AWS Certified Cloud Practitioner (CLF-C01)Exam H

QUESTION 1 Which AWS service helps users create three-dimensional applications quickly without requiring any specialised programming or three-dimensional graphics expertise?

A. Amazon Rekognition

B. AWS RoboMaker

C. Amazon Sumerian

D. Amazon GameLift

Correct Answer:A

QUESTION 2 A development learner wants to deploy multiple test environments for an application in a fast, repeatable manner. Which AWS service should I learn to use?

A. Amazon EC2

B. AWS Cloudformation

C. Amazon Elastic Container Service (Amazon ECS)

D. Amazon QuickSight

Correct Answer:C

QUESTION 3 A company uses AWS Direct Connect and wants to establish connectivity that spans VPCs across multiple AWS Regions.Which AWS service or feature should the company use to meet these requirements?

A. AWS PrivateLink

B. AWS Transit Gateway

C. Amazon Connect

D. Amazon Route 53

Correct Answer:A

QUESTION 4 Which duty is a responsibility of AWS under the AWS shared responsibility model?

A. Identity and access management

B. Server-side encryption (SSE)

C. Maintaining physical hardware

D. Firewall configuration

Correct Answer:C

QUESTION 5 Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?

A. Amazon CloudWatch Logs

B. VPC Flow Logs

C. AWS CloudTrail

D. AWS Identity and Access Management (IAM)

Correct Answer:B

QUESTION 6 Which of the following enable a company to reserve capacity on AWS? (Select TWO.)

A. AWS services in scope

B. Zonal Reserved Instances

C. On-Demand Capacity Reservations

D. Savings Plans

E. Reserved instance reporting

Correct Answer:CD

QUESTION 7 A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The company has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time. Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?

A. AWS Transit Gateway

B. VPC endpoints

C. Amazon Route 53

D. AWS Secrets Manager

Correct Answer:B

QUESTION 8 Which of the following is an AWS value proportion that describes a user's ability to scale infrastructure based on demand?

A. Resource elasticity

B. Speed of innovation

C. Decoupled architecture

D. Global deployment

Correct Answer:A

QUESTION 9 An application that runs on Amazon EC2 needs to accommodate a flexible workload that can run or terminate at any time of day.Which pricing model will accommodate these requirements at the LOWEST cost?

A. Reserved Instances

B. Spot Instances

C. On-Demand Instances

D. Dedicated Host

Correct Answer:B

QUESTION 10 A company wants to implement an automated security assessment of the scanty and network accessibility of its Amazon EC2 instances.Which AWS service can be used To accomplish this?

A. Amazon Inspector

B. AWSConfig

C. Amazon GuardDuty

D. AWS Trusted Advisor

Correct Answer:C

QUESTION 11 A security engineer wants a single-tenant AWS solution to create, control, and manage their own cryptographic keys to meet regulatory compliance requirements for data security. Which AWS service should the engineer use?

A. AWS Key Management Service (AWS KMS)

B. AWS CloudHSM

C. AWS Certificate Manager (ACM)

D. AWS Systems Manager

Correct Answer: B

QUESTION 12 Which AWS service provides a report that enables users to assess AWS infrastructure compliance?

A. Amazon DocumentDB (with MongoDB compatibility)

B. AWS Certificate Manager (ACM)

C. AWS Artefact

D. AWS Trusted Advisor

Correct Answer:B

QUESTION 13 What does Amazon CloudFront provide?

A. Secure delivery of data, videos application. and APIs to users globally with low latency

B. Ability to directly manage traffic globally through a variety of routing types, including latency- based routing, geo ONS. Geo Proximity, and weighted round robin

C. Automatic scaling for all resources to power an application from a single unified interface

D. Automatic distribution of incoming application traffic across multiple targets, such as Amazon EC2 instances, containers. IP addresses, and AWS Lambda functions

Correct Answer:C

QUESTION 14 A company wants to use an AWS service to continuously monitor the health of its application endpoints based on proximity to application users. The company also needs to route traffic to healthy Regional endpoints and to improve application availability and performance. Which service will meet these requirements?

A. Amazon Inspector

B. AWS Global Accelerator

C. Amazon CloudWatch

D. AWS Cloud Formation

Correct Answer: B

QUESTION 15 Which of the following are general AWS Cloud design principles described in the AWS Well- Architected Framework? (Select TWO.)

A. Provision more capacity than a workload is expected to need.

B. Drive architecture design based on data collected about the workload behaviour and requirements.

C. Consolidate key components into monolithic architectures.

D. Test systems at production scale.

E. Make AWS Cloud architectural decisions static, one-time events.

Correct Answer:CD

QUESTION 16 Which of the following are benefits of using the AWS Cloud? (Select TWO )

A. 100% fault tolerance

B. Total control over underlying infrastructure

C. Ability to go global quickly

D. Fast provisioning of IT resources

E. Outsourcing all application coding to AWS

Correct Answer: BC

QUESTION 17 Which tool should a developer use to integrate AWS service features directly into an application?

