activities.

❓ Question 734:

Which AWS service is a fully managed application discovery service that helps you
plan your migration to AWS?
A) AWS Migration Hub
B) AWS DMS
C) AWS CloudFormation
D) AWS Lambda

✅ Correct Answer: A) AWS Migration Hub

Explanation: AWS Migration Hub provides a central location to track and manage your
migrations to AWS, offering insights and visibility into your migration projects.

❓ Question 735:

Which service allows you to host a static website with a custom domain name and
HTTPS support?
A) Amazon EC2
B) Amazon S3
C) AWS Lambda
D) Amazon Lightsail

✅ Correct Answer: B) Amazon S3

Explanation: Amazon S3 allows you to host static websites with custom domain names and
supports HTTPS through integration with Amazon CloudFront.

❓ Question 736:

Which AWS service is used to help you design and deploy machine learning models
on AWS?
A) Amazon Lex
B) AWS Deep Learning AMIs
C) AWS SageMaker
D) AWS Glue

✅ Correct Answer: C) AWS SageMaker

Explanation: AWS SageMaker is a fully managed service that enables developers and data
scientists to quickly build, train, and deploy machine learning models at scale.
❓ Question 737:

Which AWS service helps you automate tasks that can be defined with a series of
steps, such as workflows or application deployments?
A) AWS Step Functions
B) AWS CloudTrail
C) AWS CloudFormation
D) AWS Lambda

✅ Correct Answer: A) AWS Step Functions

Explanation: AWS Step Functions is a serverless orchestration service that lets you define
workflows and automate tasks by combining AWS services into a series of steps.

❓ Question 738:

Which AWS service provides highly scalable object storage for backup and long-term
archiving of data?
A) Amazon S3
B) Amazon Glacier
C) Amazon EBS
D) Amazon EFS

✅ Correct Answer: B) Amazon Glacier

Explanation: Amazon Glacier is a low-cost storage service designed for data archiving and
long-term backup, providing a scalable and secure solution for storing large amounts of data.

❓ Question 739:

Which service can be used to set up a dedicated network connection from your on-
premises data center to AWS?
A) AWS VPN
B) AWS Direct Connect
C) Amazon VPC
D) AWS Transit Gateway

✅ Correct Answer: B) AWS Direct Connect

Explanation: AWS Direct Connect allows you to establish a dedicated network connection
from your on-premises data center to AWS, providing more consistent performance and
lower network costs.

❓ Question 740:

Which service can help you implement user authentication and access control in your
application?
A) AWS IAM
B) Amazon Cognito
C) AWS Shield
D) Amazon S3

✅ Correct Answer: B) Amazon Cognito

Explanation: Amazon Cognito provides user authentication, authorization, and management
for web and mobile applications, making it easier to implement secure access control.

❓ Question 741:

Which AWS service is used to manage and analyze the logs and events of AWS
resources?
A) AWS CloudTrail
B) Amazon CloudWatch
C) AWS Config
D) Amazon S3

✅ Correct Answer: B) Amazon CloudWatch

Explanation: Amazon CloudWatch is used to collect and monitor logs, metrics, and events
for AWS resources, enabling operational monitoring and troubleshooting.

❓ Question 742:

Which AWS service allows you to manage and control access to AWS resources
securely by using roles and policies?
A) AWS Identity and Access Management (IAM)
B) AWS Shield
C) AWS WAF
D) AWS Key Management Service (KMS)

✅ Correct Answer: A) AWS Identity and Access Management (IAM)

Explanation: AWS IAM allows you to securely manage access to AWS services and
resources by defining roles, permissions, and policies for users and applications.

❓ Question 743:

Which AWS service provides high-performance block storage that can be attached to
EC2 instances?
A) Amazon S3
B) Amazon EBS
C) Amazon Glacier
D) Amazon EFS

✅ Correct Answer: B) Amazon EBS

Explanation: Amazon EBS (Elastic Block Store) provides persistent block storage that can
be attached to EC2 instances for use as a file system or database.
❓ Question 744:

Which service helps you automate the process of deploying and managing your
infrastructure as code?
A) AWS CloudFormation
B) AWS Lambda
C) AWS Systems Manager
D) AWS OpsWorks

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to define and provision infrastructure as
code, enabling automated deployment and management of AWS resources.

❓ Question 745:

Which AWS service helps with discovering, categorizing, and managing sensitive data
across AWS services?
A) AWS KMS
B) AWS Macie
C) AWS Shield
D) AWS Inspector

✅ Correct Answer: B) AWS Macie

Explanation: AWS Macie helps discover and protect sensitive data such as personally
identifiable information (PII) by using machine learning to automatically categorize data
across AWS services.

❓ Question 746:

Which service enables users to execute SQL queries on structured data stored in
Amazon S3?
A) Amazon Athena
B) Amazon Redshift
C) Amazon RDS
D) AWS Glue

✅ Correct Answer: A) Amazon Athena

Explanation: Amazon Athena is an interactive query service that allows you to run SQL
queries directly on data stored in Amazon S3 without needing to load it into a database.

❓ Question 747:

Which AWS service allows you to easily set up, operate, and scale a relational
database in the cloud?
A) Amazon Aurora
B) Amazon RDS
C) Amazon DynamoDB
D) Amazon Redshift

✅ Correct Answer: B) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) provides a managed relational
database service, simplifying setup, operation, and scaling of databases in the cloud.

❓ Question 748:

Which service can be used to send bulk email messages and track delivery status?
A) Amazon SNS
B) Amazon SES
C) AWS Lambda
D) AWS SQS

✅ Correct Answer: B) Amazon SES

Explanation: Amazon SES (Simple Email Service) allows you to send and receive emails at
scale, with features for tracking delivery, bounce, and complaint rates.

❓ Question 749:

Which AWS service helps you analyze your application logs and troubleshoot errors
and performance issues?
A) Amazon CloudWatch Logs
B) AWS X-Ray
C) AWS Lambda
D) Amazon Kinesis

✅ Correct Answer: B) AWS X-Ray

Explanation: AWS X-Ray helps developers analyze and debug production applications by
tracing requests and analyzing performance bottlenecks.

❓ Question 750:

Which AWS service provides fully managed infrastructure monitoring and security
services for virtual machines?
A) AWS EC2
B) AWS Inspector
C) AWS CloudFormation
D) AWS Systems Manager

✅ Correct Answer: B) AWS Inspector

Explanation: AWS Inspector is a security assessment service that helps identify
vulnerabilities in your AWS EC2 instances and provides recommendations for improving
security.
❓ Question 751:

Which AWS service is used to create and manage highly available and scalable
databases?
A) Amazon RDS
B) Amazon EC2
C) AWS Lambda
D) Amazon S3

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS (Relational Database Service) is a fully managed service for
creating and managing relational databases in the cloud, with high availability and scalability.

❓ Question 752:

Which AWS service can be used to run serverless applications by managing the
compute infrastructure automatically?
A) AWS Lambda
B) Amazon EC2
C) AWS Fargate
D) Amazon Lightsail

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda is a serverless compute service that allows you to run code
without provisioning or managing servers, automatically scaling based on demand.

❓ Question 753:

Which service allows you to track and monitor AWS resource configurations and
changes over time?
A) AWS Config
B) AWS CloudTrail
C) Amazon CloudWatch
D) AWS GuardDuty

✅ Correct Answer: A) AWS Config

Explanation: AWS Config tracks and monitors resource configurations and changes,
enabling you to evaluate resource compliance and detect configuration drift over time.

❓ Question 754:

Which service provides managed NoSQL database capabilities with built-in scalability
and low-latency performance?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Aurora
D) Amazon Redshift

✅ Correct Answer: B) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service that offers
fast and predictable performance with built-in scalability for applications.

❓ Question 755:

Which AWS service provides a managed environment for building, testing, and
deploying applications without managing the underlying infrastructure?
A) AWS CodePipeline
B) AWS Elastic Beanstalk
C) AWS Lambda
D) Amazon EC2

✅ Correct Answer: B) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk provides an easy-to-use environment for deploying and
managing applications without having to manage the underlying infrastructure.

❓ Question 756:

Which service is used to implement high availability for applications by distributing

traffic to multiple EC2 instances?
A) Amazon CloudFront
B) Amazon Route 53
C) AWS Elastic Load Balancer
D) AWS Direct Connect

✅ Correct Answer: C) AWS Elastic Load Balancer

Explanation: AWS Elastic Load Balancer (ELB) automatically distributes incoming
application traffic across multiple EC2 instances to improve the availability and fault tolerance
of your application.

❓ Question 757:

Which AWS service can be used to provision and manage virtual private networks
(VPNs)?
A) AWS VPN
B) Amazon VPC
C) AWS Direct Connect
D) AWS Global Accelerator

✅ Correct Answer: A) AWS VPN

Explanation: AWS VPN allows you to securely connect your on-premises network to AWS
using encrypted tunnels, enabling communication between your local environment and your
AWS resources.
❓ Question 758:

Which service is used to launch and manage containers in AWS without needing to
manage the underlying servers?
A) AWS Fargate
B) Amazon EC2
C) Amazon EKS
D) AWS Lambda

✅ Correct Answer: A) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine that allows you to run containers
without managing the underlying infrastructure, simplifying container orchestration.

❓ Question 759:

Which service provides real-time data streaming for building data processing
applications?
A) Amazon Kinesis
B) AWS Glue
C) AWS Data Pipeline
D) AWS DMS

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis is a platform for real-time data streaming, enabling the
collection, processing, and analysis of large streams of data for building real-time analytics
applications.

❓ Question 760:

Which AWS service can be used to configure and manage software patches on your
EC2 instances?
A) AWS Systems Manager
B) AWS CloudFormation
C) AWS Inspector
D) AWS Config

✅ Correct Answer: A) AWS Systems Manager

Explanation: AWS Systems Manager allows you to manage and automate operational
tasks, such as patching software, on your EC2 instances and other AWS resources.

❓ Question 761:

Which AWS service enables you to create a virtual private cloud (VPC) that isolates
your resources from the public internet?
A) AWS VPN
B) Amazon VPC
C) AWS Direct Connect
D) AWS Elastic Load Balancer

✅ Correct Answer: B) Amazon VPC

Explanation: Amazon VPC (Virtual Private Cloud) allows you to create isolated networks
within AWS, enabling you to control the network environment, including IP address ranges,
subnets, and routing.

❓ Question 762:

Which AWS service provides a managed content delivery network (CDN) to distribute
content globally?
A) Amazon CloudFront
B) AWS S3
C) AWS Elastic Beanstalk
D) Amazon EC2

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a content delivery network (CDN) that distributes static
and dynamic content globally with low latency by caching copies of content in multiple edge
locations.

❓ Question 763:

Which AWS service is used to securely manage and control access to AWS services
and resources?
A) AWS Identity and Access Management (IAM)
B) Amazon EC2
C) AWS Shield
D) AWS WAF

✅ Correct Answer: A) AWS Identity and Access Management (IAM)

Explanation: AWS IAM allows you to manage access to AWS resources by creating and
managing users, groups, and roles, and assigning permissions.

❓ Question 764:

Which AWS service allows you to automate the setup and management of security
configurations across multiple AWS accounts?
A) AWS GuardDuty
B) AWS Security Hub
C) AWS WAF
D) AWS Shield
✅ Correct Answer: B) AWS Security Hub
Explanation: AWS Security Hub provides a comprehensive view of security alerts and
security posture across AWS accounts, helping you manage and automate security
configurations.

❓ Question 765:

Which AWS service allows you to monitor and analyze the behavior of your resources,
applications, and logs in real time?
A) Amazon CloudWatch
B) AWS CloudTrail
C) AWS Config
D) AWS X-Ray

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch provides monitoring and observability for AWS cloud
resources, applications, and logs, helping you gain real-time insights and detect anomalies.

❓ Question 766:

Which AWS service helps you discover and categorize sensitive data, such as PII,
across AWS services?
A) AWS Macie
B) AWS Shield
C) AWS WAF
D) AWS Inspector

✅ Correct Answer: A) AWS Macie

Explanation: AWS Macie uses machine learning to automatically discover, classify, and
protect sensitive data, such as personally identifiable information (PII), across AWS services.

