AWS Certified Cloud Practitioner (CLF-C01)Exam I

QUESTION 1 Which of the following are AWS Support plans that provide access to the full set of AWS Trusted Advisor checks? (Select Two.)

A. AWS Basic Support

B. AWS Enterprise Support

C. AWS Business Support

D. AWS Developer Support

E. AWS Concierge Support

Correct Answer:BC

QUESTION 2 A company wants to deploy and manage a Docker-based application on AWS. Which solution meets these requirements with the LEAST amount of operational overhead?

A. AWS AppSync

B. Amazon Elastic Container Registry (Amazon ECR)

C. An open-source Docker orchestrator on Amazon EC2 instances

D. Amazon Elastic Container Service (Amazon ECS)

Correct Answer: C

QUESTION 3 Which AWS service enables companies to deploy an application close to end users?

A. AWS Auto Scaling

B. Amazon CloudFront

C. AWS AppSync

D. Amazon Route 53

Correct Answer:B

QUESTION 4 A company needs a persistent cloud environment for development and testing for a project that will run for 3 months.Which Amazon EC2 instance purchasing option meets these requirements MOST cost- effectively?

A. Reserved Instances

B. Spot Instances

C. On-Demand Instances

D. Dedicated Hosts

Correct Answer:C

QUESTION 5 Which AWS service or feature is associated with a subnet in a VPC and is used to control inbound and outbound traffic?

A. Network ACLs

B. Amazon Inspector

C. AWS Shield

D. VPC Flow Logs

Correct Answer: A

QUESTION 6 Which AWS benefit enables users to deploy cloud infrastructure that consists of multiple geographic regions connected by a network with low latency, high throughput, and redundancy?

A. Economies of scale

B. Security

C. Global reach

D. Elasticity

Correct Answer: C

QUESTION 7 A company needs to run code in response to an event notification that occurs when objects are uploaded to an Amazon S3 bucket.Which AWS service will integrate directly with the event notification?

A. Amazon EC2

B. AWS Lambda

C. Amazon Elastic Container Registry (Amazon ECR)

D. AWS Elastic Beanstalk

Correct Answer:B

QUESTION 8 Which AWS service or feature is used to troubleshoot network connectivity issues between Amazon EC2 instances?

A. AWS Certificate Manager (ACM)

B. VPC Flow Logs

C. Internet gateway

D. AWS CloudHSM

Correct Answer:B

QUESTION 9 What is a benefit of using AWS serverless computing?

A. Application deployment and management are not required

B. Application security will be fully managed by AWS

C. Management of infrastructure is offloaded to AWS

D. Monitoring and logging are not needed

Correct Answer:C

QUESTION 10 A company sells a device that uses automatic language recognition to respond to spoken questions. The company wants to use deep learning and Natural language understanding to power this device.Which AWS service meets these requirements?

A. Amazon Transcribe

B. Amazon Comprehend

C. Amazon Polly

D. Amazon Lex

Correct Answer:C

QUESTION 11 Which cloud characteristics enable a company to provision or release computing capacity as required?(Select Two.)

A. Economies of scale

B. Agility

C. Reliability

D. Scalability

E. Elasticity

Correct Answer:DE

QUESTION 12 A large company is using the AWS Cloud for its business units. Each business until uses one VPC for each business application. The company is acquiring other companies that have their own VPCs that run new applications. The company needs to manage connectivity between its existing VPCs and the newly acquired VPCs.Which AWS service can the company use to meet this requirement?

A. AWS App Mesh

B. AWS Transit Gateway

C. AWS Cloud Map

D. AWS Site-to-Site VPN

Correct Answer:B

QUESTION 13 Which tool or feature provides a report to forecast AWS billing costs for the next 3 months?

A. Consolidated billing

B. AWS Budgets

C. Cost Explorer

D. AWS Cost and Usage Report

Correct Answer:C

QUESTION 14 Which AWS Support plan is recommended for business and mission-critical workloads in AWS environments?

A. AWS Enterprise Support

B. AWS Business Support

C. AWS Basic Support

D. AWS Developer Support

Correct Answer:B

QUESTION 15 A media company uploads audio and video files to a centralised Amazon S3 bucket from locations that are geographically dispersed.Which AWS solution will optimise transfer speeds for these files?

A. AWS Global Accelerator

B. S3 Transfer Accelerator

C. Amazon CloudFront

D. AWS Direct Connect

Correct Answer:C

QUESTION 16 A company needs general architectural guidance about how to use AWS services for various use cases, workloads, and applications. What is the LEAST expensive AWS Support plan that provides this guidance?

A. AWS Developer Support

B. AWS Business Support

C. AWS Enterprise Support

D. AWS Basic Support

Correct Answer: B

QUESTION 17 A company needs to use SQL to query data from Amazon S3. Which AWS services or features can the company use to meet this requirement? (Select TWO.)

A. Amazon Athena

B. AWS Data Exchange

C. S3 Select

D. AWS Data Pipeline

E. S3 Transfer Acceleration

Correct Answer: AE

QUESTION 18 A company wants to improve the overall availability and performance of its applications that are hosted on AWS. Which AWS service should the company use?

A. Amazon Connect

B. Amazon Lightsail

C. AWS Storage Gateway

D. AWS Global Accelerator

Correct Answer: D

QUESTION 19 Which tool can be used to identify scheduled changes to the AWS infrastructure?

