AWS Certified Cloud Practitioner (CLF-C01)ExamB

QUESTION 1 Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Choose two.)

A. AWS Online Tech Talks

B. AWS Trusted Advisor

C. AWS Blog

D. AWS Classroom Training

E.AWS Forums

Correct Answer:BD

QUESTION 2 Which of the following features can be configured through the Amazon Virtual Private Cloud (Amazon VPC) Dashboard? (Choose two.)

A. Amazon CloudFront distributions

B.Security Groups

C.Subnets

D.Elastic Load Balancing

E.Amazon Route 53

Correct Answer: BC

QUESTION 3 If each department within a company has its own AWS account, what is one way to enable consolidated billing?

A.Use AWS Budgets on each account to pay only to budget.

B.Contact AWS Support for a monthly bill.

C.Put all invoices into one Amazon Simple Storage Service (Amazon S3) bucket, load data into Amazon Redshift, and then run a billing report.

D.Create an AWS Organization from the payer account and invite the other accounts to join.

Correct Answer: D

QUESTION 4 How do customers benefit from Amazon's massive economies of scale?

A.New Amazon EC2 instance types providing the latest hardware

B.The ability to scale up and down when needed

C.Periodic price reductions as the result of Amazon’s operational efficiencies

D.Increased reliability in the underlying hardware of Amazon EC2 instances

Correct Answer: C

QUESTION 5 Which AWS services can be used to gather information about AWS account activity? (Choose two.)

A.AWS CloudTrail

B.Amazon CloudFront

C.AWS Cloud9

D. Amazon CloudWatch E.AWS CloudHSM

Correct Answer: AD

QUESTION 6 Which of the following common IT tasks can AWS cover to free up company IT resources?(Choose two).

A.Testing application releases

B.Patching databases software

C.Creating database schema

D.Running penetration tests

E.Backing up databases

Correct Answer: BE

QUESTION 7 In which scenario should Amazon EC2 Spot Instances be used?

A.A company has a number of infrequent, interruptible jobs that are currently using On-Demand Instances.

B.A company’s heavily used legacy database is currently running on-premises.

C. A company has a number of application services whose Service Level Agreement (SLA) requires 99.999% uptime.

D.A company wants to move its main website to AWS from an on-premises web server.

Correct Answer: A

QUESTION 8 Which AWS feature should a customer leverage to achieve high availability of an application?

A.Amazon Virtual Private Cloud (Amazon VPC)

B.AWS Direct Connect

C.Availability Zones

D.Data centres

Correct Answer: C

QUESTION 9 Which is the minimum AWS Support plan that includes Infrastructure Event Management without additional costs?

A.Developer

B.Enterprise

C,Basic

D.Business

Correct Answer:D

QUESTION 10 Which AWS service can serve a static website?

A.AWS X-Ray

B.Amazon QuickSight

C.Amazon S3

D.Amazon Route 53

Correct Answer: C

QUESTION 11 How does AWS shorten the time to provision IT resources?

A.It provides the ability to programmatically provision existing resources.

B.It automates the resource request process from a company’s IT vendor list.

C.It supplies an online IT ticketing platform for resource requests.

D.It supports automatic code validation services.

Correct Answer: A

QUESTION 12 What can AWS edge locations be used for? (Choose two.)

A.Delivering content closer to users

B.Reducing traffic on the server by caching responses

C.Hosting applications

D.Running NoSQL database caching services

E.Sending notification messages to end users

Correct Answer: AB

QUESTION 13 Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users?

A.Security Groups

B.A public and private key-pair

C.Amazon Inspector

D.AWS Identity and Access Management (IAM) policies

Correct Answer: D

QUESTION 14 A solution that is able to support growth in users, traffic, or data size with no drop in performance aligns with which cloud architecture principle?

A.Implement elasticity

B.Think parallel

C.Decouple your components

D.Design for failure

Correct Answer: A

QUESTION 15 A company will be moving from an on-premises data center to the AWS Cloud. What would be one financial difference after the move?

A.Moving from variable operational expense (opex) to upfront capital expense (capex).

B.Moving from upfront capital expense (capex) to variable operational expense (opex).

C.Moving from upfront capital expense (capex) to variable capital expense (capex).

