AWS Certified Cloud Practitioner (CLF-C01)Exam J

QUESTION 1 Which of the following is included within the security pillar of the AWS Well-Architected Framework?

A. Identity federation

B. Incident reporting

C. Data protection

D. Disaster recovery

Correct Answer: B

QUESTION 2 A company uses a database that has a simple sign-up page to create users, and a basic login form to authenticate users so they can access the database. The company wants to give users the ability to store personal information, but user access must be controlled in a more secure and reliable way.Which AWS service or feature will meet these requirements?

Security groups
Amazon GuardDuty
Amazon Cognito
AWS Secrets Manager

Correct Answer: C

QUESTION 3 A user has limited knowledge o( AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud. Which service should be used to deploy the application?

A. AWS Elastic Beanstalk

B. AWS CloudFormation

C. Amazon EC2

D. AWS OpsWorks

Correct Answer: A

QUESTION 4 An ecommerce company plans to move its data centre workload to the AWS Cloud to support highly dynamic usage patterns. Which benefits make the AWS Cloud cost-effective for the migration of this type workload? (Select TWO.)

A. Elasticity

B. Pay-as-you-go resource pricing

C. Reliability

D. Security

E. High availability

Correct Answer: AB

QUESTION 5 Which AWS service continuously audits AWS resources and enables them to assess overall compliance?

A. AWS Config

B. Amazon CloudWatch

C. AWS CloudTrail

D. AWS Trusted Advisor

Correct Answer: A

QUESTION 6 Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?

A. Amazon DynamoDB

B. Amazon RDS

C. Amazon Athena

D. Amazon EMR

Correct Answer: B

QUESTION 7 A company does not want to rely on elaborate forecasting to determine its usage of compute resources. Instead, the company wants to pay only for the resources that it uses. The company also needs the ability to increase or decrease its resource usage to meet business requirements. Which pillar of the AWS Well-Architected Framework aligns with these requirements?

A. Security

B. Reliability

C. Cost optimization

D. Operational excellence

Correct Answer: D

QUESTION 8 A company needs to use SQL syntax to perform a direct query of objects in an Amazon S3 bucket. Which AWS service can the company use to meet this requirement?

A. Amazon Athena

B. AWS Glue

C. AWS Lambda

D. Amazon Kinesis

Correct Answer: B

QUESTION 9 Which of the following are features of network ACLs as they are used in the AWS Cloud? (Select TWO.)

A. They are stateless.

B. They evaluate all rules before allowing traffic.

C. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.

D. They operate at the instance level.

E. They are stateful.

Correct Answer: CE

QUESTION 10 How does AWS Cloud computing help businesses reduce costs? (Select TWO.)

A. AWS enables capacity to be adjusted on demand.

B. AWS charges the same prices for services in every AWS Region.

C. AWS offers discounts for Amazon EC2 instances that remain idle for more than 1 week.

D. AWS does not charge for data sent from the AWS Cloud to the internet.

E. AWS eliminates many of the costs of building and maintaining on-premises data centres.

Correct Answer: AD

QUESTION 11 A developer has an AWS account and needs access to another account's test database. Which AWS service or feature can the developer use to gain access to the test database?

A. Amazon Macie

B. IAM roles

C. Security groups

D. AWS Trusted Advisor

Correct Answer: B

QUESTION 12 Which AWS service can a company use lo directly query and analyze AWS Cost and Usage Reports?

A. Amazon Elasticsearch Service (Amazon ES)

B. Amazon Aurora

C. Amazon Athena

D. AWS Glue

Correct Answer: C

QUESTION 13 A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each application. What can the company do to meet this requirement?

A. Set up invoiced billing.

B. Use AWS Artefact.

C. Create cost allocation tags.

D. Set budgets in Cost Explorer.

Correct Answer: C

QUESTION 14 Which of the following services can be used to block network traffic to an instance? (Select TWO.)

A. Amazon Virtual Private Cloud (Amazon VPC) flow logs

B. Security groups

C. Amazon CloudWatch

D. Network ACLs

E. AWS CloudTrail

Correct Answer: BD

QUESTION 15 Which task is an AWS responsibility when a workload is running in Amazon RDS?

A. Creating the database table

B. Installing the database engine

C. Updating the database schema

D. Dropping the database records

Correct Answer: B

QUESTION 16 A retail company needs to build a highly available architecture for a new ecommerce platform. The company is using only AWS services that replicate data across multiple Availability Zones.Which AWS services should the company use to meet this requirement? (Select TWO.)

A. Amazon Aurora

B. Amazon DynamoDB

C. Amazon EC2

D. Amazon Elastic Block Store (Amazon EBS)

E. Amazon Redshift

Correct Answer: AB

QUESTION 17 Which AWS service is suited for use cases that require a data system?

A. Amazon Elastic File System (Amazon EFS)

B. Amazon Elastic Block Store (Amazon EBS)

C. Amazon FSx for Lustre

D. Amazon S3

Correct Answer: B

QUESTION 18 A company needs to generate reports that will describe its usage of Amazon EC2 Reserved Instances across AWS accounts for the past month. Which AWS service or tool can the company use to meet this requirement?

A. AWS Organizations

B. Cost Explorer

C. Amazon S3

D. Amazon EC2 dashboard

Correct Answer: B

QUESTION 19 A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud. Which service should be used to deploy the application?

A. AWS CloudFormation

B. Amazon EC2

C. AWS Elastic Beanstalk

D. AWS OpsWorks

Correct Answer: C

QUESTION 20 What is the benefit of using an Elastic Load Balancer (ELB) with applications running in the AWS Cloud?

A. An ELB will automatically scale resources to meet capacity needs.

B. An ELB can span multiple AWS Regions.

C. An ELB can balance traffic between multiple internet gateways.

D. An ELB can balance traffic across multiple compute resources.

Correct Answer: D

QUESTION 21 A company wants to store internal reports in an Amazon S3 bucket. A compliance requirement states that unauthorised users must not be able to access any new data that is stored in the S3 bucket. What should the company do to meet this requirement?