A. AWS Trusted Advisor

B. AWS Personal Health Dashboard

C. Billing Dashboard

D. AWS Config

Correct Answer:B

QUESTION 20 A company hosts a web application on Amazon EC2 instances. The application requires credentials so that it can access other AWS services.Which feature should the company use to provide this access?

A. IAM users

B. IAM groups

C. Multi-factor authentication (MFA)

D. IAM roles

Correct Answer: C

QUESTION 21 A company needs to store database backups. The company must be able to retrieve the data in minutes. Backup restorations will take place once a year. Which AWS solution should the company use to meet these requirements at the LOWEST cost?

A. Amazon Elastic Block Store (Amazon EBS)

B. Amazon Elastic File System (Amazon EFS)

C. Amazon S3 Glacier

D. Amazon S3 Standard

Correct Answer:C

QUESTION 22 Which of the following is the responsibility of both AWS and the customer, according to the AWS shared responsibility model?

A. Client-side data encryption

B. AWS awareness and training

C. Physical and environmental controls of AWS data centres

D. Server-side data encryption

Correct Answer:B

QUESTION 23 A company is running multiple workloads in the AWS Cloud and recently began investigating ways to reduce costs. The company is already running fault-tolerant workloads on Amazon EC2 that perform periodic checkpoints in case of an outage.Which AWS service or pricing model can provide the GREATEST cost savings?

A. Capacity Reservations

B. Amazon Lightsail

C. Dedicated Hosts

D. Spot Instances

Correct Answer: D

QUESTION 24 Which of the following security resources are supplied by AWS? (Select TWO.)

A. Trusted Advisor checks

B. Penetration testing

C. Service intrusion metrics

D. Educational webinars

E. Peer-to-peer file-sharing detection

Correct Answer: AB

QUESTION 25 A company is using multiple Availability Zones to deploy AWS Cloud architecture. Which design principle of the AWS Well-Architected Framework does this example represent?

A. Implement elasticity

B. Decoupled architecture components

C. Thing parallel

D. Design for high availability

Correct Answer:D

QUESTION 26 A company has set up its IT infrastructure in the AWS Cloud. The company wants to receive detailed reports that break down AWS costs by the hour. The reports must be placed in an Amazon S3 bucket.Which AWS tool will meet these requirements?

A. AWS Pricing Calculator

B. AWS Cost and Usage Reports

C. Cost Explorer

D. AWS Budgets

Correct Answer:B

QUESTION 27 Which AWS services or features can a company use to connect the network of its on- premises data centre to AWS? (Select Two.)

A. AWS Directory Service

B. AWS VPN

C. AWS CloudHSM

D. AWS Data Pipeline

E. AWS Direct Connect

Correct Answer:BC

QUESTION 28 Which AWS service is delivered regionally?

A. Amazon S3

B. AWS Shield

C. Amazon Route 53

D. AWS Identity and Access Management (IAM)

Correct Answer: A

QUESTION 29 Which AWS service or tool helps to centrally manage billing and allow controlled access to resources across AWS accounts?

A. AWS Identity and Access Management (IAM)

B. Cost Explorer

C. AWS Organizations

D. AWS Budgets

Correct Answer: C

QUESTION 30 Which AWS service should a company use to provide its employees with access to the AWS Management Console?

A. Amazon Cognito

B. AWS Identity and Access Management (IAM)

C. AWS Resource Access Manager

D. AWS Key Management Service (AWS KMS)

Correct Answer:B

QUESTION 31 Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?

A. Use serverless EC2 instances

B. Scale the size of EC2 instances up or down automatically, based on demand

C. Scale the number of EC2 instances in or out automatically, based on demand

D. Transfer unused CPU resources between EC2 instances

Correct Answer:C

QUESTION 32 How does AWS CloudFormation help users operate in the AWS Cloud?

A. It supports the simple coding of cloud-native applications

B. It monitors the cloud environment

C. It provides the ability to model and provision the resources needed for applications

D. It automates the responses to threats, reducing remediation and recovery time

Correct Answer:C

QUESTION 33 Which AWS service or feature provides a platform for building cloud-based customer service contact centres?

A. Amazon Connect

B. Amazon Pinpoint

C. Amazon Athena

D. AWS Enterprise Support

Correct Answer:A

QUESTION 34 A company is preparing to launch a new web store that is expected to receive high traffic for an upcoming event. The web store runs only on AWS, and the company has an AWS Enterprise Support plan. Which AWS resource will provide guidance about how the company should scale its architecture and operational support during the event?

A. AWS Abuse team

B. AWS infrastructure event management

C. The designated AWS technical account manager (TAM)

D. AWS Professional Services

Correct Answer: B

QUESTION 35 Which AWS service or tool provides information about the utilisation of Reserved Instances?

A. AWS Systems Manager

B. Cost Explorer

C. Amazon CloudWatch

D. AWS Config2

Correct Answer:C

QUESTION 36 Which AWS service provides users with recommendations for improving the quality of an application's code, and identifies the most expensive lines of code?

A. AWS CodeBuild

B. AWS CodeStar

C. AWS CodeDeploy

D. Amazon CodeGuru

Correct Answer:D

QUESTION 37 A company is increasing the load on its Amazon RDS DB instance by generating reports. How can the company reduce the load on the DB instance?

