Summer Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: takeit60

Note! Following CLF-C01 Exam is Retired now. Please select the alternative replacement for your Exam Certification. The new exam code is CLF-C02

CLF-C01 AWS Certified Cloud Practitioner Questions and Answers

Questions 4

A company wants to query its server logs to gain insights about its customers’ experiences.

Which AWS service will store this data MOST cost-effectively?

Options:

A.

Amazon Aurora

B.

Amazon Elastic File System (Amazon EFS)

C.

Amazon Elastic Block Store (amazon EBS)

D.

Amazon S3

Buy Now
Questions 5

Which AWS service should a company use to provision, manage, and deploy SSL/TLS certificates?

Options:

A.

AWS Secrets Manager

B.

Amazon Inspector

C.

AWS CodeDeploy

D.

AWS Certificate Manager (ACM)

Buy Now
Questions 6

A company has an application that stores a high volume of unstructured data and session history. The company needs to scale the application reliably to millions of concurrent users while ensuring consistent low latency.

Which AWS service meets these requirements?

Options:

A.

Amazon RDS for MariaDB

B.

Amazon DynamoDB

C.

Amazon RDS for SQL Server

D.

Amazon Redshift

Buy Now
Questions 7

A company implements an Amazon EC2 Auto Scaling policy along with an Application Load Balancer to automatically recover unhealthy applications that run on Amazon EC2 instances.

Which pillar of the AWS Well-Architected Framework does this action cover?

Options:

A.

Security

B.

Performance efficiency

C.

Operational excellence

D.

Reliability

Buy Now
Questions 8

Which AWS benefit enables users to deploy cloud infrastructure that consists of multiple geographic regions connected by a network with low latency, high throughput, and redundancy?

Options:

A.

Economies of scale

B.

Security

C.

Elasticity

D.

Global reach

Buy Now
Questions 9

A company wants help from AWS Certified freelance consultants to complete several AWS Cloud projects.

Which AWS service should the company use to find this support?

Options:

A.

AWS IQ

B.

AWS Support

C.

AWS Trusted Advisor

D.

AWS Marketplace

Buy Now
Questions 10

A company has a serverless application that includes an Amazon API Gateway API, an AWS Lambda function, and an Amazon DynamoDB database.

Which AWS service can the company use to trace user requests as they move through the application's components?

Options:

A.

AWS CloudTrail

B.

Amazon CloudWatch

C.

Amazon Inspector

D.

AWS X-Ray

Buy Now
Questions 11

An application that is hosted on Amazon EC2 has a steady and consistent workload. The application will operate for at least 1 year. What is the MOST cost-effective instance purchasing option to meet these requirements?

Options:

A.

Spot Instances

B.

Reserved Instances

C.

On-Demand Instances

D.

Dedicated Hosts

Buy Now
Questions 12

According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?

Options:

A.

Amazon DynamoDB

B.

Amazon EC2 instances

C.

Amazon RDS instances

D.

Amazon S3

Buy Now
Questions 13

Which AWS service can a company use to access compliance documentation and AWS agreements?

Options:

A.

AWS Security Hub

B.

AWS Identity and Access Management (1AM)

C.

AWS Artifact

D.

AWS Certificate Manager (ACM)

Buy Now
Questions 14

How does the AWS Cloud help companies build agility into their processes and cloud infrastructure?

Options:

A.

Companies can avoid provisioning too much capacity when they do not know how much capacity is required.

B.

Companies can expand into new geographic regions.

C.

Companies can access a range of technologies to experiment and innovate quickly.

D.

Companies can pay for IT resources only when they use the resources.

Buy Now
Questions 15

After selecting an Amazon EC2 Dedicated Host reservation, which pricing option would provide the largest discount?

Options:

A.

No upfront payment

B.

Hourly on-demand payment

C.

Partial upfront payment

D.

All upfront payment

Buy Now
Questions 16

A company wants to accelerate migration from its data center to the AWS Cloud.

Which combination of AWS services should the company use to meet this requirement? (Select TWO.)

Options:

A.

Amazon Connect

B.

AWS Direct Connect

C.

AWS Server Migration Service (AWS SMS)

D.

Amazon Route 53

E.

AWS Organizations

Buy Now
Questions 17

Which of the following is an advantage of AWS Cloud computing?

Options:

A.

Trade security for elasticity

B.

Trade operational excellence for agility

C.