D.Elimination of upfront capital expense (capex) and elimination of variable operational expense (opex)

Correct Answer: B

QUESTION 16 How should a customer forecast the future costs for running a new web application?

A.Amazon Aurora Backtrack

B.AWS Cost and Usage report

C.Amazon CloudWatch Billing Alarms

D.AWS Simple Monthly Calculator

Correct Answer: B

QUESTION 17 Which is the MINIMUM AWS Support plan that provides technical support through phone calls?

A.Developer

B.Basic

C.Enterprise

D.Business

Correct Answer:D

QUESTION 18 Which of the following tasks is the responsibility of AWS?

A.Securing the Amazon EC2 hypervisor

B.Encrypting client-side data

C.Configuring AWS Identity and Access Management (IAM) roles

D.Setting user password policies

Correct Answer: A

QUESTION 19 One benefit of On-Demand Amazon Elastic Compute Cloud (Amazon EC2) pricing is:

A.the ability to bid for a lower hourly cost.

B.paying only for time used.

C.pre-paying for instances and paying a lower hourly rate

D.paying a daily rate regardless of time used.

Correct Answer: B

QUESTION 20 An administrator needs to rapidly deploy a popular IT solution and start using it immediately. Where can the administrator find assistance?

A.AWS Quick Start reference deployments

B.AWS Well-Architected Framework documentation

C.Amazon CloudFront

D.AWS CodeCommit

Correct Answer: A

QUESTION 21 Which services are parts of the AWS serverless platform?

A.Amazon EC2, Amazon S3, Amazon Athena

B.AWS Step Functions, Amazon DynamoDB, Amazon SNS

C.Amazon Athena, Amazon Cognito, Amazon EC2

D.Amazon Kinesis, Amazon SQS, Amazon EMR

Correct Answer: B

QUESTION 22 Which of the following services is in the category of AWS serverless platform?

A.Amazon EMR

B.Elastic Load Balancing

C.AWS Mobile Hub

D.AWS Lambda

Correct Answer: D

QUESTION 23 According to the AWS shared responsibility model, what is the sole responsibility of AWS?

A.Edge location management

B.Application security

C.Patch management

D.Client-side data

Correct Answer: A

QUESTION 24 Which AWS IAM feature is used to associate a set of permissions with multiple users?

A.Multi-factor authentication

B.Password policies

C.Groups

D.Access keys

Correct Answer: C

QUESTION 25 Which of the following are benefits of the AWS Cloud? (Choose two.)

A.Colocation

B.Capital expenses

C.Unlimited uptime

D.Elasticity

E.Agility

Correct Answer: DE

QUESTION 26 Which of the following can a customer use to enable single sign-on (SSO) to the AWS Console?

A. Amazon Rekognition

B. Amazon Connect

C. AWS Directory Service

D. Amazon Pinpoint

Correct Answer: C

QUESTION 27 What are the multiple, isolated locations within an AWS Region that are connected by low-latency networks called?

A. AWS Direct Connects

B. Availability Zones

C. Amazon VPCs

D. Edge locations

Correct Answer: B

QUESTION 28 Which of the following benefits does the AWS Compliance program provide to AWS customers? (Choose two.)

A. It assures customers that AWS is maintaining physical security and data protection.

B. It ensures the use of compliance frameworks that are being used by other cloud providers

C. It verifies that hosted workloads are automatically compliant with the of controls.supported compliance frameworks.

D. AWS is responsible for the maintenance of common compliance framework documentation.

E. It will adopt new compliance frameworks as they become relevant to customer workloads.

Correct Answer: CD

QUESTION 29 Which of the following services provides on-demand access to AWS compliance reports?

A. AWS Artefact

B. Amazon GuardDuty

C. AWS KMS

D. AWS IAM

Correct Answer: A

QUESTION 30 As part of the AWS shared responsibility model, which of the following operational controls do users fully inherit from AWS?

A. Security management of data centre

B. User and access management

C. Patch management

D. Configuration management

Correct Answer: B

QUESTION 31 When comparing AWS Cloud with on-premises Total Cost of Ownership, which expenses must be considered? (Choose two.)

A. Storage hardware

B. Physical servers

C. Software development

D. Project management

E. Antivirus software licence

Correct Answer: AB

QUESTION 32 Under the shared responsibility model, which of the following tasks are the responsibility of the customer? (Choose two.)

