Exam Question Decoder
"Master the art of finding the ONE best answer when multiple options seem correct. Train your brain to decode exam traps."
The 4-Step Question Decoder
Verb Hunt
Find the ACTION verbs. What does the question want you to DO?
Process ≠ Route ≠ Store ≠ Cache
Killer Phrase
Find the ONE phrase that instantly eliminates options.
"Block IP" kills Security Groups. "Exactly once" kills SQS Standard.
Service Role Check
Ask: Does this service actually DO that action?
Route 53 routes. Lambda@Edge processes. Know the difference!
AWS Preference
When tied, AWS prefers:
Managed > Self-managed | Serverless > Server
Killer Phrase Library
When you see these phrases, instantly eliminate certain services:
| If You See... | Eliminate | Choose |
|---|---|---|
| "Process at edge" | ✗ Route 53 | ✓ Lambda@Edge |
| "Block specific IP" | ✗ Security Groups | ✓ NACL |
| "Strictly ordered" | ✗ SQS Standard | ✓ SQS FIFO |
| "Real-time streaming" | ✗ Athena, SQS | ✓ Kinesis Streams |
| "Serverless" | ✗ EC2-based | ✓ Lambda/Fargate |
| "Millisecond latency" | ✗ RDS | ✓ DynamoDB/ElastiCache |
| "SQL injection/XSS" | ✗ Shield, SG, NACL | ✓ AWS WAF |
| "Auto-rotate secrets" | ✗ Parameter Store | ✓ Secrets Manager |
| "Linux + Shared files" | ✗ FSx Windows, EBS | ✓ EFS |
| "No code changes" | ✗ ElastiCache (needs code) | ✓ Aurora Reader Endpoint |
AWS Preference Patterns
When two services can technically work, AWS exams prefer:
Managed > Self-managed
NAT Gateway > NAT Instance
Serverless > Server-based
Lambda > EC2 for short tasks
Purpose-built > General
Kinesis > SQS for streaming
Integrated > Third-party
CloudWatch > External tools
Least privilege > Broad access
Resource policy > IAM role
Native encryption > Custom
SSE-KMS > Client-side
Pro Tips for 900+ Score
Read the last sentence first
The key constraint is often in the final requirement. Start from the bottom!
Look for absolutes
"MOST cost-effective", "LEAST operational overhead", "MINIMUM latency" are strong hints.
Focus on the difference
When options are similar, find the ONE component that differs and evaluate only that.
Combine triggers
Multiple triggers = high confidence. "Serverless" + "Event-driven" = Lambda. Always.