AWS Certified Cloud Practitioner (CLF-C01)Exam E

QUESTION 1 Which AWS tools or services can be used to list all AWS Lambda functions running in an account? (Select TWO)

A. AWS CloudFormation

B. AWS CLI

C. AWS SDKS

D. AWS CloudTrail

E. Amazon Cloud Directory

Correct Answer:BC

QUESTION 2 Which of the following automatically distributes application traffic across multiple targets, such as Amazon EC2 instances or containers?

A. AWS Application Discovery Service

B. AWS Resource Groups

C. Elastic Load Balancing

D. AWS Auto Scaling

Correct Answer: C

Toggle Title

Toggle Content

QUESTION 3 A company must store critical business data in Amazon S3 with a backup to another AWS Region.How can this be achieved?

A. Set up Amazon S3 cross-region replication to another AWS Region

B. Use an Amazon CloudFront Content Delivery Network (CDN) to cache data globally

C. Configure the AWS Backup service to back up the data to another AWS Region

D. Take Amazon S3 bucket snapshots and copy that data to another AWS Region

Correct Answer:A

QUESTION 4 Which AWS service can be used in the application deployment process?

A. AWS AppSync

B. AWSCodePipeline

C. AWS Batch

D. AWS DataSync

Correct Answer: B

QUESTION 5 A user has underutilised on-premises resources Which AWS Cloud concept can BEST address this Issue?

A. High availability

B. Security

C. Loose coupling

D. Elasticity

Correct Answer:D

QUESTION 6 A company with a Developer-level AWS Support plan provisioned an Amazon RDS database and cannot do it. Who should the developer contact for this level of support?

A. AWS Professional Services

B. AWS Technical Account Manager

C. AWS Support using a support case

D. AWS consulting partners

Correct Answer:C

QUESTION 7 When a company provides web servers in multiple AWS regions, what is being increased?

A. Availability

B. Coupting

C. Security

D. Durability

Correct Answer:A

QUESTION 8 Which AWS service allows users to provision infrastructure as code?

A. AWS CodeBuild

B. AWS Organizations

C. AWS CloudFormation

D. AWS CodeCommit

Correct Answer:C

QUESTION 9 An architect design includes Amazon EC2, an Elastic Load Balancer, and Amazon RDS. What is the BEST way to get a monthly cost estimation for this architecture?

A. Open an AWS Support case, provide the architecture proposal, and ask for a monthly cost estimation.

B. Use the AWS Simple Monthly Calculator to estimate the monthly cost.

C. Use the published prices of the AWS services and calculate the monthly estimate.

D. Use the AWS Total Cost of OwnerShip (TCO) Calculator to estimate the monthly cost.

Correct Answer:B

QUESTION 10 Which tool is used to forecast AWS spending?

A. Cost Explorer

B. AWS trusted Advisor

C. AWS Organizations

D. Amazon Inspector

Correct Answer:A

QUESTION 11 Which requirement must be met for a member account to be unlinked from an AWS organisation account?

A. The payer account must be used to remove the linked account from the organisation

B. The linked account must be activity compliant with AWS System and Organization Controls (SOC)

C. The payer and the linked account both create AWS Support cases to request that the member account

be unlinked from the organisation.

D. The monitor account must meet the requirements of a standalone account.

Correct Answer:A

QUESTION 12 Which AWS service controls permissions to the AWS management console?

A. Amazon Connect

B. AWS Direct Connect

C. AWS IAM

D. Amazon Recognition

Correct Answer:C

QUESTION 13 Which AWS tool can they use?

A. AWS Systems Manager

B. AWS Config

C. AWS Trusted Advisor

D. AWS Service Catalog

Correct Answer:C

QUESTION 14 Which of the following allows AWS users to manage cost allocates for billing?

A Limiting who can create resources

B. Tagging resources

C. Adding a secondary payment method

D. Running all operation on a single AWS account

Correct Answer:B

QUESTION 15 Which AWS service is a long term archiving solution?

A. Amazon S3

B. Amazon EFS

C. Amazon S3 Glacier

D. AWS Storage Gateway

Correct Answer:C

QUESTION 16 On demand reserved and spot instances belong to which principle of cloud architecture design?

A. Performance

B. Optimising for cost

C. Removing single points off failure

D. Loose coupling

Correct Answer:B

QUESTION 17 A user wants recommendations on how to optimise the cost and performance of their AWS environment. Which AWS tool can they use?

A. AWS Systems Manager

B. AWS Config

C. AWS trusted Advisor

D. AWS Service Catalog

Correct Answer:C

QUESTION 18 Which Amazon EC2 principle model offers the MOS I significant discount when compared to On- Demand Instances?