A. Create a gateway VPC endpoint to the S3 bucket. Share only that endpoint with authorised users.

B. Enable server-side encryption (SSE) with customer master keys (CMKs) that are available only to authorised users.

C. Apply an S3 bucket policy that provides access to the AWS account root user credentials. Instruct the root user to provide access to authorised users.

D. Split the reports into multiple files before storing them in the S3 bucket.

Correct Answer: C

QUESTION 22 A company wants to increase its ability to recover its infrastructure in the case of a natural disaster. Which pillar of the AWS Well-Architected Framework does this ability represent?

A. Cost optimization

B. Reliability

C. Performance efficiency

D. Security

Correct Answer: B

QUESTION 23 Which AWS services are managed database services? (Select TWO.)

A. Amazon DynamoDB

B. Amazon RDS

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon S3

E. Amazon Elastic Pile System (Amazon EFS)

Correct Answer: AB

QUESTION 24 Which tasks are the customer's responsibility, according to the AWS shared responsibility model? (Select TWO.)

A. Establish global infrastructure.

B. Secure edge locations.

C. Paten Amazon RDS DB instances.

D. Perform client-side data encryption.

E. Configure IAM credentials.

Correct Answer: DE

QUESTION 25 Which AWS service or feature is highly available by default?

A. Amazon EC2

B. Amazon Aurora

C. NAT instances

D. Amazon RDS

Correct Answer: D

QUESTION 26 A user with an AWS Basic Support plan has determined that illegal activities are being run on their AWS resources. What is the recommended method for the user to report the activity to AWS?

A. Contact the AWS Concierge Support team.

B. Contact the AWS Abuse team.

C. Contact an AWS technical account manager.

D. Contact the AWS Support team.

Correct Answer: B

QUESTION 27 A company needs a data warehouse for analytical workloads. The data warehouse must support standard SQL queries. Which AWS service meets these requirements?

A. Amazon EMR

B. Amazon Redshift

C. Amazon Athena

D. Amazon RDS

Correct Answer: B

QUESTION 28 Which disaster recovery option is the LEAST expensive?

A. Warm standby

B. Multisite

C. Pilot light

D. Backup and restore

Correct Answer: D

QUESTION 29 An auditor is preparing for an annual security audit. The auditor requests certification details for a company's AWS hosted resources across multiple Availability Zones in the us- east-1 Region. How should the company respond to the auditor's request?

A. Open an AWS Support ticket to request that the auditor receive approval to conduct an onsite assessment of the AWS data centres in which the company operates.

B. Open an AWS Support ticket to request that the AWS technical account manager (TAM) respond and help the auditor

C. Explain to the auditor that AWS does not need to be audited because the company’s application is hosted in multiple Availability Zones.

D. Use AWS Artefact to download the applicable report for AWS security controls. Provide the report to the auditor.

Correct Answer: B

QUESTION 30 A company has only basic knowledge of AWS technologies. Which AWS service provides the SIMPLEST way for the company to establish a website on AWS?

A. AWS Elastic Beanstalk

B. Amazon Elastic File System (Amazon EFS)

C. AWS Lambda

D. Amazon Lightsail

Correct Answer: A

QUESTION 31 A company wants to establish a private network connection between AWS and its corporate network. Which AWS service or feature will meet this requirement?

A. Amazon Connect

B. AWS Direct Connect

C. Amazon Route 53

D. VPC peering

Correct Answer: B

QUESTION 32 Which AWS service can a company use to access compliance documentation and AWS agreements?

A. AWS Security Hub

B. AWS Identity and Access Management (IAM)

C. AWS Certificate Manager (ACM)

D. AWS Artefact

Correct Answer: B

QUESTION 33 A company is based in the us-east-1 Region and has a satellite office in the eu-west-2 Region. The company wants to use Amazon Workspaces to host its internal web portal and virtual desktops for employees.What should the company do to minimise latency and ensure the best possible performance for employees?

A. Deploy the internal web portal to us-east-1 only. Deploy the virtual desktops to us-east-1 and eu-west-2.

B. Deploy the internal web portal and virtual desktops to us-east-1 only. Use an Amazon CloudFront distribution for the users in eu-west-2.

C. Deploy the internal web portal to us-east-1 and eu-west-2. Deploy the virtual desktops on network optimised Amazon EC2 instances to us-east-1 only.

D. Deploy the internal web portal and virtual desktops to us-east-1 and eu-west-2.

Correct Answer: A

QUESTION 34 A web developer has limited knowledge of AWS networking services such as Amazon VPC, Elastic Load Balancing, and Auto Scaling, but wants to host a highly available web application.Which AWS service would automatically handle the deployment and reduce the complexity for the developer?

A. AWS CodeDeploy

B. AWS Elastic Beanstalk

C. AWS Resource Access Manager

D. AWS CloudFormation

Correct Answer: B

QUESTION 35 Which AWS service provides a simple way to set up a new multi-account AWS environment and govern it at scale?

A. AWS Trusted Advisor

B. AWS Control Tower

C. AWS Security Hub

D. AWS Resource Access Manager

Correct Answer: B

QUESTION 36 How does the AWS Cloud pricing model differ from the traditional on-premises storage pricing model?

A. AWS resources do not incur costs

B. There are no upfront cost commitments

C. There are no Infrastructure operating costs

D. There are no software licensing costs

Correct Answer: B

QUESTION 37 According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file.

B. Store the IAM user’s secret key and access key in a text file on the EC2 Instance, read the keys, then upload the file.

C. Modify the S3 bucket policy so that any service can upload to it at any time.

D. Have the EC2 instance assume a role to obtain the privileges to upload the file.

Correct Answer: D

QUESTION 38 Which tasks require use of the AWS account root user? (Select TWO.)

A. Modifying an Amazon EC2 instance type

B. Changing an AWS Support plan

C. Grouping resources in AWS Systems Manager

D. Closing an AWS account

E. Running applications in Amazon Elastic Kubernetes Service (Amazon EKS)

Correct Answer: BD

QUESTION 39 A user needs the ability to access as many resources as are needed. The user also needs the ability to scale up and scale down with only a few minutes of notice. Which benefit of the AWS Cloud describes these abilities?

