AWS Training Topic-Wise Online Mock Tests & Free MCQ Practice
Select any course and syllabus topic below to launch a timed 50-MCQ engineering exam (up to 2 free attempts per topic daily) with instant code-level explanations.
Timed code-output & architecture MCQs with instant scorecard. Want spoken viva practice too?
Select Any IT Course (34 Courses • 100% Topics Covered)
AWS Training — Topic-Wise Mock Tests
Expand any module below to start a live timed MCQ exam across 244 Mock Test sets (max 2 free attempts per topic per day).
All Modules & Topics in AWS Training
AWS Cloud Computing Foundations — Shared Responsibility Model & Well-Architected Pillars
Purpose: To understand and apply AWS Cloud Computing Foundations — Shared Responsibility Model & Well-Architected Pillars in real AWS systems — specifically: How AWS replaces upfront CapEx data centers with elastic OpEx cloud primitives governed by the Shared Responsibility Model and the 6 Well-Architected Framework pillars, so your code stays reliable, fast, and easy to maintain in production.
AWS Global Infrastructure — Regions, Availability Zones, Local Zones & Edge Locations
Purpose: To understand and apply AWS Global Infrastructure — Regions, Availability Zones, Local Zones & Edge Locations in real AWS systems — specifically: Deep dive into geographically isolated AWS Regions, redundant Availability Zones linked via low-latency private fiber (< 2 ms), and global Edge PoPs, so your code stays reliable, fast, and easy to maintain in production.
AWS IAM Architecture — Users, Groups, JSON Policies, Conditions & Explicit Deny Precedence
Purpose: To understand and apply AWS IAM Architecture — Users, Groups, JSON Policies, Conditions & Explicit Deny Precedence in real AWS systems — specifically: How AWS IAM authenticates principals and evaluates identity-based, resource-based, and SCP JSON policy documents on every signed SigV4 API request, so your code stays reliable, fast, and easy to maintain in production.
AWS IAM Roles & STS — Trust Policies, Instance Profiles, OIDC Federation & AssumeRole
Purpose: To understand and apply AWS IAM Roles & STS — Trust Policies, Instance Profiles, OIDC Federation & AssumeRole in real AWS systems — specifically: Replacing static long-lived secrets with dynamic AWS Security Token Service (STS) ASIA temporary credentials for EC2, Lambda, GitHub OIDC, and cross-account access, so your code stays reliable, fast, and easy to maintain in production.
Amazon S3 Internals — Flat Key-Object Namespace, Strong Consistency, Versioning & Presigned URLs
Purpose: To understand and apply Amazon S3 Internals — Flat Key-Object Namespace, Strong Consistency, Versioning & Presigned URLs in real AWS systems — specifically: How Amazon S3 delivers 99.999999999% (11 nines) durability across >= 3 AZs with strong read-after-write consistency, versioning, and presigned direct-to-S3 transfers, so your code stays reliable, fast, and easy to maintain in production.
Amazon S3 Storage Classes — Standard, Intelligent-Tiering, Standard-IA, One Zone-IA & Glacier
Purpose: To understand and apply Amazon S3 Storage Classes — Standard, Intelligent-Tiering, Standard-IA, One Zone-IA & Glacier in real AWS systems — specifically: Selecting the optimal S3 Storage Class by balancing per-GB storage rate, minimum billable object size (128 KB), minimum storage duration (30/90/180 days), and retrieval latency, so your code stays reliable, fast, and easy to maintain in production.
S3 Lifecycle Management — Waterfall Transitions, Noncurrent Version Expiry & Multipart Cleanup
Purpose: To understand and apply S3 Lifecycle Management — Waterfall Transitions, Noncurrent Version Expiry & Multipart Cleanup in real AWS systems — specifically: Automating zero-touch object tiering, compliance expiration, version pruning, and orphaned multipart chunk cleanup via S3 Lifecycle Rules, so your code stays reliable, fast, and easy to maintain in production.
Amazon CloudFront CDN — Edge Caching, Origin Access Control (OAC), Signed URLs & Origin Shield
Purpose: To understand and apply Amazon CloudFront CDN — Edge Caching, Origin Access Control (OAC), Signed URLs & Origin Shield in real AWS systems — specifically: Accelerating static assets, HLS video streams, and dynamic APIs across global Edge PoPs while shielding private S3 buckets via Origin Access Control (OAC), so your code stays reliable, fast, and easy to maintain in production.
Amazon EC2 Architecture — Nitro Instances, Purchasing Models, User Data & IMDSv2 Hardening
Purpose: To understand and apply Amazon EC2 Architecture — Nitro Instances, Purchasing Models, User Data & IMDSv2 Hardening in real AWS systems — specifically: Provisioning virtual servers across General Purpose, Compute/Memory Optimized, and AWS Graviton ARM families while securing instance metadata via IMDSv2, so your code stays reliable, fast, and easy to maintain in production.