A. Replacing failed hard disk drives.

B. Deploying hardware in different Availability Zones.

C. Maintaining the underlying Amazon EC2 hardware.

D. Managing the VPC network access control lists.

E. Encrypting data in transit and at rest.

Correct Answer: DE

QUESTION 33 Which scenarios represent the concept of elasticity on AWS? (Choose two.)

A. Having the ability to create and govern environments using code.

B. Scaling the number of Amazon EC2 instances based on traffic.

C. Resizing Amazon RDS instances as business needs change.

D. Automatically directing traffic to less-utilised Amazon EC2 instances.

E. Using AWS compliance documents to accelerate the compliance process.

Correct Answer: BC

QUESTION 34 When is it beneficial for a company to use a Spot Instance?

A. When an instance should not be stopped.

B. When there is flexibility in when an application needs to run.

C. When there are mission-critical workloads.

D. When dedicated capacity is needed.

Correct Answer: B

QUESTION 35 A company is considering moving its on-premises data centre to AWS. What factors should be included in doing a Total Cost of Ownership (TCO) analysis? (Choose two.)

A. Application developer time

B. Database engine capacity

C. Power consumption of the data centre

D. Labour costs to replace old servers

E. Amazon EC2 instance availability

Correct Answer: CD

QUESTION 36 How does AWS charge for AWS Lambda?

A.Users bid on the maximum price they are willing to pay per hour.

B. Users pay based on the number of requests and consume compute resources.

C. Users choose a 1-, 3- or 5-year upfront payment term.

D. Users pay for the required permanent storage on a file system or in a database.

Correct Answer: B

QUESTION 37 What function do security groups serve related to Amazon Elastic Compute Cloud (Amazon EC2) instance security?

A. Secure AWS user accounts with AWS Identity and Access Management (IAM) policies.

B. Provide DDoS protection with AWS Shield.

C. Use Amazon CloudFront to protect the Amazon EC2 instance.

D. Act as a virtual firewall for the Amazon EC2 instance.

Correct Answer: D

QUESTION 38 Which disaster recovery scenario offers the lowest probability of down time?

A. Multi-site active-active

B. Backup and restore

C. Pilot light

D. Warm standby

Correct Answer: A

QUESTION 39 What will help a company perform a cost benefit analysis of migrating to the AWS Cloud?

A. Cost Explorer

B. AWS Simple Monthly Calculator

C. AWS Total Cost of Ownership (TCO) Calculator

D. AWS Trusted Advisor

Correct Answer: C

QUESTION 40 Which of the following provides the ability to share the cost benefits of Reserved Instances across AWS accounts?

A. Linked accounts and consolidated billing

B. AWS Cost Explorer between AWS accounts

C. Amazon Elastic Compute Cloud (Amazon EC2) Reserved Instance Utilisation Report

D. Amazon EC2 Instance Usage Report between AWS accounts

Correct Answer: A

QUESTION 41 A company has multiple AWS accounts and wants to simplify and consolidate its billing process.Which AWS service will achieve this?

A. AWS Organizations

B. AWS Cost and Usage Reports

C. AWS Cost Explorer

D. AWS Budgets

Correct Answer: A

QUESTION 42 A company is designing an application hosted in a single AWS Region serving end-users spread across the world. The company wants to provide the end-users low latency access to the application data. Which of the following services will help fulfil this requirement?

A. Amazon CloudFront

B. Amazon Route 53 global DNS

C. AWS Direct Connect

D. Amazon Simple Storage Service (Amazon S3) transfer acceleration

Correct Answer: C

QUESTION 43 Which of the following deployment models enables customers to fully trade their capital IT expenses for operational expenses?

A. Cloud

B. On-premises

C. Hybrid

D. Platform as a service

Correct Answer: A

QUESTION 44 How is asset management on AWS easier than asset management in a physical data centre?

A. AWS provides a Configuration Management Database that users can maintain

B. Amazon EC2 automatically generates an asset report and places it in the customer’s specified Amazon S3 bucket..

C. AWS performs infrastructure discovery scans on the customer’s behalf.

D. Users can gather asset metadata reliably with a few API calls.

Correct Answer: C

QUESTION 45 What feature of Amazon RDS helps to create globally redundant databases?