Trade fixed expenses for variable expenses

D.

Trade elasticity for performance.

Buy Now
Questions 18

A company is using AWS for all its IT infrastructure. The company's developers are allowed to deploy applications on their own. The developers want to deploy their applications without having to provision the infrastructure themselves

Which AWS service should the developers use to meet these requirements?

Options:

A.

AWS CloudFormation

B.

AWS CodeBuild

C.

AWS Elastic Beanstalk

D.

AWS CodeDeploy

Buy Now
Questions 19

Which AWS service provides managed DDoS protection?

Options:

A.

AWS Firewall Manager

B.

AWS Shield

C.

Amazon GuardDuty

D.

Amazon Inspector

Buy Now
Questions 20

A company manages an on-premises MySQL database on a Windows server. The company wants to migrate the database to AWS and needs a solution that will reduce the administrative overhead of the database.

Which AWS service will meet this requirement?

Options:

A.

Amazon Redshift

B.

Amazon ElastiCache

C.

Amazon RDS

D.

Amazon Elastic File System (Amazon EFS)

Buy Now
Questions 21

An ecommerce comply is using Amazon EC2 Auto Scaling groups to manage a fleet of web servers running on Amazon EC2. This architecture follows which AWS Well/architected Framework best practice?

Options:

A.

Secure the workload

B.

Decouple infrastructure components

C.

Design for failure

D.

Think parallel

Buy Now
Questions 22

A company recently mutated to AWS and wants to enable intelligent threat protection and continuous monitoring across all of its AWS accounts.

Which AWS service should the company use lo achieve this goal?

Options:

A.

Amazon Macie

B.

Amazon GuardDuty

C.

AWS Shield

D.

Amazon Detective

Buy Now
Questions 23

Which AWS service provides intelligent recommendations to improve code quality and identify an application is most expensive lines of code?

Options:

A.

Amazon CodeGuru

B.

AWS CodeStar

C.

AWS CodeCommit

D.

AWS CodeDeploy

Buy Now
Questions 24

What should a user do if the user loses an IAM secret access key?

Options:

A.

Retrieve the secret access key by using the IAM console.

B.

Create a new user with a new access key and a new secret access key.

C.

Rotate the secret access key.

D.

Request a new secret access key from AWS Support.

Buy Now
Questions 25

What is the MOST secure way lo store passwords on AWS?

Options:

A.

Store passwords in an Amazon S3 bucket

B.

Store passwords as AWS CloudFormation parameters

C.

Store passwords in AWS Storage Gateway

D.

Store passwords in AWS Secrets Manager

Buy Now
Questions 26

Which of the following does Amazon CloudFront use to distribute content to users around the world?

Options:

A.

Amazon VPC

B.

AWS Local Zones

C.

Edge locations

D.

Availability Zones

Buy Now
Questions 27

How can a user protect an Amazon EC2 instance from a suspicious IP address?

Options:

A.

Block the IP on the inbound rule of a network ACL.

B.

Block the IP on the outbound rule of a security group.

C.

Block the IP on the inbound rule of a security group and network ACL.

D.

Block the IP on the outbound rule of a security group and network ACL.

Buy Now
Questions 28

Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and dynamically acquire computing resources to meet demand?

Options:

A.

Security

B.

Reliability

C.

Performance efficiency

D.

Cost optimization

Buy Now
Questions 29

A developer wants to deploy an application on a container-based service. The service must automatically provision and manage the backend instances. The service must provision only the necessary resources. Which AWS service will meet these requirements?

Options:

A.

Amazon EC2

B.

Amazon Lightsail

C.

Amazon Elastic Kubermetes Service (Amazon EKS)

D.

AWS Margate

Buy Now
Questions 30

Which AWS services are delivered globally instead of regionally? (Select TWO.)

Options:

A.

Amazon EC2

B.

Amazon CloudFront

C.

Amazon Route 53

D.

Amazon VPC

E.

Amazon RDS

Buy Now
Questions 31

Which solution provides a fast, automated and repeatable method of deploying AWS Cloud infrastructure to multiple AWS Regions?

Options:

A.

Use AWS CodeStar to set up a continuous delivery toolchain for automated deployment

B.

Create and launch an Amazon EC2 Amazon Machine Image (AMI) containing the source code with butt-m deployment hooks lo launch other AWS services

C.