❓ Question 767:

Which service provides scalable and cost-effective object storage for storing and
retrieving any amount of data at any time?
A) Amazon S3
B) Amazon EBS
C) Amazon Glacier
D) AWS Backup

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 (Simple Storage Service) provides scalable, secure, and durable
object storage for storing and retrieving large amounts of data at any time.

❓ Question 768:
Which service is used to orchestrate the execution of AWS services in a specific
sequence or flow?
A) AWS Step Functions
B) Amazon SQS
C) AWS Lambda
D) AWS Systems Manager

✅ Correct Answer: A) AWS Step Functions

Explanation: AWS Step Functions enables you to coordinate multiple AWS services into
serverless workflows, making it easy to implement complex workflows with retries and error
handling.

❓ Question 769:

Which AWS service can be used to launch virtual desktops that provide a desktop
experience from anywhere?
A) AWS WorkSpaces
B) Amazon EC2
C) AWS Lambda
D) Amazon S3

✅ Correct Answer: A) AWS WorkSpaces

Explanation: AWS WorkSpaces is a managed desktop-as-a-service (DaaS) solution that
enables users to securely access desktops from any device, providing a fully managed
desktop experience.

❓ Question 770:

Which service allows you to automate the management of security patches for EC2
instances?
A) AWS Systems Manager
B) AWS Inspector
C) AWS CloudTrail
D) Amazon CloudWatch

✅ Correct Answer: A) AWS Systems Manager

Explanation: AWS Systems Manager automates operational tasks, including patching,
across your EC2 instances and other AWS resources, helping you keep your systems secure
and up-to-date.

❓ Question 771:

Which AWS service allows you to store and manage DNS records for your domain
names?
A) Amazon Route 53
B) AWS CloudFormation
C) AWS Elastic Load Balancer
D) AWS CloudTrail

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable Domain Name System (DNS) web service that
allows you to store and manage DNS records for domain names, as well as register new
domain names.

❓ Question 772:

Which AWS service provides a data warehouse for big data analytics?
A) Amazon Aurora
B) Amazon Redshift
C) Amazon DynamoDB
D) Amazon RDS

✅ Correct Answer: B) Amazon Redshift

Explanation: Amazon Redshift is a fully managed data warehouse service designed for
online analytic processing (OLAP), enabling fast and scalable querying of large datasets.

❓ Question 773:

Which service provides tools for automating infrastructure provisioning and

management using code?
A) AWS CloudFormation
B) AWS Lambda
C) Amazon EC2
D) AWS Elastic Beanstalk

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation is an infrastructure-as-code (IaC) service that allows you
to define, provision, and manage AWS infrastructure using templates.

❓ Question 774:

Which AWS service is used to store and manage Docker container images?
A) Amazon ECR
B) AWS Lambda
C) Amazon ECS
D) AWS Fargate

✅ Correct Answer: A) Amazon ECR

Explanation: Amazon Elastic Container Registry (ECR) is a fully managed Docker container
registry that allows you to store, manage, and deploy Docker container images.

❓ Question 775:
Which AWS service enables you to automate infrastructure provisioning and
deployment with CI/CD pipelines?
A) AWS CodePipeline
B) AWS CodeCommit
C) AWS CodeBuild
D) AWS CodeDeploy

✅ Correct Answer: A) AWS CodePipeline

Explanation: AWS CodePipeline is a fully managed continuous integration and continuous
delivery (CI/CD) service that automates the build, test, and deploy processes for
applications.

❓ Question 776:

Which AWS service is used to perform real-time analytics on streaming data?

A) Amazon Kinesis
B) AWS Redshift
C) Amazon S3
D) AWS Glue

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis is a platform for real-time data streaming and analytics,
enabling you to process and analyze streaming data as it arrives.

❓ Question 777:

Which service is used to analyze logs from AWS resources and applications in real
time?
A) Amazon CloudWatch Logs
B) AWS X-Ray
C) AWS CloudTrail
D) AWS Systems Manager

✅ Correct Answer: A) Amazon CloudWatch Logs

Explanation: Amazon CloudWatch Logs allows you to collect, monitor, and analyze log data
from AWS resources and applications in real-time.

❓ Question 778:

Which AWS service is used to automate the discovery and inventory of IT assets
across AWS?
A) AWS Config
B) AWS Systems Manager
C) AWS Inspector
D) AWS CloudTrail
✅ Correct Answer: A) AWS Config
Explanation: AWS Config enables you to discover and inventory AWS resources and track
configuration changes over time, helping you maintain an accurate view of your AWS
environment.

❓ Question 779:

Which AWS service helps protect your applications from common web exploits by
filtering malicious traffic?
A) AWS WAF
B) AWS Shield
C) AWS GuardDuty
D) Amazon Inspector

✅ Correct Answer: A) AWS WAF

Explanation: AWS Web Application Firewall (WAF) helps protect applications by filtering and
monitoring HTTP requests, protecting against common web exploits like SQL injection and
cross-site scripting (XSS).

❓ Question 780:

Which AWS service allows you to create a scalable, secure, and managed cloud
network for your resources?
A) AWS Direct Connect
B) Amazon VPC
C) AWS Transit Gateway
D) AWS VPN

✅ Correct Answer: B) Amazon VPC

Explanation: Amazon Virtual Private Cloud (VPC) enables you to create a private, secure
network within AWS, where you can launch and manage resources, configure routing, and
control traffic flow.

❓ Question 781:

Which AWS service is used to create and manage machine learning models with
minimal effort and expertise?
A) AWS SageMaker
B) AWS Lambda
C) AWS Deep Learning AMIs
D) Amazon Polly

✅ Correct Answer: A) AWS SageMaker

Explanation: AWS SageMaker is a fully managed service that enables developers and data
scientists to quickly build, train, and deploy machine learning models with minimal effort and
expertise.
❓ Question 782:

Which AWS service is used to store files that are accessed infrequently, with lower
storage costs compared to standard S3?
A) Amazon S3 Glacier
B) Amazon S3 Standard
C) Amazon EBS
D) Amazon EC2

✅ Correct Answer: A) Amazon S3 Glacier

Explanation: Amazon S3 Glacier is a low-cost storage service designed for archiving data
that is infrequently accessed, with slower retrieval times compared to standard S3.

❓ Question 783:

Which AWS service allows you to run Docker containers without managing the
underlying infrastructure?
A) Amazon ECS
B) AWS Lambda
C) AWS Fargate
D) Amazon EC2

✅ Correct Answer: C) AWS Fargate

Explanation: AWS Fargate is a serverless compute engine for containers that allows you to
run Docker containers without the need to manage the underlying infrastructure.

❓ Question 784:

Which AWS service helps you analyze large volumes of unstructured data by
automatically identifying patterns and relationships?
A) Amazon Rekognition
B) Amazon Polly
C) Amazon Comprehend
D) AWS Glue

✅ Correct Answer: C) Amazon Comprehend

Explanation: Amazon Comprehend is a natural language processing (NLP) service that
uses machine learning to analyze large volumes of unstructured text, identifying patterns,
entities, and sentiments.

❓ Question 785:

Which service provides a managed environment for running web applications using
containers?
A) AWS Elastic Beanstalk
B) Amazon EC2
C) AWS Fargate
D) Amazon Lightsail

✅ Correct Answer: A) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a fully managed service that helps you deploy and
manage web applications using containers, without needing to manage the underlying
infrastructure.

❓ Question 786:

Which AWS service is used to track user activity and API requests within your AWS
account?
A) AWS CloudTrail
B) AWS CloudWatch
C) AWS Inspector
D) AWS Systems Manager

✅ Correct Answer: A) AWS CloudTrail

Explanation: AWS CloudTrail records user activity and API requests made within your AWS
account, providing visibility into user actions for auditing and compliance purposes.

❓ Question 787:

Which AWS service is used to perform automated security assessments of

applications deployed in AWS?
A) AWS Inspector
B) AWS GuardDuty
C) AWS Shield
D) Amazon Macie

✅ Correct Answer: A) AWS Inspector

Explanation: AWS Inspector is an automated security assessment service that helps identify
vulnerabilities and deviations from security best practices in your AWS applications.

❓ Question 788:

Which AWS service is used to manage DNS records and route internet traffic to
resources like EC2 instances or S3 buckets?
A) Amazon CloudFront
B) Amazon Route 53
C) AWS VPN
D) AWS Direct Connect
✅ Correct Answer: B) Amazon Route 53
Explanation: Amazon Route 53 is a scalable DNS service that routes internet traffic to
resources such as EC2 instances, S3 buckets, and load balancers.

❓ Question 789:

Which service allows you to create a virtual network that spans your on-premises data
center and AWS resources?
A) AWS VPN
B) AWS Direct Connect
C) Amazon VPC
D) AWS Lambda

✅ Correct Answer: A) AWS VPN

Explanation: AWS VPN enables you to create a secure, encrypted connection between your
on-premises data center and your AWS VPC, allowing for a hybrid cloud environment.

❓ Question 790:

Which AWS service can help prevent DDoS attacks by providing automatic traffic
filtering and protection for web applications?
A) AWS Shield
B) AWS WAF
C) AWS GuardDuty
D) Amazon Inspector

✅ Correct Answer: A) AWS Shield

Explanation: AWS Shield is a managed DDoS protection service that helps protect AWS
applications from volumetric, state-exhaustion, and small-scale attacks.

❓ Question 791:

Which AWS service provides a centralized way to manage multiple AWS accounts and
apply policies?
A) AWS Organizations
B) AWS IAM
C) AWS Config
D) AWS Trusted Advisor

✅ Correct Answer: A) AWS Organizations

Explanation: AWS Organizations enables you to centrally manage and govern multiple AWS
accounts, including applying Service Control Policies (SCPs) across those accounts.

❓ Question 792:

Which AWS service allows you to migrate databases to AWS quickly and securely?
A) AWS Database Migration Service (DMS)
B) Amazon RDS
C) Amazon Aurora
D) AWS Glue

✅ Correct Answer: A) AWS Database Migration Service (DMS)

Explanation: AWS DMS helps you migrate databases to AWS with minimal downtime and
supports both homogeneous and heterogeneous migrations.

❓ Question 793:

Which service is best for distributing content globally with low latency and high
transfer speeds?
A) Amazon CloudFront
B) AWS Global Accelerator
C) Amazon Route 53
D) AWS Direct Connect

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a Content Delivery Network (CDN) that delivers data,
videos, and applications globally with low latency and high transfer speeds.

❓ Question 794:

Which AWS service lets you visualize, understand, and optimize your cloud costs and
usage?
A) AWS Cost Explorer
B) AWS Budgets
C) AWS Trusted Advisor
D) AWS CloudTrail

✅ Correct Answer: A) AWS Cost Explorer

Explanation: AWS Cost Explorer helps you visualize your AWS spending and usage
patterns, enabling you to manage and optimize your cloud costs.

❓ Question 795:

Which service enables secure access to AWS resources by federating corporate

directory identities?
A) AWS IAM Identity Center (formerly AWS SSO)
B) AWS Directory Service
C) AWS IAM
D) AWS Cognito

✅ Correct Answer: A) AWS IAM Identity Center (formerly AWS SSO)

Explanation: AWS IAM Identity Center integrates with external identity providers to allow
secure access to AWS accounts and applications using existing corporate credentials.
❓ Question 796:

Which AWS service provides a fully managed search engine service based on open-
source Elasticsearch?
A) Amazon OpenSearch Service
B) Amazon Athena
C) AWS Glue
D) Amazon RDS

✅ Correct Answer: A) Amazon OpenSearch Service

Explanation: Amazon OpenSearch Service is the successor to Amazon Elasticsearch
Service, providing a fully managed environment for search and log analytics.

❓ Question 797:

Which AWS service is used for monitoring performance and debugging distributed
applications?
A) AWS X-Ray
B) Amazon CloudWatch
C) AWS Inspector
D) AWS Config

✅ Correct Answer: A) AWS X-Ray

Explanation: AWS X-Ray helps developers analyze and debug distributed applications by
tracing user requests through services and resources.