A. Reliability

B. Elasticity

C. Economy of scale

D. Pay-as-you-go pricing

Correct Answer: B

QUESTION 40 A company is running and managing its own Docker environment on Amazon EC2 instances. The The company wants an alternative to help manage cluster size, scheduling, and environment maintenance. Which AWS service meets these requirements?

A. AWS Lambda

B. AWS Fargate

C. Amazon RDS

D. Amazon Athena

Correct Answer: B

QUESTION 41 A company needs access to cloud support engineers 24 hours a day. 7 days a week. What is the LEAST expensive AWS Support plan that meets this requirement?

A. AWS Basic Support

B. AWS Business Support

C. AWS Enterprise Support

D. AWS Developer Support

Correct Answer: D

QUESTION 42 A company wants to migrate its applications from on premises to the AWS Cloud. Which AWS sen/ice or feature can help automate the migration?

A. AWS Data Exchange

B. AWS AppSync

C. CloudEndure Migration

D. AWS CloudFormation

Correct Answer: C

QUESTION 43 A company wants an in-memory data store that is compatible with open source in the cloud. Which AWS service should the company use?

A. Amazon ElastiCache

B. Amazon DynamoDB

C. Amazon Elastic Block Store (Amazon EBS)

D. Amazon Redshift

Correct Answer: A

QUESTION 44 According to the AWS shared responsibility model, the customer is responsible for maintaining:

A. physical access to the AWS network.

B. data encryption in Amazon S3.

C. the patching of the host operating system.

D. the operating system for Amazon DynamoDB.

Correct Answer: B

QUESTION 45 Which AWS service can be used to decouple applications?

A. AWS Config

B. AWS Batch

C. Amazon Simple Queue Service (Amazon SQS)

D. Amazon Simple Email Service (Amazon SES)

Correct Answer: C

QUESTION 46 What is one of the core principles to follow when designing a highly available application in the AWS Cloud?

A. Assume that all components within an application can fail.

B. Design using a serverless architecture.

C. Design AWS Auto Scaling Into every application.

D. Design all components using open-source code.

Correct Answer: A

QUESTION 47 Which of the following are advantages of moving to the AWS Cloud? (Select TWO.)

A. The ability to use the pay-as-you-go model.

B. The ability to turn over the responsibility for all security to AWS.

C. The ability to have full control over the physical infrastructure.

D. No longer worrying about users’ access controls.

E. No longer having to guess what capacity will be required.

Correct Answer: AE

QUESTION 48 Which task requires the use of AWS account root user credentials?

A. The change lo a different AWS Support plan

B. The deletion of IAM users

C. The creation of an organisation in AWS Organizations

D. The deletion of Amazon EC2 instances

Correct Answer: A

QUESTION 49 Which AWS service should a company use to continuously monitor the compliance of AWS resource configurations?

A. AWS Organizations

B. AWS Artefact

C. AWS Config

D. AWS Service Catalog

Correct Answer: C

QUESTION 50 Which AWS service will automatically identify and protect a user's sensitive data?

A. Amazon GuardDuty

B. Amazon Cloud Watch

C. Amazon Inspector

D. Amazon Macie

Correct Answer: D

QUESTION 51 Which AWS service gives users the ability to find, buy, and immediately start using third- party software solutions in their AWS environments?

A. AWS Config

B. AWS OpsWorks

C. AWS Marketplace

D. AWS Systems Manager

Correct Answer: C

QUESTION 52 Which AWS service enables the decoupling and scaling of applications?

A. AWS Outposts

B. Amazon Simple Queue Service (Amazon SQS)

C. Amazon S3

D. Amazon Simple Email Service (Amazon SES)

Correct Answer: B

QUESTION 53 Which AWS service keeps track of SSUTLS certificates, creates new certificates, and processes renewals?

A. AWS Certificate Manager (ACM)

B. AWS Identity and Access Management (IAM)

C. AWS Config

D. AWS Trusted Advisor

Correct Answer: A

QUESTION 54 Which AWS Trusted Advisor check includes the verification of AWS CloudTrail logging?

A. Performance

B. Security

C. Fault tolerance

D. Service limits

Correct Answer: B

QUESTION 55 A user is moving a workload from a local data centre to an architecture that is distributed between the local data centre and the AWS Cloud. Which type of migration is this?

A. On-premises to cloud native

B. On-premises to hybrid

C. Hybrid to cloud native

D. Cloud native to hybrid

Correct Answer: B

QUESTION 56 What is a feature of Amazon Route 53?

A. Routing users to infrastructure both Inside and outside AWS

B. Providing a private connection to infrastructure inside AWS

C. Distributing content across edge locations

D. Providing a private connection to Infrastructure outside AWS

Correct Answer: D

QUESTION 57 A company plans to migrate an on-premises Microsoft SQL Server database to the AWS Cloud The database supports a legacy application. The company wants to maintain administrative control of the database configuration and host operating system Which AWS service or feature meets these requirements?

A. Amazon RDS for SOL Server

B. SQL Server on Amazon EC2

C. Amazon DocumentDB

D. Amazon DynamoDB

Correct Answer: D

QUESTION 58 Which of the following are economic benefits of using the AWS Cloud? (Select TWO.)

A. Perpetual licence

B. Consumption-based pricing

C. Economies of scale

D. AWS Enterprise Support at no additional cost.

E. Bring-your-own-hardware model

Correct Answer: BC

QUESTION 59 Which AWS service or tool provides a visualisation of historical AWS spending patterns and projections of future AWS costs?

A. AWS Cost and Usage Report

B. AWS Budgets

C. Amazon CloudWatch

D. Cost Explorer

Correct Answer: D

QUESTION 60 Which cloud computing benefit does AWS demonstrate with its ability to offer lower variable costs as a result of high purchase volumes?

A. Pay-as-you-go pricing

B. High availability

C. Economies of scale

D. Global reach

Correct Answer: C

QUESTION 61 A large retail company wants to use an AWS service to process clickstream data from the company's e-commerce website. The company wants to collect and analyse the streaming data in real time.Which AWS service meets these requirements?

A. Amazon Athena

B. Amazon Kinesis

C. Amazon CloudFront

D. AWS Data Exchange

Correct Answer: B

QUESTION 62 What does "security of the cloud" refer to in the AWS shared responsibility model?

