How To Pass AWS Certified Cloud Practitioner (CLF-C01) Exam?

test2021-10-16T03:53:01+00:00

By test AWS Certified Cloud Practitioner, CLF-C01, CLF-C01 dumps, CLF-C01 free dumps, CLF-C01 free questions, CLF-C01 practice test, CLF-C01 questions and answers, CLF-C01 study guide 0 Comments

To earn AWS Certified Cloud Practitioner certification, you will need to take and pass the AWS Certified Cloud Practitioner exam (CLF-C01). AWS Certified Cloud Practitioner (CLF-C01) is the right certification to begin your journey in the AWS cloud that helps you build your AWS Cloud knowledge by learning about AWS Cloud concepts, AWS services, security, architecture, pricing, and support.

How To Pass AWS Certified Cloud Practitioner (CLF-C01) Exam? FreeTestShare CLF-C01 questions and answers with exam simulator is considerably more effective in familiarizing yourself with the format and type of CLF-C01 exam paper. You can now use this free practice test to evaluate your preparation.

Page 1 of 19

1. What is the MOST effective resource for staying up to date on AWS security

announcements?

AWS Personal Health Dashboard

AWS Secrets Manager

AWS Security Bulletins

Amazon Inspector

2. A bank needs to store recordings of calls made to its contact center tor 6 years. The recordings must be accessible within 48 hours from the time they are requested.

Which AWS service will provide a secure and cost-effective solution for retaining these files?

Amazon DynamoDB

Amazon S3 Glacier

Amazon Connect

Amazon ElastiCache

3. A company has performance and regulatory requirements that call for it to run its workload only in its on-premises data center.

Which AWS services or resources should the company use? (Select TWO)

Amazon Pinpoint

Amazon WorkLink

AWS Outposts

AWS Snowball Edge

AWS AppSync

4. Which AWS services can be used to set up NoSQL databases? (Select TWO.)

Amazon Redshilt

Amazon Aurora

Amazon DynamoDB

Amazon S3

Amazon DocumentDB (with MongoDB compalibility)

5. Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking?

Amazon RDS

Amazon EC2

Amazon ElastiCache

AWS Fargate

6. Which AWS service would you use to obtain compliance reports and certificates?

AWS Artifact

AWS Lambda

Amazon Inspector

AWS Certificate Manager

7. A company has a compliance requirement to encrypt data in transit and at rest. The company is serving the content through Amazon EC2 instances behind an Elastic Load Balancer and is storing data in Amazon Elastic Block Store (Amazon EBS) volumes

Which combination of AWS services should the company use to stay compliant with this requirement? (Select TWO)

Amazon GuardDuty

AWS Shield

AWS Certificate Manager (ACM)

AWS Secrets Manager

AWS Key Management Service (AWS KMS)

8. Which AWS service provides recommendations for rightsizing AWS resources such as Amazon EC2 instances, Amazon Elastic Block Store (Amazon EBS) volumes and Amazon RDS databases to help users reduce costs?

Amazon Inspector

AWS Trusted Advisor

AWS Service Health Dashboard

Amazon Forecast

9. Which service stores objects, provides real-time access to those objects, and offers versioning and lifecycle capabilities?

Amazon Glacier

AWS Storage Gateway

Amazon S3

Amazon EBS

10. In which scenario should Amazon EC2 Spot Instances be used?

A company wants to move its main website to AWS from an on-premises web server.

A company has a number of application services whose Service Level Agreement (SLA) requires 99.999% uptime.

A company’s heavily used legacy database is currently running on-premises.

A company has a number of infrequent, interruptible jobs that are currently using On-Demand Instances.

Page 2 of 19

11. which amazon ec2 pricing model should be used to comply with per core software license requirements?

Dedicated Hosts

On-Demand Instances

Spot Instances

Reserved Instances

12. An application runs on multiple Amazon EC2 instances that access a shared file system simultaneously

Which AWS storage service should be used?

Amazon EBS

Amazon EFS

Amazon S3

AWS Artifact

13. Which of the following services have Distributed Denial of Service (DDoS) mitigation features? (Select TWO)

AWSWAF

Amazon DynamoDB

Amazon EC2

Amazon CloudFront

Amazon Inspector

14. A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross-site scripting

Which AWS service should the company use?

Amazon GuardDuty

AWS WAF

AWS Trusted Advisor

Amazon Inspector

15. Which AWS service or feature is used to send both text and email messages from distributed applications?

Amazon Simple Notification Service (Amazon SNS)

Amazon Simple Email Service (Amazon SES)

Amazon CloudWatch alerts

Amazon Simple Queue Service (Amazon SQS)

16. Which architecture concept describes the ability to deploy resources on demand and release resources when they are no longer needed?

High availability

Decoupled architecture

Resilience

Elasticity

17. What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?

AWS Certificate Manager

AWS Systems Manager

AWS Artifact

Amazon Inspector

18. A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS.

Which security measures fall under the responsibility of AWS? (Select TWO.)

Running a virus scan on EC2 instances

Protecting against IP spoofing and packet sniffing

Installing the latest security patches on the RDS instance

Encrypting communication between the EC2 instances and the Elastic Load Balancer

Configuring a security group and a network access control list (NACL) for EC2 instances

19. A company with a Developer-level AWS Support plan provisioned an Amazon RDS database and cannot to it.

Who should the developer contact for this level of support?