A. Partial Upfront Reserved Instances tor a 1 year term

B. All Upfront Reserved Instances for a 1 year term

C. No Upfront Reserved Instances for a 3-year term

D. All Upfront Reserved Instances tor a 3 year term

Correct Answer:D

QUESTION 19 Which of the following are benefits of running a database on amazon rds compared to an on premises database?

A. RDS supports any relational database

B. RDS database compute capacity can be easily scaled.

C. RDS inbound traffic content (for example, security groups) is managed by AWS.

D. RDS backup are managed by AWS

E. RDs has no database engineer licensing costs.

Correct Answer:DE

QUESTION 20 Which AWS tools or services can be used to list all aws lambda functions running in an account?

A. AWS CloudFormation

B. AWS CLI

C. AWS CloudTrail

D. Amazon Cloud Directory

E. AWS SDKs

Correct Answer:BE

QUESTION 21 Which management service can be used to set alarms for AWS resources?

A. Amazon Simple Notification Service (Amazon SNS)

B. Amazon Simple Email Service (Amazon SES)

C. Amazon CloudWatch

D. AWS CloudTrail

Correct Answer:C

QUESTION 22 Which of the following are AWS best practices? (Select TWO.)

A. Enable access key sharing among users.

B. Enable AWS Multi-Factor Authentication (AWS MFA) for users.

C. Use the inline policies instead of user managed policies.

D. Avoid rotating credentials.

E. Configure strong password policies for users.

Correct Answer:BE

QUESTION 23 Which actions support the reliability pillar of the AWS Architected Framework? (Select TWO.)

A. Ensure that backend components include multiple Availability Zone deployments.

B. Enforce higher security specifically in regard to design for failure.

C. Enable object versioning within Amazon S3 and replicating data to another AWS Region.

D. Avoid the use of automatic scaling to simplify the cloud architecture.

E. Include an Application Load Balancer to distribute traffic to multiple Amazon EC2 instance in separate Availability Zones

Correct Answer:AC

A user needs to automatically discover, classify, and protect sensitive data stored in Amazon S3 Which AWS service meets these requirements?

A. Amazon Inspector

B. Amazon GuardDuty

C. Amazon Macie

D. AWS Secrets Manager

Correct Answer:C

QUESTION 25 A cloud practitioner launched a blog hosted on AWS and needs to register a domain name for the blog. Which AWS service will meet this requirement?

A. Amazon Route 53

B. Amazon Connect

C. Amazon CloudFront

D. AWS Global Accelerator

Correct Answer:B

QUESTION 26 An Availability Zone consists of:

A. two or more data centres in multiple locations.

B. one or more data centres in a single location.

C. one or more physical hosts in a single data centre.

D. two or more physical hosts in multiple data centres.

Correct Answer:B

QUESTION 27 A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud.How can these reports be generated?

A. Download the reports from AWS Artefact.

B. Contact the AWS Compliance team.

C. Open a case with AWS Support.

D. Generate the reports with Amazon Made.

Correct Answer:A

QUESTION 28 Which of the following are AWS Cloud security resources? (Select TWO.)

A. AWS security solutions in the AWS Marketplace.

B. AWS whitepapers related to security best practices.

C. Real-time vulnerability scans from Amazon Kinesis.

D. Open-source penetration testing results available in Amazon Cognito.

E. Security analyses of README.md files within application repositories stored in AWS CodeCommit.

Correct Answer:AB

QUESTION 29 What is the MOST effective resource for staying up to date on AWS security announcements?

A. AWS Personal Health Dashboard

B. AWS Secrets Manager

C. Amazon Inspector

D. AWS Security Bulletins

Correct Answer:D

QUESTION 30 Which of the following is an example of how moving to the AWS Cloud reduces upfront cost?

A. By replacing large variable costs with lower capital investments

B. By allowing the provisioning of compute and storage at a fixed level to meet peak demand

C. By replacing large capital investments with lower variable costs

D. By replacing the repeated scaling of virtual servers with a simpler fixed-scale model

Correct Answer:C

QUESTION 31 Which Amazon EC2 pricing option is best suited for applications with short-term, spiky, or unpredictable workloads that cannot be interrupted?

A. Spot Instances

B. Dedicated Hosts

C. Reserved Instances

D. On-Demand Instances

Correct Answer:D

QUESTION 32 What are the advantages of deploying an application with Amazon EC2 instances in multiple Availability Zones? (Select TWO.)

A. Reducing the operational costs of the application

B. Preventing a single point of failure

C. Increasing the availability of the application

D. Allowing the application to serve cross-region users with low latency

E. Increasing the load of the application

Correct Answer:BC

QUESTION 33 According to the AWS shared responsibility model, which of the following tasks are AWS responsibilities? (Select TWO.)