A. Availability of AWS services such as Amazon EC2

B. Implementation of password policies for I AM users

C. Security of customer environments by using AWS Network Firewall partners

D. Security of the cloud infrastructure that runs all the AWS services

Correct Answer: D

QUESTION 63 What does the concept of agility mean in AWS Cloud computing? (Select TWO.)

A. The speed at which AWS creates new AWS Regions

B. The elimination of wasted capacity

C. The speed at which AWS resources are implemented

D. The low cost of entry into cloud computing

E. The ability to experiment quickly

Correct Answer: DE

QUESTION 64 Which AWS services make use of global edge locations? (Select TWO.)

A. AWS Fargate

B. AWS Wavelength

C. Amazon VPC

D. Amazon CloudFront

E. AWS Global Accelerator

Correct Answer: DE

QUESTION 65 An online retail company recently deployed a production web application. The system administrator needs to block common attack patterns such as SQL injection and cross-site scripting. Which AWS service should the administrator use to address these concerns?

A. Amazon VPC

B. AWS WAF

C. Amazon GuardDuty

D. Amazon CloudWatch

Correct Answer: B

QUESTION 66 A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB. What is the MOST operationally efficient solution to delegate permissions?

A. Create an IAM user and use its access key and secret access key in the application.

B. Create an IAM role with the required permissions. Attach the role to the EC2 instance

C. Create an IAM user and use its access key and secret access key lo create a CLI profile in the EC2 instance.

D. Create an IAM role with the required permissions. Attach the role to the administrative IAM user.

Correct Answer: C

QUESTION 67 Which AWS database allows for analytics that use SQL queries?

A. Amazon Redshift

B. Amazon S3

C. Amazon DynamoDB

D. Amazon Neplune

Correct Answer: A

QUESTION 68 Which of the following is a fully managed graph database service on AWS?

A. Amazon Aurora

B. Amazon DynamoDB

C. Amazon FSx

D. Amazon Neptune

Correct Answer: B

QUESTION 69 According to the AWS shared responsibility model, which task is the responsibility of AWS for workloads running on Amazon EC2?

A. Updating the operating system

B. Updating the physical hardware

C. Updating the database engine

D. Updating the user data

Correct Answer: B

QUESTION 70 Which AWS service or feature allows users to connect with and deploy AWS services programmatically?

A. AWS Management Console

B. AWS Cloud9

C. AWS software development kits (SDKs)

D. AWS CodePipeline

Correct Answer: C

QUESTION 71 A company needs to use third-party software for its workload on AWS. Which AWS service or feature can the company used to purchase the software?

A. AWS Resource Access Manager

B. AWS Managed Services

C. AWS Marketplace

D. AWS License Manager

Correct Answer: C

QUESTION 72 An IT manager needs to monitor company AWS resources and collect utilisation metrics from Amazon EC2 instances and Amazon DynamoDB. Which AWS service can the IT manager use to meet these requirements?

A. AWS CloudTrail

B. Amazon CloudWatch

C. AWS Config

D. AWS Trusted Advisor

Correct Answer: B

QUESTION 73 A company has existing software licences that it wants to bring to AWS, but the licensing model requires licensing physical cores. How can the company meet this requirement in the AWS Cloud?

A. Launch an Amazon EC2 instance with default tenancy.

B. Create an On-Demand Capacity Reservation.

C. Launch an Amazon EC2 instance on a Dedicated Host.

D. Purchase Dedicated Reserved Instances.

Correct Answer: C

QUESTION 74 A company has an Amazon EC2 instance that must access AWS Secrets Manager to retrieve credentials. Which identity or service is required by the EC2 Instance to perform the task?

A. Multi-factor authentication (MFA)

B. IAM role

C. Security groups

D. IAM group

Correct Answer: C

QUESTION 75 A company plans to move its on-premises servers to Amazon EC2 instances. The company has 50 different business units and wants to separate each billing for each unit. What should a cloud practitioner recommend?

A. Use separate AWS accounts for each business unit, then filter by unit using the coverage report.

B. Tag each business unit’s resources, then filter by unit in Cost Explorer.

C. Place each business unit in a different AWS Region, then filter by unit in Cost Explorer.

D. Use a different VPC for each business unit, then filter by unit using an AWS Cost and Usage Report.

Correct Answer: B

QUESTION 76 Which AWS service is a relational database compatible with MySQL and PostgreSQL?

A. Amazon Redshift

B. Amazon DynamoDB

C. Amazon Neptune

D. Amazon Aurora

Correct Answer: D

QUESTION 77 A company wants to improve the availability and performance of its application with users in different countries. Which AWS service or feature will help improve availability by routing traffic to the closest healthy endpoints?

A. AWS Global Accelerator

B. AWS Direct Connect

C. AWS Well-Architected Tool

D. AWS CLI

Correct Answer: B

QUESTION 78 A company has two AWS accounts in an organisation in AWS Organizations for consolidated billing. All of The company's AWS resources are hosted in one AWS Region. Account A has purchased five Amazon EC2 Standard Reserved Instances (Rls) and has four EC2 instances running. Account B has not purchased any RIs and also has four EC2 instances running.Which statement is true regarding pricing for these eight instances?

A. The eight instances will be charged as regular instances.

B. Five instances will be charged as Rls, and three will be charged as regular Instances.

C. Four Instances will be charged as Rls, and four will be charged as regular instances.

D. The eight instances will be charged as Rls.

Correct Answer: C

QUESTION 79 Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses?

A. High availability

B. Pay-as-you-go pricing

C. Economies of scale

D. Global reach

Correct Answer: B

QUESTION 80 Which pillar of the AWS Well-Architected Framework aligns with the ability to make frequent, small, and reversible changes to AWS Cloud architecture?

A. Security

B. Operational excellence

C. Cost optimization

D. Performance efficiency

Correct Answer: B

QUESTION 81 Which AWS service allows users to provision resources using a consistent and repeatable process?

