AWS Certified Cloud Practitioner (CLF-C01)Exam F

QUESTION 1 A company needs a data store for highly transactional workloads. Which AWS service would meet this requirement?

A. Amazon Redshift

B. Amazon RDS

C. Amazon S3

D. Amazon S3 Glacier

Correct Answer:B

QUESTION 2 Which of the following is a fully managed MySQL-compatible database?

A. Amazon Aurora

B. Amazon S3

C. Amazon DynamoDB

D. Amazon Redshift

Correct Answer:A

QUESTION 3 A user needs to regularly audit and evaluate the setup of all AWS resources, identify non-compliant accounts, and be notified when a resource changes. Which AWS service can be used to meet these requirements?

A. AWS Trusted Advisor

B. AWS Resource Access Manager

C. AWS Config

D. AWS Systems Manager

Correct Answer: C

QUESTION 4 An AWS user wants to proactively detect when an Instance or account might be compromised or if there are threats from attacks. Which AWS service should the user choose?

A. AWS WAF

B. AWS Shield

C. Amazon Inspector

D. Amazon GuardDuty

Correct Answer: D

QUESTION 5 Which AWS service will track user activity on AWS?

A. Amazon GuardDuty

B. AWS CloudTrail

C. AWS Trusted Advisor

D. Amazon CloudWatch

Correct Answer: B

QUESTION 6 What does the AWS Concierge Support team provide?

A. A technical expert dedicated to the user

B. A partner to help provide scaling guidance for an event launch

C. A primary point of contact for AWS Billing and AWS Support

D. A dedicated AWS staff member who reviews the user’s application architecture

Correct Answer:C

QUESTION 7 Which AWS service allows users to provision resources using a consistent and repeatable process?

A. AWS Cloud Formation

B. AWS Systems Manager

C. AWS Batch

D. AWS Config

Correct Answer:A

QUESTION 8 What is the best resource for a user to find compliance-related information and reports about AWS?

A. AWS Marketplace

B. Amazon Inspector

C. AWS Support

D. AWS Artefact

Correct Answer:D

QUESTION 9 What are characteristics of AWS 1AM users and groups? (Select TWO.)

A. Groups can be nested and can contain other groups.

B. A user can only be a member of a single group at one time.

C. All new users are automatically added to a default group.

D. A user can be a member of multiple groups.

E. Groups can contain users only and cannot be nested.

Correct Answer:DE

QUESTION 10 Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom alerts when their costs or usage exceed established thresholds?

A. Cost Explorer

B. AWS Cost and Usage Report

C. AWS Budgets

D. Reserved Instance reporting

Correct Answer: C

QUESTION 11 Which AWS service can be used to privately store and manage versions of source code?

A. AWS CodeCommit

B. AWS CodeBuild

C. AWS CodePipeline

D. AWS CodeStar

Correct Answer:A

QUESTION 12 A company is building an application that requires the ability to send, store, and receive messages between application components. The company has another requirement to process messages first-in.first-out (FIFO) order.Which AWS service should the company use?

A. AWS Step Functions

B. Amazon Simple Notification Service (Amazon SNS)

C. Amazon Simple Queue Service (Amazon SQS)

D. Amazon Kinesis Data Streams

Correct Answer:C

QUESTION 13 According to the AWS shared responsibility model, which of the following are AWS responsibilities? (SelectTWO.)

A. Security of application data

B. Network infrastructure and virtualization of infrastructure

C. Physical security of hardware

D. Guest operating systems

E. Credentials and policies

Correct Answer:BC

QUESTION 14 Which AWS service or feature provides Information about ongoing or upcoming scheduled events that can affect an AWS account?

Toggle Cont

A. AWS Personal Health Dashboard

B. AWS Config

C. AWS Systems Manager

D. AWS Trusted Advisor

Correct Answer: A

QUESTION 15 A company needs to migrate an existing on-premises database to the AWS Cloud. The company must be able to install custom software on the database instance. Which AWS service can the company use to meet these requirements?

A. Amazon DynamoDB

B. Amazon EC2

C. Amazon Redshift

D. Amazon RDS

Correct Answer:D

QUESTION 16 A cloud practitioner is developing a disaster recovery plan and intends to replicate data between multiple geographic areas. Which of the following meets these requirements?

A. AWS Accounts

B. Availability Zones

C. AWS Regions

D. Edge locations

Correct Answer: C

QUESTION 17 Which AWS service can be used to run Amazon EC2 instances on-premises at a user site?

A. Amazon CloudFront

B. AWS Snowball Edge

C. Lambda@Edge

D. AWS Lambda

Correct Answer:B

QUESTION 18 Which AWS service enables users to create copies of resources across AWS Regions?