A. AWS CodeDeploy

B. AWS Software Development Kit

C. AWS Lambda

D. AWS Batch

Correct Answer:B

QUESTION 18 Which tasks require the use of the AWS account root user? (Select TWO )

A. Changing AWS Support plans

B. Changing billing currency

C. Launching a new Amazon EC2 instance

D. Viewing AWS CloudTrail logs

E. Contacting AWS Support

Correct Answer: AB

QUESTION 19 A company's security policy requires the company to keep a record of all changes that are made to Amazon EC2 security groups. The record must include information about who made the change and when the change was made.Which AWS service will provide this information?

A. AWS Lambda

B. Amazon CloudWatch

C. AWS CloudTrail

D. AWS WAF

Correct Answer:C

QUESTION 20 Which design principles of the AWS Well-Architected Framework help increase reliability? (Select TWO.)

A. Enable traceability.

B. Automate security best practices

C. Automatically recover from failure

D. Scale horizontally to increase workload availability.

E. Keep people away from data

Correct Answer:CD

QUESTION 21 Which actions allow a company's security team to improve the security procedures for employees accessing AWS resources? (Select TWO )

A. Create IAM users for groups of employees to share

B. Create IAM users in different Availability Zones

C. Create IAM policies based on least privilege principles

D. Enable multi-factor authentication for privileged users

E. Specify an individual IAM user for each Amazon EC2 instance

Correct Answer: CD

QUESTION 22 How can users protect against distributed denial of service (DDoS) attacks in the AWS Cloud?

A. Configure a firewall.

B. Use Amazon CloudWatch monitoring.

C. Use Amazon Redshift

D. Monitor AWS CloudTrail logging

Correct Answer:A

QUESTION 23 A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in an Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to grow for years.What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?

A. On-Demand Instances

B. Spot Instances

C. Savings Plans

D. Dedicated Hosts

Correct Answer:A

QUESTION 24 A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access. What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?

A. EC2 key pairs

B. AWS Identity and Access Management (1AM)

C. AWS Systems Manager Session Manager

D. Network ACLs

Correct Answer:C

QUESTION 25 Which AWS services and features are provided to all customers at no charge? (Select TWO.)

A. Amazon Aurora

B. VPC

C. AWS Identity and Access Management (1AM)

D. Amazon SageMaker

E. Amazon Polly

Correct Answer: BC

QUESTION 26 A company's security team requires that all Amazon EC2 workloads use approved Amazon Machine Images (AMIs).Which AWS service should the company use to verify that the EC2 instances are using approved AMIs?

A company’s security

A. Amazon CloudWatch

B. AWS Config

C. Amazon Inspector

D. AWS Trusted Advisor

Correct Answer: B

QUESTION 27 Users are reporting latency when connecting to a website with a global customer base. Which AWS service will the following can an AWS customer use to launch reducing latency?

A. AWS Direct Connect

B. Amazon CloudFront

C. Amazon EC2 Auto Scaling

D. AWS Transit Gateway

Correct Answer:B

QUESTION 28 Which feature of AWS Auto Scaling will forecast future traffic to schedule changes in the number of Amazon EC2 instances at the appropriate times?

A. Predictive scaling

B. Scheduled scaling

C. Target tracking scaling

D. Step scaling

Correct Answer:A

QUESTION 29 A company has stopped all of its Amazon EC2 instances but monthly billing charges continue to occur. What could be causing this? {Select TWO.)

A. Operating system charges

B. Amazon Elastic Block Store (Amazon EBS) storage charges

C. Hardware charges

D. Input/output (I/O) charges

E. Elastic IP charges

Correct Answer: BE

QUESTION 30 Which AWS service gives users the ability to build interactive business intelligence dashboards that include machine learning insights?

A. Amazon Athena

B. Amazon Kendra

C. Amazon Redshift

D. Amazon QuickSight

Correct Answer:C

QUESTION 31 A company has an application that needs to invoke AWS services, including Amazon Kinesis Data Firehose, AWS Lambda, and AWS CodePipeline.Which AWS service should the company use to meet this requirement?

A. Amazon Kinesis Data Streams

B. Amazon Simple Email Service (Amazon SES)

C. Amazon EventBridge (Amazon CloudWatch Events)

D. AWS Database Migration Service (AWS DMS)

Correct Answer:A

QUESTION 32 A company wants to deploy its application on AWS by using Amazon EC2 instances. The application has flexible start times and end times. The application also can be restarted if necessary. Which instance purchasing option is the MOST cost-effective for this use case?

A. Savings Plans

B. Spot Instances

C. Reserved Instances

D. On-Demand Instances

Correct Answer:B

QUESTION 33 A VPC spans across:

A. Availability Zones.

B. AWS Regions.

C. edge locations.

D. corporate networks.

Correct Answer: A

QUESTION 34 A cloud practitioner wants information on the state of an existing AWS environment compared against established best practices.Which AWS services or features should the cloud practitioner use to obtain this information? (Select TWO.)

A. AWS Trusted Advisor

B. AWS Well-Architected Tool

C. AWS Artefact

D. AWS Solutions Library

E. AWS Personal Health Dashboard

Correct Answer: AB

QUESTION 35 Which AWS service requires the customer to patch the guest operating system?

