AWS Practice Test

Twenty questions for each of three AWS exams, sorted by its exam guide, with the AWS page behind every answer.

New to AWS? Start with Cloud Practitioner. The exam guides of the two Associate exams expect a year or more of hands-on work with AWS.

A hospital runs virtual machines on its own hardware in its own server room and uses no cloud provider. What does the AWS overview call this deployment model?

Pick an answer, then press Check answer. Then you see Correct or Not quite, with the reason. Keys: A to D pick, Enter checks.

Print covers the next 20 questions. Share this set copies a link to the same questions in the same order.

Exam mode: 20 questions, no time limit.

More options

Unofficial practice questions, not affiliated with Amazon Web Services, Inc. Bank checked October 9, 2026.

AWS certification exams: level, questions, time and fee

CertificationQuestionsTime limitFeeLevelVersion changeCheckedSourceOfficial practice test
Cloud Practitioner6590 minutes100 USDFoundationalNone announcedOctober 9, 2026AWS's exam pageAWS's exam guide
AI Practitioner6590 minutes100 USDFoundationalNone announcedOctober 9, 2026AWS's exam pageAWS's exam guide
Solutions Architect - Associate65130 minutes150 USDAssociateNone announcedOctober 9, 2026AWS's exam pageAWS's exam guide
Developer - Associate65130 minutes150 USDAssociateLast day for DVA-C02: November 30, 2026October 9, 2026AWS's exam pageAWS's exam guide
CloudOps Engineer - Associate65130 minutes150 USDAssociateNone announcedOctober 9, 2026AWS's exam pageAWS's exam guide
Data Engineer - Associate65130 minutes150 USDAssociateNone announcedOctober 9, 2026AWS's exam pageAWS's exam guide
Solutions Architect - Professional75180 minutes300 USDProfessionalLast day for SAP-C02: November 16, 2026October 9, 2026AWS's exam pageAWS's exam guide
DevOps Engineer - Professional75180 minutes300 USDProfessionalNone announcedOctober 9, 2026AWS's exam pageAWS's exam guide
Security - Specialty65170 minutes300 USDSpecialtyNone announcedOctober 9, 2026AWS's exam pageAWS's exam guide
Advanced Networking - Specialty65170 minutes300 USDSpecialtyRetires after December 31, 2026October 9, 2026AWS's exam pageAWS's exam guide

Next step Full Cloud Practitioner testFull Solutions Architect test

Cloud Practitioner: all 20 questions

Cloud Concepts 5

  • A company closes its server rooms so that its engineers work on the product itself, not on racking and powering servers. Which advantage of cloud computing is this? Overview of Amazon Web Services: Six advantages of cloud computing
  • A hospital runs virtual machines on its own hardware in its own server room and uses no cloud provider. What does the AWS overview call this deployment model? Overview of Amazon Web Services: Types of cloud computing
  • A team moves a SQL Server database from its own server to Amazon RDS for SQL Server, a managed service, and changes little else. Which migration strategy is this? AWS Prescriptive Guidance: About the migration strategies
Show all 20 questions (17 more)

Cloud Concepts, continued

  • In the AWS Cloud Adoption Framework, which phase of the cloud transformation journey delivers pilot initiatives in production? An Overview of the AWS Cloud Adoption Framework: Your cloud transformation journey
  • Which Well-Architected pillar holds the best practices for organizing a team, designing a workload, running it at scale and evolving it as time passes? AWS Well-Architected Framework: Operational excellence

Security and Compliance 6

  • A growing company wants a quick way to set up and govern many AWS accounts by prescriptive best practices. Which service builds this landing zone? AWS Control Tower: What Is AWS Control Tower?
  • A security lead wants one view of the company's security state in AWS, checked against industry standards and best practices. Which service gives it? AWS Security Hub: Introduction to AWS Security Hub CSPM
  • A small company puts a public website on AWS and subscribes to no extra security service. What protection against DDoS attacks does it have? AWS WAF, AWS Firewall Manager and AWS Shield Developer Guide: AWS Shield
  • A website needs SSL/TLS certificates for its load balancer and wants their renewal handled for it. Which service does this? AWS Certificate Manager: What is AWS Certificate Manager?
  • After an alert, an analyst must dig through log data to find the root cause of suspicious activity. Which service builds a linked set of data for that investigation? Overview of Amazon Web Services: Security, identity, and compliance
  • For an abstracted service such as Amazon S3, which task does the shared responsibility model leave with the customer? AWS, Shared Responsibility Model