Create and use an AWS CloudFormation template

D.

Use AWS Systems Manager to automate management tasks such as creating Amazon EC2 Amazon Machine images (AMIS) and applying patches

Buy Now
Questions 32

Which AWS service adds speech-to-text capabilities to applications?

Options:

A.

Amazon Polly

B.

Amazon Textract

C.

Amazon Transcribe

D.

Amazon Comprehend

Buy Now
Questions 33

Which of the following gives a company the ability to fake advantage of tiered pricing tor services across multiple AWS member accounts?

Options:

A.

AWS Organizations service control policies (SCPs)

B.

AWS Organizations consolidated billing

C.

All Upfront Reserved instances

D.

Cost Explorer utilization reports

Buy Now
Questions 34

A company moves a workload to AWS lo run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way.

What can the company do lo meet this requirement?

Options:

A.

Use AWS Key Management Sen/ice (AWS KMS)

B.

Use multiple AWS accounts and consolidated billing.

C.

Use AWS CloudFormation to deploy the infrastructure.

D.

Rightsize all the EC2 instances that are used in the deployment

Buy Now
Questions 35

Which AWS service tool or feature helps companies reduce costs by identifying underutilized Amazon EC2 instances?

Options:

A.

Amazon Inspector

B.

AWS Trusted Advisor

C.

Consolidated billing

D.

Cost Explorer

Buy Now
Questions 36

Which actions is the responsibility of AWS according to the AWS shared responsibility model? (Select TWO.)

Options:

A.

Securing the virtualization layer

B.

Patching the operating system on Amazon EC2 instances

C.

Enforcing a strict password policy for IAM users

D.

Patching the operating system on Amazon RDS instances

E.

Configuring security groups and network ACLs

Buy Now
Questions 37

A company has deployed its IT infrastructure in the AWS Cloud. The company's database must support reads with sub-millisecond latency.

Which AWS service will meet this requirement?

Options:

A.

Amazon EMR

B.

Amazon RDS

C.

AWS Glue

D.

Amazon ElastiCache

Buy Now
Questions 38

A company stores several terabytes of data in an Amazon S3 bucket. The company needs to query the data by using standard SQL and does not want to set up infrastructure. Which AWS service should the company use to meet these. requirements?

Options:

A.

Amazon RDS

B.

Amazon Redshift

C.

Amazon Athena

D.

Amazon EC2

Buy Now
Questions 39

A company has set up its IT infrastructure in the AWS Cloud. The company wants to receive detailed reports that break down AWS costs by the hour. The reports must be placed in an Amazon S3 bucket.

Which AWS tool will meet these requirements?

Options:

A.

AWS Cost and Usage Reports

B.

AWS Pricing Calculator

C.

Cost Explorer

D.

AWS Budgets

Buy Now
Questions 40

Which pillar of Vie AWS Well-Architected Framework is focused on the ability of a workload lo perform its intended function correctly and consistently at the expected time?

Options:

A.

Performance efficiency

B.

Operational excellence

C.

Reliability

D.

Security

Buy Now
Questions 41

A company recently created its first AWS account.

Which AWS services will require the use of a VPC? (Select TWO.)

Options:

A.

Amazon S3

B.

Amazon Elastic File System (Amazon EFS)

C.

Amazon Cognito

D.

Amazon DynamoDB

E.

Amazon EC2

Buy Now
Questions 42

What are characteristics of AWS IAM users and groups? (Select TWO.)

Options:

A.

Groups can be nested and can contain other groups.

B.

A user can be a member of multiple groups

C.

Groups can contain users only and cannot be nested

D.

A user can only be a member of a single group at one time.

E.

All new users are automatically added to a default group

Buy Now
Questions 43

How does the AWS global infrastructure offer high availability and fault tolerance lo its users?

Options:

A.

The AWS infrastructure is made up of multiple AWS Regions within various Availability Zones located in areas that have low flood risk and are interconnected with low-latency networks and redundant power supplies

B.

The AWS infrastructure consists of subnets containing various Availability Zones with multiple data centers located in the same geographic location

C.

AWS allows users to choose AWS Regions and data centers so that users can select the closest data centers in different Regions

D.

The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that ate connected with low-latency networking and redundant power supplies

Buy Now
Questions 44

A company wants to offer direct phone and chat channels for customer service. The company needs a pay-as-you-go solution that remote customer service agents can use to create and manage voice and chat contact flows.