A. Amazon ElastiCache

B. AWS CloudTrail

C. AWS CloudFormation

D. AWS Systems Manager

Correct Answer: C

QUESTION 19 A company needs to perform a one-time migration of 40 TB of data from its on-premises storage servers to Amazon S3. The transfer must happen as quickly as possible while keeping costs to a minimum. The company has 100 Mbps internet connectivity. Which AWS service will meet these requirements?

A. AWS Direct Connect

B. AWS Snowball

C. AWS Storage Gateway

D. Amazon S3 Transfer Acceleration

Correct Answer:B

QUESTION 20 A company wants to ensure that two Amazon EC2 instances are in separate data centres with minimal communication latency between the data centres. How can the company meet this requirement?

A. Place the EC2 instances in two separate Availability Zones within the same AWS Region.

B. Place the EC2 instances in two separate AWS Regions connected with a VPC peering connection.

C. Place one EC2 instance on premises and the other in an AWS Region Then connect them by using an AWS VPN connection.

D. Place both EC2 instances in a placement group for dedicated bandwidth.

Correct Answer:A

QUESTION 21 Which AWS service or feature enables users to block the incoming or outgoing traffic associated with specific IP addresses flowing through a VPC?

A. Security groups

B AWS Identity and Access Management (1AM)

C. Network ACLs

D. AWS WAF

Correct Answer:C

QUESTION 22 Which of the following is a fully managed graph database service on AWS?

A. Amazon Aurora

B. Amazon Neptune

C. Amazon FSx

D. Amazon DynamoDB

Correct Answer: B

QUESTION 23 A company needs to migrate its on-premises data to the AWS Cloud. The company requires elastic, highly optimised connectivity. Which AWS service meets these requirements?

A. Amazon S3 Glacier

B. AWS Backup

C. Amazon Elastic File System (Amazon EFS)

D. AWS Storage Gateway

Correct Answer:D

QUESTION 24 Which AWS service offers the LEAST expensive means of storing static images?

A. Amazon DynamoDB

B. AWS Snowball

C. Amazon S3

D. Amazon Elastic Block Store (Amazon EBS)

Correct Answer:C

QUESTION 25 Which AWS services or features help decrease network latency for a globally dispersed user base?( Select TWO.)

A. Amazon CloudFront

B. AWS Global Accelerator

C. Amazon VPC

D. Elastic Load Balancer

E. AWS Direct Connect

Correct Answer:AB

QUESTION 26 Which AWS service or feature allows a user to set up consolidated billing?

AWS Billing Management Console
AWS Cost and Usage Report
AWS Organizations
AWS Systems Manager

Correct Answer:C

QUESTION 27 What is an 1AM best practice for AWS account root user access keys?

A. Use root user credentials to access sensitive information stored on AWS.

B. Delete all root user access keys, if possible.

C. Allow the system administrator group to use the root user credentials for daily access.

D. Use root user credentials to access production database instances.

Correct Answer: B

QUESTION 28 Which security practices are the customer's responsibility under the AWS shared responsibility model? (Select TWO.)

A. Physical access to a data centre

B. Decommissioning of storage devices

C. Rotation of 1AM access keys

D. Patching of Amazon RDS instances

E. Encryption of Amazon Elastic Block Store (Amazon EBS) volumes

Correct Answer:AB

QUESTION 29 Which AWS service will provide a way to generate encryption keys that can be used to encrypt data?(Select TWO.)

A. Amazon Macie

B. AWS Certificate Manager

C. AWS Secrets Manager

D. AWS Key Management Service (AWS KMS)

E. AWS CloudHSM

Correct Answer: DE

QUESTION 30 Which AWS service provides the ability to detect inadvertent data leaks of personally identifiable information (Pll) and user credential data?

A. Amazon Macie

B. Amazon GuardDuty

C. Amazon Inspector

D. AWS Shield

Correct Answer:A

QUESTION 31 A company is running a self-managed Oracle database directly on Amazon EC2 for its steady-state database. The company wants to reduce computer costs. Which option should the company use to maximise savings over a 3-year term?

A. EC2 Dedicated Instances

B. EC2 Spot Instances

C. EC2 On-Demand Instances

D. EC2 Reserved Instances

Correct Answer:D

QUESTION 32 Which AWS service or feature can be used to monitor for potential disk write spikes on a system running on Amazon EC2?

A. AWS CloudTrail

B. Amazon CloudWatch

C. AWS Personal Health Dashboard

D. AWS Trusted Advisor

Correct Answer:B

QUESTION 33 Which of the following IT tasks does AWS perform to offload a company's IT resource management responsibilities? (Select TWO.)

