Special Summer Discounts Limited Time 55% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 63r59951

CLF-C01 AWS Certified Cloud Practitioner Questions and Answers

Questions 4

When using Amazon RDS what is the customer responsible for?

Options:

A.

Patching and maintenance of the underlying operating system

B.

Managing automatic backups of the database

C.

Controlling network access through security groups

D.

Replacing failed instances in the event of a hardware failure

Buy Now
Questions 5

Which of the following is a fully managed MySQL-compatible database?

Options:

A.

Amazon S3

B.

Amazon DynamoDB

C.

Amazon Redshift

D.

Amazon Aurora

Buy Now
Questions 6

When an Amazon EC2 instance is terminated, which AWS service can identify the user that made the API call?

Options:

A.

Amazon CloudWatch

B.

AWS CloudTrail

C.

AWS X-Ray

D.

AWS Identity and Access Management (IAM)

Buy Now
Questions 7

A company has set up its IT infrastructure in the AWS Cloud. The company wants to receive detailed reports that break down AWS costs by the hour. The reports must be placed in an Amazon S3 bucket. Which AWS tool will meet these requirements?

Options:

A.

AWS Cost and Usage Reports

B.

AWS Pricing Calculator

C.

Cost Explorer

D.

AWS Budgets

Buy Now
Questions 8

An IT department provisions more servers than are needed to run a workload.

Which cloud architecture design principle supports changing this approach?

Options:

A.

Protect data in transit and at rest

B.

Stop guessing capacity

C.

Improve through game days

D.

Annotate documentation

Buy Now
Questions 9

What is a responsibility of AWS in the shared responsibility model?

Options:

A.

Updating the network ACLs to block traffic to vulnerable ports.

B.

Patching operating systems running on Amazon EC2 instances.

C.

Updating the firmware on the underlying EC2 hosts.

D.

Updating the security group rules to block traffic to the vulnerable ports.

Buy Now
Questions 10

Which services can be used to deploy applications on AWS? (Select Two.)

Options:

A.

AWS Elastic Beanstalk

B.

AWS Config

C.

AWS OpsWorks

D.

AWS Application Discovery Service

E.

Amazon Kinesis

Buy Now
Questions 11

Which tool should a developer use to integrate AWS service features directly into an application?

Options:

A.

AWS Software Development Kit

B.

AWS CodeDeploy

C.

AWS Lambda

D.

AWS Batch

Buy Now
Questions 12

What is an AWS Region?

Options:

A.

A broad set of global, cloud-based products that include compute, storage, and databases

B.

A physical location around the world where data centers are clustered

C.

One or more discrete data centers with redundant power, networking, and connectivity

D.

A service that developers use to build applications that deliver latencies of single-digit milliseconds to users

Buy Now
Questions 13

A company needs real-time guidance to follow AWS best practices to save money, improve system performance, and close security gaps. Which AWS service should the company use?

Options:

A.

Amazon GuardDuty

B.

AWS Trusted Advisor

C.

AWS Management Console

D.

AWS Systems Manager

Buy Now
Questions 14

Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?

Options:

A.

Scale the number of EC2 instances in or out automatically, based on demand.

B.

Use serverless EC2 instances.

C.

Scale the size of EC2 instances up or down automatically, based on demand.

D.

Transfer unused CPU resources between EC2 instances.

Buy Now
Questions 15

A company has existing software licenses that it wants to bring to AWS, but the licensing model requires licensing physical cores. How can the company meet this requirement in the AWS Cloud?

Options:

A.

Launch an Amazon EC2 instance with default tenancy.

B.

Launch an Amazon EC2 instance on a Dedicated Host.

C.

Create an On-Demand Capacity Reservation.

D.

Purchase Dedicated Reserved Instances.

Buy Now
Questions 16

A developer is working on enhancing applications at AWS. The developer needs a service that can securely host GitHub-based code, repositories, and version controls. Which AWS service should the developer use?

Options:

A.

AWS CodeStar

B.

Amazon CodeGuru

C.

AWS CodeCommit

D.

AWS CodePipeline

Buy Now
Questions 17

A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.

Which costs will the company eliminate with this migration? (Select TWO.)

Options:

A.

Cost of data center operations

B.

Cost of application licensing

C.