AWS Support using a support case

AWS Professional Services

AWS Technical Account Manager

AWS consulting partners

20. Which Amazon RDS feature can be used to achieve high availability?

Multiple Availability Zones

Amazon Reserved Instances

Provisioned IOPS storage

Enhanced monitoring

Page 3 of 19

21. Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?

Ensuring network connectivity from AWS to the internet

Patching and fixing flaws within the AWS Cloud infrastructure

Ensuring the physical security of cloud data centers

Ensuring Amazon EBS volumes are backed up

22. Which of the following services has a primarily encryption-related purpose?

AWS Security Token Service (AWS STS)

Amazon EMR

AWS Key Management Service (AWS KMS)

Amazon Macie

23. Which AWS service enables users to consolidate billing across multiple accounts?

Amazon QuickSight

AWS Organizations

AWS Budgets

Amazon Forecast

24. How can a user achieve high availability for a web application hosted on AWS?

Use a Classic Load Balancer across multiple AWS Regions

Use an Application Load Balancer across multiple Availability Zones in one AWS Region

Set up automatic scaling and load balancing with another application instance running on premises

Use the AWS Region with the highest number of Availability Zones

25. Which AWS service should be used to monitor Amazon EC2 instances for CPU and network utilization?

Amazon Inspector

AWS CloudTtail

Amazon CloudWatch

AWS Config

26. A company is planning to launch an ecommerce site in a single AWS Region to a worldwide user base.

Which AWS services will allow the company to reach users and provide low latency and high transfer speeds? (Select TWO)

Application Load Balancer

AWS Global Accelerator

AWS Direct Connect

Amazon CloudFront

AWS Lambda

27. AWS Budgets can be used to:

prevent a given user from creating a resource

send an alert when the utilization of Reserved Instances drops below a certain percentage.

set resource limits in AWS accounts to prevent overspending

split an AWS bill across multiple forms of payment.

28. A company with AWS Enleiprise Support needs help understanding its monthly AWS bill and wants to implement billing best practices.

Which AWS tool or resource is available to accomplish these goals?

Resource lagging

AWS Concierge Support team

AWS Abuse team

AWS Support

29. A user needs to regularly audit and evaluate the setup of all AWS resources, identify non-compliant accounts, and be notified when a resource changes.

Which AWS service can be used to meet these requirements?

AWS Trusted Advisor

AWS Config

AWS Resource Access Manager

AWS Systems Manager

30. A company has existing software licenses that it wants bring to AWS, but the licensing model requires licensing physical cores.

How can the company meet this requirement in the AWS cloud?

Launch an Amazon EC2 instance with default tenancy

Launch an Amazon EC2 instance on a Dedicated Host

Create an On-Demand Capacity Reservation

Purchase Dedicated Reserved Instances

Page 4 of 19

31. What is a responsibility of AWS in the shared responsibility model?

Updating the network ACLs to block traffic to vulnerable ports.

Patching operating systems running on Amazon EC2 instances.

Updating the firmware on the underlying EC2 hosts.

Updating the security group rules to block traffic to the vulnerable ports.

32. Which AWS services provide a way to extend an on-premises architecture lo the AWS Cloud? (Select TWO)

Amazon EBS

AWS Direct Connect

Amazon CloudFront

AWS Storage Gateway

Amazon Connect

33. Which AWS service enables users to deploy infrastructure as code by automating the process of provisioning resources?

Amazon GameLift

AWS CloudFormation

AWS Data Pipeline

AWS Glue

34. Which managed AWS service provides real-time guidance on AWS security best practices?

AWS X-Ray

AWS Trusted Advisor

Amazon CloudWatch

AWS Systems Manager

35. A user needs a relational database but does not have the resources to manage the hardware, resiliency, and replication.

Which AWS service option meets the user's requirements?

Run MySQL on Amazon Elastic Container Service (Amazon ECS).

Run MySQL on Amazon EC2.

Choose Amazon RDS for MySQ

Choose Amazon ElastiCache for Redis.

36. According to the AWS shared responsibility model who ts responsible for configuration management?

It is solely the responsibility of the customer

It is solely the responsibility of AWS

It is shared between AWS and the customer

It is not part of the AWS shared responsibility model

37. What is Amazon CloudWatch?

A code repository with customizable build and team commit features.

A metrics repository with customizable notification thresholds and channels.

A security configuration repository with threat analytics.

A rule repository of a web application firewall with automated vulnerability prevention features.

38. After migrating a workload to AWS, which associated costs must a user still manage?

364 of 65 Flag for Review

Staff to manage the hardware assets

Physical access control

Software licenses

Power and cooling

39. Which AWS cloud architecture principle states that systems should reduce interdependences?

Scalability

Services not servers

Removing single points of failure

Loose coupling

40. A company is required lo store its data close to its primary users.

Which benefit of the AWS Cloud supports this requirement?

Security

High availability

Elasticity

Global footprint

Page 5 of 19

41. Which AWS service provides a customized view of the health of specific AWS services that power a customer’s workloads running on AWS?

AWS Service Health Dashboard

AWS X-Ray

AWS Personal Health Dashboard

Amazon CloudWatch

42. A cloud practitioner launched a blog hosted on AWS and needs to register a domain name for the blog.

Which AWS service will meet this requirement?