A. Automatic patching and updating

B. Cross-Region read replicas

C. Provisioned IOPS

D. Snapshots

Correct Answer: D

QUESTION 46 Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:

A. least privilege access.

B. restricted access.

C. as-needed access.

D. token access.

Correct Answer: A

QUESTION 47 Which methods can be used to identify AWS costs by departments? (Choose two.)

A. Create separate accounts for each department.

B. Enable multi-factor authentication for the AWS account root user.

C. Use Reserved Instances whenever possible.

D. Pay bills using purchase orders.

E. Use tags to associate each instance with a particular department.

Correct Answer: AD

QUESTION 48 Under the AWS shared responsibility model, customer responsibilities include which one of the following?

A. Securing the hardware, software, facilities, and networks that run all products and services

B. Configuring the operating system, network, and firewall.

C. Obtaining industry certifications and independent third-party attestations.

D. Providing certificates, reports, and other documentation directly to AWS customers under NDA.

Correct Answer: B

QUESTION 49 Which managed AWS service provides real-time guidance on AWS security best practices?

A. AWS Trusted Advisor

B. AWS X-Ray

C. Amazon CloudWatch

D. AWS Systems Manager

Correct Answer: A

QUESTION 50 Which feature adds elasticity to Amazon EC2 instances to handle the changing demand for workloads?

A. Resource groups

B. Amazon EC2 Auto Scaling

C. Lifecycle policies

D. Application Load Balancer

Correct Answer: B

QUESTION 51 Under the AWS shared responsibility model, customers are responsible for which aspects of security in the cloud? (Choose two.)

A. Encryption management

B. Firewall management

C. Visualisation management

D. Hardware management

E. Facilities management

Correct Answer: AB

QUESTION 52 Which AWS hybrid storage service enables your on-premises applications to seamlessly use AWS Cloud storage through standard file-storage protocols?

A. AWS Storage Gateway

B. AWS Direct Connect

C. AWS Snowball

D. AWS Snowball Edge

Correct Answer: A

QUESTION 53 What is the responsibility of AWS in the shared responsibility model?

A. Updating the network ACLs to block traffic to vulnerable ports.

B. Patching operating systems running on Amazon EC2 instances.

C. Updating the security group rules to block traffic to the vulnerable ports.

D. Updating the firmware on the underlying EC2 hosts.

Correct Answer: D

QUESTION 54 Which architectural principle is used when deploying an Amazon Relational Database Service (Amazon RDS) instance in Multiple Availability Zone mode?

A. Design for failure.

B. Implement loose coupling.

C. Automate everything that can be automated.

D. Use services, not servers.

Correct Answer: A

QUESTION 55 What does it mean to grant least privilege to AWS IAM users?

A. It is granting permissions to a single user only

B. It is granting only the permissions required to perform a given task. .

C. It is granting permissions using AWS IAM policies only.

D. It is granting AdministratorAccess policy permissions to trustworthy users.

Correct Answer: B

QUESTION 56 What is a benefit of loose coupling as a principle of cloud architecture design?

A. It prevents cascading failures between different components.

B. It facilitates low-latency request handling.

C. It allows applications to have dependent workflows.

D. It allows companies to focus on their physical data centre operations.

Correct Answer: A

Toggle Title

A. It prevents cascading failures between different components.

B. It facilitates low-latency request handling.

C. It allows applications to have dependent workflows.

D. It allows companies to focus on their physical data centre operations.

Correct Answer: A

QUESTION 57 A director has been tasked with investigating hybrid cloud architecture. The company currently accesses AWS over the public internet. Which service will facilitate private hybrid connectivity?

A. Amazon Virtual Private Cloud (Amazon VPC) NAT Gateway

B. Amazon Simple Storage Service (Amazon S3) Transfer Acceleration

C. AWS Direct Connect

D. AWS Web Application Firewall (AWS WAF)

Correct Answer: C

QUESTION 58 A company's web application currently has tight dependencies on underlying components, so when one component fails the entire web application fails. Applying which AWS Cloud design principle will address the current design issue?

A . Implementing elasticity, enabling the application to scale up or scale down as demand changes.

B . Enabling several EC2 instances to run in parallel to achieve better performance.