❓ Question 798:

Which AWS service provides a simple and scalable file storage system for use with
EC2 instances?
A) Amazon EFS
B) Amazon S3
C) Amazon EBS
D) AWS Storage Gateway

✅ Correct Answer: A) Amazon EFS

Explanation: Amazon Elastic File System (EFS) provides scalable, elastic, and shared file
storage for use with Amazon EC2 instances.

❓ Question 799:

Which AWS service helps developers deploy application code automatically to EC2,
Lambda, or on-premises servers?
A) AWS CodeDeploy
B) AWS CodePipeline
C) AWS CodeCommit
D) AWS CloudFormation

✅ Correct Answer: A) AWS CodeDeploy

Explanation: AWS CodeDeploy automates code deployments to a variety of compute
services, helping reduce downtime and ensuring consistent deployments.

❓ Question 800:

Which service lets you run interactive queries directly on data stored in Amazon S3
using standard SQL?
A) Amazon Athena
B) Amazon Redshift
C) AWS Glue
D) Amazon RDS

✅ Correct Answer: A) Amazon Athena

Explanation: Amazon Athena is an interactive query service that allows you to analyze data
in Amazon S3 using standard SQL without setting up a database.

❓ Question 801:

Which AWS service is used to connect multiple VPCs across different AWS accounts
securely and at scale?
A) AWS Transit Gateway
B) AWS VPN
C) AWS Direct Connect
D) Amazon Route 53

✅ Correct Answer: A) AWS Transit Gateway

Explanation: AWS Transit Gateway enables you to connect multiple VPCs and on-premises
networks through a central hub, simplifying your network architecture.

❓ Question 802:

Which AWS service lets you run SQL queries across data stored in multiple services
like S3, RDS, and Redshift?
A) Amazon Athena
B) Amazon QuickSight
C) Amazon Redshift Spectrum
D) AWS Lake Formation

✅ Correct Answer: C) Amazon Redshift Spectrum

Explanation: Redshift Spectrum allows you to run queries against exabytes of data in
Amazon S3 and seamlessly join the results with data stored in your Redshift data
warehouse.
❓ Question 803:

Which AWS service automatically adjusts computing capacity to maintain steady,

predictable performance?
A) Auto Scaling
B) Elastic Load Balancer
C) Amazon CloudWatch
D) AWS Lambda

✅ Correct Answer: A) Auto Scaling

Explanation: Auto Scaling helps ensure you have the right number of Amazon EC2
instances available to handle the load for your application.

❓ Question 804:

Which AWS service is ideal for processing real-time streaming data?

A) Amazon Kinesis
B) Amazon SQS
C) Amazon SNS
D) AWS Glue

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis enables you to ingest, process, and analyze real-time
streaming data such as video, audio, application logs, and telemetry data.

❓ Question 805:

Which service helps you define infrastructure using code templates?

A) AWS CloudFormation
B) AWS CodeDeploy
C) AWS OpsWorks
D) AWS CodePipeline

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to define and provision AWS infrastructure
using declarative JSON or YAML templates.

❓ Question 806:

Which AWS service allows you to create isolated network environments in the cloud?
A) Amazon VPC
B) Amazon EC2
C) AWS IAM
D) AWS Shield
✅ Correct Answer: A) Amazon VPC
Explanation: Amazon VPC lets you provision a logically isolated section of the AWS cloud
where you can launch AWS resources in a defined virtual network.

❓ Question 807:

Which AWS service provides a managed NoSQL database with millisecond latency at
any scale?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Redshift
D) Amazon ElastiCache

✅ Correct Answer: A) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service that offers
fast and predictable performance with seamless scalability.

❓ Question 808:

Which AWS tool can help you estimate the cost of your future AWS environment
before deploying it?
A) AWS Pricing Calculator
B) AWS Cost Explorer
C) AWS Budgets
D) AWS Trusted Advisor

✅ Correct Answer: A) AWS Pricing Calculator

Explanation: AWS Pricing Calculator enables you to estimate the cost of AWS services and
resources before deployment.

❓ Question 809:

Which service helps prevent accidental deletion or modification of AWS resources?

A) AWS Config
B) AWS CloudTrail
C) AWS IAM
D) AWS Resource Policies

✅ Correct Answer: A) AWS Config

Explanation: AWS Config helps track changes and compliance by monitoring and recording
resource configurations and alerts you about changes.

❓ Question 810:

Which AWS service is a managed message queue that enables decoupling of

microservices and distributed systems?
A) Amazon SQS
B) Amazon SNS
C) AWS Step Functions
D) Amazon MQ

✅ Correct Answer: A) Amazon SQS

Explanation: Amazon SQS (Simple Queue Service) is a fully managed message queuing
service that enables you to decouple and scale microservices and serverless applications.

❓ Question 811:

Which AWS service allows you to create and manage encryption keys for your
applications?
A) AWS Key Management Service (KMS)
B) AWS Certificate Manager
C) AWS Secrets Manager
D) AWS IAM

✅ Correct Answer: A) AWS Key Management Service (KMS)

Explanation: AWS KMS is a managed service that enables you to create, control, and use
encryption keys to encrypt your data.

❓ Question 812:

Which service offers automatic detection of potential security threats using machine
learning?
A) Amazon GuardDuty
B) AWS WAF
C) AWS Shield
D) AWS Config

✅ Correct Answer: A) Amazon GuardDuty

Explanation: Amazon GuardDuty uses machine learning to detect anomalies and potential
threats in your AWS environment.

❓ Question 813:

Which AWS service can automate operational tasks using predefined runbooks?
A) AWS Systems Manager
B) AWS CloudFormation
C) AWS OpsWorks
D) AWS Config

✅ Correct Answer: A) AWS Systems Manager

Explanation: AWS Systems Manager provides operational insights and enables automation
of tasks like patching, configuration, and inventory management.
❓ Question 814:

Which AWS service lets you store and retrieve any amount of data from anywhere on
the web?
A) Amazon S3
B) Amazon EBS
C) Amazon EFS
D) AWS Backup

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 is a scalable object storage service that allows you to store and
retrieve data from anywhere at any time.

❓ Question 815:

Which service provides a fully managed container orchestration platform?

A) Amazon ECS
B) AWS Fargate
C) Amazon EC2
D) Amazon CloudFormation

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon ECS (Elastic Container Service) is a fully managed container
orchestration service for running and scaling containerized applications.

❓ Question 816:

Which service can be used to distribute incoming application traffic across multiple
targets like EC2, Lambda, or containers?
A) Elastic Load Balancing (ELB)
B) AWS Auto Scaling
C) Amazon CloudFront
D) AWS Global Accelerator

✅ Correct Answer: A) Elastic Load Balancing (ELB)

Explanation: ELB automatically distributes incoming traffic across multiple targets to ensure
availability and fault tolerance.

❓ Question 817:

Which AWS service helps you securely store, rotate, and retrieve database credentials
or API keys?
A) AWS Secrets Manager
B) AWS KMS
C) AWS IAM
D) Amazon Cognito
✅ Correct Answer: A) AWS Secrets Manager
Explanation: AWS Secrets Manager helps manage and access secrets like database
credentials, API keys, and tokens securely.

❓ Question 818:

Which AWS service simplifies the process of analyzing large datasets using open-
source tools like Hadoop and Spark?
A) Amazon EMR
B) AWS Glue
C) Amazon Redshift
D) Amazon Athena

✅ Correct Answer: A) Amazon EMR

Explanation: Amazon EMR is a managed cluster platform that simplifies running big data
frameworks like Apache Hadoop and Apache Spark.

❓ Question 819:

Which AWS tool can capture, monitor, and log API calls made within your AWS
environment?
A) AWS CloudTrail
B) Amazon CloudWatch
C) AWS Config
D) AWS X-Ray

✅ Correct Answer: A) AWS CloudTrail

Explanation: AWS CloudTrail records API calls made on your account for auditing and
security purposes.

❓ Question 820:

Which AWS service allows you to run containerized applications without managing
servers or clusters?
A) AWS Fargate
B) Amazon ECS
C) Amazon EC2
D) AWS Batch

✅ Correct Answer: A) AWS Fargate

Explanation: AWS Fargate lets you run containers without having to manage servers or
clusters, providing a serverless container experience.

❓ Question 821:
Which AWS service helps manage user authentication and access control for web and
mobile applications?
A) Amazon Cognito
B) AWS IAM
C) AWS Directory Service
D) AWS WAF

✅ Correct Answer: A) Amazon Cognito

Explanation: Amazon Cognito provides user sign-up, sign-in, and access control for web
and mobile apps, and integrates with social identity providers.

❓ Question 822:

Which AWS service is best for caching frequently accessed data to reduce latency and
improve application performance?
A) Amazon ElastiCache
B) Amazon EFS
C) Amazon S3
D) AWS DataSync

✅ Correct Answer: A) Amazon ElastiCache

Explanation: Amazon ElastiCache provides in-memory data caching using Redis or
Memcached, improving performance for read-heavy workloads.

❓ Question 823:

Which AWS service offers automatic scaling, monitoring, and patching of a relational
database?
A) Amazon RDS
B) Amazon Redshift
C) Amazon Aurora
D) Amazon DynamoDB

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS is a managed relational database service that handles database
management tasks such as backups, patching, and scaling.

❓ Question 824:

Which service is designed to deliver content (like images or videos) with low latency
and high transfer speeds to users worldwide?
A) Amazon CloudFront
B) AWS Global Accelerator
C) Amazon S3
D) Amazon Route 53
✅ Correct Answer: A) Amazon CloudFront
Explanation: Amazon CloudFront is a CDN (Content Delivery Network) that securely
delivers content to users with low latency.

❓ Question 825:

Which AWS service can automate the deployment of code to EC2 instances, Lambda,
or on-premises servers?
A) AWS CodeDeploy
B) AWS CodePipeline
C) AWS CodeCommit
D) AWS CloudFormation

✅ Correct Answer: A) AWS CodeDeploy

Explanation: AWS CodeDeploy automates code deployments to various compute services,
ensuring reliable and repeatable releases.

❓ Question 826:

Which AWS service can automatically discover on-premises servers to help with
migration to AWS?
A) AWS Application Discovery Service
B) AWS Migration Hub
C) AWS DataSync
D) AWS Snowball

✅ Correct Answer: A) AWS Application Discovery Service

Explanation: This service helps plan migration projects by collecting server and application
metadata from on-premises environments.

❓ Question 827:

Which AWS tool provides real-time operational insights into resources using metrics
and logs?
A) Amazon CloudWatch
B) AWS CloudTrail
C) AWS Config
D) Amazon Inspector

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch monitors resources and applications, collecting logs and
metrics to provide operational visibility.

❓ Question 828:
Which AWS service enables the running of highly available and scalable applications
by automatically distributing incoming traffic?
A) Elastic Load Balancing
B) AWS Global Accelerator
C) AWS Transit Gateway
D) Amazon Route 53

✅ Correct Answer: A) Elastic Load Balancing

Explanation: ELB ensures high availability by distributing incoming application traffic across
multiple targets.

❓ Question 829:

Which AWS service enables secure, fast, and direct network connections between
your data center and AWS?
A) AWS Direct Connect
B) AWS Site-to-Site VPN
C) Amazon VPC Peering
D) AWS Global Accelerator

✅ Correct Answer: A) AWS Direct Connect

Explanation: AWS Direct Connect establishes a dedicated, high-speed, and secure network
connection from your premises to AWS.

❓ Question 830:

Which AWS service helps create data lakes by cataloging, transforming, and preparing
data for analytics?
A) AWS Glue
B) Amazon Athena
C) AWS Data Pipeline
D) Amazon QuickSight

✅ Correct Answer: A) AWS Glue

Explanation: AWS Glue is a fully managed ETL (Extract, Transform, Load) service that helps
prepare and transform data for analytics.

❓ Question 831:

Which AWS service allows you to manage infrastructure as code using templates?
A) AWS CloudFormation
B) AWS CodeDeploy
C) AWS Config
D) AWS OpsWorks
✅ Correct Answer: A) AWS CloudFormation
Explanation: AWS CloudFormation allows you to define and provision infrastructure
resources in a safe and repeatable way using templates.