A. Move the DB instance to a second VPC

B. Perform frequent snapshots

C. Create a read replica

D. Use multiple Availability Zones

Correct Answer:C

QUESTION 38 A company has a serverless application that includes an Amazon API Gateway API, an AWS Lambda function, and an Amazon DynamoDB database.Which AWS service can the company use to trace user requests as they move through the application's components?

A. Amazon CloudWatch

B. AWS CloudTrail

C. Amazon Inspector

D. AWS X-Ray

Correct Answer:B

QUESTION 39 Which AWS service or tool can automatically identify security groups that grant unrestricted internet access to a list of ports?

A. AWS Trusted Advisor

B. AWS Firewall Manager

C. AWS Shield

D. Amazon EC2 dashboard

Correct Answer:A

QUESTION 40 What information is found on an AWS Identity and Access Management (IAM) credential report? (Select TWO)

A. The date and time when an IAM user’s password was last used to sign in to the AWS Management Console.

B. The User-Agent browser identifier for each IAM user currently logged in.

C. The type of multi-factor authentication (MFA) device assigned to an IAM user.

D. Whether multi-factor authentication (MFA) has been enabled for an IAM user.

E. The number of incorrect login attempts by each IAM user in the previous 30 days.

Correct Answer: AB

QUESTION 41 Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

A. AWS CLI

B. AWS Developer Center

C. AWS CodeStar

D. AWS Cloud Development Kit (AWS CDK)

Correct Answer:D

QUESTION 42 A company needs to use AWS technology to deploy a static website. Which solution meets this requirement with the LEAST amount of operational overhead?

A. Deploy the website on Amazon EC2.

B. Host the website on AWS Elastic Beanstalk.

C. Host the website on Amazon S3.

D. Deploy the website with Amazon Lightsail.

Correct Answer:C

QUESTION 43 Which AWS services can a company use to transfer on-premises data to the AWS Cloud? (Select TWO.)

A. AWS Snowcone

B. AWS Backup

C. Amazon Connect

D. AWS Transit Gateway

E. AWS DataSync

Correct Answer: DE

QUESTION 44 A company runs Amazon EC2 instances in a research lab. The instances run for 3 hours each week and cannot be interrupted. What is the MOST cost-effective instance purchasing option to meet these requirements?

A. On-Demand Instances

B. Compute Savings Plan

C. Convertible Reserved Instances

D. Spot Instances

Correct Answer: B

QUESTION 45 A company needs to run a workload for several batch image rendering applications. It is acceptable for the workload to experience downtime.Which Amazon EC2 pricing model would be MOST cost-effective in this situation?

A. On-Demand Instances

B. Spot Instances

C. Reserved Instances

D. Dedicated Instances

Correct Answer:B

QUESTION 46 A company wants to establish an encrypted network connection between applications at its on-premises data centre and the applications that run in its AWS account. The connection must be over the public internet.Which AWS service can the company use to meet these requirements?

A. AWS Direct Connect

B. Amazon Route 53

C. AWS Snowball

D. AWS Site-to-Site VPN

Correct Answer:D

QUESTION 47 Which statements represent the cost-effectiveness of the AWS Cloud? (Select TWO.)

A. Users can deploy all over the world in minutes.

B. Users can trade fixed expenses for variable expenses.

C. AWS offers increased speed and agility.

D. Users benefit from economies of scale.

E. AWS is responsible for patching the infrastructure.

Correct Answer:AE

QUESTION 48 Which AWS feature grants temporary access to specific AWS resources?

A. Service control policies (SCPs)

B. AWS IAM Access Analyzer

C. Access control lists (ACLs)

D. IAM roles

Correct Answer: B

QUESTION 49 Which AWS service provides domain registration, DNS routing, and service health checks?

A. Amazon Route 53

B. AWS Direct Connect

C. Amazon CloudFront

D. Amazon API Gateway

Correct Answer:A

QUESTION 50 A company suspects that its AWS resources are being used for harmful network activities, including port scanning and malware distribution.

A. AWS technical account manager (TAM)

B. AWS Concierge Support

C. AWS Abuse team

D. AWS Support team

Correct Answer:C

QUESTION 51 Which AWS services can host PostgreSQL databases? (Select TWO.)

A. Amazon S3

B. Amazon Elasticsearch Service (Amazon ES)

C. Amazon Elastic File System (Amazon EFS)

D. Amazon Aurora

E. Amazon EC2

Correct Answer:DE

QUESTION 52 Which documentation does AWS Artefact provide?

A. AWS ISO certifications

B. Amazon EC2 terms and conditions

C. A history of a company’s AWS spending

D. A list of previous-generation Amazon EC2 instance types

Correct Answer:B

QUESTION 53 A company has set up its first VPC in the AWS Cloud; the VPC includes two public subnets. The company needs to block access to all network traffic destined for one of the two public subnets if the traffic is from a specific IP address that has been identified as malicious. Which AWS service or tool can the company use to meet this requirement?

A. AWS WAF

B. VPC route table entry

C. Network ACL

D. Security group

Correct Answer: C

QUESTION 54 Which IPv4 internet address for Amazon EC2 instances is billed at an hourly rate?