C.Doubling EC2 computing resources to increase system fault tolerance.

D . Focusing on decoupling components by isolating them and ensuring individual components can function when other components fail.

Correct Answer: D

QUESTION 59 How can a customer increase security to AWS account logins? (Choose two.)

A. Use Amazon Cognito to manage access

B. Enable Multi-Factor Authentication (MFA)

C. Configure AWS Certificate Manager

D. Configure a strong password policy

E. Enable AWS Organizations

Correct Answer: AB

QUESTION 60 What AWS service would be used to centrally manage AWS access across multiple accounts?

A. AWS Service Catalog

B. AWS Organizations

C. AWS Config

D. AWS Trusted Advisor

Correct Answer: B

QUESTION 61 Which AWS service can a customer use to set up an alert notification when the account is approaching a particular dollar amount?

A. AWS Cost and Usage reports

B. AWS Cost Explorer

C. AWS Budgets

D. AWS Trusted Advisor

Correct Answer: C

QUESTION 62 What can users access from AWS Artefact?

A. A download of configuration management details for all AWS resources

B. Training materials for AWS services

C. A security assessment of the applications deployed in the AWS Cloud

D. AWS security and compliance documents

Correct Answer: D

QUESTION 63 What is the MINIMUM AWS Support plan that provides designated Technical Account Managers?

A. Business

B. Enterprise

C. Developer

D. Basic

Correct Answer: B

QUESTION 64 Which of the following is an AWS Well-Architected Framework design principle related to reliability?

A. Deployment to a single Availability Zone

B. Design for cost optimization

C. Ability to recover from failure

D. Perform operations as code

Correct Answer: C

QUESTION 65 Which type of AWS storage is ephemeral and is deleted when an instance is stopped or terminated?

A. Amazon EBS

B. Amazon EFS

C. Amazon S3

D. Amazon EC2 instance store

Correct Answer: D

QUESTION 66 What is an advantage of using the AWS Cloud over a traditional on-premises solution?

A. Users do not have to guess about future capacity needs.

B. Users can utilise existing hardware contracts for purchases.

C. Users can avoid audits by using reports from AWS.

D. Users can fix costs no matter what their traffic is.

Correct Answer: AD

QUESTION 67 Which of the following is an AWS-managed computer service?

A. Amazon SWF

B. AWS Lambda

C. Amazon EC2

D. Amazon Aurora

Correct Answer: C

QUESTION 68 Which of the following is an important architectural principle when designing cloud applications?

A. Store data and backups in the same region.

B. Design tightly coupled system components.

C. Avoid multi-threading.

D. Design for failure.

Correct Answer: D

QUESTION 69 Which mechanism allows developers to access AWS services from application code?

A. AWS Management Console

B. AWS CodePipeline

C. AWS Software Development Kit

D. AWS Config

Correct Answer: C

QUESTION 70 Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours?

A. Reserved Instances

B. Spot Instances

C. On-Demand Instances

D. Dedicated Instances

Correct Answer: c

QUESTION 72 Which Amazon Virtual Private Cloud (Amazon VPC) feature enables users to connect two VPCs together?

A. Amazon VPC endpoints

B. Amazon Elastic Compute Cloud (Amazon EC2) ClassicLink

C AWS Direct Connect

D. Amazon VPC peering

Correct Answer: D

QUESTION 73 Which service's PRIMARY purpose is software version control?

A. AWS CodeCommit

B. Amazon CodeStar

C. AWS Command Line Interface (AWS CLI)

D. Amazon Cognito

Correct Answer: A

QUESTION 74 A company is considering migrating its applications to AWS. The company wants to compare the cost of running the workload on-premises to running the equivalent workload on the AWS platform. Which tool can be used to perform this comparison?

A. AWS Simple Monthly Calculator

B. AWS Billing and Cost Management console

C. AWS Total Cost of Ownership (TCO) Calculator

D. Cost Explorer

Correct Answer: C

QUESTION 75 Which AWS service provides a secure, fast, and cost-effective way to migrate or transport exabyte-scale datasets into AWS?

A. AWS Batch

B. AWS Snowmobile

C. AWS Snowball

D. AWS Migration Hub

Correct Answer: B

QUESTION 76 Which of the following BEST describe the AWS pricing model? (Choose two.)