A. AWS Lambda

B. Amazon Elasticsearch Service (Amazon ES)

C. Amazon ElastiCache

D. Amazon EC2

Correct Answer:D

QUESTION 36 A user is building an application on AWS that requires a backend database. The application requires access to the operating system of the instance where the database is installed in order to run scripts.Where should the database be hosted if the user's goal is to create minimum management overhead?

A. On Amazon EC2

B. On Amazon RDS

C. On Amazon DynamoDB

D. On Amazon S3

Correct Answer:A

QUESTION 37 Which of the following will help a user determine if they need to request a VPC service limit increase?

A. AWS Trusted Advisor

B. AWS Personal Health Dashboard

C. AWS Cost and Usage Report

D. AWS Service Catalog

Correct Answer:B

QUESTION 38 A company has a business-critical Amazon RDS for MySQL DB instance that resides in a single Availability Zone.Which solution will improve the availability of the DB instance?

A. Convert the DB instance into a multi-Region deployment.

B. Create an Amazon Simple Queue Service (Amazon SQS) queue in the same AWS Region to manage writes to the DB instance.

C. Create an Amazon Simple Queue Service (Amazon SQS) queue in a different AWS Region to manage writes to the DB instance

D. Convert the DB instance into a Multi-AZ deployment.

Correct Answer:D

QUESTION 39 How can a company maximise its application uptime in the AWS Cloud?

Deploy multiple copies of the application in different Availability Zones in the same subnet. Failover with Amazon Route 53.
Deploy multiple copies of the application across multiple Availability Zones within a VPC. Manually failover if one site is unavailable.
Deploy multiple copies of the application across multiple Availability Zones and load balance across each Availability Zone for automatic failover
Deploy the application to a single Availability Zone and fall back to a static page if the application is unavailable.

Correct Answer:C

QUESTION 40 A user needs to identify underutilised Amazon Elastic Block Store (Amazon EBS) volumes to reduce costs.Which AWS service or feature will meet this requirement?

A. AWS CloudTrail

B. AWS Trusted Advisor

C. AWS Budgets

D. AWS Personal Health Dashboard

Correct Answer: B

QUESTION 41 What does the AWS Cloud provide to increase the speed and agility of execution for customers? (Select TWO.)

A. Free Tier services usage

B. Access to AWS data centres

C. Lower resource provisioning cost

D. Readily available resources with low provisioning times

E. Scalable compute capacity

Correct Answer:CD

QUESTION 42 How can moving to the AWS Cloud help users reduce the time dedicated to operating system patching? (Select TWO )

A. Users have the ability to use licence-included Amazon EC2 instances.

B. Users can take advantage of AWS Systems Manager features.

C. Users can take advantage of managed services on AWS.

D. Users can outsource operating system patching to the AWS Support team.

E. AWS Professional Services will upgrade instances to the latest operating system versions.

Correct Answer:AB

QUESTION 43 Which of the following is an AWS value proportion that describes a user's ability to scale infrastructure based on demand?

A. Resource elasticity

B. Speed of innovation

C. Decoupled architecture

D. Global deployment

Correct Answer:A

QUESTION 44 An application that runs on Amazon EC2 needs to accommodate a flexible workload that can run or terminate at any time of day. Which pricing model will accommodate these requirements at the LOWEST cost?

A. Reserved Instances

B. Spot Instances

C. On-Demand Instances

D. Dedicated Host

Correct Answer:B

QUESTION 45 A company wants to implement an automated security assessment of the scanty and network accessibility of its Amazon EC2 instances. Which AWS service can be used To accomplish this?

A. Amazon Inspector

B. AWSConfig

C. Amazon GuardDuty

D. AWS Trusted Advisor

Correct Answer:C

QUESTION 46 A security engineer wants a single-tenant AWS solution to create, control, and manage their own cryptographic keys to meet regulatory compliance requirements for data security. Which AWS service should the engineer use?

A. AWS Key Management Service (AWS KMS)

B. AWS CloudHSM

C. AWS Certificate Manager (ACM)

D. AWS Systems Manager

Correct Answer:B

QUESTION 47 Which AWS service does AWS Snowball Edge natively support?

A. Amazon Aurora

B. AWS Server Migration Service (AWS SMS)

C. AWS Trusted Advisor

D. Amazon EC2

Correct Answer:B

QUESTION 48 Which AWS service provides a report that enables users to assess AWS infrastructure compliance?

A. Amazon DocumentDB (with MongoDB compatibility)

B. AWS Certificate Manager (ACM)

C. AWS Artefact

D. AWS Trusted Advisor

Correct Answer:B

QUESTION 49 A solutions architect needs to maintain a fleet of Amazon EC2 instances so that any Impaired instances are replaced with new ones. Which AWS service should the solutions architect use?

A. Amazon GuardDuty

B. Amazon Elastic Container Service (Amazon ECS)

C. AWS Shield

D. AWS Auto Scaling

Correct Answer:B

QUESTION 50 What does Amazon CloudFront provide?