A. Backing up databases

B. Installing operating systems

C. Configuring operating system firewalls

D. Setting up access controls for data

E. Configuring database user accounts

Correct Answer:AB

QUESTION 34 Which of the following should be considered when performing a Total Cost of Ownership (TCO) analysis?

A. Data centre overhead

B. Currency fluctuations

C. Data security model

D. Network port utilisation

Correct Answer:A

QUESTION 35 A company's procurement department wants volume discounts on AWS services for the company, but numerous departments have separate AWS accounts.Which AWS service or tool can the company use to receive volume discounts across multiple AWSaccounts?

A. Cost Explorer

B. AWS Organizations

C. AWS Budgets

D. AWS Cost and Usage Report

Correct Answer:B

QUESTION 36 Which actions are the responsibility of AWS. according to the AWS shared responsibility model? (Select TWO.)

A. Patching the operating system on Amazon EC2 instances

B. Securing the virtualization layer

C. Patching the operating system on Amazon RDS instances

D. Enforcing a strict password policy for 1AM users

E. Configuring security groups and network ACLs

Correct Answer:BC

QUESTION 37 A user needs a relational database but does not have the resources to manage the hardware, resiliency,and replication. Which AWS service option meets the user's requirements?

A. Run MySQL on Amazon Elastic Container Service (Amazon ECS).

B. Choose Amazon RDS for MySQL.

C. Run MySQL on Amazon EC2.

D. Choose Amazon ElastiCache for Redis.

Correct Answer:B

QUESTION 38 During a compliance review, one of the auditors requires a copy of the AWS SOC 2 report. Which service should be used to submit this request?

A. AWS Artefact

B. AWS Personal Health Dashboard

C. AWS Trusted Advisor

D. Amazon S3

Correct Answer:A

QUESTION 39 How can AWS enable a company to control expenses as an application's usage changes unpredictably?

A. AWS will refund the cost difference if a customer moves to larger servers.

B. Spot instances will automatically be used if the price is lower than on-demand instances.

C. Amazon CloudWatch will automatically predict what resources are needed.

D. The application can be built to scale up or down automatically as resources are needed

Correct Answer:D

QUESTION 40 Which aspect of AWS infrastructure enables global deployment of compute and storage?

A. Regions

B. Availability Zones

C. Tags

D. Resource groups

Correct Answer:A

QUESTION 41 Which Amazon EC2 pricing model provides the MOST cost savings for an always-up, right-sized database server running for a project that will last 1 year?

A. On-Demand Instances

B. Convertible Reserved Instances

C. Standard Reserved Instances

D. Spot Instances

Correct Answer: C

QUESTION 42 A user is building a simple online calculator and wants to use AWS compute as cost-effectively as possible. The calculator must be highly available for even a small number of users.Where should the code for calculations be hosted?

A. In an AWS Lambda function

B. On an Amazon EC2 Memory Optimised Reserved Instance

C. On an Amazon EC2 Compute Optimised Reserved Instance

D. On an Amazon EC2 Compute Optimised Spot Instance

Correct Answer:A

QUESTION 43 A user wants to transport data between AWS and an on-premises environment using a private network connection. Which AWS service or feature can be used to meet these requirements?

A. NAT gateway

B. Amazon VPC

C. AWS Direct Connect

D. Internet gateway

Correct Answer:C

QUESTION 44 According to the AWS shared responsibility model, the customer is responsible for maintaining:

A. physical access to the AWS network.

B. data encryption in Amazon S3.

C. the patching of the host operating system.

D. the operating system for Amazon DynamoDB

Correct Answer: B

QUESTION 45 Which AWS service is designed to help users who want to use machine learning for natural language processing (NLP) but do not have experience in machine learning?

A. Amazon SageMaker

B. Amazon Comprehend

C. AWS Deep Learning AMIs (DLAMI)

D. Amazon Rekognition

Correct Answer:B

QUESTION 46 What is one of the core principles to follow when designing a highly available application in the AWS Cloud?

A. Design using a serverless architecture.

B. Design AWS Auto Scaling into every application.

C. Assume that all components within an application can fail.

D. Design all components using open-source code

Correct Answer:C

QUESTION 47 A user needs to determine whether an Amazon EC2 instance's security groups were modified in the last month. How can the user see if a change was made?

A. Use AWS Identity and Access Management (IAM) to see which user or role changed the security group.

B Use Amazon EC2 to see if the security group was changed.

C. Use AWS CloudTrail to see if the security group was changed.

D. Use Amazon CloudWatch to see if the security group was changed.

Correct Answer:A

QUESTION 48 A company is building distributed, loosely coupled applications. The company needs to publish messages from applications and immediately Which AWS service can the company use to meet these requirements?