A. AWS CloudFormation

B. AWS Systems Manager

C. AWS Batch

D. AWS Config

Correct Answer: A

QUESTION 82 A company is using an Amazon EC2 On-Demand Instance for an application. The company wants to migrate the application to an EC2 Reserved Instance (Rl). The application will run on the instance for longer than 3 years.Which EC2 instance purchasing option meets these requirements MOST cost-effectively?

A. A No Upfront Standard Rl for a 1-year term, renewed each year

B. An All Upfront Standard Rl for a 3-year term

C. An All Upfront Convertible Rl for a 1-year term

D. A No Upfront Convertible Rl for a 3-year term

Correct Answer: B

QUESTION 83 A company is running a key-value NoSQL workload on Amazon EC2 instances and needs to have scalability, failover protection, and backup capabilities.What is the MOST operationally efficient way to meet these requirements?

A. Add additional EC2 instances to the database cluster.

B. Migrate the database to Amazon DynamoDB.

C. Run an identical copy of the database in a second Availability Zone.

D. Migrate to a relational database.

Correct Answer: B

QUESTION 84 A company is running a Microsoft SQL Server instance on premises and is migrating its application to AWS. The company lacks the resources needed to refactor the application, but management wants to reduce operational overhead as part of the migration.Which database service would MOST effectively support these requirements?

A. Amazon DynamoDB

B. Amazon Redshift

C. Amazon RDS for SQL Server

D. Microsoft SQL Server on Amazon EC2

Correct Answer: C

QUESTION 85 Which AWS service provides the capability to view end-to-end performance metrics and troubleshoot distributed applications?

A. AWS Cloud9

B. AWS CodeStar

C. AWS X-Ray

D. AWS Cloud Map

Correct Answer: C

QUESTION 86 A company has an application workload that is stateless by design and can sustain occasional downtime. The application performs massively parallel computations. Which Amazon EC2 pricing model should the company choose for its application to reduce cost?

A. On-Demand Instances

B. Reserved Instances

C. Spot Instances

D. Dedicated Instances

Correct Answer: C

QUESTION 87 A company deployed an Amazon EC2 instance last week. A developer realises that the EC2 instance is no longer running. The developer reviews a list of provisioned EC2 instances, and the EC2 instance is no longer on the list.What can the developer do to generate a recent history of the EC2 instance?

A. Run Cost Explorer to identify the start time and end time of the EC2 instance.

B. Perform a search in AWS CloudTrail to find all EC2 instance-related events.

C. Use Amazon Inspector to find out when the EC2 instance was stopped.

D. Use AWS Secrets Manager to display hidden termination logs of the EC2 instance.

Correct Answer: B

QUESTION 88 A company manages an on-premises MySQL database on a Windows server. The company wants to migrate the database to AWS and needs a solution that will reduce the administrative overhead of the database. Which AWS service will meet this requirement?

A. Amazon Redshift

B. Amazon RDS

C. Amazon ElastiCache

D. Amazon Elastic File System (Amazon EFS)

Correct Answer: B

QUESTION 89 A company needs to log information that shows all the AWS resources that the company has launched and terminated. Which AWS service can the company use to meet this requirement?

A. AWS Trusted Advisor

B. AWS Config

C. Amazon CloudWatch

D. AWS CloudTrail

Correct Answer: B

QUESTION 90 Which AWS Cloud benefit occurs when a company does not have to maintain overprovisioned resources that support peak workloads during periods of low activity?

A. Agility

B. Pay-as-you-go pricing

C. Economy of scale

D. Elasticity

Correct Answer: B

QUESTION 91 A company is undergoing a security audit. The audit includes security validation and compliance validation of the AWS infrastructure and services that the company uses. The auditor needs to locate compliance-related information and must download AWS security and compliance documents. These documents include the System and Organization Control (SOC) reports. Which AWS service or group can provide these documents?

A. AWS Abuse team

B. AWS Support

C. AWS Artefact

D. AWS Config

Correct Answer: C

QUESTION 92 An ecommerce company has Amazon EC2 instances running as web servers. There is a predictable pattern of peak traffic load that occurs two times each day, always at the same time. The EC2 instances are idle for the remainder of the day. What is the MOST cost-effective way to manage these resources while maintaining fault tolerance?

A. Purchase Reserved Instances to ensure peak capacity at all times.

B. Use an Auto Scaling group to scale resources in and out based on demand.

C. Write a cron job to stop the EC2 instances when the traffic demand is low.

D. Write a script to vertically scale the EC2 instances during peak traffic demand.

Correct Answer: B

QUESTION 93 A company wants to store its noncritical, infrequently accessed data in Amazon S3. The data must be retrievable within seconds. Which S3 storage class meets these requirements MOST cost-effectively?

A. S3 Glacier

B. S3 Standard-Infrequent Access (S3 Standard-IA)

C. S3 One Zone-Infrequent Access (S3 One Zone-IA)

D. S3 Intelligent-Tiering

Correct Answer: C

QUESTION 94 Which AWS service or feature can help a company determine if it has Amazon S3 buckets that are publicly available?

A. AWS Trusted Advisor

B. AWS Service Health Dashboard

C. Amazon CloudWatch Logs

D. AWS Service Catalog

Correct Answer: A

QUESTION 95 A company has a global website with static content. Which AWS service will deliver the static content with low latency?

A. Amazon CloudFront

B. AWS Lambda

C. Amazon EC2 Auto Scaling

D. AWS Compute Optimizer

Correct Answer: A

QUESTION 96 According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database?

A. Manage connections to the database

B. Design encryption-at-rest strategies

C. Install Microsoft SQL Server

D. Apply minor database patches

Correct Answer: B

QUESTION 97 A company is building a mobile app to provide shopping recommendations to its customers. The company wants to use a graph database as part of the shopping recommendation engine. Which AWS database service should the company choose?

A. Amazon Neptune

B. Amazon DynamoDB

C. Amazon Aurora

D. Amazon DocumentDB (with MongoDB compatibility)

Correct Answer: A

QUESTION 98 A company is using Amazon EC2 Auto Scaling to scale its Amazon EC2 instances. Which benefit of the AWS Cloud does this example illustrate?