Which AWS service will meet these requirements?

Options:

A.

Amazon EventBridge (Amazon CloudWatch Events)

B.

Amazon Connect

C.

Amazon Cognito

D.

AWS Direct Connect

Buy Now
Questions 45

Which design principles of the AWS WelI-Architected Framework help increase reliability? (Select TWO.)

Options:

A.

Automatically recover from failure.

B.

Enable traceability.

C.

Scale horizontally to increase workload availability.

D.

Automate security best practices.

E.

Keep people away from data.

Buy Now
Questions 46

A company is developing a new Node.js application. The application must have a scalabe NoSQL database to meet increasing demand as the popularity of the application grown.

Which AWS services will meet the requirements for the database?

Options:

A.

Amazon Aurora Serverless

B.

Amazon ElastiCache

C.

Amazon DynamocDB

D.

Amazon Redshift

Buy Now
Questions 47

Which of the following are benefits that a company receives when it moves an on-premises internet-lacing website to the AWS Cloud? (Select TWO.)

Options:

A.

Data that is stored in the AWS Cloud is automatically encrypted.

B.

Website capacity can expand or contract as website traffic changes.

C.

AWS automatically provides the company with the lowest-cost pricing model.

D.

The website shows up with higher priority in internet search engines

E.

The company can take advantage of the pay-as-you-go pricing model

Buy Now
Questions 48

A company that is migrating to the AWS Cloud wants to reduce the operational costs of running its databases. Which combination of actions should the company take to achieve this goal (Select TWO.)

Options:

A.

Activate Amazon DynamoDB Accelerator (DAX)

B.

Deploy resources across multiple Availability Zones.

C.

Decrease operational tasks by using AWS managed services.

D.

Automate changes and responses to events.

E.

Use the AWS global infrastructure to benefit from economies of scale

Buy Now
Questions 49

Which of the following can be used to identity a specific user who slopped an Amazon EC2 instance?

Options:

A.

AWS CloudTrail

B.

Amazon inspector

C.

Amazon CloudWatch

D.

VPC Flow Logs

Buy Now
Questions 50

A company's procurement department wants volume discounts on AWS services for the company but numerous departments have separate AWS accounts. Which AWS service or tool can the company use to receive volume discounts across multiple AWS accounts?

Options:

A.

Cost Explore'

B.

AWS Budgets

C.

AWS Cost and Usage Report

D.

AWS Organizations

Buy Now
Questions 51

What is a customer responsibility under the AWS shared responsibility model when using AWS Lambda?

Options:

A.

Maintenance of the underlying Lambda hardware.

B.

Maintenance of the Lambda networking infrastructure.

C.

The code and libraries that run in the lambda function.

D.

The Lambda server software.

Buy Now
Questions 52

A company needs to store infrequently used data archives and long-term backups.

Which AWS service or storage class will meet these requirements MOST cost-effectively?

Options:

A.

Amazon FSx for Lustre.

B.

Amazon Elastic Block Store (Amazon EBS)

C.

Amazon Elastic File System (Amazon EFS)

D.

Amazon S3 Glacier Flexible Retrieval

Buy Now
Questions 53

A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.

What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?

Options:

A.

EC2 key pairs

B.

AWS Systems Manager Session Manager

C AWS Identity and Access Management (1AM)

C.

Network ACLs

Buy Now
Questions 54

Which benefit of the AWS Cloud helps companies achieve lower usage costs because of the aggregate of all AWS users?

Options:

A.

No need to guess capacity

B.

Ability to go global in minutes

C.

Economies of scale

D.

Increased speed and agility

Buy Now
Questions 55

A company is developing a new web application. The company must give users the ability to log in to the application through social identity providers.

Which AWS service will meet these requirements?

Options:

A.

AWS Directory Service

B.

Amazon Cognito

C.

AWS identity and Access management (IAM)

D.

AWS Single Sign-On

Buy Now
Questions 56

A company needs to use a serverless interactive query service to analyze data in Amazon S3. The query service must support standard SQL.

Which AWS service will meet these requirements?

Options:

A.

Amazon Redshift

B.

AWS Glue

C.

Amazon Athena

D.

Amazon Kinesis Data Streams

Buy Now
Questions 57

Which AWS service gives a company the ability to use a private, dedicated connection between a VPC and an on-premises data center?