Cost of marketing campaigns

D.

Cost of physical server hardware

E.

Cost of network management

Buy Now
Questions 18

A company manages global applications that require static IP addresses.

Which AWS service would enable the company to improve the availability and performance of its applications?

Options:

A.

Amazon CloudFront

B.

AWS Global Accelerator

C.

Amazon S3 Transfer Acceleration

D.

Amazon API Gateway

Buy Now
Questions 19

A company stores configuration files in an Amazon S3 bucket. These configuration files must be accessed by applications that are running on Amazon EC2 instances.

According to AWS security best practices, how should the company grant permissions to allow the applications to access the S3 bucket?

Options:

A.

Use the AWS account root user access keys.

B.

Use the AWS access key ID and the EC2 secret access key.

C.

Use an IAM role with the necessary permissions.

D.

Activate multi-factor authentication (MFA) and versioning on the S3 bucket.

Buy Now
Questions 20

A company wants to migrate its on-premises Microsoft SQL Server database server to the AWS Cloud. The company has decided to use Amazon EC2 instances to run this database.

Which of the following is the company responsible for managing, according to the AWS shared responsibility model?

Options:

A.

EC2 hypervisor

B.

Security patching of the guest operating system

C.

Network connectivity of the host server

D.

Uptime service level agreement (SLA) for the EC2 instances

Buy Now
Questions 21

A developer has a legacy application that is hosted on-premises Other applications hosted on AWS depend on the on-premises application for proper functioning In case of any application errors, the developer wants to be able to use Amazon CloudWatch to monitor and troubleshoot all applications from one place.

How can the developer accomplish this?

Options:

A.

Install an AWS SDK on the on-premises server to automatically send logs to CloudWatch.

B.

Download the CloudWatch agent to the on-premises server Configure the agent to use I AM user credentials with permissions for CloudWatch

C.

Upload log files from the on-premises server to Amazon S3 and have CloudWatch read the files.

D.

Upload log files from the on-premises server to an Amazon EC2 instance and have the instance forward the logs to CloudWatch

Buy Now
Questions 22

Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?

Options:

A.

Amazon CloudFront

B.

Amazon GuardDuty

C.

Amazon Route 53

D.

AWS Trusted Advisor

Buy Now
Questions 23

A company needs to run an application on Amazon EC2 instances. The instances cannot be interrupted at any time. The company needs an instance purchasing option that requires no long-term commitment or upfront payment. Which instance purchasing option will meet these requirements MOST cost-effectively?

Options:

A.

On-Demand Instances

B.

Spot Instances

C.

Dedicated Hosts

D.

Reserved Instances

Buy Now
Questions 24

A company discovered unauthorized access to resources in its on-premises data center. Upon investigation, the company found that the requests originated from a resource hosted on AWS. Which AWS team should the company contact to report this issue?

Options:

A.

AWS Customer Service team

B.

AWS Sales team

C.

AWS Abuse team

D.

AWS Technical Support team

Buy Now
Questions 25

A company runs a web application on Amazon EC2 instances. The application must run constantly and is expected to run indefinitely without interruption.

Which EC2 instance purchasing options will meet these requirements MOST cost-effectively? (Select TWO.)

Options:

A.

On-Demand Instances

B.

Spot Instances.

C.

Reserved Instances

D.

Savings Plans

E.

Dedicated Hosts

Buy Now
Questions 26

Which of the following describes some of the core functionality of Amazon S3?

Options:

A.

Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2

B.

Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.

C.

Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol.

D.

Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources.

Buy Now
Questions 27

Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory standards?

Options:

A.

Running Amazon GuardDuty

B.

Using AWS Artifact

C.

Creating an AWS Support ticket

D.

AWS Cloud Trail logs

Buy Now
Questions 28

Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity?

Options:

A.

Agility

B.

Elasticity

C.

Reliability

D.

Durability

Buy Now
Questions 29

How does consolidated billing help reduce costs for a company that has multiple AWS accounts?

Options:

A.

It aggregates usage across accounts so that the company can reach volume discount thresholds sooner.

B.

It offers an additional 5% discount on purchases of All Upfront Reserved Instances.

C.

It provides a simplified billing invoice that the company can process more quickly than a standard invoice.