A. A dynamic IP address that is requested in excess of the Regional limit for each account

B. An Elastic IP address that is associated with an EC2 instance that is running

C. A bring your own IP address (BYOIP) that is assigned to an EC2 instance that is running

D. An Elastic IP address that is not associated with an EC2 instance that is running

Correct Answer: D

QUESTION 55 Which statement describes a characteristic of the AWS global infrastructure?

A. Edge locations contain multiple AWS Regions

B. Availability Zones contain multiple data centres

C. AWS Regions contain multiple Regional edge caches

D. Each data centre contains multiple edge locations

Correct Answer: B

QUESTION 56 Which AWS services or features help protect Amazon EC2 instances from DDoS attacks by limiting network access to the instances? (Select TWO.)

A. AWS Batch

B. Network ACLs

C. AWS Identity and Access Management (IAM)

D. Security groups

E. AWS CloudHSM

Correct Answer: BD

QUESTION 57 A company wants optimised pricing for its Amazon EC2 instances. The applications running on these instances cannot tolerate interruptions, and the workloads must remain in operation for at least 1 year.Which purchasing options should the company use to meet these requirements? (Select TWO.)

A. Spot Instances

B. Savings Plans

C. Dedicated HostsD

D. Reserved Instances

E. AWS Marketplace subscriptions

Correct Answer:DE

QUESTION 58 Which AWS services or features enable a user to establish a network connection from on premises to the AWS Cloud? (Select TWO.)

A. AWS Snowball

B. AWS Direct Connect

C. VPN connection

D. Amazon S3

E. Amazon Connect

Correct Answer:BC

QUESTION 59 A company chooses an Amazon EC2 instance type that fits its usage requirements. Which principle of the AWS Well-Architected Framework is the company following?

A. Rightsize the infrastructure

B. Proactively monitor costs

C. Supply resources dynamically.

D. Decommission unused resources

Correct Answer:A

QUESTION 60 Which AWS service provides managed DDoS protection?

A. AWS Firewall Manager

B. Amazon GuardDuty

C. AWS Shield

D. Amazon Inspector

Correct Answer:C

QUESTION 61 A company wants to secure its consumer web application by using SSL/TLS to encrypt traffic. Which AWS service can the company use to meet this goal?

A. AWS WAF

B. AWS Shield

C. AWS Certificate Manager (ACM)

D. Amazon VPC

Correct Answer:C

QUESTION 62 A company wants to integrate its online shopping website with social media login credentials. Which AWS service can the company use to make this integration?

A. AWS Directory Service

B. Amazon Cognito

C. AWS Identity and Access Management (IAM)

D. AWS Single Sign-On

Correct Answer:B

QUESTION 63 A company is building a web application and needs to test the application across different mobile devices and desktop browsers. Which AWS service should the company use for this testing?

A. AWS Amplify

B. AWS AppSync

C. AWS Device Farm

D. Amazon Pinpoint

Correct Answer:C

QUESTION 64 A developer needs to access AWS resources from the AWS CLI.Which feature in AWS Identity and Access Management (IAM) can the developer use for authentication?

A. IAM policy

B. IAM role

C. IAM access keys

D. Account password policy

Correct Answer:C

QUESTION 65 Which AWS service gives users the ability to find, buy, and immediately start using third- party software solutions in their AWS environments?

A. AWS Config

B. AWS OpsWorks

C. AWS Marketplace

D. AWS Systems Manager

Correct Answer: C

QUESTION 66 A company needs to set up a notification that provides an alert when the company's AWS account reaches a preset spending limit. Which AWS service or tool can meet this requirement?

A. AWS Cost and Usage Report

B. Cost Explorer

C. AWS Budgets

D. AWS Trusted Advisor

Correct Answer:C

QUESTION 67 A company is using on-premises Microsoft Active Directory federation to manage user identities and groups.What AWS Identity and Access Management (IAM) setting maps the permissions for AWS services to the Active Directory user attributes?

A. IAM users

B. IAM access keys

C. IAM groups

D. IAM roles

Correct Answer:D

QUESTION 68 Which AWS service is a fully hosted version control service?

A. AWS CodeBuild

B. AWS CodeCommit

C. AWS CodeDeploy

D. AWS CodeStar

Correct Answer:B

QUESTION 69 A company has a workload that requires data to be collected, analysed and stored on premises The company wants to extend the use of AWS services to run on premises with access to the company network and the company's VPC.Which AWS service meets this requirement?

A. AWS Outposts

B. AWS Direct Connect

C. AWS Storage Gateway

D. AWS Snowball

Correct Answer:C

QUESTION 70 A company wants to use AWS storage services that support data lifecycle management to reduce the cost of storing files that are not accessed frequently.Which AWS services meet these requirements? (Select TWO.)

A. Amazon S3

B. AWS Snowball

C. Amazon FSx

D. Amazon Elastic Block Store (Amazon EBS)

E. Amazon Elastic File System (Amazon EFS)

Correct Answer:AB

QUESTION 71 What is the MINIMUM AWS Support plan that offers a response time of less than 15 times for a business- critical outage?

A. AWS Enterprise Support

B. AWS Developer Support

C. AWS Business Support

D. AWS Basic Support

Correct Answer:A

QUESTION 72 A social media company allows its public users to upload video content to an Amazon S3 bucket. Some videos are popular and are accessed often. Some videos are popular and are accessed often. Some videos are accessed infrequently.The company wants to reduce its total storage cost.Which actions will provide the MOST cost savings? (Select TWO.)