A. Elasticity

B. High availability

C. Reliability

D. Global reach

Correct Answer: B

QUESTION 99 Which characteristic of the AWS Cloud helps users eliminate underutilised CPU capacity?

A. Agility

B. Reliability

C. Durability

D. Elasticity

Correct Answer: D

QUESTION 100 Which AWS service or feature enables users to encrypt data at rest in Amazon S3?

A. Server-side encryption

B. Amazon GuardDuty

C. IAM policies

D. Client-side encryption

Correct Answer: C

QUESTION 101 An Elastic Load Balancer allows the distribution of web traffic across multiple:

A. Availability Zones.

B. AWS Regions.

C. Dedicated Hosts

D. Amazon S3 buckets.

Correct Answer: A

QUESTION 102 Which benefit of cloud computing gives a company the ability to deploy applications to users all over the world through a network of AWS Regions, Availability Zones, and edge locations?

A. Economy of scale

B. Agility

C. Global reach

D. High availability

Correct Answer: B

QUESTION 103 Which type of AWS storage is ephemeral and is deleted when an Amazon EC2 instance is stopped or terminated''

A. Amazon Elastic Block Store (Amazon EBS)

B. Amazon Elastic File System (Amazon EFS)

C. Amazon EC2 instance store

D. Amazon S3

Correct Answer: C

QUESTION 104 Which phrase describes agility as a benefit of building in the AWS Cloud?

A. The ability to pay only when computing resources are consumed, based on the volume of resources that are consumed

B. The ability to support innovation through a reduction in the time that is required to make IT resources available to developers

C. The ability to eliminate guessing about infrastructure capacity needs

D. The ability to deploy an application in multiple AWS Regions around the world in minutes

Correct Answer: B

QUESTION 105 A large organisation has a single AWS account. What are the advantages of reconfiguring the single account into multiple AWS accounts? (Select TWO.)

A. Discounts can be applied on a quarterly basis by submitting cases in the AWS Management Console.

B. Transitioning objects from Amazon S3 to Amazon S3 Glacier in separate AWS accounts will be less expensive.

C. It allows for administrative isolation between different workloads.

D. Having multiple accounts reduces the risks associated with malicious activity targeted at a single account.

E. Amazon QuickSight offers access to a cost tool that provides application-specific recommendations for environments running in multiple accounts.

Correct Answer: CD

QUESTION 106 A company wants to provision an Amazon EC2 instance at the lowest possible cost for a long-term project. The EC2 instance cannot be interrupted. Which EC2 pricing model meets these requirements?

A. Spot Instances

B. Reserved Instances

C. On-Demand Instances

D. Dedicated Hosts

Correct Answer: B

QUESTION 107 A company needs to migrate an existing on-premises database to the AWS Cloud. The company must be able to install custom software on the database instance. Which AWS service can the company use to meet these requirements?

A. Amazon DynamoDB

B. Amazon EC2

C. Amazon RDS

D. Amazon Redshift

Correct Answer: B

QUESTION 108 When designing AWS workloads to be operational even when there are component failures, what is an AWS best practice?

A. Perform quarterly disaster recovery tests.

B. Design for automatic failover to healthy resources.

C. Place the main component on the us-east-1 Region.

D. Design workloads to fit on a single Amazon EC2 instance.

Correct Answer: B

QUESTION 109 A global company has a large number of AWS accounts. The company needs central management of billing and security policies across accounts.Which AWS service or feature will meet these requirements?

A. AWS Organizations

B. AWS Config

C. IAM groups

D. AWS Trusted Advisor

Correct Answer: A

QUESTION 110 A company has existing software licences thai it wants to bring to AWS, but the licensing model requires licensing physical cores. How can the company meet this requirement in the AWS Cloud?

A. Launch an Amazon EC2 instance with default tenancy.

B. Create an On-Demand Capacity Reservation.

C. Launch an Amazon EC2 instance on a Dedicated Host.

D. Purchase Dedicated Reserved Instances.

Correct Answer: C

QUESTION 111 A company implements an Amazon EC2 Auto Scaling policy along with an Application Load Balancer to automatically recover unhealthy applications that run on Amazon EC2 instances. Which pillar of the AWS Well-Architected Framework does this action cover?

A. Security

B. Operational excellence

C. Performance efficiency

D. Reliability

Correct Answer: C

QUESTION 112 How can a user protect an Amazon EC2 instance from a suspicious IP address?

A. Block the IP on the outbound rule of a security group.

B. Block the IP on the inbound rule of a network ACL.

C. Block the IP on the inbound rule of a security group and network ACL.

D. Block the IP on the outbound rule of a security group and network ACL.

Correct Answer: B

QUESTION 113 A company is planning to migrate an important production workload to the AWS Cloud. The company needs an AWS Support plan that offers a response time of less than 15 minutes lo business-critical issues Which AWS Support plan aligns with this requirement?

A. AWS Basic Support

B. AWS Business Support

C. AWS Developer Support

D. AWS Enterprise Support

Correct Answer: C

QUESTION 114 Which AWS services can be used to store files? (Select TWO.)

A. AWS Lambda

B. Amazon S3

C. Amazon SageMaker

D. Amazon Elastic Block Store (Amazon EBS)

E. AWS Storage Gateway

Correct Answer: BD

QUESTION 115 A user has an AWS Business Support plan and requires detailed billing information. Which AWS resource will help?

A. AWS Concierge Support.

B. AWS Service Catalog

C. AWS Cost and Usage Report

D. AWS Budgets

Correct Answer: C

QUESTION 116 Which pillar of the AWS Well-Architected Framework focuses on the ability to run workloads effectively,gain insight into operations, and continuously improve supporting processes and procedures?

A. Cost optimization

B. Operational excellence

C. Reliability

D. Performance efficiency

Correct Answer: B

QUESTION 117 Which tasks require the use of AWS account root user credentials? (Select TWO.)

A. Create an IAM administrator access policy.

B. Configure multi-factor authentication (MFA) delete for an Amazon S3 bucket.

C. Open a support ticket with AWS to request an increase to service quotas.

D. Change payment currency for an AWS account.

E. Change an AWS Support plan.

Correct Answer: AE

QUESTION 118 A company has the AWS Basic Support plan. The company needs assistance in its efforts to deploy, test, and improve its AWS environment. Which form of assistance can the company use at no cost?