❓ Question 832:

Which AWS database service is fully managed and supports key-value and document
data models?
A) Amazon DynamoDB
B) Amazon RDS
C) Amazon Redshift
D) Amazon Aurora

✅ Correct Answer: A) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service designed for
high performance and scalability.

❓ Question 833:

Which AWS service offers real-time file transfer between on-premises storage and
Amazon S3?
A) AWS DataSync
B) AWS Snowball
C) Amazon FSx
D) Amazon EFS

✅ Correct Answer: A) AWS DataSync

Explanation: AWS DataSync enables fast and secure data transfer between on-premises
storage and AWS services like Amazon S3 and EFS.

❓ Question 834:

Which service enables you to run code in response to events without provisioning or
managing servers?
A) AWS Lambda
B) Amazon EC2
C) AWS Fargate
D) AWS Batch

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda lets you run code without managing servers, triggered by events
such as changes in S3 or updates in DynamoDB.

❓ Question 835:
Which AWS service helps organizations meet compliance and audit requirements by
tracking configuration changes?
A) AWS Config
B) AWS CloudTrail
C) Amazon GuardDuty
D) AWS Trusted Advisor

✅ Correct Answer: A) AWS Config

Explanation: AWS Config tracks changes to your resources’ configurations and evaluates
them against desired settings for compliance.

❓ Question 836:

Which AWS service allows you to create private Git repositories to store and version
control your source code?
A) AWS CodeCommit
B) AWS CodePipeline
C) AWS CodeDeploy
D) AWS CloudFormation

✅ Correct Answer: A) AWS CodeCommit

Explanation: AWS CodeCommit is a fully managed source control service that hosts secure
Git repositories.

❓ Question 837:

Which service helps protect web applications by filtering and monitoring HTTP
requests?
A) AWS WAF
B) AWS Shield
C) Amazon Inspector
D) AWS Firewall Manager

✅ Correct Answer: A) AWS WAF

Explanation: AWS Web Application Firewall (WAF) protects web applications from common
web exploits and malicious requests.

❓ Question 838:

Which service uses machine learning to provide personalized recommendations to

users?
A) Amazon Personalize
B) Amazon Forecast
C) Amazon Comprehend
D) Amazon Rekognition
✅ Correct Answer: A) Amazon Personalize
Explanation: Amazon Personalize enables developers to build real-time recommendation
systems using machine learning.

❓ Question 839:

Which AWS service enables real-time monitoring and observability of application

performance with service maps and tracing?
A) AWS X-Ray
B) Amazon CloudWatch
C) AWS CloudTrail
D) AWS Config

✅ Correct Answer: A) AWS X-Ray

Explanation: AWS X-Ray helps developers analyze and debug distributed applications using
trace data and visual service maps.

❓ Question 840:

Which AWS service allows you to schedule and automate batch computing jobs at any
scale?
A) AWS Batch
B) AWS Step Functions
C) Amazon EC2 Auto Scaling
D) AWS Lambda

✅ Correct Answer: A) AWS Batch

Explanation: AWS Batch enables you to run batch computing workloads efficiently without
needing to manage infrastructure.

❓ Question 841:

Which AWS service provides DNS web service to route end-user requests to internet
applications?
A) Amazon Route 53
B) AWS Global Accelerator
C) Elastic Load Balancing
D) Amazon CloudFront

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a highly available and scalable DNS service that routes
user requests to applications hosted in AWS.

❓ Question 842:
Which AWS service can analyze millions of log lines using SQL-like queries without
setting up infrastructure?
A) Amazon Athena
B) Amazon Redshift
C) AWS Glue
D) Amazon EMR

✅ Correct Answer: A) Amazon Athena

Explanation: Amazon Athena is a serverless query service that allows you to analyze data in
Amazon S3 using standard SQL.

❓ Question 843:

Which service provides a virtual firewall to control inbound and outbound traffic for
EC2 instances?
A) Security Groups
B) AWS Shield
C) AWS WAF
D) AWS Firewall Manager

✅ Correct Answer: A) Security Groups

Explanation: Security Groups act as virtual firewalls for EC2 instances, controlling traffic at
the instance level.

❓ Question 844:

Which AWS tool offers personalized recommendations for cost optimization,

performance, and security?
A) AWS Trusted Advisor
B) AWS Config
C) Amazon CloudWatch
D) AWS Inspector

✅ Correct Answer: A) AWS Trusted Advisor

Explanation: AWS Trusted Advisor provides real-time guidance to help provision resources
following AWS best practices.

❓ Question 845:

Which AWS service provides detailed billing reports and usage breakdowns for
accounts and services?
A) AWS Cost Explorer
B) AWS Budgets
C) AWS Pricing Calculator
D) AWS Billing Dashboard
✅ Correct Answer: A) AWS Cost Explorer
Explanation: AWS Cost Explorer helps visualize and manage AWS costs and usage over
time.

❓ Question 846:

Which AWS service provides scalable object storage with high availability and
durability?
A) Amazon S3
B) Amazon EBS
C) Amazon EFS
D) AWS Snowball

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 is a durable and scalable object storage service for storing and
retrieving any amount of data.

❓ Question 847:

Which AWS service enables you to launch and manage virtual servers in the cloud?
A) Amazon EC2
B) AWS Lambda
C) AWS Fargate
D) AWS Batch

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon EC2 provides resizable compute capacity in the cloud and allows full
control over virtual machines.

❓ Question 848:

Which service provides secure, scalable email sending from applications?

A) Amazon SES
B) Amazon SNS
C) Amazon SQS
D) AWS Chatbot

✅ Correct Answer: A) Amazon SES

Explanation: Amazon Simple Email Service (SES) enables developers to send marketing,
notification, and transactional emails.

❓ Question 849:

Which AWS database service is best suited for OLAP (Online Analytical Processing)
workloads?
A) Amazon Redshift
B) Amazon DynamoDB
C) Amazon Aurora
D) Amazon RDS

✅ Correct Answer: A) Amazon Redshift

Explanation: Amazon Redshift is a data warehouse designed for complex queries and
analytical workloads (OLAP).

❓ Question 850:

Which AWS service helps build workflows that coordinate services into serverless
applications?
A) AWS Step Functions
B) AWS Lambda
C) AWS CodePipeline
D) Amazon EventBridge

✅ Correct Answer: A) AWS Step Functions

Explanation: AWS Step Functions coordinate multiple AWS services into serverless
workflows using state machines.

❓ Question 851:

Which AWS service allows you to create isolated networks within the AWS Cloud?
A) Amazon VPC
B) AWS Direct Connect
C) AWS Transit Gateway
D) Amazon Route 53

✅ Correct Answer: A) Amazon VPC

Explanation: Amazon Virtual Private Cloud (VPC) enables you to provision a logically
isolated section of the AWS Cloud for your resources.

❓ Question 852:

Which AWS service provides event-driven compute capacity for containers without
managing servers?
A) AWS Fargate
B) Amazon ECS
C) AWS Lambda
D) Amazon EC2

✅ Correct Answer: A) AWS Fargate

Explanation: AWS Fargate allows you to run containers without managing servers or
clusters.
❓ Question 853:

Which AWS service allows you to create a dedicated network connection from your
premises to AWS?
A) AWS Direct Connect
B) Amazon VPC
C) AWS VPN
D) AWS Transit Gateway

✅ Correct Answer: A) AWS Direct Connect

Explanation: AWS Direct Connect provides a dedicated, low-latency, and private network
connection from your on-premises infrastructure to AWS.

❓ Question 854:

Which AWS service provides real-time fraud detection using machine learning?
A) Amazon Fraud Detector
B) Amazon Macie
C) Amazon Detective
D) AWS GuardDuty

✅ Correct Answer: A) Amazon Fraud Detector

Explanation: Amazon Fraud Detector uses machine learning to identify potentially fraudulent
online activities.

❓ Question 855:

Which AWS service helps customers discover, subscribe to, and use third-party
software and data products?
A) AWS Marketplace
B) AWS Service Catalog
C) AWS Data Exchange
D) Amazon AppStream

✅ Correct Answer: A) AWS Marketplace

Explanation: AWS Marketplace is a curated digital catalog that allows you to find, test, buy,
and deploy software and data services.

❓ Question 856:

Which service should be used to store frequently accessed data that needs low-
latency retrieval?
A) Amazon ElastiCache
B) Amazon S3 Glacier
C) Amazon EBS Cold HDD
D) AWS Snowmobile
✅ Correct Answer: A) Amazon ElastiCache
Explanation: Amazon ElastiCache is used for in-memory data caching, providing sub-
millisecond latency access to frequently used data.

❓ Question 857:

Which AWS service can help identify sensitive data in S3 buckets using machine
learning?
A) Amazon Macie
B) AWS Config
C) AWS Inspector
D) AWS GuardDuty

✅ Correct Answer: A) Amazon Macie

Explanation: Amazon Macie uses machine learning to automatically discover, classify, and
protect sensitive data stored in Amazon S3.

❓ Question 858:

Which AWS service allows organizations to centrally manage billing across multiple
AWS accounts?
A) AWS Organizations
B) AWS Budgets
C) AWS Control Tower
D) AWS Cost Explorer

✅ Correct Answer: A) AWS Organizations

Explanation: AWS Organizations lets you consolidate billing and manage multiple AWS
accounts from a single dashboard.

❓ Question 859:

Which of the following is a benefit of using Amazon CloudFront?

A) Reduced latency through content caching at edge locations
B) Real-time monitoring of cloud infrastructure
C) Centralized logging of API calls
D) Serverless code execution

✅ Correct Answer: A) Reduced latency through content caching at edge locations

Explanation: Amazon CloudFront speeds up content delivery by caching it at edge locations
around the world.

❓ Question 860:

Which AWS tool helps estimate monthly costs based on service usage
configurations?
A) AWS Pricing Calculator
B) AWS Cost Explorer
C) AWS Budgets
D) AWS Billing Dashboard

✅ Correct Answer: A) AWS Pricing Calculator

Explanation: AWS Pricing Calculator provides cost estimates for AWS services based on
your usage needs and configurations.

❓ Question 861:

Which AWS service is designed to run code without provisioning or managing

servers?
A) AWS Lambda
B) Amazon EC2
C) AWS Fargate
D) AWS CodeDeploy

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda is a serverless compute service that automatically runs your
code in response to events.

❓ Question 862:

Which AWS feature enables fault isolation between Availability Zones (AZs)?
A) Multi-AZ Deployment
B) Elastic Load Balancer
C) Auto Scaling
D) Amazon VPC Peering

✅ Correct Answer: A) Multi-AZ Deployment

Explanation: Multi-AZ deployment enhances availability and fault tolerance by replicating
resources across multiple Availability Zones.

❓ Question 863:

Which AWS service provides managed Kubernetes service?

A) Amazon EKS
B) Amazon ECS
C) AWS Fargate
D) Amazon EMR

✅ Correct Answer: A) Amazon EKS

Explanation: Amazon Elastic Kubernetes Service (EKS) is a managed Kubernetes service
to run Kubernetes applications on AWS.
❓ Question 864:

Which service provides automated security assessments of applications deployed on

AWS?
A) Amazon Inspector
B) AWS Shield
C) AWS WAF
D) Amazon GuardDuty

✅ Correct Answer: A) Amazon Inspector

Explanation: Amazon Inspector automatically assesses applications for vulnerabilities and
deviations from best practices.

❓ Question 865:

Which of the following services provides a way to automate infrastructure deployment

using code?
A) AWS CloudFormation
B) AWS Systems Manager
C) AWS CodePipeline
D) AWS OpsWorks

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation allows you to model and provision AWS resources using
infrastructure as code (IaC).

❓ Question 866:

Which service allows developers to deploy code directly to EC2 instances or on-
premises servers?
A) AWS CodeDeploy
B) AWS CodePipeline
C) AWS Cloud9
D) AWS CodeBuild

✅ Correct Answer: A) AWS CodeDeploy

Explanation: AWS CodeDeploy automates code deployments to EC2, Lambda, or on-
premises servers.