Amazon Connect

Amazon Route 53

Amazon CloudFront

AWS Global Accelerator

43. A security engineer wants a single-tenant AWS solution to create, control, and manage their own cryptographic keys to meet regulatory compliance requirements for data security.

Which AWS service should the engineer use?

AWS Key Management Service (AWS KMS)

AWS Certificate Manager (ACM)

AWS CloudHSM

AWS Systems Manager

44. A company has multiple AWS accounts and wants to simplify and consolidate its billing process.

Which AWS service will achieve this?

AWS Cost and Usage Reports

AWS Organizations

AWS Cost Explorer

AWS Budgets

45. What technology enables compute capacity to adjust as loads change?

Load balancing

Automatic failover

Round robin

Auto Scaling

46. Which service would provide network connectivity in a hybrid architecture that includes the AWS Cloud?

Amazon VPC

AWS Direct Connect

AWS Directory Service

Amazon API Gateway

47. How does AWS charge for AWS Lambda?

Users bid on the maximum price they are willing to pay per hour.

Users choose a 1-, 3- or 5-year upfront payment term.

Users pay for the required permanent storage on a file system or in a database.

Users pay based on the number of requests and consumed compute resources.

48. A company is releasing a business-critical application Before the release the company needs strategic planning assistance from AWS. During the release, it needs infrastructure event management and real-time Support

How can these requirements be met?

Access AWS Trusted Advisor

Contact the AWS Partner Network (APN).

Contact AWS Professional Services

49. What is an IAM best practice for AWS account root user access keys?

Delete all root user access keys, if possible.

Use root user credentials to access sensitive information stored on AW

Allow the system administrator group to use the root user credentials for daily access.

Use root user credentials to access production database instances.

50. A company is designing a new stateful application to run on AWS.

Which design patterns will help reduce risk? (Select TWO.)

Consume compute resources using Amazon EC2 Spot instance types.

Use Amazon S3 with a bucket policy that ensures the least restrictive access to the data.

Separate the database tier from the application tier using Amazon RD

Consolidate application resources into one or two large instance types to minimize the number of components to be managed.

Build a microservices-based architecture to break out application services into containers for the application tier.

Page 6 of 19

51. What is an Availability Zone in AWS?

One or more physical data centers

A completely isolated geographic location

One or more edge locations based around the world

A data center location with a single source of power and networking

52. During a compliance review, one of the auditors requires a copy of the AWS SOC 2 report.

Which service should be used to submit this request?

AWS Personal Health Dashboard

AWS Trusted Advisor

AWS Artifact

Amazon S3

53. where can user find a catalog of AWS recognized providers of third party security solutions?

AWS Service Catalog

AWS Marketplace

AWS Quick Start

AWS CodeDeploy

54. What does it mean to grant least privilege to AWS IAM users?

It is granting permissions to a single user only.

It is granting permissions using AWS IAM policies only.

It is granting AdministratorAccess policy permissions to trustworthy users.

It is granting only the permissions required to perform a given task.

55. Which of the following security-related services does AWS offer? (Select TWO.)

Multi-factor authentication physical tokens

AWS Trusted Advisor security checks

Data encryption

Automated penetration testing

Amazon S3 copyrighted content detection

56. If a user has an AWS account with an enterprise level AWS support plan, who is the primary point of contact for billing or account inquiries?

Solutions architect

AWS Concierge Support team

An AWS Marketplace seller

AWS Partner Network (APN) partner

57. Which task is AWS responsible for in the shared responsibility model for security and compliance?

Granting access to individuals and services

Encrypting data in transit

Updating Amazon EC2 host firmware

Updating operating systems

58. Which aspect of AWS infrastructure enables global deployment of compute and storage?

Availability Zones

Regions

Tags

Resource groups

59. A Cloud Practitioner must determine if any security groups in an AW account have been provisioned to allow unrestricted access for specific ports

What is the SIMPLEST way to do this?

Review the inbound rules for each security group in the Amazon EC2 management console to check for port 0.0.0.0/0.

Run AWS Trusted Advisor and review the findings

Open the AWS IAM console and check the inbound rule filters for open access

In AWS Config, create a custom rule that invokes an AWS Lambda function to review firewall rules for inbound access

60. Access keys in AWS Identity and Access Management (IM1) are used to

make programmatic calls to AWS from AWS APIs

authenticate to AWS CodeCommit repositories

Page 7 of 19

61. Which of the following is a component of the shared responsibility model managed entirely by AWS?

Patching operating system software

Encrypting data

Enforcing multi-factor authentication

Auditing physical data center assets

62. Which AWS service helps identify malicious or unauthorized activities in AWS accounts and workloads?

Amazon Rekognition

AWS Trusted Advisor

Amazon GuardDuty

Amazon CloudWatch

63. Which AWS service or feature natively provides an encrypted connection that can be used to move data from on premises infrastructure to the AWS Cloud?

AWS Direct Connect

VPC endpoint

AWS VPN

AWS PrivateLink

64. Which storage service can be used as a low-cost option for hosting static websites?

Amazon Glacier

Amazon DynamoDB

Amazon Elastic File System (Amazon EFS)

Amazon Simple Storage Service (Amazon S3)

65. A Cloud Practitioner is asked how to estimate the cost of using a new application on AWS.

What is the MOST appropriate response?