A. Amazon Simple Notification Service (Amazon SNS)

B. Amazon S3

C. Amazon Simple Email Service (Amazon SES)

D. Amazon Simple Queue Service (Amazon SQS)

Correct Answer:D

QUESTION 49 What is an IAM best practice for AWS account root user access keys?

A. Delete all root user access keys, if possible.

B. Allow the system administrator group to use the root user credentials for daily access.

C. Use root user credentials to access sensitive information stored on AWS.

D. Use root user credentials to access production database instances.

Correct Answer: C

QUESTION 50 An administrator observed that multiple AWS resources were deleted yesterday. Which AWS service will help identify the cause and determine which user deleted the resources?

A. Amazon GuardDuty

B. AWS CloudTrail

C. Amazon Inspector

D. AWS Trusted Advisor

Correct Answer:A

QUESTION 51 A company wants to expand from one AWS Region into a second AWS Region. What does the company need to do to start supporting the new Region?

A. Contact an AWS Account Manager to sign a new contract

B. Begin deploying resources in the second Region

C. Move an Availability Zone to the new Region

D. Download the AWS Management Console for the new Region

Correct Answer:B

QUESTION 52 A user wants to move legacy applications to the AWS Cloud to reduce the total cost. Which option is the MOST cost-effective according to best practices?

A. Right-size the Amazon EC2 instances to prevent over-provisioning in terms of compute and memory.

B. Rewrite the legacy applications in an open-source language, such as Python.

C. Migrate relational databases to Amazon DynamoDB

D. Reserve a data centre facility with an upfront payment, which provides an additional discount

Correct Answer:A

QUESTION 53 Under the AWS shared responsibility model, which of the following is the customer's responsibility?

A. Patching guest OS and applications

B. Physical and environmental controls

C. Patching and fixing flaws in the infrastructure

D. Configuration of AWS infrastructure devices

Correct Answer:C

QUESTION 54 Which AWS feature or service provides visibility into abuse events that have been reported on a given AWS account?

A. AWS Trusted Advisor

B. AWS Personal Health Dashboard

C. Amazon Inspector

D. Amazon GuardDuty

Correct Answer:D

QUESTION 55 Which AWS Cloud service provides performance recommendations for an AWS account?

A. AWS Trusted Advisor

B. Amazon Inspector

C. Amazon CloudWatch

D. AWS CloudTrail

Correct Answer:A

QUESTION 56 A company needs to allocate AWS costs across three different departments running in a single VPC. Each department has a number of Amazon EC2 instances dedicated to the applications fnar are specific to the given department.How can the costs be allocated across the three departments?

A. Create an AWS IAM account with billing access and use the AWS CLI to view EC2 instance use statistics.

B. Enable billing alerts through Amazon CloudWatch

C. Have each department tag their resources, then run a cost allocation report.

D. Configure three VPCs. allocating one tor each department

Correct Answer:C

QUESTION 57 Which AWS service should be used to monitor Amazon EC2 instances for CPU and network utilisation?

A. Amazon Inspector

B. Amazon CloudWatch

C. AWS CloudTrail

D. AWS Config

Correct Answer:B

QUESTION 58 A company is designing a new stateful application to run on AWS. Which design patterns will help reduce risk? (Select TWO.)

A company is designing a new stateful application to run on AWS. Which design patterns will help reduce risk? (Select TWO.)

A. Consume compute resources using Amazon EC2 Spot instance types.

B. Consolidate application resources into one or two large instance types to minimise the number of components to be managed.

C. Build a microservices-based architecture to break out application services into containers for the application tierB. Use Amazon S3 with a bucket policy that ensures the least restrictive access to the data.

D. Separate the database tier from the application tier using Amazon RDS.

.Correct Answer:BC

QUESTION 59 Which of the following is Amazon Aurora compatible with? (Select TWO.)

A. Microsoft SOL Server

B. Oracle

C. MahaDB

D. MySQL

E. PostgreSQL

Correct Answer:DE

QUESTION 60 Which of the following acts as an instance-level firewall to control inbound and outbound access?

A. Network access control list

B. AWS Trusted Advisor

C. Security groups

D. Virtual private gateways

Correct Answer:C

QUESTION 61 A company has launched a product that requires private connectivity from an on-premises network to a VPC. Which AWS service or functionality should the company use?

A. AWS Direct Connect

B. Internal gateway

C. VPC peering

D. NAT gateway

Correct Answer:B

QUESTION 62 Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?

A. The customer is responsible for rotating keys.

B. IAM access and secret keys are static, so there is no need to rotate them

C. AWS will rotate the keys whenever required.

D. The AWS Support team will rotate keys when requested by the customer.

Correct Answer:A

QUESTION 63 Which of the following services has a primarily encryption-related purpose?