A. Ensure that the S3 bucket is in the most cost-effective AWS Region.

B. Run S3 Transfer Acceleration for the S3 bucket.

C. Use the S3 Intelligent-Tiering storage class.

D. Deactivate the default encryption for the S3 bucket.

E. Use AWS DataSync to transfer files to the S3 bucket.

Correct Answer:AC

QUESTION 73 A user wants to identify any security group that is allowing unrestricted incoming SSH traffic. Which AWS service can be used to accomplish this goal?

A. Amazon Cognito

B. AWS Shield

C. AWS Trusted Advisor

D. Amazon Macie

Correct Answer:C

QUESTION 74 Which of the following is one of the five pillars of the AWS Well-Architected Framework?

A. Efficiency and redundancy

B. Operational excellence

C. High availability

D. Business optimization

Correct Answer:B

QUESTION 75 A company provides a web-based ecommerce service that runs in two Availability Zones within a single AWS Region. The web service distributes content that is stored in the Amazon S3 Standard storage class.The company wants to improve the web service's performance globally.What should the company do to meet this requirement?

A. Change the S3 storage class to S3 Intelligent-Tiering.

B. Use Amazon API Gateway for the web service

C. Deploy an Amazon CloudFront distribution to cache web server content in edge locations.

D. Migrate the website ecommerce servers to Amazon EC2 with enhanced networking.

Correct Answer: C

QUESTION 76 A company wants guidance to optimise the cost and performance of its current AWS environment. Which AWS service or tool should the company use to identify areas for optimization?

A. AWS Trusted Advisor

B. Amazon QuickSight

C. AWS Organizations

D. AWS Budgets

Correct Answer:A

QUESTION 77 Which of the following security resources are supplied by AWS? (Select TWO.)

A. Service intrusion metrics

B. Trusted Advisor checks

C. Educational webinars

D. Penetration testing

E. Peer-to-peer file-sharing detection

Correct Answer:BD

QUESTION 78 A company wants to add a layer of security beyond usernames and passwords to make the login to the AWS Management Console more secure.Which AWS service or feature can the company use to meet this requirement?

A. Secret access keys

B. Multi-factor authentication (MFA)

C. AWS Security Token Service (AWS STS)

D. IAM password policies

Correct Answer:B

QUESTION 79 A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI). Which actions can a system administrator take to connect to the EC2 instance? (Select TWO.)

A. Use a Remote Desktop Protocol (RDP) connection.

B. Use Amazon EC2 Instance Connect.

C. Use AWS Systems Manager Session Manager.

D. Use AWS Batch.

E. Use Amazon Connect.

Correct Answer:BC

QUESTION 80 Which activity is considered out of scope for AWS Support?

A. Solving problems detected by Amazon EC2 health checks

B. Answering “how to” questions on AWS services and features

C. Tuning database queries

D. Troubleshooting AWS APIs

Correct Answer:C

QUESTION 81 Which Amazon S3 feature or storage class gives a company the ability to recover files that have been accidently deleted?

A. S3 Standard

B. S3 Intelligent-Tiering

C. S3 Lifecycle policies

D. S3 Versioning

Correct Answer: A

QUESTION 82 A company is connecting multiple VPCs and on-premises networks. The company needs to use an AWS service as a cloud router to simplify peering relationships. Which AWS service can the company use to meet this requirement?

A. AWS Transit Gateway

B. AWS Direct Connect

C. Amazon Connect

D. Amazon Route 53

Correct Answer: A

QUESTION 83 Which AWS service gives users the ability to develop loosely coupled microservices and improve service-to-service communication?

A. AWS Direct Connect

B. AWS Service Catalog

C. Amazon EventBridge (Amazon CloudWatch Events)

D. Amazon CloudWatch Logs

Correct Answer:B

QUESTION 84 Which AWS Trusted Advisor category contains information about high AWS service usage that could restrict the deployment of additional AWS resources?

A. Security

B. Fault tolerance

C. Service quotas

D. Performance

Correct Answer:C

QUESTION 85 A company needs a firewall that will control network connections to and from a single Amazon EC2 instance. This firewall will not control network connections to and from other instances that are in the same subnet.Which AWS service or feature can the company use to meet these requirements?

A. AWS WAF

B. Network ACL

C. Route table

D. Security group

Correct Answer:B

QUESTION 86 Which AWS Support solution provides additional AWS technical support for critical customer events, such as new product launches?

A. Infrastructure event management

B. AWS Personal Health Dashboard

C. Management business reviews

D. AWS Developer Support

Correct Answer:B

QUESTION 87 Which of the following are benefits of using AWS Trusted Advisor? (Select TWO)

A. Detecting underutilised resources to save costs

B. Improving security by proactively monitoring the AWS environment

C. Providing high-performance container orchestration

D. Creating and rotating encryption keys

E. Implementing enforced tagging across AWS resources

Correct Answer: AB

QUESTION 88 A company is comparing the total cost of ownership (TCO) of resource deployment on premises with the TCO of resource deployment in the AWS Cloud.Which costs apply only to on-premises deployments? (Select TWO)

A. Operating system licensing

B. Database administration

C. Facility operations

D. Application licensing

E. Hardware procurement

Correct Answer: AB

QUESTION 89 A company recently created its first AWS account. Which AWS services will require the use of a VPC? (Select TWO.)