Options:

A.

AWS Direct Connect

B.

Amazon API Gateway

C.

AWS Systems Manager

D.

AWS CloudFormation

Buy Now
Questions 58

A company needs a content delivery network that provides secure delivery of data, videos, applications, and APIs to users globally with low latency and high transfer speeds.

Which AWS service meets these requirements?

Options:

A.

Amazon CloudFront

B.

Elastic Load Balancing

C.

Amazon S3

D.

Amazon Elastic Transcoder

Buy Now
Questions 59

A company wants to use an Amazon EC2 instance that has a pre-installed third-party firewall.

Which AWS service or feature can provide this solution?

Options:

A.

Security groups

B.

AWS Marketplace

C.

AWS Systems Manager

D.

AWS Certificate Manager (ACM)

Buy Now
Questions 60

Which AWS service or resource is serverless?

Options:

A.

AWS Snowball Edge

B.

Amazon EC2

C.

Amazon Elastic kubernetes Service (Amazon EKS)

D.

Amazon API Gateway

Buy Now
Questions 61

Which component of the AWS global infrastructure provides low-latency access to content in multiple geographic areas by storing copies of data close to end users?

Options:

A.

AWS Regions

B.

Availability Zones

C.

Local Zones

D.

Edge locations

Buy Now
Questions 62

A company needs to transfer 60 TB of data to the AWS Cloud in a secure manner.

Which of the following should the company use to meet these requirements?

Options:

A.

AWS Snowball Edge device

B.

Amazon Elastic Block Store (Amazon EBS)

C.

Amazon Elastic File System (Amazon EFS)

D.

Amazon S3

Buy Now
Questions 63

Which AWS service provides storage that can be mounted across multiple Amazon EC2 instances?

Options:

A.

Amazon Workspaces

B.

Amazon Elastic File System (Amazon EFS)

C.

AWS Database Migration Service (AWS DMS)

D.

AWS Snowball Edge

Buy Now
Questions 64

Which AWS services can a company use to transfer on-premises data to the AWS Cloud? (Select TWO.)

Options:

A.

AWS Snowcone

B.

AWS Transit Gateway

C.

AWS DataSync

D.

AWS Backup

E.

Amazon Connect

Buy Now
Questions 65

How does the AWS global infrastructure offer high availability and fault tolerance to its users?

Options:

A.

The AWS infrastructure is made up of multiple AWS Regions within various Availability Zones located in areas that have low flood risk, and are interconnected

with low-latency networks and redundant power supplies.

B.

The AWS infrastructure consists of subnets containing various Availability Zones with multiple data centers located in the same geographic location.

C.

AWS allows users to choose AWS Regions and data centers so that users can select the closest data centers in different Regions.

D.

The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that are connected with low-latency networking and redundant power supplies.

Buy Now
Questions 66

Which of the following is an AWS best practice for managing an AWS account root user?

Options:

A.

Keep the root user password with the security team.

B.

Enable multi-factor authentication (MFA) for the root user

C.

Create an access key for the root user.

D.

Keep the root user password consistent for compliance purposes.

Buy Now
Questions 67

Which component of the AWS global infrastructure does Amazon CloudFront use to speed up the delivery of content to users across the world?

Options:

A.

Amazon VPC

B.

Edge location

C.

Local Zone

D.

AWS Outposts connection

Buy Now
Questions 68

A company needs to manage multiple login across AWS accounts within the same organization in AWS Organizations.

Which AWS service should the company use to meet this requirement?

Options:

A.

Amazon VPC

B.

Amazon GuardDuty

C.

Amazon Cognito

D.

AWS IAM Identify Center (AWS Single Sign-on)

Buy Now
Questions 69

A company wants to reconfigure its ecommerce application to automatically scale to meet customer demands. The company wants the operating system that the application runs on to be automatically updated.

Which AWS service will meet these requirements?

Options:

A.

Amazon Lightsail

B.

Amazon EC2

C.

AWS Lambda

D.

Amazon EC2 Auto Scaling

Buy Now
Questions 70

A company is moving its on-premises key-value database to the AWS Cloud Which AWS service will support this use case?

Options:

A.

Amazon RDS

B.

Amazon ElastiCache

C.

Amazon DynamoDB

D.