A. Encrypting customer data.

B. The physical security of AWS facilities.

C. Patching operating systems on Amazon EC2.

D. Patching and updating the hypervisor.

E. Defining network firewalls inside the VPC.

Correct Answer:BD

QUESTION 34 Which feature of the AWS Cloud can help minimise application downtime?

A. High availability

B. Global reach

C. Elasticity

D. Agility

Correct Answer:A

QUESTION 35 According to the AWS shared responsibility model, which of the following is the customer responsible for if they are using a managed service such as Amazon Relational Database Service (Amazon RDS)? {SelectTWO.)

A. Setting up and managing network controls

B. Operating system patching

C. Managing platform-level identity and access management (1AM)

D. Environmental controls

E. Physical security of the data centre

Correct Answer:AD

QUESTION 36 What type of database is Amazon DynamoDB?

A. In-memory

B. Relational

C. Graph

D. Key-value

Correct Answer:C

QUESTION 37 What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?

A. AWS Certificate Manager

B. AWS Artefact

C. Amazon Inspector

D. AWS Systems Manager

Correct Answer:D

QUESTION 38 Which service is an AWS-managed Hadoop framework that makes it easy, fast, and cost effective to process large amounts of data across dynamically scalable Amazon EC2 instances?

A. Amazon EC2

B. AWS Elastic Beanstalk

C. Amazon EMR

D. Amazon Redshift

Correct Answer:C

QUESTION 39 Which components are required to build a successful site-to-site VPN connection on AWS? (Select TWO.)

A. Customer gateway

B. Transit gateway

C. Internet gateway

D. NAT gateway

E. Virtual private gateway

Correct Answer:AB

QUESTION 40 After migrating a workload to AWS, which associated costs must a user still manage?

A. Physical access control

B. Software licences

C. Staff to manage the hardware assets

D. Power and cooling

Correct Answer:C

QUESTION 41 Which AWS service offers persistent storage for a file system?

A. Amazon S3

B. Amazon EC2 instance store

C. Amazon ElastiCache

D. Amazon Elastic Block Store (Amazon EBS)

Correct Answer:D

QUESTION 42 A company operating in the AWS Cloud requires separate invoices for specific environments, such as development, testing, and production.How can this be achieved?

A. Use resource tagging

B. Use multiple AWS accounts.

C. Use multiple VPCs.

D. Use Cost Explorer

Correct Answer:A

QUESTION 43 A company wants to integrate conversational natural language chatbots into its existing application using voice and text.Which managed AWS service can be used for this use case?

A. Amazon Lex

B. Amazon Textract

C. Amazon Polly

D. Amazon Comprehend

Correct Answer:B

QUESTION 44 Which of the following allows an application running on an Amazon EC2 instance to securely write data to an Amazon S3 bucket without using long term credentials?

A. Amazon Cognito

B. AWS Shield

C. AWS IAM user access key

D. AWS IAM role

Correct Answer: D

QUESTION 45 What is the MOST cost-effective instance type for an application with a steady, consistent workload that is hosted on an Amazon EC2 instance, which needs to operate for at least one year?

A. Spot Instances

B. On-Demand Instances

C. Reserved Instances

D. Dedicated Host

Correct Answer:C

QUESTION 46 Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?

A. AWS Artefact

B. Amazon GuardDuty

C. AWS Security Hub

D. AWS Shield

Correct Answer:A

QUESTION 47 A company is releasing a business-critical application Before the release the company needs strategic planning assistance from AWS. During the release, it needs infrastructure event management and real-time Support.How can these requirements be met?

A. Access AWS Trusted Advisor

B. Sign up for AWS Enterprise Support

C. Contact the AWS Partner Network (APN).

D. Contact AWS Professional Services

Correct Answer:B

QUESTION 48 A user needs to launch a workload in multiple AWS environments Each copy of the workload must have the same configuration.What is the MOST efficient way to accomplish this task?

A. Launch the resources using the AWS Management Console

B. Use AWS OpsWorks to provision the workloads.

C. Use AWS CloudFormation to launch a stack.

D Execute a custom PowerShell script to launch the workloads.

Correct Answer:B

QUESTION 49 A company is planning to launch a new steady-state workload on AWS that must be accessible 24 hours a day, 7 days a week.What is the MOST cost-effective Amazon EC2 pricing option?

A. Spot Instances

B. Reserved Instances

C. On-Demand Instances

D. Dedicated Hosts

Correct Answer: C

QUESTION 50 Which of the following can be used as a second factor within the AWS Management Console for AWS Multi-Factor Authentication (AWS MFA)?