A. Fixed-term

B. Colocation

C. Pay-as-you-go

D. Variable cost

E. Planned

Correct Answer: CD

QUESTION 77 Which load balancer types are available with Elastic Load Balancing (ELB)? (Choose two.)

A. Public load balancers with AWS Application Auto Scaling capabilities

B. F5 Big-IP and Citrix NetScaler load balancers

C. Classic Load Balancers

D. Application Load Balancers

E. Cross-zone load balancers with public and private IPs

Correct Answer: CD

QUESTION 78 Why should a company choose AWS instead of a traditional data centre?

A. AWS provides users with full control over the underlying resources.

B. AWS offers edge locations in every country, supporting global reach.

C. AWS has no limits on the number of resources that can be created.

D. AWS does not require long-term contracts and provides a pay-as-you-go model

Correct Answer: D

QUESTION 79 Which solution provides the FASTEST application response times to frequently accessed data to users in multiple AWS Regions?

A. AWS CloudTrail across multiple Availability Zones

B. AWS CloudFormation in multiple regions

C. Amazon CloudFront to edge locations

D. A virtual private gateway over AWS Direct Connect

Correct Answer: C

QUESTION 80 Which AWS service provides a self-service portal for on-demand access to AWS compliance reports?

A. AWS Config

B. AWS Artefact

C. AWS Certificate Manager

D. Amazon Inspector

Correct Answer: B

QUESTION 81 Which of the following AWS services can be used to run a self-managed database?

A. Amazon Elastic Compute Cloud (Amazon EC2)

B. Amazon Route 53

C. AWS X-Ray

D. AWS Snowmobile

Correct Answer: A

QUESTION 82 What exclusive benefit is provided to users with Enterprise Support?

A. Access to a Technical Project Manager

B. Access to a Cloud Support Engineer

C. Access to a Technical Account Manager

D. Access to a Solutions Architect

Correct Answer: B

QUESTION 83 How can a user protect against AWS service disruptions if a natural disaster affects an entire geographic area?

A. Deploy applications across multiple AWS Regions.

B. Deploy applications across multiple Availability Zones within an AWS Region.

C. Use a hybrid cloud computing deployment model within the geographic area.

D. Store application artefacts using AWS Artefact and replicate them across multiple AWS Regions.

Correct Answer: A

QUESTION 84 How does AWS MOST effectively reduce computing costs for a growing start-up company?

A. It automates the provisioning of individual developer environments.

B. It automates customer relationship management

C. It provides on-demand resources for peak usage.

D. It implements a fixed monthly computing budget.

Correct Answer: C

QUESTION 85 A startup is working on a new application that needs to go to market quickly. The application requirements may need to be adjusted in the near future. Which of the following is a characteristic of the AWS Cloud that would meet this specific need?

A. Agility

B. Elasticity

C. Reliability

D. Performance

Correct Answer: A

QUESTION 86 Which AWS Support plan provides a full set of AWS Trusted Advisor checks?

A. Business and Developer Support

B. Enterprise and Developer Support

C. Enterprise and Business Support

D. Business and Basic Support

Correct Answer: D

QUESTION 87 Which of the following services have Distributed Denial of Service (DDoS) mitigation features? (Choose two.)

A. AWS WAF

B. Amazon DynamoDB

C. Amazon EC2

D. Amazon Inspector

E. Amazon CloudFront

Correct Answer: AE

QUESTION 88 When building a cloud Total Cost of Ownership (TCO) model, which cost elements should be considered for workloads running on AWS? (Choose three.)

A. Facilities costs

B. Compute costs

C. Data transfer costs

D. Storage costs

E. Hardware lifecycle costs

F. Network infrastructure costs

Correct Answer: BDF

QUESTION 89 What time-savings advantage is offered with the use of Amazon Rekognition?

A. Amazon Rekognition provides automatic watermarking of images.

B. Amazon Rekognition provides the ability to resize millions of images automatically.

C. Amazon Rekognition provides automatic detection of objects appearing in pictures.

D. Amazon Rekognition uses Amazon Mechanical Turk to allow humans to bid on object detection jobs.

Correct Answer: C

QUESTION 90 When comparing AWS with on-premises Total Cost of Ownership (TCO), what costs are included?