Amazon Redshift

Buy Now
Questions 71

A company does not want to rely on elaborate forecasting to determine its usage of compute resources. Instead, the company wants to pay only for the resources that it uses. The company also needs the ability to increase or decrease its resource usage to meet business requirements.

Which pillar of the AWS Well-Architected Framework aligns with these requirements?

Options:

A.

Operational excellence

B.

Security

C.

Reliability

D.

Cost optimization

Buy Now
Questions 72

A company wants to run its workload on Amazon EC2 instances for more than 1 year. This workload will run continuously. Which option offers a discounted hourly rate compared to the hourly rate of On-Demand Instances?

Options:

A.

AWS Graviton processor

B.

Dedicated Hosts

C.

EC2 Instance Savings Plans

D.

Amazon EC2 Auto Scaling Instances

Buy Now
Questions 73

Which AWS service or feature provides high availability and low latency within an AWS Region?

Options:

A.

Edge locations

B.

Availability Zones

C.

AWS Outposts

D.

Amazon Route 53

Buy Now
Questions 74

A company wants to deploy a Docker application to the AWS Cloud. However, the company does not want to manage the underlying servers.

Which combination of AWS services should the company use to meet these requirements? (Select TWO)

Options:

A.

Amazon EC2

B.

Amazon EC2 Auto Scaling

C.

AWS Elastic Beanstalk

D.

Amazon CloudFront

E.

AWS Fargate

Buy Now
Questions 75

A company wants to use a template to reliably provision, manage, and update its infrastructure in the AWS Cloud. Which AWS service will meet these requirements?

Options:

A.

AWS Lambda

B.

AWS CloudFormation

C.

AWS Fargate

D.

AWS CodeDeploy

Buy Now
Questions 76

Which of the following is an AWS key-value database offering consistent single-digit millisecond performance at any scale?

Options:

A.

Amazon RDS

B.

Amazon Aurora

C.

Amazon DynamoDB

D.

Amazon Redshift

Buy Now
Questions 77

A company runs applications that process credit card information. Auditors have asked if the AWS environment has changed since the previous audit. If the AWS environment has changed, the auditors want to know how it has changed. Which AWS services can provide this information? (Select TWO.)

Options:

A.

AWS Artifact

B.

AWS Trusted Advisor

C.

AWS Config

D.

AWS Cloud Trail

E.

AWS Identity and Access Management (IAM)

Buy Now
Questions 78

A system automatically recovers from failure when a company launches its workload on the AWS Cloud services platform. Which pillar of the AWS Well-Architected Framework does this situation demonstrate?

Options:

A.

Reliability

B.

Cost optimization

C.

Performance efficiency

D.

Operational excellence.

Buy Now
Questions 79

A company needs an AWS Support plan that provides programmatic case management through the AWS Support API.

Which support plan will meet this requirement MOST cost-effectively?

Options:

A.

AWS Business Support

B.

AWS Basic Support

C.

AWS Developer Support

D.

AWS Enterprise Support

Buy Now
Questions 80

A company is reviewing the current costs of running its own infrastructure on premises. The company wants to compare these on-premises costs to the costs of running infrastructure in the AWS Cloud.

How should the company make this comparison?

Options:

A.

Review the AWS shared responsibility model.

B.

Audit existing software and hardware licensing costs.

C.

Analyze the AWS Well-Architected Framework.

D.

Use Migration Evaluator.

Buy Now
Questions 81

Which AWS service supports the analysis, investigation, and identification of the root cause of security events and suspicious activities in an AWS account?

Options:

A.

Amazon Inspector

B.

Amazon Macie

C.

Amazon Detective

D.

Amazon CloudWatch

Buy Now
Questions 82

A company is using an Amazon RDS database to run reports that are input/output (I/O) intensive. Which AWS service can be used to improve the database performance?

Options:

A.

Amazon DynamoDB Accelerator (DAX)

B.

Amazon EMR

C.

Amazon ElastiCache

D.

Amazon Redshift

Buy Now
Questions 83

Which of the following are characteristics of a serverless application that runs in the AWS Cloud? (Select TWO.)

Options:

A.

Users must manually configure Amazon EC2 instances.

B.

Users have a choice of operating systems.

C.

The application has built-in fault tolerance.

D.

Users can run Amazon EC2 Spot Instances.

E.

The application can scale based on demand.

Buy Now
Questions 84

Which pillar of the AWS Well-Architected Framework includes the continual improvement of processes and procedures as a priority?