A. AWS IAM password

B. U2F security key token

C. AWS Certificate Manager certificate

D. Access key or secret key

Correct Answer: B

QUESTION 51 A company has a 500 TB image repository that needs to be transported to AWS for processing.Which AWS service can import this data MOST cost-effectively?

A. Amazon S3

B. AWS Snowball

C. AWS Direct Connect

D. AWS VPN

Correct Answer:A

QUESTION 52 What does the Amazon S3 Intelligent-Tiering storage class offer?

A. Automatic cost savings by moving objects between tiers based on access pattern changes

B. Payment flexibility by reserving storage capacity

C. Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon EBS) volume

D. Secure, durable, and lowest cost storage for data archival

Correct Answer:A

QUESTION 53 Which AWS service or feature allows the user to manage cross-region application traffic?

A. Amazon AppStream 2.0

B. Elastic Load Balancer

C. Amazon Route 53

D. Amazon VPC

Correct Answer: D

QUESTION 54 Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)

A. Detecting underutilised resources to save costs

B. Improving security by proactively monitoring the AWS environment

C. Providing high-performance container orchestration

D. Creating and rotating encryption keys

E. Implementing enforced tagging across AWS resources

Correct Answer:AB

QUESTION 55 What is the purpose of a policy in AWS Identity Access Management (IAM)?

A. To assign permissions to a role, group, or user

B. To define the run schedule of an Amazon EC2 instance

C. To manage ports within a VPN

D. To manage the access keys for an IAM user

Correct Answer: A

QUESTION 56 How can an AWS user with an AWS Basic Support plan obtain technical assistance from AWS?

A. AWS Senior Support Engineers

B. AWS Trusted Advisor

C. AWS Technical Account Managers

D. AWS Discussion Forums

Correct Answer:B

QUESTION 57 A company with a Developer-level AWS Support plan provisioned an Amazon RDS database and cannot connect to it.Who should the developer contact for this level of support?

A. AWS Professional Services

B. AWS Support using a support case

C. AWS Technical Account Manager AWS consulting partners

Correct Answer:B

QUESTION 58 A company needs 24/7 phone email and chat access with a response time of less than 1 hour if a production system has a service interruption.Which AWS Support plan meets these requirements at the LOWEST cost?

A. Basic

B. Developer

C. Enterprise

D. Business

Correct Answer:D

QUESTION 59 A user is planning to launch two additional Amazon EC2 instances to increase availability. Which action should the user take?

A. Launch the instances as EC2 Reserved Instances in the same AWS Region and the same Availability Zone

B. Launch the instances across multiple Availability Zones in a single AWS Region

C. Launch the instances in multiple AWS Regions but in the same Availability Zone

D. Launch the instances as EC2 Spot Instances in the same AWS Region but in different Availability Zones

Correct Answer:B

QUESTION 60 Which AWS service is used to track record, and audit configuration changes made to AWS resources?

A. AWS Config

B. AWS Shield

C. AWS 1AM

D. Amazon Inspector

Correct Answer:A

QUESTION 61 A company wants to focus on business activities instead of managing computers and capacity.Which AWS service can be used to automatically add or remove Amazon EC2 instances based on demand?

A. Elastic Load Balancer

B. Amazon Route 53

C. Amazon CloudFront

D. Amazon EC2 Auto Scaling

Correct Answer:D

QUESTION 62 A user needs to import 100 TB of video files into Amazon S3. The user has estimated that it will take months to move the files over an on-premises internet connection.Which AWS service can be used to improve the data transport time?

A. AWS Snowball

B. AWS Storage Gateway

C. Amazon S3 Transfer Accelerator

D. AWS DataSync

Correct Answer:C

QUESTION 63 Which benefits are included with the AWS Business Support plan? (Select TWO )

A. Support from a dedicated AWS Technical Account Manager

B. 24/7 assistance by way of live chat or a telephone call

C. 15-minute response time for production system interruption cases

D. An unlimited number of cases and contacts

E. Annual operational reviews with AWS Solutions Architects

Correct Answer:BD

QUESTION 64 Which AWS service does AWS Snowball Edge natively support?

A. AWS Server Migration Service (AWS SMS)

B. Amazon EC2

C. Amazon Aurora

D. AWS Trusted Advisor

Correct Answer:B

QUESTION 65 When should a company consider using Amazon EC2 Spot Instances? (Select TWO )

A. For stateful workloads

B. For non-production applications

C. For fault-tolerant flexible applications

D. For applications that cannot have interruptions

E. For sensitive database applications

Correct Answer:BC

QUESTION 66 Which AWS service feature can be used to monitor CPU usage?