D.

It gives AWS resellers the ability to bill their customers for usage.

Buy Now
Questions 30

What is a benefit of using AWS serverless computing?

Options:

A.

Application deployment and management are not required.

B.

Application security will be fully managed by AWS.

C.

Monitoring and logging are not needed.

D.

Management of infrastructure is offloaded to AWS.

Buy Now
Questions 31

Which of the following is an AWS key-value database offering consistent single-digit millisecond performance at any scale?

Options:

A.

Amazon RDS

B.

Amazon Aurora

C.

Amazon DynamoDB

D.

Amazon Redshift

Buy Now
Questions 32

A company wants a cost-effective option when running its applications in an Amazon EC2 instance for short time periods. The applications can be interrupted. Which EC2 instance type will meet these requirements?

Options:

A.

Spot Instances

B.

On-Demand Instances

C.

Reserved Instances

D.

Dedicated Instances

Buy Now
Questions 33

Which AWS service automatically handles application health monitoring?

Options:

A.

Amazon API Gateway

B.

AWS Elastic Beanstalk

C.

AWS Lambda

D.

AWS Config

Buy Now
Questions 34

Which AWS service or feature provides an online, managed software catalog that helps users purchase and deploy third-party software?

Options:

A.

AWS Support

B.

AWS Marketplace

C.

Amazon EC2 private Amazon Machine Images (AMIs)

D.

AWS reseller programs

Buy Now
Questions 35

A company has existing software licenses thai it wants to bring to AWS, but the licensing model requires licensing physical cores. How can the company meet this requirement in the AWS Cloud?

Options:

A.

Launch an Amazon EC2 instance with default tenancy.

B.

Launch an Amazon EC2 instance on a Dedicated Host.

C.

Create an On-Demand Capacity Reservation.

D.

Purchase Dedicated Reserved Instances.

Buy Now
Questions 36

An online retail company is having a sale next month that will generate an increase in traffic for the company's application. The company plans to add new Amazon EC2 instances to support the increased demand on the application. The application must be able to accommodate the increase in traffic and cannot experience any downtime.

Which EC2 instance purchasing option will meet these requirements at the LOWEST cost?

Options:

A.

Reserved Instances

B.

On-Demand Instances

C.

Spot Instances

D.

Dedicated Hosts

Buy Now
Questions 37

Which AWS service provides managed DDoS protection?

Options:

A.

AWS Firewall Manager

B.

AWS Shield

C.

Amazon GuardDuty

D.

Amazon Inspector

Buy Now
Questions 38

Which AWS service or tool can automatically identity security groups that grant unrestricted internet access to a list of ports?

Options:

A.

AWS Firewall Manager

B.

AWS Trusted Advisor

C.

AWS Shield

D.

Amazon EC2 dashboard

Buy Now
Questions 39

A company plans to store sensitive data in an Amazon S3 bucket. Which task is the responsibility of AWS?

Options:

A.

Activate encryption at rest for the data

B.

Provide security for the physical infrastructure

C.

Train the company's employees about cloud security

D.

Remove personally identifiable information (PII) from the data

Buy Now
Questions 40

Which guidelines are best practices for using AWS Identity and Access Management (IAM)? (Select TWO.)

Options:

A.

Share access keys

B.

Create individual IAM users

C.

Use inline policies instead of customer managed policies

D.

Grant maximum privileges to IAM users

E.

Use groups to assign permissions to IAM users

Buy Now
Questions 41

A company is running a reporting web server application on Amazon EC2 instances The application runs once every week and once again at the end of the month The EC2 instances can be shut down when they are not in use.

What is the MOST cost-effective billing model for this use case?

Options:

A.

Standard Reserved Instances

B.

Convertible Reserved Instances

C.

On-Demand Capacity Reservations

D.

On-Demand Instances

Buy Now
Questions 42

Which AWS service or tool helps identify underutilized Amazon EC2 instances and idle Amazon RDS DB instances at no additional charge?

Options:

A.

Cost Explorer

B.

AWS Budgets

C.

AWS Organizations

D.

AWS Trusted Advisor

Buy Now
Questions 43

A company spends several months upgrading its on-premises infrastructure every few years The company wants to reduce infrastructure procurement time by migrating to the AWS Cloud.