A. Secure delivery of data, videos application. and APIs to users globally with low latency

B. Automatic scaling for all resources to power an application from a single unified interface

C. Ability to directly manage traffic globally through a variety of routing types, including latency- based routing, geo ONS. Geo Proximity, and weighted round robin

D. Automatic distribution of incoming application traffic across multiple targets, such as Amazon EC2 instances, containers. IP addresses, and AWS Lambda functions

Correct Answer:B

QUESTION 51 A company uses Amazon EC2 Instances in its AWS account tor several different workloads. The company needs to perform an analysis to understand the cost of each. workload. What is the MOST operationally efficient way to meet this requirement?

A. Move the EC2 instances for each workload into separate AWS accounts.

B. Use a different EC2 instance family for each of the workloads.

C. Update the workload applications to publish usage data to a cost allocation database.

D. Add cost allocation tags to each EC2 instance, and activate the tags

Correct Answer: C

QUESTION 52 A company wants to use an AWS service to continuously monitor the health of its application endpoints based on proximity to application users. The company also needs to route traffic to healthy Regional endpoints and to improve application availability and performance. Which service will meet these requirements?

A. Amazon CloudWatch

B. Amazon Inspector

C. AWS Global Accelerator

D. AWS Cloud Formation

Correct Answer:B

QUESTION 53 Which guideline is a well-architected design principle for building cloud applications?

A. Keep static data closer to compute resources.

B. Provision resources for peak capacity.

C. Use tightly coupled components

D. Design for automated recovery from failure.

Correct Answer:D

QUESTION 54 AWS services offer gateway VPC endpoints that can be used to avoid sending traffic over the internet? (Select TWO )

A. Amazon S3

B. Amazon DynamoDB

C. Amazon Simple Notification Service (Amazon SNS)

D. Amazon Simple Queue Service (Amazon SQS)

E. AWS CodeBuild

Correct Answer: AB

QUESTION 55 Which AWS Cloud deployment model uses AWS Outposts as part of the application deployment infrastructure?

A. On-premises

B. Serverless

C. Hybrid

D. Cloud-native

Correct Answer:C

QUESTION 56 Which are the benefits of using Amazon RDS over Amazon EC2 when running relational databases on AWS? (Select TWO )

A. Schema management

B. Automated backups

C. Software patching

D. Indexing of tables

E. Extract, transform, and load (ETL) management

Correct Answer:BC

QUESTION 57 A company wants to allow full access to an Amazon S3 bucket for a particular user Which element in the S3 bucket policy holds the user details that describe who needs access to the S3 bucket?

A. Action

B. Principal

C. Resource

D. Statement

Correct Answer:B

QUESTION 58 Which AWS service should a company use to provision, manage, and deploy SSL/TLS certificates?

A. AWS Secrets Manager

B. Amazon Inspector

C. AWS Certificate Manager (ACM)

D. AWS CodeDeploy

Correct Answer:C

QUESTION 59 A company wants to enhance security by launching a third-party ISP intrusion detection system from its AWS account. Which AWS service or resource should the company use to meet this requirement?

A. AWS Security Hub

B. AWS Marketplace

C. AWS Security Center

D. AWS Quick Starts

Correct Answer: C

QUESTION 60 Which of the following are benefits of using the AWS Cloud? (Select TWO )

A. 100% fault tolerance

B. Total control over underlying infrastructure

C. Fast provisioning of IT resources

D. Ability to go global quickly

E. Outsourcing all application coding to AWS

Correct Answer: CD

QUESTION 61 Which AWS service requires the customer to patch the guest operating system?

A. AWS Lambda

B. Amazon EC2

C. Amazon Elasticsearch Service (Amazon ES)

D. Amazon ElastiCache

Correct Answer:B

QUESTION 62 Which actions allow a company's security team to improve the security procedures for employees accessing AWS resources? (Select TWO )

A. Create IAM policies based on least privilege principles

B. Create IAM users for groups of employees to share

C. Enable multi-factor authentication for privileged users

D. Create IAM users in different Availability Zones

E. Specify an individual IAM user for each Amazon EC2 instance

Correct Answer:AC

QUESTION 63 A company is deploying a machine learning (ML) research project that will require a lot of compute power over several months. The ML processing jobs do not need to run at specific times. Which Amazon EC2 instance purchasing option will meet these requirements at the lowest cost?

A. Spot Instances

B. On-Demand Instances

C. Reserved Instances

D. Dedicated Instances

Correct Answer:B

QUESTION 64 What does the AWS Cloud provide to increase the speed and agility of execution for customers? (Select TWO.)

A. Free Tier services usage

B. Access to AWS data centres

C. Lower resource provisioning cost

D. Readily available resources with low provisioning times

E. Scalable compute capacity

Correct Answer: DE

QUESTION 65 A batch workload takes 5 hours to finish on an Amazon EC2 instance. The amount of data to be processed doubles monthly and the processing time is proportional. What is the best cloud architecture to address this consistently growing demand?

A. Run the application on a bigger EC2 instance size.

B. Distribute the application across multiple EC2 instances and run the workload in parallel.

C. Switch to an EC2 instance family that better matches batch requirements

D. Run the application on a bare metal EC2 instance.

Correct Answer:B

QUESTION 66 How can users protect against distributed denial of service (DDoS) attacks in the AWS Cloud?