Cloud Technology and Services 7

  • A company wants the file servers in its own data center to store data in AWS through a software appliance on site. Which service connects the two? AWS Storage Gateway documentation
  • A game studio wants AWS compute close to players in a large city that has no AWS Region nearby. Which offering places resources near large population centers? AWS Local Zones: What is AWS Local Zones?
  • A product team wants to build a generative AI application on foundation models from several AI companies without hosting the models itself. Which service provides that access? Amazon Bedrock: Overview
  • A team already runs its applications on Kubernetes and wants help building, securing and maintaining the clusters on AWS. Which service fits? Amazon EKS: What is Amazon EKS?
  • A web application wants to keep the results of frequent queries in memory so that pages load faster. Which service provides a managed in-memory cache? Amazon ElastiCache User Guide: What is Amazon ElastiCache?
  • An administrator on a borrowed laptop wants to run AWS CLI commands without installing anything. What can be opened straight from the AWS Management Console? AWS CloudShell: What is AWS CloudShell?
  • Analysts need data from many sources discovered, prepared and combined before they can use it, with no servers to manage. Which service does this data integration? AWS Glue: What is AWS Glue?

Billing, Pricing, and Support 2

  • A finance team wants the most detailed AWS cost and usage data delivered as files to an Amazon S3 bucket it owns. Which tool provides this? AWS Data Exports: What are AWS Cost and Usage Reports?
  • An operations lead wants to be told when an AWS service event or a planned change affects the company's own resources. Which service gives this visibility? AWS Health: What is AWS Health?

How this list was compiled: Own questions, written to the four content domains and weightings of the exam guide Amazon Web Services publishes for AWS Certified Cloud Practitioner (CLF-C02) at https://docs.aws.amazon.com/aws-certification/latest/cloud-practitioner-02/cloud-practitioner-02.html (read 2026-10-09, with its four domain pages), with the exam length from https://aws.amazon.com/certification/certified-cloud-practitioner/ (read 2026-10-09). The exam is one of those listed on https://aws.amazon.com/certification/ (read 2026-10-09). Facts were read on 2026-10-09 in AWS's public documentation at docs.aws.amazon.com and, where named, on aws.amazon.com. Each question names the page it was written from and links to it. Licence: Own work. Every question, wrong choice and explanation was written for this site from the task statements of the exam guide and the public AWS pages named in each question. Nothing is copied or reworded from an AWS exam, an AWS sample question or official practice question set, a practice product or a question dump.

Solutions Architect: all 20 questions

Design Secure Architectures 6

  • A security team must record information on the IP traffic to and from network interfaces in a VPC and keep it in Amazon S3. Which feature captures it? Amazon VPC User Guide: Logging IP traffic using VPC Flow Logs
  • All traffic entering a VPC must pass through a fleet of third-party firewall appliances that scales with demand. Which load balancer is built to deploy and manage such virtual appliances? Elastic Load Balancing User Guide: What is a Gateway Load Balancer?
  • An Amazon RDS DB instance was created without encryption, and a new policy requires encryption at rest. Which path does the RDS guide describe? Amazon RDS User Guide: Encrypting Amazon RDS resources
Show all 20 questions (17 more)

Design Secure Architectures, continued

  • In the words of the VPC guide, what makes a subnet a public subnet? Amazon VPC User Guide: Subnets for your VPC
  • Subscribers watch a video that Amazon CloudFront delivers as many HLS files. The site wants to restrict all of the files and keep its current URLs. What should it use? Amazon CloudFront Developer Guide: Decide to use signed URLs or signed cookies
  • VPC A is peered with VPC B and with VPC C. B and C are not peered with each other. Can an instance in B reach an instance in C through A? Amazon VPC Peering Guide: How VPC peering connections work

Design Resilient Architectures 5

  • A bad deployment corrupts items in a DynamoDB table. The table must be restorable to any second of the recent past. Which feature provides this, and how far back? Amazon DynamoDB Developer Guide: Point-in-time backups for DynamoDB
  • A team assumes that AWS backs up its Amazon EBS volumes on its own. What does the EBS guide say? Amazon EBS User Guide: Amazon EBS snapshots
  • A workload runs in two Regions at once, and users are served from both. Which disaster recovery strategy is this? Disaster Recovery of Workloads on AWS: Recovery in the Cloud: Disaster recovery options in the cloud
  • An application opens database connections at a high rate, and each Amazon RDS failover breaks them. Which feature pools connections and keeps them through a failover? Amazon RDS User Guide: Amazon RDS Proxy
  • An order worker reads from an Amazon SQS standard queue. Why must it be safe for the worker to process the same message twice? Amazon SQS Developer Guide: Amazon SQS standard queues

Design High-Performing Architectures 5

  • A DynamoDB table is keyed by customer ID. A new query must find orders by product ID across the whole table. Which index allows a different partition key? Amazon DynamoDB Developer Guide: Improving data access with secondary indexes in DynamoDB
  • An Amazon EFS file system serves a workload whose throughput is spiky and hard to forecast. Which throughput mode does the EFS guide recommend? Amazon Elastic File System: Amazon EFS performance specifications
  • An application needs far more than 5,500 GET requests per second from one S3 bucket. What does the S3 performance guidance suggest? Amazon S3 User Guide: Best practices design patterns: optimizing Amazon S3 performance
  • Users on other continents upload large files to one S3 bucket and find it slow. Which bucket-level feature routes the uploads through CloudFront edge locations? Amazon S3 User Guide: Configuring fast, secure file transfers using Amazon S3 Transfer Acceleration
  • Windows applications moving to AWS need shared file storage that they reach over the SMB protocol, on a native Windows file system. Which service fits? Amazon FSx for Windows File Server: What is FSx for Windows File Server?