A. Business analysis

B. Data centre security

C. Project management

D. Operating system administration

Correct Answer: B

QUESTION 91 According to the AWS shared responsibility model, what is AWS responsible for?

A. Configuring Amazon VPC

B. Managing the network infrastructure

C. Managing application code

D. Maintaining application traffic

Correct Answer: B

QUESTION 92 Which service should be used to estimate the costs of running a new project on AWS?

A. AWS TCO Calculator

B. AWS Simple Monthly Calculator

C. AWS Budgets

D. AWS Cost Explorer API

Correct Answer: D

QUESTION 93 Which AWS tool will identify security groups that grant unrestricted Internet access to a limited list of ports?

A. Amazon EC2 dashboard

B. AWS Organizations

C. AWS Trusted Advisor

D. AWS Usage Report

Correct Answer: A

QUESTION 94 Which AWS service can be used to generate alerts based on an estimated monthly bill?

A. AWS Config

B. AWS X-Ray

C. Amazon CloudWatch

D. AWS CloudTrail

Correct Answer: C

QUESTION 95 Which Amazon EC2 pricing model offers the MOST significant discount when compared to On-Demand Instances?

A. All Upfront Reserved Instances for a 3-year term

B. Partial Upfront Reserved Instances for a 1-year term

C. All Upfront Reserved Instances for a 1-year term

D. No Upfront Reserved Instances for a 3-year term

Correct Answer: A

QUESTION 96 Which of the following is the responsibility of AWS?

A. Setting up AWS Identity and Access Management (IAM) users and groups

B. Patching guest operating systems

C. Physically destroying storage media at end of life

D. Configuring security settings on Amazon EC2 instances

Correct Answer: C

QUESTION 97 Which of the following is an advantage of using AWS?

A. AWS manages compliance needs.

B. AWS audits user data.

C. Data is automatically secure.

D. There is no guessing on capacity needs.

Correct Answer: A

QUESTION 98 Which AWS service would a customer use with a static website to achieve lower latency and high transfer speeds? 1za5

A. AWS Lambda

B. Amazon CloudFront

C. Amazon DynamoDB Accelerator

D. Amazon Route 53

Correct Answer: B

QUESTION 99 Which services manage and automate application deployments on AWS? (Choose two.)

A. AWS Elastic Beanstalk

B. AWS CodeCommit

C. AWS CloudFormation

D. AWS Data Pipeline

E. AWS Config

Correct Answer: BD

QUESTION 100 A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLI and AWS software development kits (SDKs). Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Choose two.)

A. Create an IAM user and provide AWS Management Console access only.

B. Create an IAM role and provide AWS Management Console access only.

C. Create an IAM user and provide programmatic access only.

D. Create an IAM policy with administrator access and attach it to the IAM user.

E. Create an IAM policy with Amazon RDS access and attach it to the IAM user.

Correct Answer: CE

QUESTION 101 A company has a compliance requirement to record and evaluate configuration changes, as well as perform remediation actions on AWS resources. Which AWS service should the company use?

A. AWS Secrets Manager

B. AWS CloudTrail

C. AWS Config

D. AWS Trusted Advisor

Correct Answer: C

QUESTION 102 What is the customer's responsibility when using AWS Lambda?

A. Code encryption

B. Operating system configuration

C. Application management

D. Platform management

Correct Answer: A

QUESTION 103 A company wants to be notified when its AWS Cloud costs or usage exceed defined thresholds Which AWS service will support these requirements?

A. AWS Budgets

B Cost Explorer

C. AWS CloudTrail

D. Amazon Macie

Correct Answer: B

QUESTION 104 Which AWS service provides the ability to host a NoSQL database in the AWS Cloud?

A. Amazon Aurora

B. Amazon RDS

C. Amazon DynamoDB

D. Amazon Redshift

Correct Answer: C

QUESTION 105 Which AWS service or feature requires an internet service provider (ISP) and a colocation facility to be implemented?

A. AWS VPN

B. AWS Direct Connect

C. Amazon Connect

D. Internet gateway

Correct Answer: B

QUESTION 106 Which AWS services offer compute capabilities? (Choose two.)