Inform the user that AWS pricing allows for on-demand pricing.

Direct the user to the AWS Simple Monthly Calculator for an estimate.

Use Amazon QuickSight to analyze current spending on-premises.

Use Amazon AppStream 2.0 for real-time pricing analytics.

66. A company must store critical business data in Amazon S3 with a backup to another AWS Region

How can this be achieved?

Use an Amazon CloudFront Content Delivery Network (CDN) to cache data globally

Set up Amazon S3 cross-region replication to another AWS Region

Configure the AWS Backup service to back up the data to another AWS Region

Take Amazon S3 bucket snapshots and copy that data to another AWS Region

67. Which AWS services provide a way to extend an on-premises architecture to the aws cloud?

Amazon EBS

Amazon Connect

AWS Storage GatewayAWS CLOUD PRACTITIONER DUMPS

Amazon CloudFront

AWS Direct Connect

68. Which AWS feature should a customer leverage to achieve high availability of an application?

AWS Direct Connect

Availability Zones

Data centers

Amazon Virtual Private Cloud (Amazon VPC)

69. Which of the following are AWS Cloud security resources? (Select TWO.)

Real-time vulnerability scans from Amazon Kinesis.

AWS security solutions in the AWS Marketplace.

Open-source penetration testing results available in Amazon Cognito.

AWS whitepapers related to security best practices.

Security analyses of READM

md files within application repositories stored in AWS CodeCommit.

70. Which of the following is a fully managed graph database service on AWS?

Amazon Aurora

Amazon FSx

Amazon DynamoDB

Amazon Neptune

Page 8 of 19

71. When comparing AWS to on-premises total cost of ownership (TCO), what costs are included with AWS?

Data center security

Business analysis

Project management

Operating system administration

72. Which of the following are benefits of AWS Global Accelerator? (Select TWO)

Reduced cost to run services on AWS

Improved availability of applications deployed on AWS

Higher durability of data stored on AWS

Decreased latency to reach applications deployed on AWS

Higher security of data stored on AWS

73. Which AWS service offers persistent storage for a file system?

Amazon S3

Amazon EC2 instance store

Amazon Elastic Block Store (Amazon EBS)

Amazon ElastiCache

74. Which of the following should be considered when performing a Total Cost of Ownership (TCO) analysis?

Currency fluctuations

Data center overhead

Data security model

Network port utilization

75. Under the AWS shared responsibility model, customers are responsible for which aspects of security in the cloud? (Choose two.)

Visualization management

Hardware management

Encryption management

Facilities management

Firewall management

76. Which functions can users perform using AWS KMS?

Create and manage AWS access keys for the AWS account root user.

Create and manage AWS access keys for an AWS account IAM user.

Create and manage keys for encryption and decryption of data.

Create and manage keys for multi-factor authentication.

77. Which of the Reserved Instance (RI) pricing models can change the attributes of the RI as long as the exchange results in the creation of RIs of equal or greater value?

Dedicated RIs

Scheduled RIs

Convertible RIs

Standard RIs

78. Which aws service is suitable for an event driven workload?

Amazon EC2

AWS Elastic Beanstalk

AWS Lambda

Amazon Lumberyard

79. Which AWS services are defined as global instead of regional? (Select TWO.)

Amazon Route 53

Amazon EC2

Amazon S3

Amazon CloudFront

Amazon DynamoDB

80. To optimize costs and resource usage, a company needs to monitor the operations health of its entire system of AWS Cloud resources.

Which AWS service will meet these requirements?

AWS Organizations

Amazon CloudWatch

AWS CloudTrail

AWS Config

Page 9 of 19

81. Which requirement must be met for a member account to be unlinked from an AWS organization account?

The linked account must be activity compliant with AWS System and Organization Controls (SOC)

The payer and the linked account both create AWS Support cases to request that the member account be unlinked from the organization.

The monitor account must meet the requirements of a standalone account.

The payer account must be used to remove the linked account from the organization

82. According to the AWS shared responsibility model who is responsible for configuration?

It is solely the responsible of the customer

It is solely the responsibility of AWS

It is shared between AWS and the customer

It is not part of the AWS shared responsibility model

83. On demand reserved and spot instances belong to which principle of cloud architecture design?

Performance

Removing single points off failure

Loose coupling

Optimizing for cost

84. Which AWS managed service is used to host databases?

AWS Batch

AWS Artifact

AWS Data Pipeline

Amazon RDS

85. Which of the following is a fully managed MySQL-compatible database?

Amazon S3

Amazon DynamoDB

Amazon Redshift

Amazon Aurora

86. Which services use AWS edge locations? (Choose two.)

Amazon CloudFront

AWS Shield

Amazon EC2

Amazon RDS

Amazon ElastiCache

87. Which of the following is a cloud architectural design principle?

Scale up not out

Loosely couple components

Build monolithic systems

Use commercial database software

88. Which AWS feature enables users to categorize and track their AWS costs?

Cost Allocation Tags

AWS Trusted Advisor

AWS Price List API

AWS Organizations

89. CORRECT TEXT

Which AWS tool is used to compare the cost of running an application on-premises to running the application in the AWS Cloud?