Amazon EBS Block Storage — gp3 vs io2 Volumes, AZ Affinity, Snapshots & KMS Encryption
Purpose: To understand and apply Amazon EBS Block Storage — gp3 vs io2 Volumes, AZ Affinity, Snapshots & KMS Encryption in real AWS systems — specifically: Persistent network-attached block storage for EC2 with independent IOPS/throughput scaling on gp3, mission-critical 64k+ IOPS on io2, and incremental S3-backed snapshots, so your code stays reliable, fast, and easy to maintain in production.
AWS Security Groups — Stateful ENI Firewalls, Implicit Deny & SG-ID Chaining
Purpose: To understand and apply AWS Security Groups — Stateful ENI Firewalls, Implicit Deny & SG-ID Chaining in real AWS systems — specifically: How Security Groups act as stateful virtual firewalls at the Elastic Network Interface (ENI) level supporting Allow-only rules and dynamic Security Group ID referencing, so your code stays reliable, fast, and easy to maintain in production.
Elastic Load Balancing — ALB vs NLB, Target Groups, Health Checks & X-Forwarded-For
Purpose: To understand and apply Elastic Load Balancing — ALB vs NLB, Target Groups, Health Checks & X-Forwarded-For in real AWS systems — specifically: Distributing Multi-AZ traffic across EC2 instances, ECS IP tasks, and Lambda functions via Layer-7 ALB host/path rules or Layer-4 static-IP NLB, so your code stays reliable, fast, and easy to maintain in production.
Amazon VPC Internals — CIDR Blocks, 5 Reserved Subnet IPs, Route Tables & Internet Gateways
Purpose: To understand and apply Amazon VPC Internals — CIDR Blocks, 5 Reserved Subnet IPs, Route Tables & Internet Gateways in real AWS systems — specifically: Building logically isolated software-defined cloud networks with non-overlapping RFC-1918 CIDRs, public/private route tables, VPC DNS (+2 IP), and Flow Logs, so your code stays reliable, fast, and easy to maintain in production.
AWS NAT Gateways & VPC Endpoints — Outbound-Only Private Egress, Multi-AZ HA & S3/DynamoDB Bypass
Purpose: To understand and apply AWS NAT Gateways & VPC Endpoints — Outbound-Only Private Egress, Multi-AZ HA & S3/DynamoDB Bypass in real AWS systems — specifically: Enabling private-subnet outbound internet patching via managed NAT Gateways while slashing per-GB NAT fees with free Gateway VPC Endpoints for S3 and DynamoDB, so your code stays reliable, fast, and easy to maintain in production.
Network ACL (NACL) vs Security Group — Stateless Subnet Filtering, Rule Ordering & Ephemeral Ports
Purpose: To understand and apply Network ACL (NACL) vs Security Group — Stateless Subnet Filtering, Rule Ordering & Ephemeral Ports in real AWS systems — specifically: Comparing subnet-boundary stateless NACLs (ordered Allow/Deny rules + explicit ephemeral port rules) with ENI-boundary stateful Security Groups, so your code stays reliable, fast, and easy to maintain in production.
Amazon RDS Architecture — Multi-AZ Synchronous Failover, Read Replicas, PITR & RDS Proxy
Purpose: To understand and apply Amazon RDS Architecture — Multi-AZ Synchronous Failover, Read Replicas, PITR & RDS Proxy in real AWS systems — specifically: Provisioning managed PostgreSQL/MySQL/Aurora databases in isolated DB Subnet Groups with automated Multi-AZ DNS failover, Point-in-Time Recovery, and RDS Proxy pooling, so your code stays reliable, fast, and easy to maintain in production.
Amazon DynamoDB — Partition & Sort Keys, Query vs Scan, GSI/LSI, RCU/WCU & Streams
Purpose: To understand and apply Amazon DynamoDB — Partition & Sort Keys, Query vs Scan, GSI/LSI, RCU/WCU & Streams in real AWS systems — specifically: Delivering predictable single-digit millisecond latency at any scale using high-cardinality Partition Keys, B-tree Sort Keys, On-Demand/Provisioned capacity, and DynamoDB Streams, so your code stays reliable, fast, and easy to maintain in production.
AWS Lambda Internals — Firecracker Execution Lifecycle, Cold Starts, Concurrency & Idempotency
Purpose: To understand and apply AWS Lambda Internals — Firecracker Execution Lifecycle, Cold Starts, Concurrency & Idempotency in real AWS systems — specifically: Event-driven serverless compute scaling from zero to thousands of concurrent microVMs with proportional memory-to-vCPU allocation (1,769 MB = 1 full vCPU) and max 15-minute execution, so your code stays reliable, fast, and easy to maintain in production.