A. Configure a firewall.

B. Use Amazon CloudWatch monitoring.

C. Use Amazon Redshift

D. Monitor AWS CloudTrail logging

Correct Answer: A

QUESTION 67 Which AWS service or feature gives end users the ability to access AWS resources from any location by using an encrypted connection?

A. AWS Client VPN

B. Amazon CloudFront

C. AWS Direct Connect

D. AWS PrivateLink

Correct Answer:B

QUESTION 68 Which AWS service provides recommendations for rightsizing AWS resources such as Amazon EC2 instances, Amazon Elastic Block Store (Amazon EBS) volumes and Amazon RDS databases to help users reduce costs?

A. Amazon Inspector

B. AWS Service Health Dashboard

C. AWS Trusted Advisor

D. Amazon Forecast

Correct Answer: B

QUESTION 69 A company has an AWS environment that consists of a VPC. multiple subnets, and many Amazon EC2 instances in the subnets An engineer wants to restrict inbound traffic to one particular EC2 instance without affecting the other EC2 instances.Which AWS service or feature should the engineer use to meet this requirement?

A. Security groups

B. Network ACLs

C. Amazon GuardDuty

D. AWS Shield

Correct Answer:B

QUESTION 70 Which tasks require the use of the AWS account root user? (Select TWO )

A. Launching a new Amazon EC2 instance

B. Viewing AWS CloudTrail logs

C. Changing billing currency

D. Contacting AWS Support

E. Changing AWS Support plans

Correct Answer: BC

QUESTION 71 Which AWS service enables users to identify the changes made to a resource over time?

A. AWSConfig

B. AWS Service Catalog

C. AWS Identity and Access Management (IAM)

D. AWS CloudFormation

Correct Answer: D

QUESTION 72 Which of the following are security best practices for using AWS Identity and Access Management (IAM)? (Select TWO)

A. Do not remove credentials, even if they are never used

B. Enable multi-factor authentication (MFA)

C. Use inline policies instead of customer managed policies

D. Use AWS account root user credentials for IAM tasks

E. Rotate credentials regularly

Correct Answer:DE

QUESTION 73 A user is building an application on AWS that requires a backend database. The application requires access to the operating system of the instance where the database is installed in order to run scripts. Where should the database be hosted if the user's goal is to create minimum management overhead?

A. On Amazon RDS

B. On Amazon DynamoDB

C. On Amazon EC2

D. On Amazon S3

Correct Answer:C

QUESTION 74 Which feature of AWS Auto Scaling will forecast future traffic to schedule changes in the number of Amazon EC2 instances at the appropriate times?

A. Predictive scaling

B. Scheduled scaling

C. Target tracking scaling

D. Step scaling

Correct Answer: B

QUESTION 75 A company wants to build an application for a new line of business According to the AWS Well-Architected Framework, what design principles should be implemented? (Select TWO.)

A. Move on-premises network hardware to VPCs.

B. Design elasticity into the AWS Cloud design

C. Consolidate multiple AWS accounts into a single account

D. Buy and host hardware in the AWS Cloud.

E. Decouple the AWS Cloud architecture to break up monolithic deployments.

Correct Answer:AB

QUESTION 76 Which AWS Trusted Advisor check includes the verification of AWS CloudTrail logging?

A. Fault tolerance

B. Performance

C. Security

D. Service limits

Correct Answer:B

QUESTION 77 Which design principles of the AWS Well-Architected Framework help increase reliability? (Select TWO.)

A. Automatically recover from failure

B. Keep people away from data

C. Enable traceability.

D. Scale horizontally to increase workload availability.

E. Automate security best practices

Correct Answer: AB

QUESTION 78 A company believes an unauthorised user copied data from an Amazon S3 bucket to their own account. Which AWS service will record the actions taken by the user?

A. Amazon CloudWatch

B. AWS Infrastructure Event Management

C. AWS CloudTrail

D. AWS Systems Manager

Correct Answer:C

QUESTION 79 Which AWS service provides a simple way to set up a new multi-account AWS environment and govern it at scale?

A. AWS Trusted Advisor

B. AWS Security Hub

C. AWS Resource Access Manager

D. AWS Control Tower

Correct Answer:D

QUESTION 80 How does the AWS global infrastructure offer high availability and fault tolerance to its users?

A. The AWS infrastructure is made up of multiple AWS Regions within various Availability Zones located in areas that have low flood risk, and are interconnected with low-latency networks and redundant power supplies.

B. The AWS infrastructure consists of subnets containing various Availability Zones with multiple data centres located in the same geographic location.

C. The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that are connected with low-latency networking and redundant power supplies.

D. AWS allows users to choose AWS Regions and data centres so that users can select the closest data centres in different Regions.

Correct Answer:C

QUESTION 81 A user has an AWS Business Support plan and requires detailed billing information. Which AWS resource will help?

A. AWS Service Catalog

B. AWS Concierge Support

C. AWS Budgets

D. AWS Cost and Usage Report

Correct Answer:B

QUESTION 82 A company has enabled billing alerts in its AWS account and wants to receive a notification through Amazon Simple Notification Service (Amazon SNS) whenever its monthly bill exceeds a set amount. Which AWS service or tool should the company use to achieve this?