❓ Question 867:

Which AWS service enables secure access to AWS resources for applications using
short-term credentials?
A) AWS STS (Security Token Service)
B) AWS IAM
C) AWS KMS
D) Amazon Cognito
✅ Correct Answer: A) AWS STS (Security Token Service)
Explanation: AWS STS provides temporary, limited-privilege credentials for IAM users or
federated users.

❓ Question 868:

Which AWS service enables organizations to enforce policies across multiple

accounts?
A) AWS Organizations
B) AWS Config
C) AWS IAM
D) AWS Trusted Advisor

✅ Correct Answer: A) AWS Organizations

Explanation: AWS Organizations allows you to apply Service Control Policies (SCPs) across
accounts to enforce governance.

❓ Question 869:

Which AWS service provides real-time data streaming and ingestion capabilities?
A) Amazon Kinesis
B) Amazon SQS
C) Amazon MQ
D) AWS Batch

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis allows you to process and analyze real-time streaming data
for insights and analytics.

❓ Question 870:

Which AWS service supports hosting a static website directly from object storage?
A) Amazon S3
B) Amazon EC2
C) AWS Elastic Beanstalk
D) Amazon Route 53

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 can be configured to host static websites with HTML, CSS,
JavaScript, and media files.

❓ Question 871:

Which AWS service allows you to run and manage web apps without dealing with the
infrastructure?
A) AWS Elastic Beanstalk
B) AWS Lambda
C) Amazon EC2
D) AWS CodeDeploy

✅ Correct Answer: A) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk handles deployment, capacity provisioning, load
balancing, and auto-scaling of applications.

❓ Question 872:

Which service helps users visualize and understand their AWS costs and usage over
time?
A) AWS Cost Explorer
B) AWS Budgets
C) AWS Pricing Calculator
D) AWS Billing Dashboard

✅ Correct Answer: A) AWS Cost Explorer

Explanation: AWS Cost Explorer enables users to analyze usage patterns and costs across
AWS services over time.

❓ Question 873:

Which AWS service allows you to securely store and retrieve secrets such as
database credentials and API keys?
A) AWS Secrets Manager
B) AWS IAM
C) Amazon S3
D) AWS Certificate Manager

✅ Correct Answer: A) AWS Secrets Manager

Explanation: AWS Secrets Manager helps you protect access to your applications, services,
and IT resources without hardcoding credentials.

❓ Question 874:

Which service allows you to migrate databases to AWS easily and securely?
A) AWS Database Migration Service (DMS)
B) Amazon RDS
C) AWS DataSync
D) AWS Snowball

✅ Correct Answer: A) AWS Database Migration Service (DMS)

Explanation: AWS DMS helps you migrate databases with minimal downtime, whether from
on-premises or other cloud providers.
❓ Question 875:

What is the purpose of Amazon S3 Glacier?

A) Long-term archival storage
B) Web hosting
C) Real-time analytics
D) Auto scaling infrastructure

✅ Correct Answer: A) Long-term archival storage

Explanation: Amazon S3 Glacier provides secure, durable, and low-cost storage for data
archiving and long-term backup.

❓ Question 876:

Which AWS service is designed to help deploy and manage containers at scale?
A) Amazon ECS
B) Amazon Aurora
C) AWS CodeCommit
D) AWS Cloud9

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is a fully managed container
orchestration service.

❓ Question 877:

Which AWS service automatically distributes incoming application traffic across

multiple targets?
A) Elastic Load Balancing (ELB)
B) Amazon Route 53
C) AWS Auto Scaling
D) AWS Transit Gateway

✅ Correct Answer: A) Elastic Load Balancing (ELB)

Explanation: ELB improves fault tolerance by distributing traffic across multiple Amazon
EC2 instances or containers.

❓ Question 878:

Which AWS service allows developers to write, run, and debug code in a cloud-based
IDE?
A) AWS Cloud9
B) AWS CodePipeline
C) AWS CodeCommit
D) AWS CodeBuild
✅ Correct Answer: A) AWS Cloud9
Explanation: AWS Cloud9 is a cloud-based IDE for writing, running, and debugging code
collaboratively.

❓ Question 879:

Which AWS service provides security recommendations and checks against best
practices?
A) AWS Trusted Advisor
B) AWS Shield
C) AWS Inspector
D) AWS CloudTrail

✅ Correct Answer: A) AWS Trusted Advisor

Explanation: AWS Trusted Advisor offers real-time guidance to help you provision your
resources following AWS best practices.

❓ Question 880:

Which AWS service lets you build and train machine learning models quickly?
A) Amazon SageMaker
B) AWS DeepLens
C) Amazon Polly
D) Amazon Textract

✅ Correct Answer: A) Amazon SageMaker

Explanation: Amazon SageMaker is a fully managed service that allows you to build, train,
and deploy ML models at scale.

❓ Question 881:

Which AWS service provides DNS (Domain Name System) functionality?

A) Amazon Route 53
B) AWS CloudFront
C) Amazon RDS
D) AWS Direct Connect

✅ Correct Answer: A) Amazon Route 53

Explanation: Amazon Route 53 is a scalable DNS and domain name registration service.

❓ Question 882:

Which service provides a managed NoSQL database in AWS?

A) Amazon DynamoDB
B) Amazon Aurora
C) Amazon RDS
D) Amazon Redshift

✅ Correct Answer: A) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database that provides fast
and predictable performance.

❓ Question 883:

Which AWS service helps you automate operational tasks across AWS resources?
A) AWS Systems Manager
B) AWS Lambda
C) AWS CloudFormation
D) AWS Trusted Advisor

✅ Correct Answer: A) AWS Systems Manager

Explanation: AWS Systems Manager enables automation of operational tasks like patching,
compliance, and resource configuration.

❓ Question 884:

Which AWS service provides block-level storage volumes for EC2 instances?
A) Amazon EBS
B) Amazon S3
C) Amazon EFS
D) Amazon Glacier

✅ Correct Answer: A) Amazon EBS

Explanation: Amazon Elastic Block Store (EBS) provides persistent block storage for EC2
instances.

❓ Question 885:

Which service enables creating virtual private networks in the AWS Cloud?
A) Amazon VPC
B) AWS Direct Connect
C) AWS Transit Gateway
D) Amazon Route 53

✅ Correct Answer: A) Amazon VPC

Explanation: Amazon Virtual Private Cloud (VPC) allows you to launch AWS resources in a
logically isolated network.

❓ Question 886:

Which AWS service is used for collecting and tracking metrics and logs?
A) Amazon CloudWatch
B) AWS CloudTrail
C) AWS X-Ray
D) AWS Config

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch collects monitoring and operational data in the form of
logs, metrics, and events.

❓ Question 887:

Which AWS service provides automatic scaling for EC2 instances?

A) AWS Auto Scaling
B) Elastic Load Balancing
C) Amazon CloudFront
D) AWS Lambda

✅ Correct Answer: A) AWS Auto Scaling

Explanation: AWS Auto Scaling monitors your applications and adjusts capacity to maintain
steady performance.

❓ Question 888:

Which AWS service allows you to manage identities and access to AWS services?
A) AWS Identity and Access Management (IAM)
B) AWS Organizations
C) Amazon Cognito
D) AWS Config

✅ Correct Answer: A) AWS Identity and Access Management (IAM)

Explanation: IAM enables you to manage access to AWS services and resources securely.

❓ Question 889:

Which AWS service allows real-time video processing and streaming?

A) Amazon Kinesis Video Streams
B) Amazon QuickSight
C) Amazon EC2
D) Amazon Polly

✅ Correct Answer: A) Amazon Kinesis Video Streams

Explanation: Amazon Kinesis Video Streams makes it easy to securely stream video from
devices to AWS for analytics and machine learning.

❓ Question 890:
Which AWS service supports data warehousing and analytics at petabyte scale?
A) Amazon Redshift
B) Amazon RDS
C) Amazon DynamoDB
D) AWS Glue

✅ Correct Answer: A) Amazon Redshift

Explanation: Amazon Redshift is a fully managed data warehouse service that allows for
fast querying and analytics on large datasets.

❓ Question 891:

Which AWS service is used to automate data transfer between on-premises storage
and AWS storage services?
A) AWS DataSync
B) Amazon Snowball
C) Amazon S3 Transfer Acceleration
D) AWS Storage Gateway

✅ Correct Answer: A) AWS DataSync

Explanation: AWS DataSync simplifies and automates the process of moving data between
on-premises storage and AWS services like S3 or EFS.

❓ Question 892:

Which service is used to create and manage data lakes in AWS?

A) AWS Lake Formation
B) Amazon Redshift
C) AWS Glue
D) Amazon S3

✅ Correct Answer: A) AWS Lake Formation

Explanation: AWS Lake Formation makes it easy to set up a secure data lake on AWS,
making it easier to manage and analyze large datasets.

❓ Question 893:

Which AWS service provides a fully managed distributed message queue?

A) Amazon SQS
B) Amazon SNS
C) Amazon MQ
D) AWS Lambda

✅ Correct Answer: A) Amazon SQS

Explanation: Amazon Simple Queue Service (SQS) is a fully managed distributed message
queuing service that helps decouple applications.
❓ Question 894:

Which AWS service allows you to quickly deploy and manage applications in the cloud
using Docker containers?
A) Amazon ECS
B) AWS Lambda
C) Amazon EC2
D) AWS Fargate

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is used for deploying and managing
Docker containers at scale.

❓ Question 895:

Which service provides monitoring, logging, and auditing for your AWS account and
resources?
A) AWS CloudTrail
B) Amazon CloudWatch
C) AWS Config
D) AWS Inspector

✅ Correct Answer: A) AWS CloudTrail

Explanation: AWS CloudTrail enables governance, compliance, and auditing by logging
AWS account activity and resource changes.

❓ Question 896:

Which AWS service provides a managed solution for provisioning a cloud network
infrastructure with minimal effort?
A) AWS CloudFormation
B) Amazon VPC
C) AWS Transit Gateway
D) AWS Direct Connect

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation enables you to provision and manage AWS
infrastructure resources using templates.

❓ Question 897:

Which service is used for automating security compliance and audit processes on
AWS?
A) AWS Config
B) AWS CloudTrail
C) AWS IAM
D) Amazon Inspector

✅ Correct Answer: A) AWS Config

Explanation: AWS Config tracks configuration changes and helps automate compliance
auditing and security management.

❓ Question 898:

Which AWS service helps you detect and protect against DDoS attacks?
A) AWS Shield
B) Amazon GuardDuty
C) AWS WAF
D) Amazon Macie

✅ Correct Answer: A) AWS Shield

Explanation: AWS Shield provides DDoS protection for applications running on AWS,
helping to safeguard against attacks.

❓ Question 899:

Which AWS service enables you to create and manage user authentication for mobile
and web applications?
A) Amazon Cognito
B) AWS IAM
C) AWS KMS
D) AWS WAF

✅ Correct Answer: A) Amazon Cognito

Explanation: Amazon Cognito helps manage user authentication, authorization, and
synchronization for mobile and web applications.

❓ Question 900:

Which AWS service helps you extract text, forms, and tables from documents?
A) Amazon Textract
B) Amazon Rekognition
C) Amazon Polly
D) AWS Lambda

✅ Correct Answer: A) Amazon Textract

Explanation: Amazon Textract is a fully managed service that automatically extracts text,
forms, and tables from scanned documents.

❓ Question 901:
Which AWS service helps manage application deployment and versioning for
serverless applications?
A) AWS Lambda
B) AWS CodeDeploy
C) AWS Elastic Beanstalk
D) AWS SAM

✅ Correct Answer: D) AWS SAM

Explanation: AWS Serverless Application Model (SAM) simplifies the process of building,
testing, and deploying serverless applications.

❓ Question 902:

Which AWS service enables organizations to manage multi-account environments and

consolidate billing?
A) AWS Organizations
B) Amazon VPC
C) AWS IAM
D) AWS Trusted Advisor

✅ Correct Answer: A) AWS Organizations

Explanation: AWS Organizations allows you to create and manage multiple AWS accounts
and set up consolidated billing.

❓ Question 903:

Which AWS service allows developers to manage, secure, and monitor application
programming interfaces (APIs)?
A) Amazon API Gateway
B) AWS AppSync
C) AWS Lambda
D) Amazon EC2

✅ Correct Answer: A) Amazon API Gateway

Explanation: Amazon API Gateway is a fully managed service that enables you to create,
publish, maintain, monitor, and secure APIs at any scale.