A. Amazon CloudWatch

B. AWS CloudTrail

C. VPC Flow Logs

D. AWSConfig

Correct Answer:A

QUESTION 67 Which of the following are the main components of the AWS global infrastructure? (Select TWO)

A. Resource groups

B. Security groups

C. Availability Zones

D. Amazon Machine Images (AMIS)

E. Regions

Correct Answer:CD

QUESTION 68 The user is fully responsible for which action when running workloads on aws?

A. Patching the infrastructure components

B. Maintaining physical and environmental controls

C. Maintaining the underlying infrastructure components

D. Implementing controls to route application traffic

Correct Answer:C

QUESTION 69 Which AWS service delivers data, videos, applications, and APIs to users globally with low latency and high transfer speeds?

A. Amazon Route S3

B. Amazon CloudFront

C. Amazon EC2

D. Amazon Connect

Correct Answer:D

QUESTION 70 Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?

A. Amazon DynamoDB

B. Amazon RDS

C. Amazon Athena

D. Amazon EMR

Correct Answer:B

QUESTION 71 Which AWS Support plan offers access to self-paced labs?

A. Enterprise Support

B. Business Support

C. Basic Support

D. Developer Support

Correct Answer: A

QUESTION 72 Under the AWS shared responsibility model, AWS is responsible for what combination of the following? (Select TWO)

A. Managing physical access to AWS data centres

B. Maintaining the hardware that constitutes the cloud

C. Configuring network ACLS

D. Setting and maintaining Amazon S3 access permissions.

E. Updating Amazon EC2 security groups

Correct Answer:AB

QUESTION 73 A company must ensure that its endpoint for a database instance remains the same after a single Availability Zone service interruption The application needs to resume database operations without the need for manual administrative intervention. How can these requirements be met?

A. Use multiple Amazon Route 53 routes to the standby database instance endpoint hosted on AWS Storage Gateway

B. Add multiple Application Load Balancers and deploy the database instance with AWS Elastic Beanstalk.

C. Configure Amazon RDS Multi-Availability Zone deployments with automatic failover to the standby

D. Deploy a single Network Load Balancer to distribute incoming traffic across multiple Amazon CloudFront origins

Correct Answer:C

QUESTION 74 A user is planning to migrate an application workload to the AWS Cloud Which control becomes the responsibility of AWS once the migration is complete?

A. Patching the guest operating system

B. Protecting communications and maintaining zone security

C. Patching specific applications

D. Maintaining physical and environmental controls

Correct Answer:D

QUESTION 75 Which AWS service or feature provides an additional layer of protection for username and password authentication to the AWS Management Console?

A. Amazon Cloud Directory

B. Authentication (AWS MEA)

C. AWS KMS AWS Multi-Factor

D. Amazon Cognito

Correct Answer:B

QUESTION 76 A company has different AWS accounts for production and development resources Which AWS service provides billing for all AWS accounts consolidated into a single payment method?

A. Amazon Connect

B. Cost Explorer

C. AWS Organizations

D. AWS Trusted Advisor

Correct Answer:C

QUESTION 77 Which AWS service or feature can be used to monitor CPU usage?

A. Amazon CloudWatch

B. AWS CloudTrail

C. VPC Flow Logs

D. AWS Config

Correct Answer:A

QUESTION 78 A company wants to expand its content delivery network infrastructure. Which AWS service should be used?

A. Amazon S3

B. AWS Global Accelerator

C. Amazon Route 53

D. Amazon CloudFront

Correct Answer: D

QUESTION 79 What is the total amount of storage offered by Amazon S3?

A. 5 TB

B. 100 MB

C. 5 GB OC

D. Unlimited

Correct Answer:A

QUESTION 80 A company's application running on Amazon EC2 is designed to use an Auto Scaling group to dynamically add or remove instances as demand increases or decreases. This is an example of the AWS Cloud architectural principle?

A. Loose coupling

B. Design for failure

C. Elasticity

D. Parallelism

Correct Answer:C

QUESTION 81 A user wants guidance on possible savings when migrating from on-premises to AWS Which tool is suitable for this scenario?

A. AWS Budgets

B. Cost Explorer

C. AWS Well-Architected Tool

D. AWS Total Cost of Ownership (TCO) Calculator

Correct Answer:D

QUESTION 82 What is the purpose of having an internet gateway within a VPC?

A. To allow communication between the VPC and the Internet

B. To create a VPN connection to the VPC

C. To impose bandwidth constraints on internet traffic

D. To load balance traffic from the Internet across Amazon EC2 instances

Correct Answer:A

QUESTION 83 AWS Trusted Advisor provides recommendations on which of the following? (Choose two.)