AWS Trusted Advisor

AWS Simple Monthly Calculator

AWS Total Cost of Ownership (TCO) Calculator

Cost Explorer

90. A characteristic of edge locations is that they:

host Amazon EC2 instances closer to users.

help lower latency and improve performance for users.

cache frequently changing data without reaching the origin server.

refresh data changes daily.

Page 10 of 19

91. which tool is useed to forecast AWS spending?

AWS trusted Advisor

AWS Organizations

Cost Explorer

Amazon Inspector

92. Which of the following can be used to describe infrastructure as code in the AWS Clouds?

AWS CLI

AWS CloudFormation

AWS CodeDeploy

AWS Amplify

93. How is asset management on AWS easier than asset management in a physical data center?

AWS provides a Configuration Management Database that users can maintain.

AWS performs infrastructure discovery scans on the customer’s behalf.

Amazon EC2 automatically generates an asset report and places it in the customer’s specified Amazon S3 bucket.

Users can gather asset metadata reliably with a few API calls.

94. Which of the following features can be configured through the Amazon Virtual Private Cloud (Amazon VPC) Dashboard? (Select TWO.)

Amazon CloudFront distributions

Amazon Route 53

Security Groups

Subnets

Elastic Load Balancing

95. What tasks should a customer perform when that customer suspects an AWS account has been compromised? (Choose two.)

Rotate passwords and access keys.

Remove MFA tokens.

Move resources to a different AWS Region.

Delete AWS CloudTrail Resources.

Contact AWS Support.

96. Which of the following services provides on-demand access to AWS compliance reports?

AWS IAM

AWS Artifact

Amazon GuardDuty

AWS KMS

97. A company uses Amazon EC2 Instances in its AWS account tor several different workloads. The company needs to perform an analysis to understand the cost of each. workload.

What is the MOST operationally efficient way to meet this requirement?

Move the EC2 instances for each workload into separate AWS accounts.

Use a different EC2 instance family for each of the workloads.

Add cost allocation tags to each EC2 instance, and activate the tags

Update the workload applications to publish usage data to a cost allocation database.

98. One benefit of On-Demand Amazon Elastic Compute Cloud (Amazon EC2) pricing is:

the ability to bid for a lower hourly cost.

paying a daily rate regardless of time used.

paying only for time used.

pre-paying for instances and paying a lower hourly rate.

99. Which AWS service does AWS snow does AWS snowball Edge natively support?

AWS Server Migration Service (AWS SMS)

Amazon Aurora

AWS Trusted Advisor

Amazon EC2

100. A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud.

Which service should be used to deploy the application?

AWS CloudFormation

AWS Elastic Beanstalk

Amazon EC2

AWS OpsWorks

Page 11 of 19

101. A solutions architect needs to maintain a fleet of Amazon EC2 instances so that any Impaired instances are replaced with new ones.

Which AWS service should the solutions architect use?

Amazon Elastic Container Service (Amazon ECS)

Amazon GuardDuty

AWS Shield

AWS Auto Scaling

102. A company needs a data store for highly transactional workloads.

Which AWS service would meet this requirement?

Amazon RDS

Amazon Redshift

Amazon S3

Amazon S3 Glacier

103. According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

Hard code an IAM user's secret key and access key directly in the application, and upload the file.

Store the IAM user's secret key and access key in a text file on the EC2 instance, read the keys, then upload the tile.

Have the EC2 instance assume a role to obtain the privileges to upload the file.

Modify the S3 bucket policy so that any service can upload to it at any time

104. A company is considering moving its on-premises data center to AWS.

What factors should be included in doing a Total Cost of Ownership (TCO) analysis? (Choose two.)

Amazon EC2 instance availability

Power consumption of the data center

Labor costs to replace old servers

Application developer time

Database engine capacity

105. Which AWS service or feature allows a company to visualize, understand, and manage AWS costs and usage over time?

AWS Budgets

AWS Cost Explorer

AWS Organizations

Consolidated billing

106. Which of the following are security best practices for using AWS Identity and Access Management (IAM)? (Select TWO)

Use AWS account root user credentials for IAM tasks

Rotate credentials regularly

Do not remove credentials, even if they are never used

Enable multi-factor authentication (MFA)

Use inline policies instead of customer managed policies

107. Which of the following security-related actions are available at no cost?

Calling AWS Support

Contacting AWS Professional Services to request a workshop

Accessing forums, blogs, and whitepapers

Attending AWS classes at a local university

108. Which of the following is the responsibility of AWS?

Setting up AWS Identity and Access Management (IAM) users and groups

Physically destroying storage media at end of life

Patching guest operating systems

Configuring security settings on Amazon EC2 instances

109. Which AWS service enables users to security connect to AWS resources over the public internet?

Amazon VPC peering

AWS Direct Connect

AWS VPN

Amazon Pinpoint

110. A cloud practitioner needs an Amazon EC2 instance to launch and run for 7 hours without interruptions.

What is the most suitable and cost-effective option for this task?

On-Demand Instance

Reserved Instance

Dedicated Host

Spot Instance

Page 12 of 19

111. Which AWS service uses a combination of publishers and subscribers?

AWS Lambda

Amazon Simple Notification Service (Amazon SNS)

Amazon CloudWatch

AWS CloudFormation

112. A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses an Application Load Balancer to distribute traffic to multiple Amazon EC2 instances

Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks?