A. AWS Security Token Service (AWS STS)

B. Amazon EMR

C. Amazon Macie

D. AWS Key Management Service (AWS KMS)

Correct Answer:D

QUESTION 64 Which are customer responsibilities when using Amazon EC2? (Select TWO.)

A. Guest operating system firewall configuration

B. Hypervisor-level software patching

C. Underlying hardware maintenance

D. File-system-level encryption

E. Physical security at data centre facilities

Correct Answer:AB

QUESTION 65 Which AWS feature enables users to categorise and track their AWS costs?

A. Cost Allocation Tags

B. AWS Price List API

C. AWS Trusted Advisor

D. AWS Organizations

Correct Answer:C

QUESTION 66 Which AWS service or feature can be used to allow users access to compliance reports as self-service downloads?

A. AWS Security Hub

B. AWS Service Catalog

C. AWS Artefact

D. AWS Support Center

Correct Answer:A

QUESTION 67 An external auditor needs to verify the compliance and security of the AWS data centre facilities where a company's data is stored.How should this request be addressed?

A. Contact an AWS technical account manager and request access to the next scheduled facility tour.

B. Access the AWS Artefact portal and download the required reports to provide to the auditor.

C. Create a support case using the AWS account root user credentials requesting that a concierge accompany the auditor to the facility.

D. Access the AWS Artefact portal and create an access URL for the auditor to download the required reports,

Correct Answer:C

QUESTION 68 A user needs to demonstrate which AWS services are compliant with the Payment Card Industry Data Security Standard (PCI DSS). Which AWS resource can be used to meet this requirement?

A. AWS Artefact

B. AWS Systems Manager

C. AWS Secrets Manager

D. AWS Certificate Manager

Correct Answer:D

QUESTION 69 A company wants to ensure that AWS Management Console users are meeting password complexity requirements.How can the company configure password complexity?

A. Using an AWS Organizations service control policy (SCP)

B. Using an AWS IAM user policy

C. Using an AWS IAM account password policy

D. Using an AWS Security Hub managed insight

Correct Answer:A

QUESTION 70 A user wants to securely automate the management and rotation of credentials that are shared between applications, while spending the least amount of time on managing tasks. Which AWS service or feature can be used to accomplish this?

A. AWSCloudHSM

B. AWS Secret Manager

C. AWS Key Management Service (AWS KMS)

D. Server-side encryption

Correct Answer:B

QUESTION 71 Which AWS service can be used to provide an on-demand, cloud-based contact centre?

A. AWS Direct Connect

B. AWS Support Center

C. Amazon Connect

D. AWS Managed Services

Correct Answer:C

QUESTION 72 A company is using Amazon Elastic Container Service (Amazon ECS) for a development environment AWS is responsible for which Amazon ECS components? (Select TWO.)

A. IAM

B. Guest operating system

C. Network rules

D. Host platform

E. Physical infrastructure

Correct Answer: AB

QUESTION 73 Which services can be used to deploy applications on AWS? (Choose two.)

A. AWS Config

B. AWS OpsWorks

C. Amazon Kinesis

D. AWS Elastic Beanstalk

E. AWS Application Discovery Service

Correct Answer:DE

QUESTION 74 What tool enables customers without an AWS account to estimate costs for almost all AWS services?

A. TCO Calculator

B. AWS Budgets

C. Cost Explorer

D. Simple Monthly Calculator

Correct Answer:C

QUESTION 75 Which component must be attached to a VPC to enable inbound Internet access?

A. VPN connection

B. NAT gateway

C. VPC endpoint

D. Internet gateway

Correct Answer:A

QUESTION 76 Which pricing model would result in maximum Amazon Elastic Compute Cloud (Amazon EC2) savings for a database server that must be online for one year?

A. Spot Instance

B. Partial Upfront Reserved Instance

C. On-Demand Instance

D. No Upfront Reserved Instance

Correct Answer: B

QUESTION 77 A company has a MySQL database running on a single Amazon EC2 instance. The company now requires higher availability in the event of an outage.Which set of tasks would meet this requirement?

A. Add an Application Load Balancer in front of the EC2 instance

B. Configure EC2 Auto Recovery to move the instance to another Availability Zone

C. Enable termination protection for the EC2 instance to avoid outages

D. Migrate to Amazon RDS and enable Multi-AZ

Correct Answer:D

QUESTION 78 Which of the following tasks is required to deploy a PCI-compliant workload on AWS?

A. Use an AWS service that is in scope for PCI compliance and apply PCI controls at the application layer

B. Use any AWS service and implement PCI controls at the application layer

C. Use an AWS service that is in-scope for PCI compliance and raise an AWS support ticket to enable PCI compliance at the application layer

D. Use any AWS service and raise an AWS support ticket to enable PCI compliance on that service

Correct Answer:A

QUESTION 79 A company wants to connect to AWS over a private low-latency connection from its remote office. What is the recommended method to meet these requirements'?

