Free IT certification practice
Practice free. Pass with confidence.
Free, community-shared practice questions for AWS, Microsoft, CompTIA, Cisco, and more — organized with AI, explained in plain language, with instant feedback. No signup required to start.
Browse by provider
13 providers · 112 exam banksLatest exam question analyses
View all updates →-
ANS-C01
Global Accelerator with private ALB: restrict access to accelerator IPs
This ANS-C01 scenario tests AWS Global Accelerator access to an internal Application Load Balancer while preventing direct internet access.
-
AIF-C01
Mitigating Prompt Injection Risks in LLM Applications
Learn how to protect conversational agents from prompt injection attacks using defensive prompt templates.
-
AIF-C01
AI-Based Threat Detection for Suspicious IP Addresses
This question tests the application of AI in cybersecurity, specifically using anomaly detection to identify suspicious IP addresses by flagging deviations from normal network behavior.
-
CLF-C02
Why Moving Workloads to AWS Removes Data-Center Costs
This CLF-C02 question tests the six documented advantages of cloud computing: migrating on-premises workloads to AWS eliminates the expense of running and maintaining data centers, making A the
-
300-620
ACI Multi-Site MP-BGP EVPN Control Plane MTU Defaults
This question tests knowledge of the default MTU size for MP-BGP EVPN control-plane packets in Cisco ACI Multi-Site, which is 9000 bytes, requiring the Inter-Site Network to support at least 9000
-
300-620
Role of VRF in ACI VXLAN Endpoint Routing
This page explains why the VRF is the correct answer for determining remote endpoint IP addresses in ACI VXLAN headers, distinguishing it from BD, pcTag, and EPG.
-
300-610
Evaluating SAN Disaster Recovery Options for Non-Critical Workloads
This question evaluates SAN disaster recovery strategies, identifying cold standby as the optimal solution for non-critical applications where data loss tolerance is high.
-
300-610
Agentless Network Automation Tools: Ansible vs SaltStack
Identify the correct agentless automation tools for securing hard servers. Ansible and SaltStack allow management without installing additional software agents.
-
300-415
Localizing OMP-to-OSPF route advertisement on a service VPN
This 300-415 question tests a localized control policy that advertises an OMP-learned loopback into service-side OSPF; the correct configuration is option A, matching the /32 prefix in VPN 10 with an
-
300-415
Configuring EIGRP Peering on Service VPN in Cisco SD-WAN
This question tests your ability to correctly segregate transport and service configurations in Cisco Catalyst SD-WAN.
-
CLF-C02
Cost-Effective Uninterrupted EC2 Purchasing Options
For applications that must run continuously without interruption, Standard Reserved Instances are the most cost-effective EC2 purchasing option, offering up to a 72% discount over On-Demand pricing.
-
ANS-C01
Resolving Inter-Region Asymmetric Routing with Transit Gateway Appliance Mode
This question addresses inter-Region communication failures in a hub-and-spoke architecture due to asymmetric routing through inspection VPCs.
Most discussed questions
Community debate, expert analysis & FAQs-
AZ-104
Attach a Data Disk to Another VM with Minimum Downtime
When moving a data disk between Azure VMs, the fastest path is a hot detach: removing the disk from its current VM does not require powering off either machine, so both stay online. The correct first action is to detach the data disk, then attach it to the target VM.
-
AZ-104
Force Immediate Azure AD Connect Sync of New User
This AZ-104 scenario asks whether running Start-ADSyncSyncCycle -PolicyType Initial will immediately replicate a newly created on-premises Active Directory user to the weyland.com Azure AD tenant. The page establishes that the answer is No, because only -PolicyType Delta delivers the urgent, targeted sync cycle the requirement calls for.
-
PCA
Why Performance Bugs Appear Only in Production
This PCA question tests how to fix test and deployment procedures when performance defects escape to production. It establishes that raising load in test and staging environments (option C) reproduces production conditions and catches performance bugs before release.
-
ACE
Connecting to SQL Server on Compute Engine via RDP
This question addresses the most efficient method to connect to a Windows instance running SQL Server on Google Cloud Platform using Remote Desktop Protocol (RDP). It clarifies that while the GCP Console provides an RDP button, it does not support direct credential entry for immediate session establishment.
-
SAA-C03
Migrating 70 TB On-Premises NFS Data to Amazon S3
This question tests choosing the optimal data migration method to Amazon S3 for 70 TB of static video files when speed and minimal network bandwidth are required. AWS Snowball Edge is the correct answer because it physically transports data off-premises, avoiding network bandwidth entirely.
-
AZ-900
Azure App Service Plan Selection for Custom Domains and Dedicated Instances
This question evaluates the selection of an Azure App Service Plan that balances dedicated compute instances, custom domain support, and cost efficiency. The correct choice is Basic, as it meets all technical requirements including load balancing while minimizing costs compared to Standard or higher tiers.