What is the main benefit of migrating to the AWS Cloud for this use case?

Options:

A.

AWS will help move the existing hardware to the AWS data centers

B.

The company will have increased agility with on-demand access to IT resources

C.

Enterprise support will be available to help with recurring application installation and setup

D.

The company will experience less downtime with Multi-AZ deployments

Buy Now
Questions 44

A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion. Which AWS service should the developer use to meet these requirements?

Options:

A.

AWS Ground Station

B.

AWS Shield

C.

AWS loT Device Defender

D.

AWS CloudFormation

Buy Now
Questions 45

A company is building a mobile app to provide shopping recommendations lo its customers. The company wants to use a graph database as part of the shopping recommendation engine.

Which AWS database service should the company choose?

Options:

A.

Amazon DynamoDB

B.

Amazon Aurora

C.

Amazon Neptune

D.

Amazon DocumentDB (with MongoDB compatibility)

Buy Now
Questions 46

A company has a compliance requirement to encrypt data in transit and at rest. The company is serving the content through Amazon EC2 instances behind an Elastic Load Balancer! and is storing data in Amazon Elastic Block Store (Amazon EBS) volumes.

Which combination of AWS services should the company use to stay compliant with this requirement? (Select TWO.)

Options:

A.

Amazon GuardDuty

B.

AWS Shield

C.

AWS Certificate Manager (ACM)

D.

AWS Secrets Manager

E.

AWS Key Management Service (AWS KMS)

Buy Now
Questions 47

Which AWS service or feature allows a company to visualize, understand, and manage AWS costs and usage over time?

Options:

A.

AWS Trusted Advisor

B.

AWS CloudWatch

C.

Cost Explorer

D.

AWS Budgets

Buy Now
Questions 48

A company suspects that its AWS resources are being used for harmful network activities, including port scanning and malware distribution.

Options:

A.

AWS Abuse team

B.

AWS technical account manager (TAM)

C.

AWS Concierge Support

D.

AWS Support team

Buy Now
Questions 49

A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI). Which actions can a system administrator take to connect to the EC2 instance? (Select TWO.)

Options:

A.

Use Amazon EC2 Instance Connect.

B.

Use a Remote Desktop Protocol (RDP) connection.

C.

Use AWS Batch.

D.

Use AWS Systems Manager Session Manager.

E.

Use Amazon Connect.

Buy Now
Questions 50

Which of the following are advantages of the AWS Cloud? (Select Two.)

Options:

A.

AWS manages all the security within the cloud

B.

Expenses never change from month to month

C.

Users can stop spending money on the maintenance of data centers

D.

Users do not need to deploy applications globally

E.

Users can stop guessing about resource capacity

Buy Now
Questions 51

Which terms describe the on-demand AWS pricing model? (Select TWO.)

Options:

A.

Fixed term

B.

Pay-as-you-go

C.

Collocation

D.

Planned

E.

Variable expense

Buy Now
Questions 52

Which AWS service should a company use to continuously monitor the compliance of AWS resource configurations?

Options:

A.

AWS Organizations

B.

AWS Config

C.

AWS Artifact

D.

AWS Service Catalog

Buy Now
Questions 53

Which AWS service keeps track of SSUTLS certificates, creates new certificates, and processes renewals?

Options:

A.

AWS Identity and Access Management (IAM)

B.

AWS Certificate Manager (ACM)

C.

AWS Config

D.

AWS Trusted Advisor

Buy Now
Questions 54

Which AWS services can host PostgreSQL databases? (Select TWO.)

Options:

A.

Amazon S3

B.

Amazon Aurora

C.

Amazon EC2

D.

Amazon Elasticsearch Service (Amazon ES)

E.

Amazon Elastic File System (Amazon EFS)

Buy Now
Questions 55

A company wants to add a layer of security beyond user names and passwords to make the login to the AWS Management Console more secure.

Which AWS service or feature can the company use to meet this requirement?

Options:

A.

Secret access keys

B.

AWS Security Token Service (AWS STS)

C.

Multi-factor authentication (MFA)

D.

IAM password policies

Buy Now
Questions 56

A developer is making changes to a custom application that uses AWS Elastic Beanstalk.