A. Auditing

B. Cost optimization

C. Performance

D. Serverless architecture

E. Scalability

Correct Answer:BC

QUESTION 84 Which of the following tasks can only be performed after signing in with AWS account root user credentials? (Choose two.)

A. Creating a new IAM policy

B. Closing an AWS account

C. Attaching a role to an Amazon EC2 instance

D. Generating access keys for IAM users

E. Changing AWS Support plans

Correct Answer:BE

QUESTION 85 Fault tolerance refers to:

A. the ability of an application to accommodate growth without changing design

B. how secure your application is

C. how well and how quickly an application’s environment can have lost data restored

D. the built-in redundancy of an application’s components

Correct Answer:C

QUESTION 86 What can be used to reduce the cost of running Amazon EC2 instances? (Choose two.)

A. Memory optimised instances for high-compute workloads

B. Spot Instances for stateless and flexible workloads

C. Reserved Instances for sustained workloads

D. On-Demand Instances for high-cost and sustained workloads

E. Spend limits set using AWS Budgets

Correct Answer:BC

QUESTION 87 A company is launching an e-commerce site that will store and process credit card data. The company requires information about AWS compliance reports and AWS agreements. Which AWS service provides on-demand access to these items?

A. AWS Artefact

B. AWS Certificate Manager

C. AWS Config

D. AWS CloudTrail

Correct Answer: A

QUESTION 88 Which AWS service or feature allows the user to manage cross-region application traffic?

A. Amazon AppStream 2.0

B. Amazon VPC

C. Amazon Route 53

D. Elastic Load Balancer

Correct Answer:C

QUESTION 89 Which AWS service can be used to track unauthorised API calls?

A. AWS CloudTrail

B. AWS Config

C. AWS Trusted Advisor

D. Amazon Inspector

Correct Answer:A

QUESTION 90 A user needs to regularly audit and evaluate the setup of all AWS resources, identify non-compliant accounts, and be notified when a resource changes.Which AWS service can be used to meet these requirements?

A. AWS Trusted Advisor

B. AWS Resource Access Manager

C. AWS Config

D. AWS Systems Manager

Correct Answer:C

QUESTION 91 Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?

A. AWS Cost Explorer

B. AWS Budgets

C. AWS Cost Allocation Tags

D. AWS Organizations

Correct Answer: B

QUESTION 92 What is the recommended method to request penetration testing on AWS resources?

A. Open a support case

B. Request a penetration test from your technical account manager

C. Fill out the Penetration Testing Request Form

D. Contact your AWS sales representative

Correct Answer:C

QUESTION 93 Which AWS cloud architecture principle states that systems should reduce interdependencies?

A. Scalability

B. Loose coupling

C. Services, not servers

D. Removing single points of failure

Correct Answer:B

QUESTION 94 Which of the following AWS services are serverless? (Choose two.)

A. Amazon Elasticsearch Service

B. AWS Lambda

C. Amazon DynamoDB

D. AWS Elastic Beanstalk

E. Amazon Redshift

Correct Answer:BC

QUESTION 95 Which AWS managed services can be used to extend an on-premises data centre to the AWS network?(Choose two.)

A. NAT gateway

B. Amazon Connect

C. Amazon Route 53

D. AWS VPN

E. AWS Direct Connect

Correct Answer:DE

QUESTION 96 What AWS benefit refers to a customer's ability to deploy applications that scale up and down to meet variable demand?

A. Elasticity

B. Agility

C. Scalability

D. Security

Correct Answer:C

QUESTION 97 During a compliance review, one of the auditors requires a copy of the AWS SOC 2 report. Which service should be used to submit this request?

A. AWS Personal Health Dashboard

B. AWS Trusted Advisor

C. Amazon S3

D. AWS Artefact

Correct Answer:D

QUESTION 98 A company wants to set up a highly available workload in AWS with a disaster recovery plan that will allow the company to recover in case of a regional service interruption. Which configuration will meet these requirements?

A. Run on two Availability Zones in one AWS Region, using another AWS Region for the disaster recovery site.

B. Run on two Availability Zones in one AWS Region, using the additional Availability Zones in the AWS Region for the disaster recovery site.

C. Run on two Availability Zones in one AWS Region, using a local AWS Region for the disaster recovery site.

D. Run across two AWS Regions, using a third AWS Region for the disaster recovery site.

Correct Answer:B

QUESTION 99 Which of the following assist in identifying costs by department? (Choose two.)

A. Using multiple AWS accounts

B. Using Consolidated Billing

C. Using tags on resources

D. Using an account manager

E. Using AWS Trusted Advisor

Correct Answer:AB

QUESTION 100 A company wants to allow full access to an Amazon S3 bucket for a particular user. Which element in the S3 bucket policy holds the user details that describe who needs access to the S3 bucket?