Design Cost-Optimized Architectures 4

  • A company will run m5 instances in one Region for three years, in sizes that may change. Which Savings Plans type gives the larger discount for that commitment? Savings Plans: Savings Plans types
  • A test fleet in an Auto Scaling group is needed only during office hours on weekdays. Which kind of scaling changes the desired capacity at set times? Amazon EC2 Auto Scaling User Guide: Scheduled scaling for Amazon EC2 Auto Scaling
  • Files on an Amazon EFS file system are opened only a few times each quarter after their first month. What lowers the storage cost with no change to the applications? Amazon Elastic File System: Features of Amazon EFS
  • Session records in a DynamoDB table are of no use after a day. What removes them automatically without consuming write throughput? Amazon DynamoDB Developer Guide: Using time to live (TTL) in DynamoDB

How this list was compiled: Own questions, written to the four content domains and weightings of the exam guide Amazon Web Services publishes for AWS Certified Solutions Architect - Associate (SAA-C03) at https://docs.aws.amazon.com/aws-certification/latest/solutions-architect-associate-03/solutions-architect-associate-03.html (read 2026-10-09, with its four domain pages), with the exam length from https://aws.amazon.com/certification/certified-solutions-architect-associate/ (read 2026-10-09). The exam is one of those listed on https://aws.amazon.com/certification/ (read 2026-10-09). Facts were read on 2026-10-09 in AWS's public documentation at docs.aws.amazon.com and, where named, on aws.amazon.com. Each question names the page it was written from and links to it. Licence: Own work. Every question, wrong choice and explanation was written for this site from the task statements of the exam guide and the public AWS pages named in each question. Nothing is copied or reworded from an AWS exam, an AWS sample question or official practice question set, a practice product or a question dump.

Developer: all 20 questions

Development with AWS Services 6

  • A bug made a consumer drop a day of events from an EventBridge event bus. Which feature lets the team send the stored events to the bus again after the fix? Amazon EventBridge: Archiving and replaying events in Amazon EventBridge
  • A Lambda function unpacks a large archive to work on it. Where can it write temporary files, and what is the most ephemeral storage that can be configured? AWS Lambda Developer Guide: Configure ephemeral storage for Lambda functions
  • A producer must send 5 MB payloads through Amazon SQS. What do the SQS Extended Client Libraries do with each payload? Amazon SQS Developer Guide: Managing large Amazon SQS messages with Extended Client Library and Amazon Simple Storage Service
Show all 20 questions (17 more)

Development with AWS Services, continued

  • An application reacts to every change made to the items of a DynamoDB table, in the order the changes happened. For how long does DynamoDB Streams keep each change record? Amazon DynamoDB Developer Guide: Change data capture for DynamoDB Streams
  • An order must reduce the stock count in one DynamoDB table and add the order to another, and both writes must succeed or neither. Which operation groups them? Amazon DynamoDB Developer Guide: Amazon DynamoDB Transactions: How it works
  • Two users edit the same DynamoDB item at once, and the second write must not silently overwrite the first. Which strategy uses a version number attribute to prevent this? Amazon DynamoDB Developer Guide: DynamoDB and optimistic locking with version number

Security 5

  • A database password is kept in Systems Manager Parameter Store. Which parameter type keeps the value encrypted with AWS KMS? AWS Systems Manager User Guide: AWS KMS encryption for Parameter Store SecureString parameters
  • A secret holds an API credential of a kind for which Secrets Manager offers no managed rotation. What does Secrets Manager use to rotate it? AWS Secrets Manager: Rotate AWS Secrets Manager secrets
  • A team sells access to its REST API and must throttle each customer by that customer's own limits and quotas. What does API Gateway use to tell the customers apart? Amazon API Gateway Developer Guide: Usage plans and API keys for REST APIs in API Gateway
  • An Amazon SNS topic owned by another AWS account must be allowed to invoke a Lambda function. What grants that permission? AWS Lambda Developer Guide: Working with resource-based policies in Lambda
  • An application connects to Amazon RDS with IAM database authentication, so no password is stored. How long is each authentication token valid? Amazon RDS User Guide: IAM database authentication for MariaDB, MySQL, and PostgreSQL