A. Create a VPN tunnel

B. Connect across the public internet

C. Use AWS Direct Connect

D. Use VPC peering to create a connection

Correct Answer:C

QUESTION 80 What are the benefits of consolidated billing for AWS Cloud services? (Select TWO.)

A. A minimal additional tee for use

B. Instalment payment options

C. Custom cost usage and budget creation

D. Volume discounts

E. One bill for multiple accounts

Correct Answer:DE

QUESTION 81 An online retail company has seasonal sales spikes several times a year, primarily around holidays Demand is lower at other times. The company finds it difficult to predict the increasing infrastructure demand for each season.Which advantages of moving to the AWS Cloud would MOST benefit the company? (Select TWO )

A. Elasticity

B. AWS service quotas

C. Global footprint

D. AWS shared responsibility model

E. Pay-as-you-go pricing

Correct Answer:AB

QUESTION 82 Which AWS service or tool should a company use to centrally request and track service limit increases?

A. AWS Config

B. AWS Service Catalog

C. Service Quotas

D. AWS Budgets

Correct Answer:C

QUESTION 83 Which AWS services after compute capabilities? (Select TWO.)

A. Amazon S3

B. Amazon EC2

C. AWS lambda

D. Amazon Elastic Block Store (Amazon EBS)

E. Amazon Cognito

Correct Answer:BC

QUESTION 84 A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses an Application Load Balancer to distribute traffic to multiple Amazon EC2 instances. Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks?

A. Security groups

B. AWS Shield

C. AWS WAF

D. Network ACLs

Correct Answer:B

QUESTION 85 A company learns that a user's API key has been exposed in a public code repository. The user has access to sensitive data.What is the FIRST step the company should take to ensure the security of its data?

A. Deactivate the user’s API key in AWS Identity and Access Management (IAM)

B. Email the user to inform them of their mistake

C. Create a new API key for the user in AWS Identity and Access Management (1AM).

D. Review the API activity of the key in AWS CloudTrail.

Correct Answer:A

QUESTION 86 Which AWS service provides the capability to view end-to-end performance metrics and troubleshoot distributed applications?

A. AWSCIoud9

B. AWS CodeStar

C. AWSX-Ray

D. AWS Cloud Map

Correct Answer:C

QUESTION 87 AnyCompany recently purchased Example Corp Both companies use AWS resources, and AnyCompany wants a single aggregated bill Which option allows AnyCompany to receive a single bill?

A. Example Corp. must submit a request to its AWS solutions architect or AWS technical account manager to link the accounts and consolidated billing

B. Migrate the Example Corp VPCs, Amazon EC2 instances, and other resources into the AnyCompany AWS account

C. AnyCompany must create a new support case in the AWS Support Center requesting that both bills be combined

C. Send an invitation to join the organisation from AnyCompany’s AWS Organizations master account to Example Corp

Correct Answer: B

QUESTION 88 Which AWS service can be used to turn text into lite-like speech?

A. Amazon Transcribe

B. Amazon Rekognition

C. Amazon Lex

D. Amazon Polly

Correct Answer:D

QUESTION 89 Which of the following is the customer's responsibility when using Amazon RDS?

A. Patching the operating system of underlying hardware

B. Replacing failed DB instances

C. Controlling traffic to and from the database through security groups

D Running backups that enable point-in-time recovery of a DB instance

Correct Answer:B

QUESTION 90 Which AWS service or feature is used to send both text and email messages from distributed applications?

A. Amazon Simple Queue Service (Amazon SQS)

B. Amazon Simple Notification Service (Amazon SNS)

C. Amazon Simple Email Service (Amazon SES)

D. Amazon CloudWatch alerts

Correct Answer:A

QUESTION 91 A company needs to perform data processing once a week that typically lakes about 5 hours to complete.Which AWS service should the company use for this workload?

A. Amazon EC2

B. AWS CodeDeploy

C. AWS Lambda

D. AWS Wavelength

Correct Answer:C

QUESTION 92 A company has a compliance requirement to encrypt data in transit and at rest. The company is serving the content through Amazon EC2 instances behind an Elastic Load Balancer and is storing data in Amazon Elastic Block Store (Amazon EBS) volumes. Which combination of AWS services should the company use to stay compliant with this requirement? (Select TWO )

A. Amazon GuardDuty

B. AWS Key Management Service (AWS KMS)

C. AWS Shield

D. AWS Certificate Manager (ACM)

E. AWS Secrets Manager

Correct Answer:BD

QUESTION 93 Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?