A. Principal

B. Action

C. Statement

D. Resource

Correct Answer:D

QUESTION 101 Which AWS service allows for effective cost management of multiple AWS accounts?

A. AWS Trusted Advisor

B. AWS Direct Connect

C. AWS Organizations

D. Amazon Connect

Correct Answer:C

QUESTION 102 A company is piloting a new customer-facing application on Amazon Elastic Compute Cloud (Amazon EC2) for one month.What pricing model is appropriate?

A. On-Demand Instances

B. Reserved Instances

C. Spot Instances

D. Dedicated Hosts

Correct Answer:A

QUESTION 103 Under the AWS shared responsibility model, which of the following is a responsibility of AWS?

A. Enabling server-side encryption for objects stored in S3

B. Applying updates to the hypervisor

C. Applying AWS IAM security policies

D. Patching the operating system on an Amazon EC2 instance

Correct Answer:B

QUESTION 104 A user is able to set up a master payer account to view consolidated billing reports through:

A. AWS Organizations

B. AWS Budgets.

C. Amazon Macie.

D. Amazon QuickSight.

Correct Answer:A

QUESTION 105 Performing operations as code is a design principle that supports which pillar of the AWS Well-Architected Framework?

A. Operational excellence

B. Performance efficiency

C. Reliability

D. Security

Correct Answer: A

QUESTION 106 Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?

A. Vertical scaling

B. Testing recovery procedures

C. Manual failure recovery

D. Changing infrastructure manually

Correct Answer: B

QUESTION 107 What is a characteristic of Convertible Reserved Instances (RIs)?

A. Users can exchange Convertible RIs for other Convertible RIs in different AWS Regions.

B. Users can sell and buy Convertible RIs on the AWS Marketplace.

C. Users can shorten the term of their Convertible RIs by merging them with other

D. Users can exchange Convertible RIs for other Convertible RIs from a different instance family.Convertible RIs.

Correct Answer:D

QUESTION 108 Which are the benefits of using Amazon RDS over Amazon EC2 when running relational databases on AWS? (Choose two.)

A. Schema management

B. Automated backups

C. Software patching

D. Indexing of tables

E. Extract, transform, and load (ETL) management

Correct Answer:BC

QUESTION 109 A company has multiple data sources across the organisation and wants to consolidate data into one data warehouse.Which AWS service can be used to meet this requirement?

A. Amazon DynamoDB

B. Amazon Athena

C. Amazon QuickSight

D. Amazon Redshift

Correct Answer: D

QUESTION 110 Which AWS service can be used to track resource changes and establish compliance?

A AWS Config

B. Amazon CloudWatch

C. AWS CloudTrail

D. AWS Trusted Advisor

Correct Answer:A

QUESTION 111 A user has a stateful workload that will run on Amazon EC2 for the next 3 years. What is the MOST cost-effective pricing model for this workload?

A. Reserved Instances

B. On-Demand Instances

C. Dedicated Instances

D. Spot Instances

Correct Answer:B

QUESTION 112 A cloud practitioner needs an Amazon EC2 instance to launch and run for 7 hours without interruptions.What is the most suitable and cost-effective option for this task?

A. On-Demand Instance

B. Reserved Instance

C. Spot Instance

D. Dedicated Host

Correct Answer:C

QUESTION 113 A developer has been hired by a large company and needs AWS credentials. Which are security best practices that should be followed? (Choose two.)

A. Grant the developer access to only the AWS resources needed to perform the job.

B. Ensure the account password policy requires a minimum length.

C. Share the AWS account root user credentials with the developer.

D. Add the developer to the administrator’s group in AWS IAM.

E. Configure a password policy that ensures the developer’s password cannot be changed.

Correct Answer: AB

QUESTION 114 Which AWS storage service is designed to transfer petabytes of data in and out of the cloud?

A. AWS Storage Gateway

B. Amazon S3 Glacier Deep Archive

C. AWS Snowball

D. Amazon Lightsail

Correct Answer:C

QUESTION 115 Which service provides a user the ability to warehouse data in the AWS Cloud?

A. Amazon EFS

B. Amazon RDS

C. Amazon VPC

D. Amazon Redshift

Correct Answer:D

QUESTION 116 A company wants to store data with high availability, encrypt the data at rest, and have direct access to the data over the internet.Which AWS service will meet these requirements MOST cost-effectively?

A. Amazon S3

B. Amazon Elastic Block Store (Amazon EBS)

C. Amazon Elastic File System (Amazon EFS)

D. AWS Storage Gateway

Correct Answer:A

QUESTION 117 How do AWS users trade infrastructure expenses for operational expenses?