A. Cost Explorer

B. Amazon CloudWatch

C. AWS Cost and Usage Report

D. AWS Pricing Calculator

Correct Answer:B

QUESTION 83 According to the AWS shared responsibility model, which task is the responsibility of AWS for workloads running on Amazon EC2?

A. Updating the operating system

B. Updating the database engine

C. Updating the physical hardware

D. Updating the user data

Correct Answer:C

QUESTION 84 Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday?

A. Amazon CloudWatch

B. AWS CloudTrail

C. AWS Trusted Advisor

D. Amazon Inspector

Correct Answer: B

QUESTION 85 A company has existing software licences that it wants to bring to AWS, but the licensing model requires licensing physical cores.How can the company meet this requirement in the AWS Cloud?

A. Launch an Amazon EC2 instance on a Dedicated Host.

B. Launch an Amazon EC2 instance with default tenancy.

C. Create an On-Demand Capacity Reservation.

D. Purchase Dedicated Reserved Instances.

Correct Answer:B

Toggle Title

A. AWS CloudTrail

B. Amazon CloudWatch

C. AWS X-Ray

D. Amazon Inspector

Correct Answer:A

QUESTION 87 A company requires an isolated environment within AWS for security purposes. Which action can be taken to accomplish this?

A. Create a separate VPC to host the resources.

B. Create a separate Availability Zone to host the resources.

C. Create a placement group to host the resources.

D. Create an AWS Direct Connect connection between the company and AWS.

Correct Answer:A

QUESTION 88 A company needs to monitor and forecast AWS costs and usage. The company also must set event-driven alert notifications that occur if spending limits are exceeded. Which AWS service or tool should the company use to meet these requirements?

A. Amazon CloudWatch

B. AWS Config

C. AWS Budgets

D. AWS Service Catalog

Correct Answer: C

QUESTION 89 Which of the following is a best practice for creating policies for IAM users?

A. Start with a large set of permissions and remove the permissions that are not required.

B. Use only Amazon managed policies.

C. Attach policies directly to each user individually.

D. Start with a minimum set of permissions and grant additional permissions as necessary.

Correct Answer: D

QUESTION 90 A user with an AWS Basic Support plan has determined that illegal activities are being run on their AWS resources. What is the recommended method for the user to report the activity to AWS?

A. Contact the AWS Concierge Support team.

B. Contact the AWS Abuse team.

C. Contact an AWS technical account manager.

D. Contact the AWS Support team.

Correct Answer: B

QUESTION 91 AWS can relieve a company's IT staff of which of the following IT tasks? (Choose two.)

A. Storage capacity planning

B. Patching database software

C. Setting up access controls for data

D. Writing application code

E. Creating database schemas

Correct Answer:BE

QUESTION 92 Which of the following security-related aspects of running an Amazon Elastic Compute Cloud (Amazon EC2) instance is the responsibility of AWS?

A. Hypervisor software updates

B. Security of private keys

C. Security updates to software running on the instance

D. Policies controlling instance access

Correct Answer:A

QUESTION 93 Which AWS service aggregates, organises, and prioritises security alerts and findings from multiple AWS services?

A. Amazon Detective

B. Amazon Inspector

C. AWS Security Hub

D. Amazon Macie

Correct Answer: C

QUESTION 94 A developer has an AWS account and needs access to another account's test database. Which AWS service or feature can the developer use to gain access to the test database?

A. Amazon Macie

B. IAM roles

C. Security groups

D. AWS Trusted Advisor

Correct Answer: B

QUESTION 95 Using Amazon Elastic Container Service (Amazon ECS) to break down a monolithic architecture into microservices is an example of:

A. a tightly coupled architecture.

B. a loosely coupled architecture.

C. a stateless architecture.

D. a stateful architecture.

Correct Answer:B

QUESTION 96 Which service enables customers to audit API calls in their AWS accounts?

A. AWS Trusted Advisor

B. AWS CloudTrail

C. Amazon Inspector

D. AWS X-Ray

Correct Answer:B

QUESTION 97 Which VPC component provides a layer of security at the subnet level?

A. Network ACLs

B. Security groups

C. NAT gateways

D. Route tables

Correct Answer:B

QUESTION 98 Which benefit is available for Convertible Reserved Instances but NOT Standard Reserved Instances?

A. The instances can be exchanged for instances of a different instance size.

B. The instances can be exchanged for instances of a different instance family.

C. The instances can be changed to a different AWS Region.

D. The instances can be changed to a different Availability Zone.

Correct Answer: D

QUESTION 99 Which of the following enables users to leverage the power of AWS services programmatically?

A. AWS Command Line Interface (AWS CLI)

B. AWS Trusted Advisor

C. AWS Management Console

D. AWS CodeDeploy

Correct Answer: C

QUESTION 100 Which security credentials are required to run commands by using the AWS Command Line Interface (AWS CLI)?

A. AWS root user email and password

B. Access Key ID and Secret Access Key

C. Amazon Elastic Compute Cloud (Amazon EC2) key pairs

D. AWS Identity and Access Management (IAM) username and password

Correct Answer: B

QUESTION 101 A web developer has limited knowledge of AWS networking services such as Amazon VPC, Elastic Load Balancing, and Auto Scaling, but wants to host a highly available web application. Which AWS service would automatically handle the deployment and reduce the complexity for the developer?