Which solutions will update the Elastic Beanstalk environment with the new application version after the developer completes the changes? (Select TWO/)

Options:

A.

Package the application code into a zip file. Use the AWS Management Console to upload the .zip file and deploy the packaged application.

B.

Package the application code into a tar file Use the AWS Management Console to create a new application version from the tar file. Update the environment by using the AWS CLI.

C.

Package the application code into a tar file Use the AWS Management Console to upload the tar file and deploy the packaged application

D.

Package the application code into a zip file Use the AWS CLI to create a new application version from the zip file and to update the environment

E.

Package the application code into a zip file. Use the AWS Management Console to create a new application version from the .zip file. Rebuild the environment by using the AWS CLI.

Buy Now
Questions 57

A company has a web application that runs on Amazon EC2 instances with a custom Amazon Machine Image (AMI) The company uses AWS CloudFormation to provision the application. The application runs in the us-east-1 Region, and the company needs to deploy the application to the us-west-1 Region

An attempt to create the AWS CloudFormation stack in us-west-1 fails An error message states that the AMI ID does not exist A developer must resolve this error with a solution that uses the least amount of operational overhead.

Which solution meets these requirements?

Options:

A.

Change the AWS CloudFormation templates for us-east-1 and us-west-1 to use an AWS AMI Relaunch the stack for both Regions

B.

Copy the custom AMI from us-east-1 to us-west-1 Update the AWS CloudFormation template for us-west-1 to refer to AMI ID for the copied AMI. Relaunch the stack.

C.

Build the custom AMI in us-west-1 Create a new AWS CloudFormation template to launch the stack in us-west-1 with the new AMI ID

D.

Manually deploy the application outside AWS CloudFormation in us-west-1

Buy Now
Questions 58

A developer has created a web API that uses Amazon Elastic Container Service (Amazon ECS) and an Application Load Balancer (ALB) An Amazon CloudFront distribution uses the API as an origin for web clients The application has received millions of requests with a JSON Web Token (JWT) that is not valid in the authorization header The developer has scaled out the application to handle the unauthenticated requests

What should the developer do to reduce the number of unauthenticated requests to the API?

Options:

A.

Add a request routing rule to the ALB to return a 401 status code if the authorization header is missing

B.

Add a container to the ECS task definition to validate JWTs Set the new container as a dependency of the application container

C.

Create a CloudFront function for the distribution Use the crypto module in the function to validate the JWT

D.

Add a custom authorizer for AWS Lambda to the CloudFront distribution to validate the JWT

Buy Now
Questions 59

Which AWS service or tool provides a visualization of historical AWS spending patterns and projections of future AWS costs?

Options:

A.

AWS Cost and Usage Report

B.

AWS Budgets

C.

Cost Explorer

D.

Amazon CloudWatch

Buy Now
Questions 60

Which AWS database allows for analytics that use SQL queries?

Options:

A.

Amazon S3

B.

Amazon Redshift

C.

Amazon DynamoDB

D.

Amazon Neplune

Buy Now
Questions 61

A global company has a mobile app with static data stored in an Amazon S3 bucket in the us-east-1 Region. The company serves the content through an Amazon CloudFront distribution The company is launching the mobile app In South Africa The data must reside in the af south 1 Region The company does not want to deploy a specific, mobile client for South Africa

What should the company do to meet these requirements?

Options:

A.

Use the CloudFront geographic restriction feature to block access to users in South Africa

B.

Create a Lambda@Edge function Associate the Lambda@Edge function as an origin request trigger with the CloudFront distribution to change the S3 origin Region

C.

Create a Lambda@Edge function. Associate the Lambda@Edge function as a viewer response trigger with the CloudFront

distribution to change the S3 origin Region

D.

Include af-south-1 in the alternate domain name (CNAME) of the CloudFront distribution

Buy Now
Questions 62

Which AWS service enables the decoupling and scaling of applications?

Options:

A.

Amazon Simple Queue Service (Amazon SQS)

B.

AWS Outposts

C.

Amazon S3

D.

Amazon Simple Email Service (Amazon SES)

Buy Now
Questions 63

A company has an application where reading objects from Amazon S3 is based on the type of user. The user types are registered user and guest user. The company has 25.000 users and is growing. Information is pulled from an S3 bucket depending on the user type.