A. AWS Support API for programmatic case management

B. AWS online documentation, whitepapers. blogs. and support forums

C. AWS technical account manager (TAM) consultation

D. In-person AWS training classes with an accredited instructor

Correct Answer: B

QUESTION 119 A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way. What can the company do to meet this requirement?

A. Use AWS Key Management Service {AWS KMS).

B. Use multiple AWS accounts and consolidated billing.

C. Rightsize all the EC2 instances that are used in the deployment.

B. Use AWS CloudFormation to deploy the infrastructure.

Correct Answer: C

QUESTION 120 According to the AVVS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?

A. Amazon DynamoDB

B. Amazon RDS instances

C. Amazon EC2 instances

D. Amazon S3

Correct Answer: C

QUESTION 121 Which of the following are among the five pillars of the AWS Well-Architected Framework? (Select TWO.)

A. High availability

B. Performance efficiency

C. Cost optimization

D. Going global In minutes

E. Continuous development

Correct Answer: BC

QUESTION 122 Which AWS service should a cloud practitioner use to receive real-time guidance for provisioning resources, based on AWS best practices related to security, cost optimization, and service limits?

A. AWS Config

B. AWS Trusted Advisor

C. AWS Security Hub

D. AWS Systems Manager

Correct Answer: B

QUESTION 123 Which AWS Trusted Advisor checks are available to users with AWS Basic Support? (Select TWO.)

A. Service limits

B. Security groups – specific ports unrestricted

C. High utilisation Amazon EC2 instances

D. Load balancer optimization

E. Large number of rules in an EC2 security group

Correct Answer: AB

QUESTION 124 A company needs to review its AWS Cloud expense history by department. Each department has its own AWS account. Which AWS feature or tool can the company use to meet this requirement?

A. Cost Explorer

B. AWS Budgets

C. AWS Purchase Order Management

D. AWS Cost Anomaly Detection

Correct Answer: A

QUESTION 125 A company needs to establish a private virtual interface (VIF) from its on-premises network directly to its VPC. Which AWS connectivity option should the company use?

A. AWS PrivateLink

B. AWS Global Accelerator

C. VPC peering

D. AWS Direct Connect

Correct Answer: C

QUESTION 126 A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-cost laptops. Which AWS service will help the company deploy the application without investing in backend infrastructure or high- end client hardware?

A. Amazon AppStream 2.0

B. Amazon WorkLink

C. AWS AppSync

D. AWS Elastic Beanstalk

Correct Answer: B

QUESTION 127 Which network security features are supported by Amazon VPC? (Select TWO.)

A. Internet gateways

B. Network ACLs

C. Security groups

D. VPC peering

E. Firewall rules

Correct Answer: BC

QUESTION 128 Which AWS service gives a company the ability to use a private, dedicated connection between a VPC and an on-premises data centre?

A. Amazon API Gateway

B. AWS Direct Connect

C. AWS Systems Manager

D. AWS CloudFormation

Correct Answer: B

QUESTION 129 Which AWS compute service automatically scales resources up or down to meet application workload demands?

A. Amazon Simple Queue Service (Amazon SOS)

B. AWS Lambda

C. Amazon EC2

D. Amazon Aurora

Correct Answer:B

QUESTION 130 According to the AWS shared responsibility model, the customer is responsible for applying the latest security updates and patches for which of the following?

A. Amazon EC2 instances

B. Amazon DynamoDB

C. Amazon RDS instances

D. Amazon S3

Correct Answer: A

QUESTION 131 Which AWS services or resources can a company use directly on its on-premises servers? (Select TWO.)

A. AWSOpsWorks

B. AWS Storage Gateway

C. AWS CloudFormation

D. Application Load Balancer

E. Amazon Cognito

Correct Answer: AB

QUESTION 132 Which of the following are benefits of AWS Trusted Advisor? (Select TWO.)

A. Access to Amazon Simple Queue Service (Amazon SQS)

B. Cost optimization recommendations

C. Hourly refresh of the service limit checks

D. Security checks

E. AWS Identity and Access Management (IAM) approval management

Correct Answer: BC

QUESTION 133 A company wants to store a copy of its on-premises data backups to the AWS Cloud. Data durability is not a concern, but the company wants to be able to begin retrieval of the data within milliseconds. What is the MOST cost-effective storage solution?

A. Amazon S3 Standard

B. Amazon S3 Standard-Infrequent Access (S3 Standard-IA)

C. Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)

D. Amazon S3 Glacier

Correct Answer: C

QUESTION 134 A company wants to build a new architecture with AWS services. The company needs to compare service costs at various scales. Which AWS service, tool, or feature should the company use to meet this requirement?

A. AWS Compute Optimizer

B. AWS Trusted Advisor

C. AWS Pricing Calculator

D. Cost Explorer right sizing recommendations

Correct Answer: C

QUESTION 135 What is a benefit of using AWS Auto Scaling?

A. Pay-as-you-go pricing is only available for the use of AWS Auto Scaling.

B. Users only pay for the AWS resources that are deployed with AWS Auto Scaling.

C. AWS Auto Scaling is billed based on the duration of a given event.

D. Bulk discount pricing is automatically applied to AWS Auto Scaling usage.

Correct Answer: B

QUESTION 136 Which AWS services can help reduce application latency and improve performance by using edge locations? (Select TWO.)

A. AWS Global Accelerator

B. Amazon Route 53

C. AWS Direct Connect

D. Amazon CloudFront

E. Amazon Connect

Correct Answer: AD

QUESTION 137 A company's IT administrator needs to configure the AWS CLI for programmatic access to AWS Cloud services for the company's employees. Which credential components must the IT administrator use to meet this requirement? (Select TWO.)

A. An access key ID

B. A private key

C. A public key

D. A secret access key

E. An IAM role

Correct Answer: AB

QUESTION 138 A company needs to optimise the cost of its AWS architecture by identifying unused resources and idle resources. Which AWS service or feature should the company use to meet this requirement?