A. AWS CodeDeploy

B. AWS Elastic Beanstalk

C. AWS Resource Access Manager

D. AWS CloudFormation

Correct Answer: B

QUESTION 102 A company wants to route its traffic directly and privately to a VPC without going over the public internet.Which connectivity option provides this capability?

A. AWS VPN

B. AWS Direct Connect

C. VPC internet gateway

D. VPC NAT gateway

Correct Answer: C

QUESTION 103 A company wants to forecast its AWS Cloud costs for the upcoming year by analysing its past AWS Cloud spending trends.Which AWS service should the company use to meet this requirement?

A. AWS Control Tower

B. AWS OpsWorks

C. Cost Explorer

D. AWS CloudFormation

Correct Answer: C

QUESTION 104 Which AWS service or feature can help a company determine if it has Amazon S3 buckets that are publicly available?

A. AWS Service Health Dashboard

B. Amazon CloudWatch Logs

C. AWS Service Catalog

D. AWS Trusted Advisor

Correct Answer: C

QUESTION 105 A company’s newly launched application is gaining in popularity very quickly. To improve customer service, the company wants to set up a phone number to manage the increasing volume of calls received by the company's support staff.Which AWS service should be used to meet this requirement?

A. Amazon CloudFront

B. Amazon Connect

C. Amazon DirectConnect

D. AWS Trusted Advisor

Correct Answer:B

QUESTION 106 Which credentials used to sign in to the AWS Management Console meet security best practices? (Choose two.)

A. Multi-factor authentication

B. An access key

C. X.509 certificates

D. Username and password

E. A secret key

Correct Answer:AD

QUESTION 107 Which of the following are ways to improve security on AWS? (Choose two.)

A. Enabling multi-factor authentication (MFA) with Amazon Cognito

B. Using AWS Trusted Advisor security checks

C. Using AWS Artefact

D. Granting the broadest permissions to all IAM roles

E. Running application code with AWS Cloud9

Correct Answer:BE

QUESTION 108 Which AWS service or resource helps on-premises applications connect to AWS Cloud-based storage and caches the data locally for low-latency access?

A. AWS Storage Gateway

B. AWS Direct Connect

C. Amazon S3

D. AWS Snowball Edge

Correct Answer:A

QUESTION 109 Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centres, co-location environments, or on-premises facilities?

A. AWS Snowmobile

B. AWS Outposts

C. AWS Local Zones

D. AWS Fargate

Correct Answer:B

QUESTION 110 A company wants to eliminate the need to guess infrastructure capacity before deployments. The company also wants to spend its budget on cloud resources only as the company uses the resources.Which advantage of the AWS Cloud matches the company’s requirements?

A. Global reach

B. Reliability

C. Economies of scale

D. Pay-as-you-go pricing

Correct Answer: B

QUESTION 111 A retail company wants to provision only the necessary amount of resources to handle the current demand.Which cloud benefit is the company trying to achieve with this goal?

A. Reliability

B. Scalability

C. Global reach

D. High availability

Correct Answer: B

QUESTION 112 A company wants to migrate a small website and database quickly from on-premises infrastructure to the AWS Cloud. The company has limited operational knowledge to perform the migration.Which AWS service supports this use case?

A. Amazon EC2

B. Amazon S3

C. Amazon Lightsail

D. AWS Lambda

Correct Answer:C

QUESTION 113 Which AWS service can be used to encrypt data at rest?

A. Amazon GuardDuty

B. AWS Shield

C. AWS Key Management Service (AWS KMS)

D. AWS Security Hub

Correct Answer:C

QUESTION 114 Elasticity in the AWS Cloud refers to which of the following? (Choose two.)

A. How quickly an Amazon EC2 instance can be restarted

B. The ability to rightsize resources as demand shifts

C. How easily resources can be produced when they are needed

D. The maximum amount of RAM an Amazon EC2 instance can use

E. The pay-as-you-go billing model

Correct Answer: BD

QUESTION 115 A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS. Where can the company purchase the security solution?

A. AWS Partner Solutions Finder

B. AWS Support Center

C. AWS Marketplace

D. AWS Management Console

Correct Answer: C

QUESTION 116 Which AWS services or features enable users to connect on-premises networks to a VPC? (Choose two.)

A. AWS VPN

B. AWS Direct Connect

C. Elastic Load Balancing

D. VPC peering

E. Amazon CloudFront

Correct Answer: AB

QUESTION 117 Which pillar of the AWS Well-Architected Framework specifies that resources be provisioned in a timely manner and scale as needed to maintain effectiveness as demand changes?

A. Cost optimization

B. Security

C. Performance efficiency

D. Operational excellence

Correct Answer:C

QUESTION 118 An IT department provisions more servers than are needed to run a workload. Which cloud architecture design principle supports changing this approach?