Which approaches are recommended to provide access to both user types? (Select TWO.)

Options:

A.

Provide a different access key and secret access key in the application code for registered users and guest users to provide read access to the objects.

B.

Use S3 bucket policies to restrict read access to specific IAM users

C.

Use Amazon Cognito to provide access using authenticated and unauthenticated roles

D.

Create a new 1AM user for each user and grant read access

E.

Use the AWS 1AM service and let the application assume the different roles using the AWS Security Token Service (AWS STS) AssumeRole action depending on the type of user and provide read access to Amazon S3 using the assumed role.

Buy Now
Questions 64

A large organization has a single AWS account.

What are the advantages of reconfiguring the single account into multiple AWS accounts? (Select TWO.)

Options:

A.

It allows for administrative isolation between different workloads.

B.

Discounts can be applied on a quarterly basis by submitting cases in the AWS Management Console.

C.

Transitioning objects from Amazon S3 to Amazon S3 Glacier in separate AWS accounts will be less expensive.

D.

Having multiple accounts reduces the risks associated with malicious activity targeted at a single account.

E.

Amazon QuickSight offers access to a cost tool that provides application-specific recommendations for environments running in multiple accounts.

Buy Now
Questions 65

Which AWS service gives a company the ability to use a private, dedicated connection between a VPC and an on-premises data center?

Options:

A.

AWS Direct Connect

B.

Amazon API Gateway

C.

AWS Systems Manager

D.

AWS CloudFormation

Buy Now
Questions 66

A company wants to establish a private network connection between AWS and its corporate network. Which AWS service or feature will meet this requirement?

Options:

A.

Amazon Connect

B.

Amazon Route 53

C.

AWS Direct Connect

D.

VPC peering

Buy Now
Questions 67

Which tasks require the use of AWS account root user credentials? (Select TWO.)

Options:

A.

Configure multi-factor authentication (MFA) delete for an Amazon S3 bucket.

B.

Create an IAM administrator access policy.

C.

Open a support ticket with AWS to request an increase to service quotas.

D.

Change an AWS Support plan.

E.

Change payment currency for an AWS account.

Buy Now
Questions 68

Which AWS service would identify if unrestricted access to a resource has been allowed by a security group?

Options:

A.

AWS Trusted Advisor

B.

Amazon CloudWatch

C.

VPC Flow Logs

D.

AWS CloudTrail

Buy Now
Questions 69

A company is using Amazon EC2 Auto Scaling to scale its Amazon EC2 instances. Which benefit of the AWS Cloud does this example illustrate?

Options:

A.

High availability

B.

Elasticity

C.

Reliability

D.

Global reach

Buy Now
Questions 70

A company needs to generate reports that will describe its usage of Amazon EC2 Reserved Instances across AWS accounts for the past month. Which AWS service or tool can the company use to meet this requirement?

Options:

A.

AWS Organizations

B.

Amazon S3

C.

Cost Explorer

D.

Amazon EC2 dashboard

Buy Now
Questions 71

A Lambda function processes data before sending it to a downstream service. Each piece of data is approximately 1MB in size. After a security audit, the function is now required to encrypt the data before sending it downstream

Which API call is required to perform the encryption?

Options:

A.

Pass the data to the KMS ReEncrypt API for encryption

B.

Use the KMS GenerateDataKeyAPi to get an encryption key

C.

Use the KMS GeneraceDaraHeywithoutPlainTexr API to get an encryption key

D.

Pass the data to KMS as part of the Encrypt API for encryption.

Buy Now
Questions 72

A user has limited knowledge o( AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud. Which service should be used to deploy the application?

Options:

A.

AWS CloudFormation

B.

AWS Elastic Beanstalk

C.

Amazon EC2

D.

AWS OpsWorks

Buy Now
Questions 73

A developer has written code for an application and wants to share it with other developers on the team to receive feedback. The shared application code needs to be stored long-term with multiple versions and batch change tracking

Which AWS service should the developer use?

Options:

A.

AWS CodeBuild

B.

Amazon S3

C.

AWS CodeCommit

D.

AWS Cloud9

Buy Now
Questions 74

A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each application.

What can the company do to meet this requirement?