A. Amazon Inspector

B. AWS Trusted Advisor

C. AWS Config

D. AWS Organizations

Correct Answer: B

QUESTION 139 Which AWS services or tools can help optimise the costs of AWS resources? (Select TWO.)

A. AWS Trusted Advisor

B. AWS Pricing Calculator

C. Cost Explorer

D. AWS CloudTrail

E. AWS Personal Health Dashboard

Correct Answer: BC

QUESTION 140 Which AWS service allows a user to provision a managed MySQL DB instance?

A. Amazon DynamoDB

B. Amazon RDS

C. Amazon Redshift

D. AWS Database Migration Service (AWS DMS)

Correct Answer: B

QUESTION 141 A financial services company wants to ensure that its AWS account activity is logged to meet regulatory requirements for logging, auditing, and governance. Which AWS service meets these requirements?

A. AWS Trusted Advisor

B. AWS CloudTrail

C. AWS Config

D. Amazon CloudWatch

Correct Answer: B

QUESTION 142 Which AWS service uses edge locations?

A. AWS Global Accelerator

B. Amazon Aurora

C. Amazon Connect

D. AWS Outposts

Correct Answer: A

QUESTION 143 A company wants to deploy some of its resources in the AWS Cloud. To meet regulatory requirements, the data must remain local and on premises. There must be low latency between AWS and the company resources. Which AWS service or feature can be used to meet these requirements?

A. AWS Local Zones

B. AWS Outposts

C. Availability Zones

D. AWS Wavelength Zones

Correct Answer: B

QUESTION 144 What is the LEAST expensive AWS Support plan that provides a designated AWS technical account manager (TAM)?

A. AWS Enterprise Support

B. AWS Developer Support

C. AWS Basic Support

D. AWS Business Support

Correct Answer: A

QUESTION 145 A company is considering a move to the AWS Cloud. The company wants to be able to scale its compute resources as needed to accommodate changing loads. Which benefit of the AWS Cloud does this scenario describe?

A. Global deployments in minutes

B. Cost savings

C. Elasticity

D. Agility

Correct Answer: C

QUESTION 146 A company runs its workloads on premises. The company wants to forecast the cost of running a large application on AWS. Which AWS service or tool can the company use to obtain this information?

A. AWS Pricing Calculator

B. Cost Explorer

C. AWS Budgets

D. AWS Trusted Advisor

Correct Answer: B

QUESTION 147 A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections. Which AWS services can the company use to meet these requirements? (Choose two.)

A. Amazon WorkSpaces

B. AWS Site-to-Site VPN

C. Amazon Connect

D. Amazon AppStream 2.0

E. Amazon Elastic Container Service (Amazon ECS)

Correct Answer: AB

QUESTION 148 Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data?

A. AWS Glue

B. Amazon Athena

C. Amazon S3

D. AWS Snowball Edge

Correct Answer: A

QUESTION 149 Which AWS service is always free of charge for users?

A. Amazon S3

B. Amazon EC2

C. Amazon Aurora

D. AWS Identity and Access Management (IAM)

Correct Answer: B

QUESTION 150 How does consolidated billing help reduce costs for a company that has multiple AWS accounts?

A. It offers an additional 5% discount on purchases of ALL Upfront Reserved Instances.

B. It aggregates usage across accounts so that the company can reach volume discount thresholds sooner.

C. It provides a simplified billing invoice that the company can process more quickly than a standard invoice.

D. It gives AWS resellers the ability to bill their customers for usage.

Correct Answer: B

QUESTION 151 Which AWS service or feature can be used to find availability status information on all AWS services?

A. AWS Personal Health Dashboard

B. AWS Service Health Dashboard

C. AWS CloudTrail

D. Amazon CloudWatch

Correct Answer: B

QUESTION 152 Which AWS service or feature provides users with recommendations for common billing questions?

A. AWS Marketplace

B. Amazon Pinpoint

C. AWS Knowledge Center

D. Amazon Connect

Correct Answer: C

QUESTION 153 A company wants to distribute its incoming traffic across multiple Amazon EC2 instances. Which AWS service or feature should be used to meet this requirement?

A. AWS Application Load Balancer

B. Amazon Virtual Private Cloud (Amazon VPC)

C. AWS Managed VPN

D. AWS Direct Connect

Correct Answer: A

QUESTION 154 Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses?

A. High availability

B. Economies of scale

C. Global reach

D. Pay-as-you-go pricing

Correct Answer: D

QUESTION 155 What does Amazon CloudFront provide?

A. Secure delivery of data, videos, applications, and APIs to users globally with low latency

B. Automatic scaling for all resources to power an application from a single unified interface

C. Ability to directly manage traffic globally through a variety of routing types, including latency-based routing, geo DNS, geo proximity, and weighted round robin

D. Automatic distribution of incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and AWS Lambda functions

Correct Answer: A

QUESTION 157 Which of the following are economic benefits of using AWS Cloud? (Choose two.)

A. Perpetual licence

B. Consumption-based pricing

C. AWS Enterprise Support at no additional cost

D. Economies of scale

E. Bring-your-own-hardware model

Correct Answer: BD

QUESTION 158 Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?

A. The customer is responsible for rotating keys.

B. IAM access and secret keys are static, so there is no need to rotate them.

C. AWS will rotate the keys whenever required.

D. The AWS Support team will rotate keys when requested by the customer.

Correct Answer: A

QUESTION 159 Which of the following describes AWS Local Zones?

A. A cluster of data centres in one geographic location

B. An extension of an AWS Region to more granular locations

C. A site used by Amazon CloudFront to cache frequently accessed content

D. One or more data centres with redundant power and networking

Correct Answer: B

QUESTION 160 A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access. What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?

A. AWS Systems Manager Session Manager

B. EC2 key pairs

C. AWS Identity and Access Management (IAM)

D. Network ACLs

Correct Answer: A

QUESTION 161 Which duty is a responsibility of AWS under the AWS shared responsibility model?

A. Identity and access management (IAM)

B. Server-side encryption (SSE)

C. Maintaining physical hardware

D. Firewall configuration

Correct Answer: C

techinsightslabs

AWS Certified Cloud Practitioner (CLF-C01)Exam J

Solverwp- WordPress Theme and Plugin