A. Amazon S3

B. Amazon Cognito

C. Amazon Elastic File System (Amazon EFS)

D. Amazon EC2

E. Amazon DynamoDB

Correct Answer:CD

QUESTION 90 Which AWS service or feature allows a company to visualise, understand, and manage AWS costs and usage over time?

A. AWS Trusted Advisor

B. Cost Explorer

C. AWS CloudWatch

D. AWS Budgets

Correct Answer:B

QUESTION 91 Which of the following are included in AWS Enterprise Support? (Select TWO.)

A. AWS partner-led support

B. AWS technical account manager (TAM)

C. Support of third-party software integration to AWS

D. AWS Professional Services

E. 5-minute response time for critical issues

Correct Answer: BD

QUESTION 92 Which AWS services are managed at the AWS Region level rather than globally? (Select TWO.)

A. AWS WAF

B. AWS Identity and Access Management (IAM)

C. Amazon CloudFront

D. Amazon S3

E. Amazon EC2

Correct Answer:DE

QUESTION 93 A company uses Amazon EC2 instances and wants to maintain high availability in geographically distributed locations. Which choice should the company make for the location of its EC2 instances?

A. Use multiple Availability Zones in multiple AWS Regions

B. Use a single Availability Zone in multiple edge locations

C. Use multiple Availability Zones in a single AWS Region

D. Use multiple Availability Zones in multiple edge locations

Correct Answer:A

QUESTION 94 A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials.Which of the following is an AWS best practice for using the AWS account root user credentials?

A. Allow only the manager to use the account root user credentials for normal activities

B. Use the account root user credentials only when they alone must be used to perform a required function

C. Use the account root user credentials only for Amazon EC2 instances from the AWS Free Tier

D. Use the account root user credentials only for the creation of private VPC subnets

Correct Answer:B

A company wants to build an application for a new line of business. According to the AWS Well-Architected Framework, what design principles should be implemented?(Select TWO.)

A. Consolidate multiple AWS accounts into a single account.

B. Design elasticity into the AWS Cloud design

C. Buy and host hardware in the AWS Cloud

D. Decouple the AWS Cloud architecture to break up monolithic deployments

E. Move on-premises network hardware to VPCs

Correct Answer: AB

QUESTION 96 Which AWS service has a feature to analyse real-time data as the data is streamed into AWS data storage systems?

A. Amazon Kinesis

B. Amazon Simple Queue Service (Amazon SQS)

C. Amazon Athena

D. Amazon S3

Correct Answer: A

QUESTION 97 Which of the following are advantages of the AWS Cloud? (Select Two.)

A. Users can stop spending money on the maintenance of data centres

B. Users can stop guessing about resource capacity

C. AWS manages all the security within the cloud

D. Expenses never change from month to month

E. Users do not need to deploy applications globally

Correct Answer: AB

QUESTION 98 A company is investigating the possibility of keeping some services in its on-premises data centre and having some resources in the AWS Cloud. The company currently accesses AWS over the public internet.Which AWS service or feature will facilitate private connectivity between the on-premises servers and the AWS resources?

A. AWS Direct Connect

B. NAT gateway

C. Amazon S3 Transfer Acceleration

D. AWS WAF

Correct Answer: B

QUESTION 99 A company wants to build web and mobile applications that are scalable, secure, and easily integrated with AWS authentication services. What can the company use to develop these applications quickly and efficiently?

A. AWS Elastic Beanstalk

B. Amazon Lightsail

C. AWS Amplify

D. AWS CodePipeline

Correct Answer:C

QUESTION 100 Which AWS service or tool offers consolidated billing?

A. AWS Artefact

B. AWS Organizations

C. AWS Budgets

D. AWS Trusted Advisor

Correct Answer: B

QUESTION 101 A company plans to store sensitive data in an Amazon S3 bucket. Which task is the responsibility of AWS?

A. Provide security for the physical infrastructure

B. Activate encryption at rest for the data

C. Train the company’s employees about cloud security

D. Remove personally identifiable information (PII) from the data

Correct Answer: A

QUESTION 102 A company runs Amazon EC2 instances in a research lab The instances run for 3 hours each week and cannot be interrupted. What is the MOST cost-effective instance purchasing option to meet these requirements?

A. On-Demand Instances

B. Convertible Reserved Instances

C. Compute Savings Plan

D. Spot Instances

Correct Answer: C

QUESTION 103 Which actions are within the scope of AWS Support? (Select TWO.)

A. Debugging custom software

B. Investigating issues detected by health checks

C. Developing application code

D. Troubleshooting operational problems with AWS resources

E. Performing system administration tasks

Correct Answer:DE

QUESTION 104 Which guidelines are best practices for using AWS Identity and Access Management (IAM)? (Select TWO.)

A. Use inline policies instead of customer managed policies

B. Use groups to assign permissions to IAM users

C. Share access keys

D. Create individual IAM users

E. Grant maximum privileges to IAM users

Correct Answer:AB

QUESTION 105 An online retail company is having a sale next month that will generate an increase in traffic for the company's application. The company plans to add new Amazon EC2 instances to support the increased demand on the application. The application must be able to accommodate the increase in traffic and cannot experience any downtime.Which EC2 instance purchasing option will meet these requirements at the LOWEST cost?