Options:

A.

Set up invoiced billing.

B.

Use AWS Artifact.

C.

Set budgets in Cost Explorer.

D.

Create cost allocation tags.

Buy Now
Questions 75

A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way. What can the company do to meet this requirement?

Options:

A.

Use AWS Key Management Service {AWS KMS).

B.

Use multiple AWS accounts and consolidated billing.

C.

Use AWS CloudFormation to deploy the infrastructure.

D.

Rightslze all the EC2 instances that are used in the deployment.

Buy Now
Questions 76

Which AWS service or feature provides a platform for building cloud-based customer service contact centers?

Options:

A.

Amazon Pinpoint

B.

Amazon Connect

C.

Amazon Athena

D.

AWS Enterprise Support

Buy Now
Questions 77

Which design principles for cloud architecture are recommended when re-architecting a large monolithic application? (Select TWO.)

Options:

A.

Use manual monitoring.

B.

Use fixed servers.

C.

Implement loose coupling.

D.

Rely on individual components.

E.

Design for scalability.

Buy Now
Questions 78

Which of the following security resources are supplied by AWS? (Select TWO.)

Options:

A.

Trusted Advisor checks

B.

Service intrusion metrics

C.

Penetration testing

D.

Educational webinars

E.

Peer-to-peer file-sharing detection

Buy Now
Questions 79

Which databases are available on Amazon RDS? (Select Two.)

Options:

A.

Sybase

B.

Microsoft SQL Server

C.

IBM DB2

D.

MongoDB

E.

PostgreSQL

Buy Now
Questions 80

A company has decided to migrate its production workloads to the AWS Cloud.

Which actions can help reduce operational costs as part of the migration? (Select TWO.)

Options:

A.

Reduce overprovisioned instances.

B.

Rehost all third-party licenses on AWS

C.

Implement a highly available architecture

D.

Use managed services.

E.

Improve application security.

Buy Now
Questions 81

A company that does business online needs to quickly deliver new functionality in an iterative manner, minimizing the time to market

Which AWS Cloud feature can provide this?

Options:

A.

Elasticity

B.

High availability

C.

Agility

D.

Reliability

Buy Now
Questions 82

A company hosts a web application on Amazon EC2 instances. The application requires credentials so that it can access other AWS services.

Which feature should the company use the provide this access?

Options:

A.

IAM users

B.

IAM groups

C.

IAM roles

D.

Multi-factor authentication (MFA)

Buy Now
Questions 83

Which AWS service is delivered regionally?

Options:

A.

AWS Shield

B.

Amazon S3

C.

Amazon Route 53

D.

AWS Identity and Access Management (IAM)

Buy Now
Questions 84

A company is using multiple Availability Zones to deploy AWS Cloud architecture.

Which design principle of the AWS Well-Architected Framework does this example represent?

Options:

A.

Implement elasticity

B.

Decouple architecture components

C.

Design for high availability

D.

Thing parallel

Buy Now
Questions 85

A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The company has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time. Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?

Options:

A.

VPC endpoints

B.

AWS Transit Gateway

C.

Amazon Route 53

D.

AWS Secrets Manager

Buy Now
Questions 86

A user is planning to launch two additional Amazon EC2 instances to increase availability. Which action should the user take?

Options:

A.

Launch the instances across multiple Availability Zones in a single AWS Region

B.

Launch the instances as EC2 Reserved Instances in the same AWS Region and the same Availability Zone

C.

Launch the instances in multiple AWS Regions but in the same Availability Zone

D.

Launch the instances as EC2 Spot Instances in the same AWS Region but in different Availability Zones

Buy Now
Questions 87

Which of the following allows an application running on an Amazon EC2 instance to securely write data to an Amazon S3 bucket without using long term credentials?

Options:

A.

Amazon Cognito

B.

AWS Shield

C.

AWS IAM role

D.

AWS IAM user access key

Buy Now
Questions 88

How can a company reduce its Total Cost of Ownership (TCO) using AWS?

Options:

A.

By minimizing large capital expenditures

B.

By having no responsibility for third-party license costs

C.

By having no operational expenditures

D.

By having AWS manage applications

Buy Now
Questions 89

A cloud practitioner has a data analysis workload that is infrequently executed and can be interrupted without harm. To optimize for cost which Amazon EC2 purchasing option should De used?