A. Amazon CloudFront

B. Amazon Route 53

C. Amazon GuardDuty

D. AWS Trusted Advisor

Correct Answer: B

QUESTION 94 Which AWS service allows customers to purchase unused Amazon EC2 capacity at an often discounted rate?

A. Spot Instances

B. Reserved Instances

C. On-Demand Instances

D. Dedicated Instances

Correct Answer:A

QUESTION 95 A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross-site scripting Which AWS service should the company use?

A. Amazon GuardDuty

B. AWS Trusted Advisor

C. AWS WAF

D. Amazon Inspector

Correct Answer: C

QUESTION 96 Which of the following Amazon EC2 pricing models allows customers to use existing server-bound software licences?

A On-Demand Instances

B. Spot instances

C. Reserved instances

D. Dedicated Hosts

Correct Answer:A

QUESTION 97 Which AWS service automatically handles application health monitoring?

A. Amazon API Gateway

B. AWSLambda

C. AWS Elastic Beanstalk

D. AWSConfig

Correct Answer:C

QUESTION 98 Which AWS service or feature can be used to prevent SQL injection attacks?

A. Security groups

B. Network ACLs

C. IAM policy

D. AWS WAF

Correct Answer:D

QUESTION 99 Which AWS Cloud design principles can help increase reliability? (Select TWO.)

A. Testing recovery procedures

B. Automatically recovering from failure

C. Using monolithic architecture

D. Measuring overall efficiency

E. Adopting a consumption model

Correct Answer:AB

QUESTION 100 Fault tolerance refers to:

A. how well and how quickly an application’s environment can have lost data restored

B. the ability of an application to accommodate growth without changing design

C. how secure your application is

D. the built-in redundancy of an applications components

Correct Answer:A

QUESTION 101 What can be used to automate and manage secure, well-architected, multi-account AWS environments?

A. AWS Control Tower

B. AWS shared responsibility model

C. AWS Security Hub

D. AWS Well-Architected Tool

Correct Answer:B

QUESTION 102 A company is building an application that needs to deliver images and videos globally with minimal latency.Which approach can the company use to accomplish this in a cost effective manner?

A. Store the content on Amazon S3 and enable S3 cross-region replication

B. Implement a VPN across multiple AWS Regions.

C. Deliver the content through Amazon CloudFront

D. Deliver the content through AWS PrivateLink.

Correct Answer: C

QUESTION 103 How should a web application be deployed to ensure high availability in the AWS Cloud?

A. Deploy multiple instances of the application in a single Availability Zone

B. Deploy multiple instances of the application in multiple Availability Zones.

C. Deploy the application to a compute-optimised Amazon EC2 instance in a single Availability Zone.

D. Deploy the application in one Amazon EC2 instance in an Auto Scaling group

Correct Answer: B

QUESTION 104 Which AWS Trusted Advisor check is available to all AWS users?

A. Core checks

B. All checks

C. Fault tolerance checks

D. Cost optimization checks

Correct Answer:D

QUESTION 105 The AWS 1AM best practice for granting least privilege is to.

A. require multi-factor authentication (MFA) for all 1AM users

D. requires each 1AM user who has different permissions to have multiple passwords.

C. apply an 1AM policy to an IAN1 group and limit the size of the group.

D. apply an 1AM policy only to IAM users who require it

Correct Answer:C

QUESTION 106 A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud.Which service should be used to deploy the application?

A. AWS CloudFormation

B. Amazon EC2

C. AWS Elastic Beanstalk

D. AWS OpsWorks

Correct Answer:C

QUESTION 107 A company needs a storage solution that 1. Is low-cost. 2. Is for infrequently accessed data 3. Quickly accesses data when required. 4. Does not require data lo be resilient Which Amazon S3 storage option should the company use?

A. S3 Standard

B. S3 Standard-Infrequent Access (S3 Standard-IA)

C. S3 One Zone-Infrequent Access (S3 One Zone-IA)

D. S3 Glacier

Correct Answer:B

QUESTION 108 Which AWS service can be used to retrieve compliance reports on demand?

A. AWS Artefact

B. AWS Secrets Manager

C. AWS Security Hub

D. AWS Certificate Manager

Correct Answer:A

QUESTION 109 Under the AWS shared responsibility model, which task is the customer's responsibility when managing AWS Lambda functions?

A. Maintaining server and operating systems

B. Creating versions of Lambda functions

C. Scaling Lambda resources according to demand

D. Updating the Lambda runtime environment

Correct Answer:B

QUESTION 110 The AWS global infrastructure consists of Regions, Availability Zones and what else?

A. VPCs

B. Dark fibre network links

C. Data centres

D. Edge locations

Correct Answer:C

QUESTION 111 Which AWS services can be used to set up NoSQL databases? (Select TWO.)

