aws cloud practitioner practice exam Advanced Practice Exam: Hard Questions 2025

A financial services company must meet regulatory requirements that mandate all cryptographic operations use hardware security modules (HSMs) with dedicated single-tenant access, and they need to integrate these capabilities with their applications running on Amazon EC2. The company also requires the ability to export wrapped keys for disaster recovery purposes. Which AWS service combination meets these requirements?

A global enterprise has workloads distributed across AWS, on-premises data centers, and multiple edge locations. They need a unified approach to apply security policies, monitor compliance, and manage security findings across all environments from a single pane of glass. The solution must aggregate findings from multiple AWS security services and support automated remediation workflows. Which approach best addresses these requirements?

A SaaS provider operates a multi-tenant application where each customer's data must be cryptographically isolated using separate encryption keys, with customers able to revoke AWS's ability to decrypt their data at any time. The solution must also provide detailed audit trails of all key usage. Cost optimization is important as the company has over 10,000 tenants. What is the most appropriate encryption strategy?

An organization is designing a disaster recovery strategy for critical workloads across multiple AWS Regions. They require automatic failover with an RTO of 1 hour and RPO of 15 minutes, application-level health checks that trigger failover, and the ability to perform controlled failover tests without impacting production traffic. Which architectural approach best meets these requirements?

A machine learning startup runs training jobs that require GPU instances with high-performance storage and specific instance configurations. Jobs can be interrupted and resumed, typically running for 6-8 hours. The company wants to minimize costs while maintaining reasonable completion times. After initial training, they need to deploy models for inference with predictable low-latency requirements. What is the most cost-effective compute strategy?

A healthcare provider must ensure that Protected Health Information (PHI) stored in Amazon S3 remains encrypted at rest and in transit, with encryption keys that are rotated automatically and logged for all access attempts. The organization's compliance team requires the ability to independently verify that AWS cannot access the data without the customer's explicit involvement. Which solution architecture satisfies these requirements while maintaining AWS service integration?

An enterprise with hundreds of AWS accounts across multiple business units needs to centrally manage security policies, prevent the creation of non-compliant resources, and automatically remediate configuration drift. The solution must enforce preventive controls before resources are created and provide visibility into compliance status across the entire organization. What combination of AWS services achieves this most effectively?

A company's cloud costs have increased 300% over six months without corresponding business growth. Analysis shows costs are concentrated in data transfer charges, oversized EC2 instances running 24/7, and development resources left running in non-production accounts. They need a comprehensive cost optimization strategy with accountability and prevention mechanisms. What approach provides the most effective long-term cost governance?

A media company processes user-uploaded videos through a pipeline involving transcoding, thumbnail generation, metadata extraction, and content moderation. Processing times vary from 30 seconds to 2 hours per video. They need a serverless architecture that handles variable load (from 10 to 10,000 videos per hour), maintains processing order for videos from the same user, provides retry logic for failed steps, and minimizes costs during low-traffic periods. Which architectural pattern best meets these requirements?

An organization operates mission-critical applications requiring 24/7 access to AWS technical support with response times under 15 minutes for critical issues, architectural guidance for new service implementations, access to AWS Support API for integration with their ticketing system, and third-party software support for applications running on AWS. They're evaluating support plans to meet these requirements cost-effectively. Which AWS Support plan is the minimum level required?