Security groups

AWS WAF

Network ACLs

AWS Shield

113. How can a company isolate the costs of production and non-production workloads on AWS?

Create identity and Access Management (IAM) roles for production and non-production workloads

Use different accounts for production and non-production expenses.

Use Amazon EC2 for non-production workloads and other services for production workloads.

Use Amazon CloudWatch to monitor the use of services

114. If a customer needs to audit the change management of AWS resources, which of the following AWS services should the customer use?

AWS Config

AWS Trusted Advisor

Amazon CloudWatch

Amazon Inspector

115. Which benefit of the AWS clouds supporting matching the supply of resources with changing workloads demands?

Security

Reliability

Elasticity

High availability

116. Which AWS service handles the deployment details of capacity provisioning, load balancing, Auto Scaling, and application health monitoring?

AWS Config

Amazon Route 53

Amazon CloudFront

117. What is a benefit of loose coupling as a principle of cloud architecture design?

It facilitates low-latency request handling.

It allows applications to have dependent workflows.

It prevents cascading failures between different components.

It allows companies to focus on their physical data center operations.

118. Which AWS tool will identify security groups that grant unrestricted Internet access to a limited list of ports?

AWS Organizations

AWS Trusted Advisor

AWS Usage Report

Amazon EC2 dashboard

119. Which of the following allows users to provision a dedicated network connection from their internal network to AWS?

AWS CloudHSM

AWS Direct Connect

AWS VPN

Amazon Connect

120. What AWS service would be used to centrally manage AWS access across multiple accounts?

AWS Service Catalog

AWS Config

AWS Trusted Advisor

AWS Organizations

Page 13 of 19

121. What are characteristics of AWS IAM users and groups? (Select TWO.)

Groups can be nested and can contain other groups.

A user can be a member of multiple groups.

Groups can contain users only and cannot be nested.

A user can only be a member of a single group at one time.

All new users are automatically added to a default group.

122. Which service provides a user the ability to warehouse data in the AWS Cloud?

Amazon EFS

Amazon Redshift

Amazon RDS

Amazon VPC

123. Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?

Amazon DynamoDB

Amazon Athena

Amazon RDS

Amazon EMR

124. Which of the following acts as a virtual firewall at the Amazon EC2 instance level to control traffic for one or more instances?

Access keys

Virtual private gateways

Security groups

Access Control Lists (ACL)

125. A company's web application currently has light dependencies on underlying components so when one component fails the entire web application fails.

Applying which AWS Cloud design principle will address the current design issue?

Implementing elasticity enabling the application to scale up or scale down as demand changes

Enabling several EC2 instances to run in parallel to achieve better performance

Focusing on decoupling components by isolating them and ensuring individual components can function when other components

Doubling EC2 computing resources to increase system fault tolerance

126. Which feature of AWS Auto Scaling will forecast future traffic to schedule changes in the number of Amazon EC2 instances at the appropriate times?

Scheduled scaling

Predictive scaling

Target tracking scaling

Step scaling

127. Which AWS service requires the customer to patch the guest operating system?

AWS Lambda

Amazon Elasticsearch Service (Amazon ES)

Amazon EC2

Amazon ElastiCache

128. Which AWS service controls permissions to the AWS management console?

Amazon Connect

AWS IAM

AWS Direct Connect

Amazon Recognition

129. Which of the following is an important architectural design principle when designing cloud applications?

Use multiple Availability Zones.

Use tightly coupled components.

Use open source software.

Provision extra capacity.

130. Which AWS services can host a Microsoft SQL Server database? (Select TWO.)

Amazon EC2

Amazon Relational Database Service (Amazon RDS)

Amazon Aurora

Amazon Redshift

Amazon S3

Page 14 of 19

131. An online retail company has seasonal sales spikes several times a year, primarily around holidays Demand is lower at other times. The company finds it difficult to predict the increasing infrastructure demand for each season.

Which advantages of moving to the AWS Cloud would MOST benefit the company? (Select TWO)

Global footprint

Elasticity

AWS service quotas

AWS shared responsibility model

Pay-as-you-go pricing

132. The financial benefits of using AWS are: (Select TWO.)

reduced Total Cost of Ownership (TCO).

increased capital expenditure (capex).

reduced operational expenditure (opex).

deferred payment plans for startups.

business credit lines for stratups.

133. When a user wants to utilize their existing per-socket per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?

Spot Instances

Dedicated instances

Dedicated Hosts

Reserved Instances

134. A company will be moving from an on-premises data center to the AWS Cloud.

What would be one financial difference after the move?

Moving from variable operational expense (opex) to upfront capital expense (capex).

Moving from upfront capital expense (capex) to variable capital expense (capex).

Moving from upfront capital expense (capex) to variable operational expense (opex).

Elimination of upfront capital expense (capex) and elimination of variable operational expense (opex)

135. A user wants guidance on possible savings when migrating from on-premises to AWS.

Which tool is suitable for this scenario?

AWS Budgets

Cost Explorer

AWS Total Cost of Ownership (TCO) Calculator

AWS Well-Architected Tool

136. Which AWS service provides inbound and outbound network ACLs to harden external connectivity to Amazon EC2?

AWS IAM

Amazon Connect

Amazon VPC

Amazon API Gateway

137. Which service’s PRIMARY purpose is software version control?

Amazon CodeStar

AWS Command Line Interface (AWS CLI)

Amazon Cognito

AWS CodeCommit

138. What does AWS Shield Standard provide?

WAF rules

DDoS protection

Identity and Access Management (IAM) permissions and access to resources

Data encryption

139. Which scenarios represent the concept of elasticity on AWS? (Choose two.)

Scaling the number of Amazon EC2 instances based on traffic.