A. Reserved Instances

B. Spot Instances

C. On-Demand Instances

D. Dedicated Hosts

Correct Answer: C

QUESTION 106 Which benefit is always free of charge with AWS, regardless of a user's AWS support plan?

A. AWS Developer Forums

B. AWS Developer Support

C. Programmatic case management

D. AWS technical account manager (TAM)

Correct Answer: A

QUESTION 107 Which of the following are aspects of the AWS shared responsibility model? (Select Two.)

A. For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms

B. AWS is responsible for training the customer’s employees on AWS product and services

C. For Amazon EC2, AWS is responsible for maintaining the guest operating system

D. Configuration management of infrastructure devices is the customer’s responsibility

E. AWS is responsible for protecting the physical cloud infrastructure

Correct Answer:DE

QUESTION 108 Amazon Elastic File System (Amazon EFS) and Amazon FSx offer which type of storage?

A. Object storage

B. File storage

C. Block storage

D. instance store

Correct Answer: B

QUESTION 109 Which AWS service provides a highly accurate and easy-to-use enterprise search service that is powered by machine learning (ML)?

A. Amazon SageMaker

B. Amazon Augmented Al (Amazon A2I)

C. Amazon Kendra

D. Amazon Polly

Correct Answer:C

QUESTION 110 Which task is a customer's responsibility, according to the AWS shared responsibility model?

A. Maintenance of the configuration of infrastructure devices

B. Management of the guest operating systems

C. Management of the host operating systems and virtualization

D. Maintenance of the software that powers Availability Zones

Correct Answer:B

QUESTION 111 A user is comparing purchase options for an application that runs on Amazon EC2 and Amazon RDS. The application cannot sustain any interruption The application experiences a predictable amount of usage,including some seasonal spikes that last only a few weeks at a time. It is not possible to modify the application.Which purchase option meets these requirements MOST cost-effectively?

A. Review the AWS Marketplace and buy Partial Upfront Reserved Instances to cover the predicted and seasonal load

B. Buy Reserved Instances for the predicted amount of usage throughout the year Allow any seasonal usage to run on Spot Instances.

C. Buy Reserved Instances to cover all potential usage that results from the seasonal usage

D. Buy Reserved Instances for the predicted amount of usage throughout the year Allow any seasonal usage to run at an On-Demand rate.

Correct Answer: D

QUESTION 112 A company is managing millions of documents in hundreds of Amazon S3 buckets that are located in multiple AWS Regions. The company needs to find out if the S3 buckets are hosting information (PII).What can the company do to meet this requirement with the LEAST amount of operational overhead?

A. Use Amazon Detective to identify any PII that is stored in the S3 buckets

B. Use Amazon Macie to identify and provide alerts about PII

C. Use AWS Trusted Advisor to generate PII notifications

D. Use AWS Lambda functions to review each file in the S3 buckets to identify PII

Correct Answer: B

QUESTION 113 A company recently migrated data from on premises to Amazon Aurora. How does the AWS shared responsibility model apply to this use case?

A. AWS is responsible for installing the database application, updating the operating system, and performing maintenance

B. AWS is responsible for the physical infrastructure on which the company’s data resides.The company is responsible for everything else.

C. The company is responsible for updating the operating system and performing software maintenance

D. The company is responsible for the security of the hardware on which the database resides

Correct Answer: A

QUESTION 114 Which AWS service or tool allows users to visualise, understand, and manage AWS costs and usage over time?

A. AWS Budgets

B. AWS Trusted Advisor

C. Cost Explorer

D. AWS CloudTrail

Correct Answer: C

QUESTION 115 A company wants to archive its media data as soon as the data is generated. The company needs to store the data for several years. Two or three times each year the company must access some of the data within 10 minutes of a request.Which Amazon S3 solution will meet these requirements MOST cost-effectively?

A. S3 Glacier with expedited retrievals

B. S3 Standard

C. S3 Intelligent-Tiering

D. S3 Glacier Deep Archive

Correct Answer: A

QUESTION 116 What is the LEAST expensive AWS Support plan that provides users with technical phone supports?

A. AWS Basic Support

B. AWS Business Support

C. AWS Developer Support

D. AWS Enterprise Support

Correct Answer: B

QUESTION 117 Which actions should a company take to avoid failure in an AWS architecture design? (Select TWO)

A. Enable Alexa for Business for business applications

B. Separate Amazon EC2 instances into different Availability Zones.

C. Use Amazon Workspaces to reduce the need for operating system patching

D. Enable Amazon S3 Cross-Region Replication

E. Use AWS Glue to prepare and load failover data

Correct Answer: BD

QUESTION 118 Which AWS service can a company use to manage encryption keys in the cloud?

A. AWS License Manager

B. AWS CloudHSM

C. AWS Certificate Manager (ACM)

D. AWS Directory Service

Correct Answer: B

QUESTION 119 Which terms describe the on-demand AWS pricing model? (Select TWO.)

A. Pay-as-you-go

B. Fixed term

C. Collocation

D. Variable expense

E. Planned

Correct Answer: AD

QUESTION 120 Which AWS service is suited for use cases that require data backup and restore features, include data lakes, and need an archiving system?