A. Amazon DynamoDB

B. Amazon DocumentDB (with MongoDB compatibility)

C. Amazon Redshift

D. Amazon Aurora

E. Amazon S3

Correct Answer:AB

QUESTION 112 Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceeds a certain threshold?

A. AWS Budgets

B. Cost Explorer

C. AWS Cost and Usage Report

D. AWS CloudTrail

Correct Answer:A

QUESTION 113 Which statement is true about AWS global infrastructure?

A. Availability Zones can span multiple AWS Regions.

B. AWS Regions consist of multiple Availability Zones.

C. A VPC can have different subnets in different AWS Regions.

D. A single subnet can span multiple Availability Zones.

Correct Answer:B

QUESTION 114 An external auditor has requested that a company provide a list of all its 1AM users, including the status of users' credentials and access keys What is the SIMPLEST way to provide this information?

A. Create an 1AM user account for the auditor, granting the auditor administrator permissions

B. Take a screenshot of each user’s page in the AWS Management Console, then provide the screenshots to the auditor

C. Download the AWS Trusted Advisor report, then provide the report to the auditor

D. Download the 1AM credential report then provide the report to the auditor.

Correct Answer:D

QUESTION 115 According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

A. Hard code an 1AM user’s secret key and access key directly in the application, and upload the file.

B. Store the 1AM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the tile.

C. Modify the S3 bucket policy so that any service can upload to it at any time

D. Have the EC2 instance assume a role to obtain the privileges to upload the file.

Correct Answer:D

QUESTION 116 Which tool can be used to identify scheduled changes to the AWS infrastructure?

A. AWS Trusted Advisor

B. AWS Personal Health Dashboard

C. Billing Dashboard

D. AWS Config

Correct Answer:A

QUESTION 117 A user can increase operational efficiency in the AWS Cloud by:

A. right-sizing AWS infrastructure.

B. leveraging AWS managed services.

C. manually creating all necessary resources.

D. managing their own software licences.

Correct Answer:B

QUESTION 118 A company wants to be nodded when its AWS Cloud costs or usage exceed defined thresholds. Which AWS service will support these requirements?

A. Cost Explorer

B. AWS CloudTrail

C. AWS Budgets

D. Amazon Made

Correct Answer: C

QUESTION 119 A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?

A. Amazon CloudWatch

B. Amazon Inspector

C. AWS 1AM

D. AWS CloudTrail

Correct Answer:D

QUESTION 120 A workload on AWS will run for the foreseeable future by using a consistent number of Amazon EC2 instances. What pricing model will minimise cost while ensuring that compute resources remain available?

A. Reserved Instances

B Dedicated Hosts

C. On-Demand Instances

D. Spot instances

Correct Answer:A

QUESTION 121 A company recently deployed an Amazon RDS instance in its VPC. The company needs to implement a stateful firewall to limit traffic to the private corporate network. Which AWS service or feature should the company use to limit network traffic directly to its RDS instance?

A. Security groups

B. Network ACl

C. AWS WAF

D. Amazon GuardDuty

Correct Answer:B

QUESTION 122 A company is requesting Payment Card Industry (PCI) reports that validate the operating effectiveness of AWS security controls.How should the company obtain these reports?

A. Contact AWS Support.

B. Download reports from AWS Security Hub

C. Download reports from AWS Artefact.

D. Contact an AWS technical account manager (TAM)

Correct Answer:C

QUESTION 123 A bank needs to store recordings of calls made to its contact centre for 6 years. The recordings must be accessible within 48 hours from the time they are requested. Which AWS service will provide a secure and cost-effective solution for retaining these files?

A. Amazon S3 Glacier

B. Amazon DynamoDB

C. Amazon Connect

D. Amazon ElastiCache

Correct Answer:A

QUESTION 124 Which AWS service provides business analytics that enable users to create and publish interactive dashboards?

A. Amazon Kinesis

B. Amazon CloudWatch

C. Amazon QuickSight

D. AWS X Ray

Correct Answer:C

QUESTION 125 A web developer is concerned that a DDoS attack could target an application. Which AWS services or features can help protect against such an attack? (Choose two.)

A. Amazon CloudFront

B. AWS Support Center

C. AWS Service Health Dashboard

D. AWS Shield

E. AWS CloudTrail

Correct Answer:DE

QUESTION 126 Which AWS service gives users on-demand, self-service access to AWS compliance control reports?

A. AWS Config

B. Amazon GuardDuty

C. AWS Artefact

D. AWS Trusted Advisor

Correct Answer:C

techinsightslabs

AWS Certified Cloud Practitioner (CLF-C01)Exam F

Solverwp- WordPress Theme and Plugin