A. Amazon S3

B. Amazon EC2

C. AWS Lambda

D. Amazon Elastic Block Store (Amazon EBS)

E. Amazon Cognito

Correct Answer: BC

QUESTION 107 Which AWS service should a cloud practitioner use to identify security vulnerabilities of an AWS account?

A. AWS Secrets Manager

B. Amazon Cognito

C. AWS Trusted Advisor

D. Amazon Macie

Correct Answer: C

QUESTION 108 A company wants to ensure its infrastructure is designed for fault tolerance and business continuity in the event of an environmental disruption. Which AWS infrastructure component should the company replicate across?

A. Availability Zones

B. Edge locations

C. Regions

D. Amazon Route 53

Correct Answer: A

QUESTION 109 A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross-site scripting. Which AWS service should the company use?

A. Amazon GuardDuty

B. AWS Trusted Advisor

C. AWS WAF

D. Amazon Inspector

Correct Answer: C

QUESTION 110 An external auditor has requested that a company provide a list of all its IAM users, including the status of users' credentials and access keys. What is the SIMPLEST way to provide this information?

A. Create an IAM user account for the auditor, granting the auditor administrator permissions.

B. Take a screenshot of each user’s page in the AWS Management Console, then provide the screenshots to the auditor.

C. Download the AWS Trusted Advisor report, then provide the report to the auditor.

D. Download the IAM credential report, then provide the report to the auditor.

Correct Answer: D

QUESTION 111 A company is expecting a short-term spike in internet traffic for its application. During the traffic increase, the application cannot be interrupted. The company also needs to minimise cost and maximise flexibility. Which Amazon EC2 instance type should the company use to meet these requirements?

A. Spot Instances

B. Reserved Instances

C. On-Demand Instances

D. Dedicated Hosts

Correct Answer: C

QUESTION 112 A company wants to track AWS resource configuration changes for compliance reasons. Which AWS feature can be used to meet this requirement?

A. AWS Cost and Usage Report

B. AWS Organizations service control policies (SCPs)

C. VPC Flow Logs

D. AWS Config rules

Correct Answer: D

QUESTION 113 The AWS IAM best practice for granting least privilege is to:

A. apply an IAM policy only to IAM users who require it.

B. apply an IAM policy to an IAM group and limit the size of the group.

C. requires multi-factor authentication (MFA) for all IAM users.

D. requires each IAM user who has different permissions to have multiple passwords.

Correct Answer: A

QUESTION 114 Which cloud computing benefit does AWS demonstrate with its ability to offer lower variable costs as a result of high purchase volumes?

A. Pay-as-you-go pricing

B. Economies of scale

C. High availability

D. Global reach

Correct Answer: B

QUESTION 115 A pharmaceutical company operates its infrastructure in a single AWS Region. The company has thousands of VPCs in various AWS accounts that it wants to interconnect. Which AWS service or feature should the company use to help simplify management and reduce operational costs?

A. VPC endpoint

B. AWS Direct Connect

C. VPC peering

D. AWS Transit Gateway

Correct Answer: D

QUESTION 116 Which of the following services can be used to block network traffic to an instance? (Choose two.)

A. Amazon Virtual Private Cloud (Amazon VPC) flow logs

B. Network ACLs

C. Security groups

D. Amazon CloudWatch

E. AWS CloudTrail

Correct Answer: BC

QUESTION 117 A company wants to transfer petabytes of data as quickly as possible from on-premises locations to the AWS Cloud. Which AWS service should the company use?

A. AWS Global Accelerator

B. Amazon S3 Transfer Acceleration

C. Amazon Connect

D. AWS Snowball

Correct Answer: D

QUESTION 118 A company has refined its workload to use specific AWS services to improve efficiency and reduce cost. Which best practice for cost governance does this example show?

A. Resource controls

B. Cost allocation

C. Tagging enforcement

D. Architecture optimization

Correct Answer: D

QUESTION 119 A company hosts images in an Amazon S3 bucket for a public-facing website that is viewed by millions of users around the globe.Which AWS service will deliver this content with reduced latency?

A. AWS WAF

B. Amazon CloudFront

C. Amazon CloudWatch

D. AWS CloudFormation

Correct Answer: B

techinsightslabs

AWS Certified Cloud Practitioner (CLF-C01)ExamB

Solverwp- WordPress Theme and Plugin