Amazon API Gateway — HTTP vs REST vs WebSocket APIs, Authorizers, Throttling & 29s Limit
Purpose: To understand and apply Amazon API Gateway — HTTP vs REST vs WebSocket APIs, Authorizers, Throttling & 29s Limit in real AWS systems — specifically: Securing and throttling serverless APIs at scale using Cognito/JWT Authorizers, Usage Plans, Token-Bucket Burst Limits, and Lambda Proxy Integration, so your code stays reliable, fast, and easy to maintain in production.
Amazon SQS — Standard vs FIFO Queues, Visibility Timeout, Long Polling & Dead-Letter Queues
Purpose: To understand and apply Amazon SQS — Standard vs FIFO Queues, Visibility Timeout, Long Polling & Dead-Letter Queues in real AWS systems — specifically: Decoupling producer spikes from downstream workers with SQS Standard (unlimited throughput, at-least-once) and FIFO (.fifo, MessageGroupId ordering, deduplication), Long Polling, and DLQs, so your code stays reliable, fast, and easy to maintain in production.
Remote Terraform State in Encrypted S3 + DynamoDB State Locking
Purpose: To understand and apply Remote Terraform State in Encrypted S3 + DynamoDB State Locking in real AWS systems — specifically: Prevent two engineers or CI pipelines from corrupting cloud state simultaneously, so your code stays reliable, fast, and easy to maintain in production.
Reusable VPC, ALB & RDS Modules Across Dev/Stage/Prod Workspaces
Purpose: To understand and apply Reusable VPC, ALB & RDS Modules Across Dev/Stage/Prod Workspaces in real AWS systems — specifically: Provision identical, auditable AWS environments in minutes with zero console click-ops, so your code stays reliable, fast, and easy to maintain in production.
IAM OIDC GitHub Actions Federation (Zero Long-Lived AWS Access Keys)
Purpose: To understand and apply IAM OIDC GitHub Actions Federation (Zero Long-Lived AWS Access Keys) in real AWS systems — specifically: Deploy to AWS from CI using short-lived STS tokens instead of leak-prone static keys, so your code stays reliable, fast, and easy to maintain in production.
Drift Detection, Policy-as-Code Guardrails & Tagging Enforcement
Purpose: To understand and apply Drift Detection, Policy-as-Code Guardrails & Tagging Enforcement in real AWS systems — specifically: Block unencrypted buckets or public security groups automatically before apply, so your code stays reliable, fast, and easy to maintain in production.
Amazon ECR Image Scanning & Serverless ECS Fargate Task Definitions
Purpose: To understand and apply Amazon ECR Image Scanning & Serverless ECS Fargate Task Definitions in real AWS systems — specifically: Run production containers without patching EC2 hosts, using per-task IAM roles, so your code stays reliable, fast, and easy to maintain in production.
ALB Target Group Health Checks & ECS Service Auto Scaling
Purpose: To understand and apply ALB Target Group Health Checks & ECS Service Auto Scaling in real AWS systems — specifically: Scale container tasks seamlessly on CPU/request spikes with zero dropped connections, so your code stays reliable, fast, and easy to maintain in production.
AWS Lambda Cold-Start Tuning, API Gateway & DynamoDB Single-Table Patterns
Purpose: To understand and apply AWS Lambda Cold-Start Tuning, API Gateway & DynamoDB Single-Table Patterns in real AWS systems — specifically: Build pay-per-request serverless APIs with sub-10ms DynamoDB lookups, so your code stays reliable, fast, and easy to maintain in production.
Decoupled Microservices with SQS Dead-Letter Queues, SNS & EventBridge
Purpose: To understand and apply Decoupled Microservices with SQS Dead-Letter Queues, SNS & EventBridge in real AWS systems — specifically: Absorb 10x traffic bursts reliably and isolate failed events for safe replay, so your code stays reliable, fast, and easy to maintain in production.
IAM Permission Boundaries, SCPs & Least-Privilege Policy Analysis
Purpose: To understand and apply IAM Permission Boundaries, SCPs & Least-Privilege Policy Analysis in real AWS systems — specifically: Contain blast radius across multi-account AWS Organizations workloads, so your code stays reliable, fast, and easy to maintain in production.
Envelope Encryption with AWS KMS & Automatic Secrets Manager Rotation
Purpose: To understand and apply Envelope Encryption with AWS KMS & Automatic Secrets Manager Rotation in real AWS systems — specifically: Rotate RDS credentials and API keys automatically without redeploying application code, so your code stays reliable, fast, and easy to maintain in production.