❓ Question 904:

Which service is designed for high-performance computing (HPC) workloads in the

cloud?
A) Amazon EC2
B) AWS Lambda
C) Amazon EBS
D) AWS ParallelCluster
✅ Correct Answer: D) AWS ParallelCluster
Explanation: AWS ParallelCluster is a fully managed cluster management tool for running
high-performance computing (HPC) workloads.

❓ Question 905:

Which AWS service can help you automate security assessments for your AWS
resources?
A) Amazon Inspector
B) AWS Config
C) AWS Security Hub
D) AWS Shield

✅ Correct Answer: A) Amazon Inspector

Explanation: Amazon Inspector automates security assessments for AWS resources to help
identify vulnerabilities and compliance issues.

❓ Question 906:

Which AWS service can help you analyze and visualize large sets of data in real-time?
A) Amazon Kinesis
B) AWS Glue
C) Amazon Athena
D) Amazon QuickSight

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis is a suite of services for real-time data streaming and
analytics.

❓ Question 907:

Which AWS service enables automated migration of databases with minimal

downtime?
A) AWS Database Migration Service (DMS)
B) AWS Snowball
C) Amazon RDS
D) Amazon EC2

✅ Correct Answer: A) AWS Database Migration Service (DMS)

Explanation: AWS DMS helps migrate databases to AWS with minimal downtime, ensuring
a seamless transition to the cloud.

❓ Question 908:

Which AWS service provides managed Hadoop and Spark clusters for big data
analytics?
A) Amazon EMR
B) AWS Lambda
C) Amazon Redshift
D) AWS Glue

✅ Correct Answer: A) Amazon EMR

Explanation: Amazon EMR provides a managed environment for processing large amounts
of data using Hadoop, Spark, and other big data frameworks.

❓ Question 909:

Which AWS service helps you easily migrate on-premises virtual machines (VMs) to
AWS?
A) AWS Server Migration Service
B) AWS Snowball
C) AWS Migration Hub
D) AWS DataSync

✅ Correct Answer: A) AWS Server Migration Service

Explanation: AWS Server Migration Service helps automate the migration of on-premises
virtual machines to AWS.

❓ Question 910:

Which AWS service provides managed virtual machines for running applications in the
cloud?
A) Amazon EC2
B) AWS Lambda
C) Amazon RDS
D) AWS Fargate

✅ Correct Answer: A) Amazon EC2

Explanation: Amazon Elastic Compute Cloud (EC2) provides resizable compute capacity in
the cloud for running virtual machines (instances).

❓ Question 911:

Which AWS service enables you to transfer large amounts of data between your on-
premises data center and AWS using physical devices?
A) AWS Snowball
B) Amazon S3 Transfer Acceleration
C) AWS DataSync
D) AWS Direct Connect

✅ Correct Answer: A) AWS Snowball

Explanation: AWS Snowball is a physical device that helps transfer large amounts of data to
AWS, especially in cases where network transfer is impractical.
❓ Question 912:

Which AWS service helps protect your applications from web application attacks?
A) AWS WAF
B) Amazon GuardDuty
C) AWS Shield
D) AWS IAM

✅ Correct Answer: A) AWS WAF

Explanation: AWS Web Application Firewall (WAF) protects your applications from common
web exploits and attacks that can affect availability, security, or consume excessive
resources.

❓ Question 913:

Which AWS service is designed to simplify data analytics with SQL-like queries
directly on data stored in Amazon S3?
A) Amazon Athena
B) Amazon Redshift
C) Amazon RDS
D) Amazon Elasticsearch Service

✅ Correct Answer: A) Amazon Athena

Explanation: Amazon Athena enables you to run SQL queries directly on data stored in
Amazon S3 without needing to load the data into a database.

❓ Question 914:

Which AWS service enables you to monitor your AWS resources for compliance with
specific security standards?
A) AWS Config
B) AWS Inspector
C) AWS GuardDuty
D) AWS Security Hub

✅ Correct Answer: D) AWS Security Hub

Explanation: AWS Security Hub provides a comprehensive view of your security state in
AWS and helps monitor compliance with various security standards.

❓ Question 915:

Which AWS service allows you to deploy and manage scalable applications without
having to manage the underlying infrastructure?
A) AWS Elastic Beanstalk
B) AWS Lambda
C) Amazon EC2
D) AWS Fargate

✅ Correct Answer: A) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk is a fully managed service that enables quick
deployment and management of applications without managing the infrastructure.

❓ Question 916:

Which AWS service is used for batch computing and running large-scale parallel and
high-performance computing jobs?
A) AWS Batch
B) AWS Lambda
C) Amazon EC2
D) Amazon Redshift

✅ Correct Answer: A) AWS Batch

Explanation: AWS Batch allows you to run batch computing jobs at any scale, optimizing
resource usage and efficiency.

❓ Question 917:

Which AWS service enables running Docker containers without managing the
infrastructure?
A) AWS Fargate
B) Amazon ECS
C) AWS Lambda
D) Amazon EKS

✅ Correct Answer: A) AWS Fargate

Explanation: AWS Fargate enables you to run containers without having to manage the
underlying EC2 instances.

❓ Question 918:

Which AWS service is designed to provide serverless storage for file systems?
A) Amazon EFS
B) Amazon S3
C) Amazon EBS
D) AWS Storage Gateway

✅ Correct Answer: A) Amazon EFS

Explanation: Amazon Elastic File System (EFS) provides scalable, serverless file storage
that can be used with AWS Cloud services.

❓ Question 919:
Which AWS service is specifically designed for real-time threat detection and analysis
of AWS accounts?
A) Amazon GuardDuty
B) AWS WAF
C) AWS Security Hub
D) AWS Shield

✅ Correct Answer: A) Amazon GuardDuty

Explanation: Amazon GuardDuty is a threat detection service that continuously monitors
your AWS accounts for malicious activity and unauthorized behavior.

❓ Question 920:

Which AWS service is used to analyze and process streaming data in real-time from
various sources like IoT devices?
A) Amazon Kinesis
B) AWS Glue
C) Amazon RDS
D) AWS Lambda

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis enables you to collect, process, and analyze real-time
streaming data at scale.

❓ Question 921:

Which AWS service allows you to deploy and manage scalable containerized
applications on AWS?
A) Amazon ECS
B) AWS Fargate
C) Amazon EKS
D) AWS Lambda

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) allows you to run, stop, and manage
containers on a cluster of EC2 instances.

❓ Question 922:

Which AWS service helps you automate the deployment of infrastructure and manage
resources with version control?
A) AWS CloudFormation
B) AWS OpsWorks
C) AWS Elastic Beanstalk
D) Amazon EC2
✅ Correct Answer: A) AWS CloudFormation
Explanation: AWS CloudFormation allows you to model and set up your AWS resources so
that AWS can automatically provision and manage them according to a template.

❓ Question 923:

Which AWS service provides an easy-to-use, web-based interface for managing and
provisioning cloud resources?
A) AWS Management Console
B) AWS CLI
C) AWS CloudFormation
D) AWS SDK

✅ Correct Answer: A) AWS Management Console

Explanation: The AWS Management Console is a web-based interface for interacting with
AWS services, allowing you to manage and provision resources.

❓ Question 924:

Which AWS service offers a managed service for sending bulk email messages
securely?
A) Amazon SES
B) Amazon SNS
C) Amazon SQS
D) Amazon Pinpoint

✅ Correct Answer: A) Amazon SES

Explanation: Amazon Simple Email Service (SES) allows you to send bulk email messages
securely and cost-effectively.

❓ Question 925:

Which AWS service is designed for building highly available, fault-tolerant, and
scalable applications that automatically scale?
A) Amazon EC2
B) AWS Elastic Beanstalk
C) Amazon RDS
D) Amazon CloudWatch

✅ Correct Answer: B) AWS Elastic Beanstalk

Explanation: AWS Elastic Beanstalk automatically handles the deployment, scaling, and
management of applications, making it easy to build scalable and highly available
applications.

❓ Question 926:
Which AWS service provides a managed relational database engine with automatic
backups, software patching, and scaling?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon S3
D) AWS Lambda

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon Relational Database Service (RDS) simplifies setting up, operating,
and scaling a relational database in the cloud with built-in backup and patch management.

❓ Question 927:

Which AWS service allows you to manage and automate compliance for your AWS
resources?
A) AWS Config
B) AWS Security Hub
C) AWS IAM
D) Amazon Inspector

✅ Correct Answer: A) AWS Config

Explanation: AWS Config provides a detailed view of the configuration of AWS resources,
helping you manage compliance and audit configurations.

❓ Question 928:

Which AWS service provides virtual firewalls for your Amazon EC2 instances?
A) AWS WAF
B) AWS Shield
C) Amazon GuardDuty
D) Amazon Security Groups

✅ Correct Answer: D) Amazon Security Groups

Explanation: Amazon Security Groups are virtual firewalls for Amazon EC2 instances that
control inbound and outbound traffic.

❓ Question 929:

Which AWS service allows you to manage and scale the application lifecycle,
including provisioning, scaling, and monitoring?
A) AWS Elastic Beanstalk
B) Amazon ECS
C) AWS Lambda
D) AWS Fargate
✅ Correct Answer: A) AWS Elastic Beanstalk
Explanation: AWS Elastic Beanstalk helps you manage the application lifecycle, including
automatic scaling, monitoring, and provisioning.

❓ Question 930:

Which AWS service enables the storage and retrieval of large amounts of data, such
as backup or archived data, at a low cost?
A) Amazon S3 Glacier
B) Amazon EBS
C) Amazon S3
D) Amazon EFS

✅ Correct Answer: A) Amazon S3 Glacier

Explanation: Amazon S3 Glacier is a low-cost, highly durable cloud storage service for data
archiving and backup, designed for infrequent access.

❓ Question 931:

Which AWS service enables you to manage and deploy machine learning models at
scale?
A) Amazon SageMaker
B) AWS Lambda
C) Amazon EC2
D) AWS Batch

✅ Correct Answer: A) Amazon SageMaker

Explanation: Amazon SageMaker allows you to build, train, and deploy machine learning
models quickly and easily at scale.

❓ Question 932:

Which AWS service provides scalable object storage that allows you to store and
retrieve any amount of data?
A) Amazon EFS
B) Amazon S3
C) Amazon EBS
D) AWS Storage Gateway

✅ Correct Answer: B) Amazon S3

Explanation: Amazon Simple Storage Service (S3) is an object storage service that provides
scalable, secure, and low-cost storage for a wide range of data types.

❓ Question 933:
Which AWS service enables real-time stream processing of data for analytics and
metrics?
A) Amazon Kinesis
B) AWS Glue
C) AWS Lambda
D) Amazon RDS

✅ Correct Answer: A) Amazon Kinesis

Explanation: Amazon Kinesis allows you to process and analyze streaming data in real-time
for applications such as data analytics and real-time metrics.

❓ Question 934:

Which AWS service helps you create isolated virtual networks within AWS?
A) Amazon VPC
B) AWS Direct Connect
C) AWS Lambda
D) AWS Firewall Manager

✅ Correct Answer: A) Amazon VPC

Explanation: Amazon Virtual Private Cloud (VPC) allows you to create isolated networks
within AWS, where you can launch AWS resources.

❓ Question 935:

Which AWS service allows you to run Docker containers in a fully managed
environment?
A) Amazon ECS
B) AWS Fargate
C) Amazon EKS
D) AWS Lambda

✅ Correct Answer: B) AWS Fargate

Explanation: AWS Fargate allows you to run Docker containers without managing the
underlying EC2 instances, providing a serverless compute engine for containers.

❓ Question 936:

Which AWS service allows you to create and manage scalable and highly available
relational databases?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Redshift
D) Amazon Aurora
✅ Correct Answer: A) Amazon RDS
Explanation: Amazon Relational Database Service (RDS) makes it easy to set up, operate,
and scale a relational database in the cloud.