Options:

A.

Cost optimization

B.

Reliability

C.

Performance efficiency

D.

Operational excellence

Buy Now
Questions 85

A company with AWS Enterprise Support needs help understanding its monthly AWS bill and wants to implement billing best practices. Which AWS tool or resource is available to accomplish these goals?

Options:

A.

Resource tagging

B.

AWS Concierge Support team

C.

AWS Abuse team

D.

AWS Support

Buy Now
Questions 86

Which AWS services can use AWS WAF to protect against common web exploitations? (Select TWO.)

Options:

A.

Amazon Route 53

B.

Amazon CloudFront

C.

AWS Transfer Family

D.

AWS Site-to-Site VPN

E.

Amazon API Gateway

Buy Now
Questions 87

Who can create and manage access keys for an AWS account root user?

Options:

A.

The AWS account owner

B.

An IAM user that has administrator permissions

C.

IAM users within a designated group

D.

An IAM user that has the required role

Buy Now
Questions 88

Which AWS service or feature enables users to get one bill and easily track charges for multiple AWS accounts?

Options:

A.

AWS Organizations

B.

Cost Explorer

C.

AWS Trusted Advisor

D.

AWS Management Console

Buy Now
Questions 89

A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS. Which security measures fall under the responsibility of AWS? (Select TWO.)

Options:

A.

Running a virus scan on EC2 instances

B.

Protecting against IP spoofing and packet sniffing

C.

Installing the latest security patches on the RDS instance

D.

Encrypting communication between the EC2 instances and the Elastic Load Balancer

E.

Configuring a security group and a network access control list (NACL) for EC2 instances

Buy Now
Questions 90

Which service enables customers to audit API calls in their AWS accounts?

Options:

A.

AWS CloudTrail

B.

AWS Trusted Advisor

C.

Amazon Inspector

D.

AWS X-Ray

Buy Now
Questions 91

Which AWS service should a company use to decouple large monolithic applications into smaller microservices components?

Options:

A.

AWS Direct Connect

B.

Amazon Lightsail

C.

Amazon Simple Queue Service (Amazon SQS)

D.

Amazon CloudWatch

Buy Now
Questions 92

A company needs to audit its AWS resources. The company must document any changes that have been made to the resources. Which AWS service will meet these requirements?

Options:

A.

AWS Artifact

B.

AWS Config

C.

Amazon Inspector

D.

Amazon CloudWatch

Buy Now
Questions 93

A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Select TWO.)

Options:

A.

AWS Command Line Interface (AWS CLI)

B.

AWS Key Management Service (AWS KMS)

C.

AWS Management Console

D.

AWS Resource Access Manager (AWS RAM)

E.

AWS Secrets Manager

Buy Now
Questions 94

Which of the following are advantages of the AWS Cloud? (Select TWO.)

Options:

A.

AWS management of user-owned infrastructure

B.

Ability to quickly change required capacity

C.

High economies of scale

D.

Increased deployment time to market

E.

Increased fixed expenses

Buy Now
Questions 95

According to the AWS shared responsibility model, which activities are the customer's responsibility for security in the AWS Cloud? (Select TWO.)

Options:

A.

Hardware maintenance

B.

Amazon EC2 operating system patching

C.

API access control for AWS resources

D.

Configuration management of infrastructure devices

E.

Maintenance of an Availability Zone

Buy Now
Questions 96

A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.

Which costs will the company eliminate with this migration? (Select TWO.)

Options:

A.

Cost of data center operations

B.

Cost of application licensing

C.

Cost of marketing campaigns

D.

Cost of physical server hardware

E.

Cost of network management

Buy Now
Questions 97

A company is planning to build a workload in the AWS Cloud. The company needs to estimate the costs of the network, compute, storage, and database for the workload. Which AWS service or tool should the company use to generate this estimate?

Options:

A.

AWS Budgets

B.

AWS Organizations

C.

Cost Explorer

D.

AWS Pricing Calculator

Buy Now
Questions 98

Which AWS service allows for file sharing between multiple Amazon EC2 instances?

Options:

A.

AWS Direct Connect

B.

AWS Snowball Edge

C.

AWS Backup

D.

Amazon Elastic File System (Amazon EFS)

Buy Now
Questions 99

A company needs steady and predictable performance from its Amazon EC2 instances at the lowest possible cost. The company also needs the ability to scale resources to ensure that it has the right resources available at the right time.