A. Secure their physical infrastructure to prevent malicious attacks.

B. Use AWS Auto Scaling to dynamically increase and decrease compute resources as needed.

C. Use AWS Budgets to ensure that spending on AWS resources does not exceed preset thresholds.

D. Eliminate the electricity costs that are associated with the hosting of physical servers.

Correct Answer:B

QUESTION 118 A network engineer needs to establish a dedicated 10 Gbps network connection from an on-premises environment to AWS.Which AWS service or feature should the engineer use?

A. Amazon Route 53

B. AWS PrivateLink

C. AWS Direct Connect

D. AWS VPN

Correct Answer:C

QUESTION 119 Which AWS service or feature provides an online, managed software catalogue that helps users purchase and deploy third-party software?

A. AWS Support

B. Amazon EC2 private Amazon Machine Images (AMIs)

C. AWS Marketplace

D. AWS reseller programs

Correct Answer:C

QUESTION 120 A company has a Java web application. The company wants to use auto deployment to create the AWS environment and deploy new versions of its application.Which AWS service will meet these requirements?

A. AWS Elastic Beanstalk

B. AWS Auto Scaling

C. AWS Control Tower

D. Amazon EC2

Correct Answer: A

QUESTION 121 Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory standards?

A. Running Amazon GuardDuty

B Creating an AWS Support ticket

C. Using AWS Artefact

D. Evaluating AWS CloudTrail logs

Correct Answer:C

QUESTION 122 A company is launching a new application in the AWS Cloud. The application will run on an Amazon EC2 instance. More EC2 instances will be needed when the workload increases. Which AWS service or tool can the company use to launch the number of EC2 instances that will be needed to handle the workload?

A. Amazon EC2 Auto Scaling

B. AWS App2Container (A2C)

C. Elastic Load Balancing

D. AWS Systems Manager

Correct Answer:C

QUESTION 123 A company has infrastructure in one AWS Region and is expanding operations to a second AWS Region.The company is using the same AWS CloudFormation template in the second Region that the company uses in the original Region. The company attempts to launch Amazon EC2 On-Demand Instances in the second Region and receives error messages.What could cause these error messages?

A. The requested EC2 instance types are not available in the second Region.

B. A new EC2 key pair has not been created for the EC2 instances.

C. The company cannot operate in a second Region until it updates its AWS contract.

D. The company has not configured AWS Budgets to monitor the budget for the EC2 instances.

Correct Answer:B

QUESTION 124 Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

A. AWS CLI

B. AWS Developer Center

C. AWS CodeStar

D. AWS Cloud Development Kit (AWS CDK)

Correct Answer:D

QUESTION 125 Which options are available to a user who wants to contact AWS Support? (Choose two.)

A. Use live chat functionality.

B. Call the customer service phone number.

C. Create an email case in the AWS Support Center.

D. Visit a local AWS Support Center.

E. Use the video conference functionality of the AWS Support console.

Correct Answer:AB

QUESTION 126 A global company is building a simple time-tracking mobile app. The app needs to operate globally and must store collected data in a database. Data must be accessible from the AWS Region that is closest to the user.What should the company do to meet these data storage requirements with the LEAST amount of operational overhead?

A. Use Amazon EC2 in multiple Regions to host separate databases.

B. Use Amazon DynamoDB global tables.

C. Use Amazon RDS cross-Region replication.

D. Use AWS Database Migration Service (AWS DMS).

Correct Answer:B

QUESTION 127 A company plans to store sensitive data in an Amazon S3 bucket.Which task is the responsibility of AWS?

A. Provide security for the physical infrastructure.

B. Train the company’s employees about cloud security.

C. Activate encryption at rest for the data.

D. Remove personally identifiable information (PII) from the data.

Correct Answer:C

QUESTION 128 A company needs a firewall that will control network connections to and from a single Amazon EC2 instance. This firewall will not control network connections to and from other instances that are in the same subnet.Which AWS service or feature can the company use to meet these requirements?

A. Security group

B. Network ACL

C. AWS WAF

D. Route table

Correct Answer:A

QUESTION 129 Which of the following are AWS Trusted Advisor support categories? (Choose two.)

A. Operational excellence

B. Well-Architected Framework

C. Rightsizing

D. Cost optimization

E. Security

Correct Answer:DE

QUESTION 130 Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

A. Patching of the guest operating system

B. Physical and environmental controls

C. Security awareness and training

D. Development of an IAM password policy

Correct Answer:B

techinsightslabs

AWS Certified Cloud Practitioner (CLF-C01)Exam E

Solverwp- WordPress Theme and Plugin