Resizing Amazon RDS instances as business needs change.

Automatically directing traffic to less-utilized Amazon EC2 instances.

Using AWS compliance documents to accelerate the compliance process.

Having the ability to create and govern environments using code.

140. Within the AWS Shared responsibility model, who is responsible for security and compliance?

The customer is responsible

AWS is responsible

AWS and the customer share responsibility

AWS shares responsibility with the relevant governing body

Page 15 of 19

141. A company requires a dedicated network connection between its on-premises servers and the AWS Cloud.

Which AWS service should be used?

AWS VPN

AWS Direct Connect

Amazon API Gateway

Amazon Connect

142. Which of the following services is a MySQL-compatible database that automatically grows storage as needed?

Amazon Elastic Compute Cloud (Amazon EC2)

Amazon Relational Database Service (Amazon RDS) for MySQL

Amazon Lightsail

Amazon Aurora

143. A user needs to launch a workload in multiple AWS environments Each copy of the workload must have the same configuration

What is the MOST efficient way to accomplish this task?

Launch the resources using the AWS Management Console

Use AWS CloudFormation to launch a stack.

Execute a custom PowerShell script to launch the workloads.

Use AWS OpsWorks to provision the workloads.

144. Which of the following security measures protect access to an AWS account? (Select TWO.)

Enable AWS CloudTrail.

Grant least privilege access to IAM users.

Create one IAM user and share with many developers and users.

Enable Amazon CloudFront.

Activate multi-factor authentication (MFA) for privileged users.

145. Which tool can be used to identity scheduled changes to the AWS infrastructure?

AWS Personal Health Dashboard

AWS Trusted Advisor

Billing Dashboard

AWS Config

146. A company has a globally distributed user base. The company needs its application to be highly available and have low latency for end users.

Which AWS architectural approach will most effectively support these requirements?

Single-Region, Multi-AZ architecture

Multi-Region, active-active architecture

Multi-Region, active-password architecture

Sign-Region, Single-AZ architecture

147. Which AWS Cloud best practice uses the elasticity and agility of cloud computing?

Provision capacity based on past usage and theoretical peaks.

Dynamically and predictively scale to meet usage demands.

Build the application and infrastructure in a data center that grants physical access.

Break apart the application into loosely coupled components.

148. Which aws services may be scaled using aws auto scaling?

Amazon EC2

Amazon DynamoDB

Amazon S3

Amazon Route 53

Amazon Redshift

149. A user needs to quickly deploy a nonrelational database on AWS. The user does not want to manage the underlying hardware or the database software.

Which AWS service cart be used to accomplish this?

Amazon RDS

Amazon DynamoDB

Amazon Aurora

Amazon Redshift

150. If each department within a company has its own AWS account, what is one way to enable consolidated billing?

Use AWS Budgets on each account to pay only to budget.

Contact AWS Support for a monthly bill.

Create an AWS Organization from the payer account and invite the other accounts to join.

Put all invoices into one Amazon Simple Storage Service (Amazon S3) bucket, load data into Amazon Redshift, and then run a billing report.

Page 16 of 19

151. Which AWS service provides the capability to view end-to-end performance metrics and troubleshoot distributed applications?

AWSCIoud9

AWS CodeStar

AWS Cloud Map

AWSX-Ray

152. Which of the following are benefits of the AWS business support plan?

Dedicated AWS technical account manager (TAM)

Response time of less than 15 minutes for business critical cases

Phone, email and chat support 24 hours a day 7 days a week

Full set of AWS trusted Advisor best practice checks

Well-Architected reviews

153. Which AWS service enables users to create copies of resources across AWS Regions?

mazon ElastiCache

AWS CloudFormation

AWS CloudTrail

AWS Systems Manager

154. A security officer wants a list of any potential vulnerabilities in Amazon EC2 security groups.

Which AWS service should the officer use?

Amazon GuardDuty

AWS Trusted Advisor

AWS CloudTrail

AWS Artifact

155. What is the total amount of storage offered by Amazon S3

100 MB

5 GB OC

5 TB

Unlimited

156. A company wants to use Amazon Elastic Compute Cloud (Amazon EC2) to deploy a global commercial application. The deployment solution should be built with the highest redundancy and fault tolerance.

Based on this situation the Amazon EC2 instances should be deployed:

in a single Availability Zone in one AWS Region

with multiple Elastic Network Interfaces belonging to different subnets

across multiple Availabtirty Zones m one AWS Region

across multiple Availability Zones tn two AWS Regions

157. Which AWS service or feature can be used to monitor for potential disk write spikes on a system running on Amazon EC2?

AWS CloudTrail

AWS Personal Health Dashboard

AWS Trusted Advisor

Amazon CloudWatch

158. Which AWS feature or service can be used to capture information about incoming and outgoing traffic in an AWS VPC infrastructure?

AWS Config

VPC Flow Logs

AWS Trusted Advisor

AWS CloudTrail

159. Which of the following are AWS best practices? (Select TWO.)

Enable AWS Multi-Factor Authentication (AWS MFA) for users.