A. Amazon Elastic File System (Amazon EFS)

B. Amazon FSx for Lustre

C. Amazon S3

D. Amazon Elastic Block Store (Amazon EBS)

Correct Answer: C

QUESTION 121 A developer is writing a new application that consists of multiple AWS microservices During quality assurance testing, the developer notices runtime errors in several areas of the application. Which AWS service should the developer use to help troubleshoot the errors?

A. AWS X-Ray

B. AWS CloudTrail

C. Amazon CloudWatch

D. Amazon Cognito

Correct Answer: A

QUESTION 122 Which AWS Well-Architected Framework design principles support disaster recovery planning? (Select TWO.)

A. Use Amazon S3 Glacier instead of Amazon S3 Standard

B. Use memory-optimised Amazon EC2 instances

C. Use multiple AWS Regions

D. Use virtual local area networks (VLANs)

E. Use Multi-AZ deployments

Correct Answer: CE

QUESTION 123 Which task can a user complete by using AWS Identity and Access Management (IAM)?

A. Analyze logs from an Amazon API Gateway call

B. Validate JSON syntax from an application configuration file

C. Filter traffic to or from an Amazon EC2 instance

D. Grant permissions to applications that run on Amazon EC2 instances

Correct Answer: B

QUESTION 124 Which of the following is an AWS value proposition that describes a user's ability to scale infrastructure based on demand?

A. Speed of innovation

B. Decoupled architecture

C. Resource elasticity

D. Global deployment

Correct Answer: C

QUESTION 125 An e-learning platform needs to run an application for 2 months each year The application will be deployed on Amazon EC2 instances. Any application downtime during those 2 months must be avoided.Which EC2 purchasing option will meet these requirements MOST cost-effectively?

A. Reserved Instances

B. Dedicated Hosts

C. On-Demand instances

D. Spot Instances

Correct Answer: C

QUESTION 126 A company is running a reporting web server application on Amazon EC2 instances The application runs once every week and once again at the end of the month The EC2 instances can be shut down when they are not in use.What is the MOST cost-effective billing model for this use case?

A. Standard Reserved Instances

B. Convertible Reserved Instances

C. On-Demand Instances

D. On-Demand Capacity Reservations

Correct Answer: C

QUESTION 127 Which of the following are characteristics of serverless application that runs in the AWS Cloud? (Select Two.)

A. The application has built-in fault tolerance

B. The application can scale based on demand

C. Users must manually configure Amazon EC2 instances

D. Users have a choice of operating systems

E. Users can run Amazon EC2 Spot Instances

Correct Answer: AB

QUESTION 128 A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion. Which AWS service should the developer use to meet these requirements?

A. AWS Ground Station

B. AWS CloudFormation

C. AWS Shield

D. AWS loT Device Defender

Correct Answer: B

QUESTION 129 Which action will provide documentation to help a company evaluate whether its use of the AWS Cloud is compliant with local regulatory standards?

A. Using AWS Artefact

B. Running Amazon GuardDuty

C. Creating an AWS Support ticket

D. Evaluating AWS CloudTrail logs

Correct Answer: A

QUESTION 130 A company wants to configure its AWS resources so that the resources can be easily deployed across different AWS Regions. The company wants the deployment to be as automated as. Which AWS service will meet these requirements?

A. AWS CodePipeline

B. AWS CodeBuild

C. AWS CloudFormation

D. Amazon CloudWatch

Correct Answer: A

QUESTION 131 A company is designing AWS architecture that will add compute resources when the company needs them. The architecture also includes a disaster recovery plan with automatic failover. Which pillar of the AWS Well-Architected Framework does this architecture represent?

A. Operational excellence

B. Reliability

C. Security

D. Performance efficiency

Correct Answer: B

QUESTION 132 Which AWS service or feature provides an online, managed software catalogue that helps users purchase and deploy third-party software?

A. AWS Support

B. AWS Marketplace

C. AWS reseller programs

D. Amazon EC2 private Amazon Machine Images (AMIs)

Correct Answer: D

QUESTION 133 A developer wants to use an Amazon S3 bucket to store application logs that contain sensitive data. Which AWS service or feature should the developer use to restrict read and write access to the S3 bucket?

A. Security groups

B. AWS CloudTrail

C. Amazon CloudWatch

D. ACLs

Correct Answer: B

QUESTION 134 What is the recommended use case for Amazon EC2 On-Demand Instances?

A. A steady-state workload that requires a particular EC2 instance configuration for a long period of time.

B. A workload that can be interrupted for a project that requires the lowest possible cost

C. A workload that is expected to run for longer than 1 year

D. An unpredictable workload that does not require a long-term commitment

Correct Answer: D

QUESTION 135 A company sets up its AWS environment and creates eight IAM users for the development team.Which of the following is a best practice for the company to follow to grant permissions to these IAM users?

A. Apply the principle of least privilege. Create one password, and set the password for each user.

B. Apply the principle of least privilege. Attach a separate IAM policy for each individual user.

C. Provide the development team members with AWS account root user access.

D. Apply the principle of least privilege. Grant access to an IAM group, and add the eight users to that group.

Correct Answer: B

techinsightslabs

AWS Certified Cloud Practitioner (CLF-C01)Exam I

Solverwp- WordPress Theme and Plugin