❓ Question 937:

Which AWS service provides fully managed Kubernetes clusters for running
containerized applications?
A) Amazon EKS
B) Amazon ECS
C) AWS Lambda
D) AWS Fargate

✅ Correct Answer: A) Amazon EKS

Explanation: Amazon Elastic Kubernetes Service (EKS) provides fully managed Kubernetes
clusters for running containerized applications at scale.

❓ Question 938:

Which AWS service is used for continuous integration and continuous delivery of
applications?
A) AWS CodePipeline
B) Amazon ECS
C) AWS Lambda
D) Amazon CloudWatch

✅ Correct Answer: A) AWS CodePipeline

Explanation: AWS CodePipeline automates the build, test, and deployment of applications,
enabling continuous integration and delivery.

❓ Question 939:

Which AWS service allows you to configure and manage user permissions and access
to resources within your AWS account?
A) AWS IAM
B) Amazon Cognito
C) AWS Directory Service
D) Amazon SSO

✅ Correct Answer: A) AWS IAM

Explanation: AWS Identity and Access Management (IAM) allows you to configure and
manage user permissions and access to AWS resources.

❓ Question 940:
Which AWS service provides a scalable and cost-effective solution for running
serverless applications?
A) AWS Lambda
B) Amazon EC2
C) Amazon S3
D) AWS Fargate

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda is a serverless compute service that lets you run code without
provisioning or managing servers, automatically scaling based on the workload.

❓ Question 941:

Which AWS service provides fully managed message queuing for applications that
need to send and receive messages?
A) Amazon SQS
B) Amazon SNS
C) AWS Lambda
D) AWS Step Functions

✅ Correct Answer: A) Amazon SQS

Explanation: Amazon Simple Queue Service (SQS) provides a managed message queuing
service for decoupling and scaling microservices, distributed systems, and serverless
applications.

❓ Question 942:

Which AWS service can be used to monitor and collect log data from various AWS
resources and applications?
A) Amazon CloudWatch
B) AWS X-Ray
C) AWS CloudTrail
D) AWS Config

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch provides monitoring and log collection for AWS
resources, applications, and custom metrics.

❓ Question 943:

Which AWS service allows you to store structured, semi-structured, and unstructured
data in a fully managed data warehouse?
A) Amazon Redshift
B) Amazon S3
C) Amazon Aurora
D) Amazon RDS
✅ Correct Answer: A) Amazon Redshift
Explanation: Amazon Redshift is a fully managed data warehouse service for storing
structured and semi-structured data, with high performance and scalability.

❓ Question 944:

Which AWS service helps protect your applications from distributed denial-of-service
(DDoS) attacks?
A) AWS Shield
B) AWS WAF
C) Amazon GuardDuty
D) AWS Firewall Manager

✅ Correct Answer: A) AWS Shield

Explanation: AWS Shield is a managed Distributed Denial-of-Service (DDoS) protection
service that safeguards applications hosted on AWS from DDoS attacks.

❓ Question 945:

Which AWS service is used to discover and visualize resources in your AWS
environment?
A) AWS Config
B) AWS CloudFormation
C) AWS Systems Manager
D) AWS Trusted Advisor

✅ Correct Answer: A) AWS Config

Explanation: AWS Config enables you to discover and visualize the relationships between
AWS resources, and provides a history of configuration changes.

❓ Question 946:

Which AWS service allows you to automate operational tasks for managing
infrastructure, including patching, backups, and security updates?
A) AWS Systems Manager
B) Amazon EC2
C) AWS CloudFormation
D) AWS Elastic Beanstalk

✅ Correct Answer: A) AWS Systems Manager

Explanation: AWS Systems Manager automates operational tasks and helps with patch
management, backups, and security updates for resources in your AWS environment.

❓ Question 947:
Which AWS service allows you to automatically scale compute capacity based on
incoming traffic?
A) Amazon EC2 Auto Scaling
B) AWS Lambda
C) Amazon RDS
D) AWS Elastic Load Balancing

✅ Correct Answer: A) Amazon EC2 Auto Scaling

Explanation: Amazon EC2 Auto Scaling automatically adjusts the number of EC2 instances
in response to incoming traffic or resource utilization.

❓ Question 948:

Which AWS service is designed to securely exchange information between trusted

business partners, including federated logins?
A) Amazon Cognito
B) AWS Directory Service
C) AWS SSO
D) AWS IAM

✅ Correct Answer: A) Amazon Cognito

Explanation: Amazon Cognito helps with user authentication, user data synchronization,
and secure access to AWS resources.

❓ Question 949:

Which AWS service provides serverless SQL database for relational data with auto-
scaling capabilities?
A) Amazon Aurora Serverless
B) Amazon RDS
C) Amazon DynamoDB
D) Amazon ElastiCache

✅ Correct Answer: A) Amazon Aurora Serverless

Explanation: Amazon Aurora Serverless is an on-demand, auto-scaling relational database
service that automatically adjusts capacity based on application requirements.

❓ Question 950:

Which AWS service provides an enterprise-level key management system to securely

create, store, and manage encryption keys?
A) AWS KMS
B) AWS Secrets Manager
C) AWS Shield
D) AWS IAM
✅ Correct Answer: A) AWS KMS
Explanation: AWS Key Management Service (KMS) is a managed service for creating and
controlling the encryption keys used to encrypt your data.

❓ Question 951:

Which AWS service can be used to automatically distribute incoming application

traffic across multiple targets such as EC2 instances or containers?
A) Amazon EC2 Auto Scaling
B) AWS Lambda
C) Amazon CloudFront
D) Elastic Load Balancing (ELB)

✅ Correct Answer: D) Elastic Load Balancing (ELB)

Explanation: Elastic Load Balancing automatically distributes incoming application traffic
across multiple targets, such as EC2 instances or containers, to ensure high availability.

❓ Question 952:

Which AWS service allows you to manage and scale Docker containers in a clustered
environment?
A) Amazon EKS
B) Amazon ECS
C) AWS Fargate
D) Amazon EC2

✅ Correct Answer: B) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) allows you to manage and scale
Docker containers in a clustered environment on AWS.

❓ Question 953:

Which AWS service helps with real-time monitoring and analytics of network traffic for
security purposes?
A) AWS WAF
B) AWS GuardDuty
C) Amazon Macie
D) AWS Shield

✅ Correct Answer: B) AWS GuardDuty

Explanation: AWS GuardDuty is a threat detection service that continuously monitors and
analyzes network traffic for potential security threats.

❓ Question 954:
Which AWS service provides a fully managed NoSQL database that offers single-digit
millisecond latency at any scale?
A) Amazon Aurora
B) Amazon DynamoDB
C) Amazon RDS
D) Amazon Redshift

✅ Correct Answer: B) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service that provides
fast and predictable performance with seamless scalability.

❓ Question 955:

Which AWS service allows you to implement and enforce security policies to protect
applications and resources in your AWS environment?
A) AWS Security Hub
B) AWS Config
C) AWS Shield
D) AWS Firewall Manager

✅ Correct Answer: A) AWS Security Hub

Explanation: AWS Security Hub allows you to centralize security and compliance findings,
providing automated security policy enforcement and protection for your AWS resources.

❓ Question 956:

Which AWS service provides a fully managed content delivery network (CDN) for
distributing content to users with low latency?
A) Amazon S3
B) Amazon CloudFront
C) AWS Direct Connect
D) Amazon EC2

✅ Correct Answer: B) Amazon CloudFront

Explanation: Amazon CloudFront is a content delivery network (CDN) service that delivers
content to users globally with low latency and high transfer speeds.

❓ Question 957:

Which AWS service allows you to run relational databases in a fully managed
environment with high availability and automated backups?
A) Amazon Aurora
B) Amazon RDS
C) Amazon DynamoDB
D) Amazon ElastiCache
✅ Correct Answer: B) Amazon RDS
Explanation: Amazon Relational Database Service (RDS) allows you to run relational
databases such as MySQL, PostgreSQL, and others in a fully managed environment with
high availability and automated backups.

❓ Question 958:

Which AWS service is used to automatically orchestrate and execute a series of tasks
to support a business process or workflow?
A) AWS Step Functions
B) AWS Lambda
C) Amazon EC2
D) AWS CloudFormation

✅ Correct Answer: A) AWS Step Functions

Explanation: AWS Step Functions helps you coordinate and orchestrate the execution of
tasks in a sequence or workflow, with error handling, retries, and parallelism.

❓ Question 959:

Which AWS service provides a managed Apache Hadoop framework that can be used
to process large amounts of data in a distributed environment?
A) Amazon EMR
B) Amazon Redshift
C) Amazon Aurora
D) AWS Glue

✅ Correct Answer: A) Amazon EMR

Explanation: Amazon Elastic MapReduce (EMR) is a managed Hadoop framework that
processes vast amounts of data using distributed computing resources.

❓ Question 960:

Which AWS service provides a managed workflow orchestration service for building,
scheduling, and monitoring data pipelines?
A) AWS Data Pipeline
B) AWS Glue
C) AWS Step Functions
D) Amazon S3

✅ Correct Answer: A) AWS Data Pipeline

Explanation: AWS Data Pipeline is a service that helps you build, schedule, and manage
data workflows, automating the movement and transformation of data across AWS services.

❓ Question 961:
Which AWS service enables you to create and manage a virtual private network (VPN)
between your on-premises data center and AWS?
A) Amazon VPC
B) AWS Direct Connect
C) AWS VPN
D) AWS Transit Gateway

✅ Correct Answer: C) AWS VPN

Explanation: AWS VPN allows you to create secure VPN connections between your on-
premises data center and AWS, facilitating secure communication.

❓ Question 962:

Which AWS service helps you easily create and manage virtual private clouds (VPCs)
to securely isolate your resources?
A) AWS VPC
B) AWS Transit Gateway
C) AWS Direct Connect
D) Amazon CloudWatch

✅ Correct Answer: A) AWS VPC

Explanation: AWS Virtual Private Cloud (VPC) allows you to define a logically isolated
network to securely launch AWS resources.

❓ Question 963:

Which AWS service is used to store and analyze log files in a central location?
A) AWS CloudTrail
B) Amazon S3
C) Amazon CloudWatch Logs
D) AWS Config

✅ Correct Answer: C) Amazon CloudWatch Logs

Explanation: Amazon CloudWatch Logs is used to collect and store logs from various AWS
services and applications in a centralized location.

❓ Question 964:

Which AWS service can be used to quickly launch and manage a fleet of virtual
machines to run your application?
A) Amazon EC2
B) AWS Lambda
C) Amazon ECS
D) AWS Elastic Beanstalk
✅ Correct Answer: A) Amazon EC2
Explanation: Amazon Elastic Compute Cloud (EC2) provides scalable virtual machines that
can be used to run applications.

❓ Question 965:

Which AWS service provides a scalable storage solution for storing large amounts of
data and accessing it through a web interface?
A) Amazon S3
B) Amazon EBS
C) Amazon Glacier
D) Amazon RDS

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 provides scalable object storage for a wide variety of data types,
including backup, archival, and content distribution.

❓ Question 966:

Which AWS service allows you to encrypt sensitive data in transit and at rest, as well
as manage the keys used for encryption?
A) AWS KMS
B) AWS IAM
C) Amazon CloudWatch
D) AWS Shield

✅ Correct Answer: A) AWS KMS

Explanation: AWS Key Management Service (KMS) enables you to create and control
encryption keys for securing data in transit and at rest.

❓ Question 967:

Which AWS service is used to create and manage serverless applications by running
code in response to events?
A) AWS Lambda
B) AWS Elastic Beanstalk
C) Amazon EC2
D) AWS Fargate

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda allows you to run code without provisioning or managing
servers, based on triggers from other AWS services.

❓ Question 968:
Which AWS service can be used to automatically scale and deploy applications using
containers?
A) Amazon ECS
B) AWS Lambda
C) AWS Elastic Beanstalk
D) Amazon EKS

✅ Correct Answer: D) Amazon EKS

Explanation: Amazon Elastic Kubernetes Service (EKS) is a fully managed Kubernetes
service that makes it easy to deploy and manage containerized applications.