AWS WAF Managed Rules, Shield DDoS Protection & VPC Endpoints (PrivateLink)
Purpose: To understand and apply AWS WAF Managed Rules, Shield DDoS Protection & VPC Endpoints (PrivateLink) in real AWS systems — specifically: Block SQLi/XSS bot traffic at CloudFront edge and keep S3/Dynamo traffic off public internet, so your code stays reliable, fast, and easy to maintain in production.
CloudTrail Audit Trails, GuardDuty Threat Detection & AWS Config Rules
Purpose: To understand and apply CloudTrail Audit Trails, GuardDuty Threat Detection & AWS Config Rules in real AWS systems — specifically: Detect anomalous API calls and compliance drift within minutes, so your code stays reliable, fast, and easy to maintain in production.
RTO vs RPO Tiers: Backup/Restore, Pilot Light, Warm Standby & Active-Active
Purpose: To understand and apply RTO vs RPO Tiers: Backup/Restore, Pilot Light, Warm Standby & Active-Active in real AWS systems — specifically: Match business continuity SLAs to exact Route 53 failover and RDS cross-region designs, so your code stays reliable, fast, and easy to maintain in production.
CloudWatch Composite Alarms, Logs Insights, X-Ray Tracing & Dashboards
Purpose: To understand and apply CloudWatch Composite Alarms, Logs Insights, X-Ray Tracing & Dashboards in real AWS systems — specifically: Pinpoint cross-service AWS latency bottlenecks and page on-call teams before outages spread, so your code stays reliable, fast, and easy to maintain in production.
S3 Intelligent-Tiering, CloudFront Origin Shield & RDS Read Replicas
Purpose: To understand and apply S3 Intelligent-Tiering, CloudFront Origin Shield & RDS Read Replicas in real AWS systems — specifically: Slash egress bandwidth bills and database CPU load simultaneously, so your code stays reliable, fast, and easy to maintain in production.
AWS Budgets, Cost Anomaly Alerts, Savings Plans & Right-Sizing Audits
Purpose: To understand and apply AWS Budgets, Cost Anomaly Alerts, Savings Plans & Right-Sizing Audits in real AWS systems — specifically: Cut monthly AWS cloud spend by 30–50% without sacrificing reliability, so your code stays reliable, fast, and easy to maintain in production.
AWS Organizations, Service Control Policies (SCPs), IAM Permission Boundaries & OIDC
Purpose: To understand and apply AWS Organizations, Service Control Policies (SCPs), IAM Permission Boundaries & OIDC in real AWS systems — specifically: Enforce multi-account security guardrails and keyless CI/CD deployments without static access keys, so your code stays reliable, fast, and easy to maintain in production.
AWS KMS Customer-Managed Keys, Secrets Manager Rotation & WAF + Shield Protection
Purpose: To understand and apply AWS KMS Customer-Managed Keys, Secrets Manager Rotation & WAF + Shield Protection in real AWS systems — specifically: Encrypt S3, EBS, and RDS data at rest and block SQLi/bot layer-7 attacks at CloudFront/ALB, so your code stays reliable, fast, and easy to maintain in production.
AWS Cost Explorer, Budgets, Savings Plans, S3 Intelligent-Tiering & Right-Sizing
Purpose: To understand and apply AWS Cost Explorer, Budgets, Savings Plans, S3 Intelligent-Tiering & Right-Sizing in real AWS systems — specifically: Prevent surprise cloud bills with automated anomaly alerts and storage/compute lifecycle rules, so your code stays reliable, fast, and easy to maintain in production.
Disaster Recovery Tiers: Backup & Restore, Pilot Light, Warm Standby & Multi-Site Active-Active
Purpose: To understand and apply Disaster Recovery Tiers: Backup & Restore, Pilot Light, Warm Standby & Multi-Site Active-Active in real AWS systems — specifically: Match exact RTO and RPO business targets to cost-effective AWS multi-region architectures, so your code stays reliable, fast, and easy to maintain in production.
Centralized Observability with CloudWatch Embedded Metrics, X-Ray Tracing & CloudTrail
Purpose: To understand and apply Centralized Observability with CloudWatch Embedded Metrics, X-Ray Tracing & CloudTrail in real AWS systems — specifically: Correlate API latency, Lambda cold starts, and IAM audit trails during live incident triage, so your code stays reliable, fast, and easy to maintain in production.
AWS Solutions Architect Scenario Walkthroughs & Production Cutover Checklists
Purpose: To understand and apply AWS Solutions Architect Scenario Walkthroughs & Production Cutover Checklists in real AWS systems — specifically: Solve real SAA-C03 architecture trade-off questions across networking, storage, and serverless, so your code stays reliable, fast, and easy to maintain in production.