Deployment 5

  • A CloudFormation stack will be deleted, but the Amazon S3 bucket it created must stay. Which attribute on the bucket resource keeps it? AWS CloudFormation Template Reference: DeletionPolicy attribute
  • A CodeDeploy deployment fails and is rolled back. How does CodeDeploy carry out the rollback? AWS CodeDeploy User Guide: Redeploy and roll back a deployment with CodeDeploy
  • A network stack exports its subnet IDs as outputs. Which intrinsic function lets an application stack use those exported values? AWS CloudFormation Template Reference: Fn::ImportValue
  • An Elastic Beanstalk application must switch to a new version without downtime. The team deploys the version to a second environment. What completes the blue/green deployment? AWS Elastic Beanstalk Developer Guide: Blue/Green deployments with Elastic Beanstalk
  • While developing, a team wants each local code change pushed quickly to its serverless application in the AWS Cloud for testing. Which AWS SAM CLI command is made for this? AWS SAM Developer Guide: Introduction to using sam sync to sync to AWS Cloud

Troubleshooting and Optimization 4

  • A corrected image was uploaded to the origin, but Amazon CloudFront keeps serving the old one from its edge caches. What removes the old file before it expires? Amazon CloudFront Developer Guide: Invalidate files to remove content
  • A team wants to learn that its public API is failing before customers report it, even at night when there is no traffic. Which CloudWatch feature runs scripts on a schedule against the endpoints? Amazon CloudWatch User Guide: Synthetic monitoring (canaries)
  • A team's CloudWatch Logs storage keeps growing, and nobody ever set a retention period on the log groups. How long is log data kept by default? Amazon CloudWatch Logs User Guide: Working with log groups and log streams
  • After an incident, a developer wants to search and analyze log data in CloudWatch Logs interactively with queries. Which feature does this? Amazon CloudWatch Logs User Guide: Analyzing log data with CloudWatch Logs Insights

How this list was compiled: Own questions, written to the four content domains and weightings of the exam guide Amazon Web Services publishes for AWS Certified Developer - Associate (DVA-C02), exam guide version 2.1 at https://docs.aws.amazon.com/aws-certification/latest/developer-associate-02/developer-associate-02.html (read 2026-10-09, with its four domain pages), with the exam length from https://aws.amazon.com/certification/certified-developer-associate/ (read 2026-10-09). The exam is one of those listed on https://aws.amazon.com/certification/ (read 2026-10-09). Facts were read on 2026-10-09 in AWS's public documentation at docs.aws.amazon.com and, where named, on aws.amazon.com. Each question names the page it was written from and links to it. Licence: Own work. Every question, wrong choice and explanation was written for this site from the task statements of the exam guide and the public AWS pages named in each question. Nothing is copied or reworded from an AWS exam, an AWS sample question or official practice question set, a practice product or a question dump.

How it works

This unofficial AWS practice test samples three certification exams: Cloud Practitioner, Solutions Architect Associate and Developer Associate. The 60 questions are our own, none comes from a real exam, and Amazon Web Services, Inc. has no part in this page.

Read the full guide

How AWS groups its exams

AWS's certification page, read on October 9, 2026, groups the exams in this page's table by level. Foundational: no prior experience needed. Associate: earlier cloud or IT experience recommended. Professional: two or more years of AWS experience required. Specialty: expertise in particular AWS technologies and services.

What these samples leave out

Each set splits its 20 questions across the exam's four domains by the weights in the exam guide. The real exams add multiple-response questions, which are not here. AWS lists November 30, 2026 as the last day to take the current Developer exam, DVA-C02.

  • On each of the three exams, 15 questions are unscored, and nothing marks which ones.
  • AWS's exam guides count an unanswered question as wrong and take nothing off for a guess.
  • Scoring is compensatory: you need to pass the exam as a whole, not each section.

Questions and answers

Is this AWS practice test free?

Yes. All 60 questions and their explanations are free to use, and the page asks for no sign-up.

Which AWS certification should I take first?

AWS calls Cloud Practitioner a good starting point for people with no prior IT or cloud experience. Its pages for the Solutions Architect and Developer Associate exams suggest earning Cloud Practitioner first if you have no IT work experience.

How many questions are on an AWS certification exam?

The three exams sampled here have 65 questions each. AWS allows 90 minutes for Cloud Practitioner and 130 minutes for each of the two Associate exams. The Professional exams in the table have 75 questions in 180 minutes.

What is the passing score for an AWS exam?

AWS reports a scaled score from 100 to 1,000. The exam guides set the minimum passing score at 700 for Cloud Practitioner and 720 for the Solutions Architect and Developer Associate exams.

Are these real AWS exam questions?

No. Each question was written for this site from AWS's public exam guides and documentation, and its explanation links the page it was checked against. Nothing is copied from an AWS exam or from AWS's sample or practice questions.

More tests

Show 7 more

Browse Safety and Trades