Which AWS service or resource will meet these requirements?

Options:

A.

Amazon CloudWatch

B.

Application Load Balancer

C.

AWS Batch

D.

Amazon EC2 Auto Scaling

Buy Now
Questions 100

Which AWS service or tool lists all the users in an account and reports on the status of account details, including passwords, access keys, and multi-factor authentication (MFA) devices?

Options:

A.

WS Shield

B.

AWS Trusted Advisor

C.

Amazon Inspector

D.

IAM credential report

Buy Now
Questions 101

Which of the following are design principles of the reliability pillar of the AWS Well-Architected Framework? (Select TWO.)

Options:

A.

Perform operations as code.

B.

Stop guessing capacity.

C.

Adopt serverless architecture whenever possible.

D.

Use build and deployment management systems.

E.

Make changes to infrastructure by using automation.

Buy Now
Questions 102

A company is undergoing a security audit. The audit includes security validation and compliance validation of the AWS infrastructure and services that the company uses. The auditor needs to locate compliance-related information and must download AWS security and compliance documents. These documents include the System and Organization Control (SOC) reports.

Which AWS service or group can provide these documents?

Options:

A.

AWS Abuse team

B.

AWS Artifact

C.

AWS Support

D.

AWS Config

Buy Now
Questions 103

Which of the following describes AWS Local Zones?

Options:

A.

A cluster of data centers in one geographic location

B.

A site used by Amazon CloudFront to cache frequently accessed content

C.

An extension of an A WS Region to more granular locations

D.

One or more data centers with redundant power and networking

Buy Now
Questions 104

Which of the following are aspects of the AWS shared responsibility model? (Select TWO.)

Options:

A.

Configuration management of infrastructure devices is the customer’s responsibility.

B.

For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms.

C.

AWS is responsible for protecting the physical cloud infrastructure.

D.

AWS is responsible for training the customer’s employees on AWS products and services.

E.

For Amazon EC2, AWS is responsible for maintaining the guest operating system.

Buy Now
Questions 105

A company's system administrator discovers that someone logged in to the company's AWS account during the weekend and terminated an Amazon EC2 instance Which AWS service should the system administrator use to identify who made this change?

Options:

A.

Amazon Inspector

B.

Amazon Pinpoint

C.

AWS CloudTrail

D.

AWS Trusted Advisor

Buy Now
Questions 106

A company needs to use machine learning and pattern matching to identify and protect sensitive data that the company stores in the AWS Cloud.

Which AWS service will meet these requirements?

Options:

A.

Amazon Inspector

B.

Amazon Macie

C.

Amazon GuardDuty

D.

AWS Audit Manager

Buy Now
Questions 107

A company has a global website with static content.

Which AWS service will deliver the static content with low latency?

Options:

A.

AWS Lambda

B.

Amazon CloudFront

C.

Amazon EC2 Auto Scaling

D.

AWS Compute Optimizer

Buy Now
Questions 108

Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?

Options:

A.

Scale the number of EC2 instances in or out automatically, based on demand.

B.

Use serverless EC2 instances.

C.

Scale the size of EC2 instances up or down automatically, based on demand.

D.

Transfer unused CPU resources between EC2 instances.

Buy Now
Questions 109

A company needs to deploy an Amazon EC2 instance and attach a storage mount for the operating system and application files. Which AWS service will meet these requirements?

Options:

A.

AWS Backup

B.

Amazon Elastic File System (Amazon EFS)

C.

Amazon S3

D.

Amazon Elastic Block Store (Amazon EBS)

Buy Now
Questions 110

An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company's direct responsibility?

Options:

A.

Cost of application software licenses

B.

Cost of the hardware infrastructure on AWS

C.

Cost of power for the AWS servers

D.

Cost of physical security for the AWS data center

Buy Now
Questions 111

Elasticity in the AWS Cloud refers to which of the following? (Select TWO.)

Options:

A.

How quickly an Amazon EC2 instance can be restarted

B.

The ability to right size resources as demand shifts

C.

The maximum amount of RAM an Amazon EC2 instance can use

D.

The pay-as-you-go billing model

E.

How easily resources can be procured when they are needed

Buy Now
Exam Code: CLF-C01
Exam Name: AWS Certified Cloud Practitioner
Last Update: Oct 10, 2023
Questions: 370