Options:

A.

On-Demand Instances

B.

Reserved instances

C.

Spot Instances

D.

Dedicated Hosts

Buy Now
Questions 90

Which AWS services or features help decrease network latency for a globally dispersed user base? (Select TWO.)

Options:

A.

Amazon VPC

B.

Elastic Load Balancer

C.

Amazon CloudFront

D.

AWS Direct Connect

E.

AWS Global Accelerator

Buy Now
Questions 91

A solutions architect needs to maintain a fleet of Amazon EC2 instances so that any Impaired instances are replaced with new ones. Which AWS service should the solutions architect use?

Options:

A.

Amazon Elastic Container Service (Amazon ECS)

B.

Amazon GuardDuty

C.

AWS Shield

D.

AWS Auto Scaling

Buy Now
Questions 92

AWS trusted advisor can monitor and provide advice on what characteristics of an AWS account?

Options:

A.

Compliance with security best practices

B.

Application performance

C.

Network utilization

D.

Cost optimization

E.

Compliance status

Buy Now
Questions 93

Which service is an AWS-managed Hadoop framework that makes it easy, fast, and cost-effective to process large amounts of data across dynamically scalable Amazon EC2 instances?

Options:

A.

Amazon EMR

B.

Amazon EC2

C.

AWS Elastic Beanstalk

D.

Amazon Redshift

Buy Now
Questions 94

What are the market advantages of running workloads in the AWS cloud?

Options:

A.

Less staff time is required to deploy new workloads

B.

Increased time to market for new application features

C.

Higher acquisition costs to support peak workloads

D.

Increased productivity for application development teams

E.

A decrease in the average server CPU utilization

Buy Now
Questions 95

Which of the following can be used to identify a specific user who stopped an amazon EC2 instance?

Options:

A.

AWS CloudTrail

B.

Amazon Inspector

C.

Amazon CloudWatch

D.

VPC Flow Logs

Buy Now
Questions 96

which of the following are benefits of running a database on amazon rds compared to an on premises database?

Options:

A.

RDS backup are managed by AWS

B.

RDS supports any relational database

C.

RDs has no database engineer licensing costs.

D.

RDS database compute capacity can be easily scaled.

E.

RDS inbound traffic content (for example, security groups) is managed by AWS.

Buy Now
Questions 97

When a user wants to utilize their existing per-socket per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?

Options:

A.

Spot Instances

B.

Dedicated instances

C.

Dedicated Hosts

D.

Reserved Instances

Buy Now
Questions 98

Which AWS service or feature can be used to prevent SQL injection attacks?

Options:

A.

Security groups

B.

Network ACLs

C.

AWS WAF

D.

IAM policy

Buy Now
Questions 99

Using AWS Config to record audit and evaluate changes to AWS resources to enable traceability is an example of which AWS Wed-Architected Framework pillar?

Options:

A.

Security

B.

Operational excellence

C.

Performance efficiency

D.

Cost optimization

Buy Now
Questions 100

Which AWS service does AWS Snowball Edge natively support?

Options:

A.

AWS Server Migration Service (AWS SMS)

B.

Amazon Aurora

C.

AWS Trusted Advisor

D.

Amazon EC2

Buy Now
Questions 101

Under the AWS shared responsibility model what is the customer's responsibility when using an AWS managed service?

Options:

A.

Physical security of the data centers

B.

Server-side encryption

C.

Customer data

D.

Operating system patching

Buy Now
Questions 102

A user has an AWS account with a Business-level AWS Support plan and needs assistance with handling a production service disruption. Which action should the user take?

Options:

A.

Contact the dedicated AWS technical account manager (TAM)

B.

Contact the dedicated AWS Concierge Support team

C.

Open a business-critical system down support case

D.

Open a production system down support case

Buy Now
Exam Code: CLF-C01
Exam Name: AWS Certified Cloud Practitioner
Last Update: Aug 17, 2022
Questions: 722

PDF + Testing Engine

$79.2  $175.99

Testing Engine

$59.4  $131.99
buy now CLF-C01 testing engine

PDF (Q&A)

$49.5  $109.99
buy now CLF-C01 pdf