❓ Question 969:

Which AWS service can be used to provide a managed message broker for sending
messages between distributed applications?
A) Amazon SQS
B) Amazon SNS
C) Amazon MQ
D) AWS Lambda

✅ Correct Answer: C) Amazon MQ

Explanation: Amazon MQ is a managed message broker service that supports Apache
ActiveMQ and enables sending messages between distributed applications.

❓ Question 970:

Which AWS service is used to monitor AWS resources and applications in real-time,
providing detailed metrics and logs?
A) Amazon CloudWatch
B) AWS X-Ray
C) AWS CloudTrail
D) AWS Config

✅ Correct Answer: A) Amazon CloudWatch

Explanation: Amazon CloudWatch enables real-time monitoring of AWS resources,
providing detailed metrics, logs, and alarms.

❓ Question 971:

Which AWS service allows you to automate infrastructure provisioning and

deployment using code?
A) AWS CloudFormation
B) AWS CodeDeploy
C) AWS OpsWorks
D) AWS Elastic Beanstalk
✅ Correct Answer: A) AWS CloudFormation
Explanation: AWS CloudFormation enables you to automate the provisioning and
deployment of infrastructure using code templates.

❓ Question 972:

Which AWS service is designed to monitor your AWS environment for security risks
and compliance violations?
A) AWS Inspector
B) AWS Config
C) AWS Security Hub
D) AWS GuardDuty

✅ Correct Answer: C) AWS Security Hub

Explanation: AWS Security Hub provides a centralized view of security findings, compliance
violations, and risk assessments in your AWS environment.

❓ Question 973:

Which AWS service provides a fully managed, scalable, and secure content delivery
network (CDN)?
A) Amazon CloudFront
B) AWS Direct Connect
C) AWS Global Accelerator
D) Amazon Route 53

✅ Correct Answer: A) Amazon CloudFront

Explanation: Amazon CloudFront is a content delivery network (CDN) service that
distributes content globally, ensuring low latency and high-speed delivery.

❓ Question 974:

Which AWS service helps you automate the movement of data between different AWS
services or regions?
A) AWS Data Pipeline
B) Amazon S3 Transfer Acceleration
C) AWS Glue
D) AWS DMS

✅ Correct Answer: A) AWS Data Pipeline

Explanation: AWS Data Pipeline automates the movement of data between different AWS
services and regions, ensuring data is processed and transformed as needed.

❓ Question 975:
Which AWS service can be used to detect anomalies and security risks in your AWS
environment by analyzing network traffic?
A) AWS Shield
B) AWS GuardDuty
C) AWS WAF
D) AWS Inspector

✅ Correct Answer: B) AWS GuardDuty

Explanation: AWS GuardDuty analyzes network traffic to detect anomalies, potential threats,
and security risks in your AWS environment.

❓ Question 976:

Which AWS service provides a managed relational database service for PostgreSQL,
MySQL, and MariaDB databases?
A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon ElastiCache

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon Relational Database Service (RDS) provides fully managed relational
databases such as PostgreSQL, MySQL, and MariaDB.

❓ Question 977:

Which AWS service allows you to run serverless applications without managing any
infrastructure?
A) AWS Lambda
B) Amazon EC2
C) AWS Fargate
D) Amazon EKS

✅ Correct Answer: A) AWS Lambda

Explanation: AWS Lambda is a serverless compute service that runs code in response to
events without managing the underlying infrastructure.

❓ Question 978:

Which AWS service provides a managed environment to deploy, manage, and scale
containerized applications?
A) Amazon ECS
B) Amazon EKS
C) AWS Fargate
D) AWS Lambda
✅ Correct Answer: A) Amazon ECS
Explanation: Amazon Elastic Container Service (ECS) is a fully managed service for running
and scaling containerized applications.

❓ Question 979:

Which AWS service allows you to automatically scale compute capacity based on
demand?
A) Amazon EC2 Auto Scaling
B) AWS Elastic Load Balancing
C) Amazon CloudWatch
D) AWS Lambda

✅ Correct Answer: A) Amazon EC2 Auto Scaling

Explanation: Amazon EC2 Auto Scaling automatically adjusts the number of EC2 instances
based on demand, helping maintain performance while optimizing costs.

❓ Question 980:

Which AWS service allows you to run applications without provisioning or managing
servers, based on a pay-as-you-go model?
A) AWS Fargate
B) AWS EC2
C) AWS Lambda
D) Amazon S3

✅ Correct Answer: C) AWS Lambda

Explanation: AWS Lambda allows you to run code without provisioning servers, and you
only pay for the compute time your code consumes.

❓ Question 981:

Which AWS service helps you monitor AWS resources for performance issues, and
automatically adjusts resources to meet demand?
A) AWS Auto Scaling
B) Amazon CloudWatch
C) AWS Lambda
D) AWS Elastic Beanstalk

✅ Correct Answer: A) AWS Auto Scaling

Explanation: AWS Auto Scaling automatically adjusts the number of resources, like EC2
instances, to meet the demand, maintaining optimal performance.

❓ Question 982:
Which AWS service is primarily used for managing user identities and access
permissions?
A) AWS IAM
B) AWS Cognito
C) AWS GuardDuty
D) Amazon S3

✅ Correct Answer: A) AWS IAM

Explanation: AWS Identity and Access Management (IAM) is used to manage user identities
and permissions within AWS.

❓ Question 983:

Which AWS service enables you to easily deploy and manage applications with
Docker containers?
A) Amazon ECS
B) AWS Lambda
C) Amazon RDS
D) AWS Elastic Beanstalk

✅ Correct Answer: A) Amazon ECS

Explanation: Amazon Elastic Container Service (ECS) is designed for deploying and
managing containerized applications using Docker.

❓ Question 984:

Which AWS service provides a managed NoSQL database designed for high-
performance applications with low-latency access?
A) Amazon RDS
B) Amazon DynamoDB
C) Amazon Aurora
D) Amazon Redshift

✅ Correct Answer: B) Amazon DynamoDB

Explanation: Amazon DynamoDB is a fully managed NoSQL database service that provides
fast and predictable performance with seamless scalability.

❓ Question 985:

Which AWS service helps you securely connect your on-premises data center to AWS
over a dedicated network connection?
A) AWS VPN
B) AWS Direct Connect
C) Amazon CloudFront
D) AWS Snowball
✅ Correct Answer: B) AWS Direct Connect
Explanation: AWS Direct Connect allows you to establish a dedicated network connection
between your on-premises data center and AWS.

❓ Question 986:

Which AWS service is designed for creating and running relational databases on AWS
with automatic backups and patching?
A) Amazon RDS
B) Amazon Aurora
C) Amazon DynamoDB
D) Amazon ElastiCache

✅ Correct Answer: A) Amazon RDS

Explanation: Amazon RDS provides a fully managed relational database service with
features like automatic backups and patches.

❓ Question 987:

Which AWS service helps you to discover and classify sensitive data across AWS
services?
A) AWS Config
B) AWS Macie
C) AWS Shield
D) AWS WAF

✅ Correct Answer: B) AWS Macie

Explanation: AWS Macie uses machine learning to discover and protect sensitive data, such
as personally identifiable information (PII) in AWS.

❓ Question 988:

Which AWS service is used to manage and automate tasks related to the lifecycle of
AWS resources, such as EC2 instances?
A) AWS Systems Manager
B) AWS CloudFormation
C) AWS Elastic Beanstalk
D) AWS CodeDeploy

✅ Correct Answer: A) AWS Systems Manager

Explanation: AWS Systems Manager provides operational insights and automates tasks
related to the lifecycle of AWS resources, like patching and instance management.

❓ Question 989:
Which AWS service provides highly durable and available object storage with easy-to-
use web interfaces?
A) Amazon S3
B) Amazon Glacier
C) Amazon EBS
D) AWS Snowball

✅ Correct Answer: A) Amazon S3

Explanation: Amazon S3 provides scalable, durable object storage with a web interface for
managing and retrieving data.

❓ Question 990:

Which AWS service helps you to secure your web applications by monitoring
incoming traffic and filtering malicious requests?
A) AWS WAF
B) AWS Shield
C) Amazon CloudFront
D) Amazon GuardDuty

✅ Correct Answer: A) AWS WAF

Explanation: AWS Web Application Firewall (WAF) helps you monitor and filter malicious
web traffic, protecting your web applications.

❓ Question 991:

Which AWS service allows you to set up rules for monitoring AWS resources and
generating notifications for any compliance violations?
A) AWS Config
B) AWS GuardDuty
C) AWS CloudTrail
D) Amazon CloudWatch

✅ Correct Answer: A) AWS Config

Explanation: AWS Config provides a detailed view of the configuration of AWS resources
and helps set up rules to monitor compliance with your organization's requirements.

❓ Question 992:

Which AWS service allows you to store data in a hierarchical structure and allows you
to access data through REST APIs?
A) Amazon S3
B) Amazon EFS
C) Amazon DynamoDB
D) Amazon RDS
✅ Correct Answer: A) Amazon S3
Explanation: Amazon S3 is an object storage service that allows data to be stored in a
hierarchical structure and accessed using REST APIs.

❓ Question 993:

Which AWS service provides a platform to host and run machine learning models with
minimal effort?
A) AWS SageMaker
B) AWS Lambda
C) AWS Elastic Beanstalk
D) AWS CodePipeline

✅ Correct Answer: A) AWS SageMaker

Explanation: AWS SageMaker is a fully managed service that enables data scientists and
developers to build, train, and deploy machine learning models quickly.

❓ Question 994:

Which AWS service can you use to run SQL queries directly against data stored in
Amazon S3 without having to load it into a database?
A) AWS Athena
B) Amazon Redshift
C) Amazon Aurora
D) AWS RDS

✅ Correct Answer: A) AWS Athena

Explanation: AWS Athena allows you to run SQL queries directly on data stored in Amazon
S3, without having to load it into a database.

❓ Question 995:

Which AWS service helps you to automate the deployment of infrastructure and
applications using reusable templates?
A) AWS CloudFormation
B) AWS OpsWorks
C) Amazon Elastic Beanstalk
D) AWS CodeDeploy

✅ Correct Answer: A) AWS CloudFormation

Explanation: AWS CloudFormation helps you automate infrastructure deployment using
reusable templates for infrastructure as code (IaC).

❓ Question 996:
Which AWS service helps protect your application against Distributed Denial of
Service (DDoS) attacks?
A) AWS WAF
B) AWS Shield
C) AWS GuardDuty
D) AWS Inspector

✅ Correct Answer: B) AWS Shield

Explanation: AWS Shield is a managed DDoS protection service designed to protect
applications against volumetric and resource-exhaustion DDoS attacks.

❓ Question 997:

Which AWS service provides a fully managed relational database with high
performance and compatibility with MySQL and PostgreSQL?
A) Amazon Aurora
B) Amazon RDS
C) Amazon DynamoDB
D) Amazon ElastiCache

✅ Correct Answer: A) Amazon Aurora

Explanation: Amazon Aurora is a fully managed relational database compatible with MySQL
and PostgreSQL, offering higher performance than standard MySQL databases.

❓ Question 998:

Which AWS service helps you to track user activity and API usage across your AWS
infrastructure?
A) AWS CloudTrail
B) AWS Config
C) Amazon GuardDuty
D) AWS Security Hub

✅ Correct Answer: A) AWS CloudTrail

Explanation: AWS CloudTrail records and tracks user activity and API usage across your
AWS infrastructure, providing logs for security analysis and auditing.

❓ Question 999:

Which AWS service can you use to deploy and scale containerized applications with
Kubernetes?
A) Amazon EKS
B) Amazon ECS
C) AWS Fargate
D) AWS Lambda
✅ Correct Answer: A) Amazon EKS
Explanation: Amazon Elastic Kubernetes Service (EKS) is a fully managed Kubernetes
service that makes it easy to run and scale containerized applications using Kubernetes.

❓ Question 1000:

Which AWS service is used for hosting a simple static website with high availability
and low latency?
A) Amazon EC2
B) Amazon S3
C) Amazon CloudFront
D) AWS Elastic Beanstalk

✅ Correct Answer: B) Amazon S3

Explanation: Amazon S3 can be used to host static websites, offering high availability and
low latency by leveraging its globally distributed infrastructure.