Enable access key sharing among users.

Use the inline policies instead of user managed policies.

Configure strong password policies for users.

Avoid rotating credentials.

160. Where can AWS compliance and certification reports be downloaded?

AWS Artifact

AWS Concierge

AWS Certificate Manager

AWS Trusted Advisor

Page 17 of 19

161. A customer is deploying a now serverless application running on AWS Lambda.

Which of the following are the customer's responsibilities under the AWS shared responsibility model? (Select TWO)

Application management

Platform management

Application identity and access

Storage infrastructure

AWS global infrastructure

162. Which of the following are pillars of the AWS Well-Architected Framework? (Select TWO)

Multiple Availability Zones

Performance efficiency

Security

Encryption usage

High availability

163. A user needs to import 100 TB of video files into Amazon S3. The user has estimated that it will take months to move the files over an on-premises internet connection.

Which AWS service can be used to improve the data transport time?

Amazon S3 Transfer Accelerator

AWS Snowball

AWS Storage Gateway

AWS DataSync

164. What does Amazon CloudFront provide?

Automatic scaling for all resources to power an application from a single unified interface

Secure delivery of data, videos application. and APIs to users globally with low latency

Ability to directly manage traffic globally through a variety of routing types, including latency-based routing, geo ON

Geoproximity, and weighted round robin

Automatic distribution of incoming application traffic across multiple targets, such as Amazon EC2 instances, containers. IP addresses, and AWS Lambda functions

165. Which AWS service makes it easy to create and manage AWS users and groups, and provide them with secure access to AWS resources at no charge?

AWS Direct Connect

Amazon Connect

AWS Identity and Access Management (IAM)

AWS Firewall Manager

166. A company needs to migrate an existing on-premises database to the AWS Cloud. The company must be able to install custom software on the database instance.

Which AWS service can the company use to meet these requirements?

Amazon DynamoDB

Amazon RDS

Amazon EC2

Amazon Redshift

167. Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?

IAM access and secret keys are static, so there is no need to rotate them

The customer is responsible for rotating keys.

AWS will rotate the keys whenever required.

The AWS Support team will rotate keys when requested by the customer.

168. What are the benefits of developing and running a new application in the AWS Cloud compared to on-premises? (Select TWO)

AWS automatically distributes the data globally for higher durability

AWS will take care of operating the application

AWS makes it easy to architect for high availability

AWS can easily accommodate application demand changes

AWS takes care of application security patching

169. Which AWS service is used to provide encryption for Amazon EBS?

A AWS Certificate Manager

AWS Systems Manager

AWS KMS

AWS Config

170. In which of the following is Amazon CloudFront content cached?

Availability Zones

Local Zones

AWS Regions

Edge locations

Page 18 of 19

171. What does the AWS Cloud provide to increase the speed and agility of execution for customers? (Select TWO.)

Readily available resources with low provisioning times

Scalable compute capacity

Free Tier services usage

Access to AWS data centers

Lower resource provisioning cost

172. When building a cloud Total Cost of Ownership (TCO) model, which cost elements should be considered for workloads running on AWS? (Select THREE.)

Compute costs

Facilities costs

Storage costs

Data transfer costs

Network infrastructure costs

Hardware lifecycle costs

173. A web application running on AWS has been spammed with malicious requests from a recurring set of IP addresses.

Which AWS service can help secure the application and block the malicious traffic?

AWS IAM

Amazon GuardDuty

Amazon Simple Notification Service (Amazon SNS)

AWS WAF

174. Where are AWS compliance documents, such as an SOC 1 report, located?

Amazon Inspector

AWS CloudTrail

AWS Artifact

AWS Certificate Manager

175. A user has an AWS account with a Business-level AWS Support plan and needs assistance with handling a production service disruption.

Which action should the user take?

Contact the dedicated AWS technical account managei (TAM)

Contact the dedicated AWS Concierge Support team

Open a business-critical system down support case

Open a production system down support case

176. A company wants to ensure that AWS Management Console users are meeting password complexity requirements.

How can the company configure password complexity?

Using an AWS IAM user policy

Using an AWS Organizations service control policy (SCP)

Using an AWS IAM account password policy

Using an AWS Security Hub managed insight

177. which aws service allows users to provision infrastructure as code?

AWS CodeBuild

AWS CloudFormation

AWS Organizations

AWS CodeCommit

178. What is the best resource for a user to find compliance-related information and reports about AWS?

AWS Artifact

AWS Marketplace

Amazon Inspector

AWS Support

179. Under the shared responsibility model, which of the following tasks are the responsibility of the customer? (Choose two.)

Maintaining the underlying Amazon EC2 hardware.

Managing the VPC network access control lists.

Encrypting data in transit and at rest.

Replacing failed hard disk drives.

Deploying hardware in different Availability Zones.

180. How does AWS MOST effectively reduce computing costs for a growing start-up company?

It provides on-demand resources for peak usage.

It automates the provisioning of individual developer environments.

It automates customer relationship management.

It implements a fixed monthly computing budget.

Page 19 of 19

181. Which of the following is an advantage of using AWS?

AWS audits user data.

Data is automatically secure.

There is no guessing on capacity needs.

AWS manages compliance needs.