A. Stop guessing capacity.

B. Protect data in transit and at rest.

C. Improve through game days.

D. Annotate documentation.

Correct Answer:A

QUESTION 119 A solutions architect needs to create a cost estimate for running workloads on AWS. The cost estimate must then be exported for management review.Which AWS service or feature should be used to accomplish these tasks?

A. Cost Explorer

B. AWS Pricing Calculator

C. Amazon QuickSight

D. AWS Budgets

Correct Answer:C

QUESTION 120 Which AWS service should a company use to decouple large monolithic applications into smaller microservices components?

A. AWS Direct Connect

B. Amazon Simple Queue Service (Amazon SQS)

C. Amazon Lightsail

D. Amazon CloudWatch

Correct Answer: B

QUESTION 121 A company has defined the AWS resources that it needs for a new application. The company needs to estimate the costs of running the application on AWS.What should the company do to meet this requirement?

A. Use the AWS Pricing Calculator to generate an approximate dollar amount.

B. Take advantage of AWS on-demand pricing.

C. Use Amazon QuickSight to analyse current on-premises spending.

D. Use Amazon AppStream 2.0 for real-time pricing analytics.

Correct Answer: A

QUESTION 122 Which AWS service or feature for technical assistance is available to a user who has the AWS Basic Support plan?

A. AWS technical account manager (TAM)

B. AWS senior support engineers

C. AWS Trusted Advisor

D. AWS Discussion Forums

Correct Answer:B

QUESTION 123 When an Amazon EC2 instance is terminated, which AWS service can identify the user that made the API call?

A. Amazon CloudWatch

B. AWS X-Ray

C. AWS CloudTrail

D. AWS Identity and Access Management (IAM)

Correct Answer:C

QUESTION 124 Which controls does the customer fully inherit from AWS in the AWS shared responsibility model?

A. Patch management controls

B. Awareness and training controls

C. Configuration management controls

D. Physical and environmental controls

Correct Answer:C

QUESTION 125 Which feature can be used to protect Amazon S3 buckets from accidental overwrites or deletes?

A. object versioning

B. Lifecycle policy

C. Server-side encryption

D. Bucket ACL

Correct Answer: A

QUESTION 126 Which of the following are AWS security best practices for using AWS Identity and Access Management (IAM) to manage an AWS account root user? (Choose two.)

A. Set up multi-factor authentication (MFA) for the root user.

B. Assign a read-only access policy to the root user.

C. Remove all IAM policies from the root user.

D. Delete the root user access keys.

E. Use the root user for daily tasks.

Correct Answer: AB

QUESTION 127 A database administrator is trying to determine who deleted a critical Amazon Redshift cluster. Which AWS service helps with monitoring and retaining this type of account activity?

A. AWS Organizations

B. AWS CloudTrail

C. AWS Identity and Access Management (IAM)

D. AWS Trusted Advisor

Correct Answer:B

QUESTION 128 Which pillar of the AWS Well-Architected Framework includes the AWS shared responsibility model?

A. Operational excellence

B. Performance efficiency

C. Security

D. Reliability

Correct Answer:C

QUESTION 129 A company runs its business-critical web application on Amazon Elastic Container Service (Amazon ECS) and Amazon DynamoDB. The workload spikes up to 10 times the normal workload multiple times during the day.Which AWS Cloud feature enables the company to meet these changes in demand?

A. Agility

B. Global reach

C. Security

D. Scalability

Correct Answer:D

QUESTION 130 A company’s traffic logs show that IP addresses owned by AWS are being used in an attempt to flood ports on system resources.To whom should the cloud practitioner report this issue?

A. AWS Professional Services

B. AWS Partner Network (APN)

C. AWS Abuse team

D. AWS technical account manager (TAM)

Correct Answer:C

QUESTION 131 An Amazon EC2 instance previously used for development is inaccessible and no longer appears in the AWS Management Console.Which AWS service should be used to determine what action made this EC2 instance inaccessible?

A. Amazon CloudWatch Logs

B. AWS Security Hub

C. AWS CloudTrail

D. Amazon Inspector

Correct Answer: C

QUESTION 132 Which AWS service is a highly available and scalable DNS web service?

A. Amazon VPC

B. Amazon Route 53

C. Amazon CloudFront

D. Amazon Connect

Correct Answer: B

QUESTION 133 A company is moving its office and must establish an encrypted connection to AWS. Which AWS service will help meet this requirement?

A. Amazon Route 53

B. AWS VPN

C. Amazon API Gateway

D. Amazon Connect

Correct Answer:B

QUESTION 134 Which statement explains the benefit of agility in the AWS Cloud?

A. Agility gives users the ability to host applications in multiple AWS Regions around the world.

B. Agility gives users the ability to pay upfront to reduce cost.

C. Agility provides the means for users to provision resources in minutes.

D. Agility provides customizable physical hardware at the lowest possible cost.

Correct Answer:C

QUESTION 135 Which of the following are user authentication services managed by AWS? (Choose two.)

A. Amazon Cognito

B. AWS Identity and Access Management (IAM)

C. AWS Lambda

D. AWS License Manager

E. AWS CodeStar

Correct Answer: AB

techinsightslabs

AWS Certified Cloud Practitioner (CLF-C01)Exam H

Solverwp- WordPress Theme and Plugin