AWS Certified Cloud Practitioner (CLF-C01)Exam L

QUESTION 1 Which of the following are security principles in the AWS Well-Architected Framework? (Select TWO.)

A. Monitor, alert and audit actions and changes to AWS resources

B. Analyze and attribute expenditures

C. Protect data in transit and at rest

D. Deploy globally in minutes

E. Perform operations as code

Correct Answer: AC

QUESTION 2 Which AWS services are delivered globally instead of regionally? (Select TWO.)

A. Amazon EC2

B. Amazon VPC

C. Amazon RDS

D. Amazon CloudFront

E. Amazon Route 53

Correct Answer: DE

QUESTION 3 A user has been granted permission to change their own IAM user password. Which AWS services can the user to change the password? (Select TWO.)

A. AWS Key Management Service (AWS KMS)

B. AWS Command Line Interface (AWS CLI)

C. AWS Resource Access Manager (AWS RAM)

D. AWS Management Console

E. AWS Secrets Manager

Correct Answer: BD

QUESTION 4 A company is running a regulated Linux-based application. The application must run every Ft day horn 8 AM until midnight. The application is critical and cannot be interrupted. Which Amazon EC2 instance purchasing option meets this requirement MOST cost-effectively?

A. Spot instances

B. On-Demand Capacity Reservation with Savings Plan

C. Regional Reserved Instances

D. Dedicated Hosts

Correct Answer: B

QUESTION 5 Which pillar of Vie AWS Well-Architected Framework is focused on the ability of a workload lo perform its intended function correctly and consistently at the expected time?

A. Operational excellence

B. Reliability

C. Performance efficiency

D. Security

Correct Answer: C

QUESTION 6 Which AWS service or feature enables users to get one bill and easily track charges for multiple AWS accounts?

A. Cost Explorer

B. AWS Organizations

C. AWS Trusted Advisor

D. AWS Management Console

Correct Answer: B

QUESTION 7 A company wants to use a template to reliably provision, manage, and update its infrastructure in the AWS Cloud. Which AWS service will meet these requirements?

A. AWS CloudFormation

B. AWS Lambda

C. AWS Fargate

D. AWS CodeDeploy

Correct Answer: A

QUESTION 8 Which AWS service will help a company plan a migration to AWS by collecting the configuration usage and behaviour data of on-premises data centres?

A. AWS Resource Groups

B. AWS Service Catalog

C. AWS Application Discovery Service

D. AWS Systems Manager

Correct Answer: C

QUESTION 9 A company has acquired several other companies. All the companies host their IT infrastructure in the AWS Cloud. Which AWS service should the acquiring company use to centralise the account management?

A. AWS Organizations

B. AWS Systems Manager

C. AWS Security Hub

D. Amazon Workspaces

Correct Answer: A

QUESTION 10 Which fully managed AWS service allows a user to bring their own machine teaming algorithm?

A. Amazon Forecast

B. AWS Artefact

C. Amazon SageMaker

D. AWS Data Pipeline

Correct Answer: C

QUESTION 11 A company distributes traffic evenly among a fleet of Amazon EC2 instances. The EC2 instances must accommodate unpredictable increases in traffic. Which benefit does the AWS Cloud provide to meet this requirement?

A. Resilience

B. Scalability

C. Security

D. Agility

Correct Answer: B

QUESTION 12 What is the MOST secure way to store passwords on AWS?

A. Store passwords in an Amazon S3 bucket

B. Store passwords as AWS CloudFormation parameters

C. Store passwords in AWS Secrets Manager

D. Store passwords in AWS Storage Gateway

Correct Answer: C

QUESTION 13 Which of the following are benefits that a company receives when it moves an on-premises internet-lacing website to the AWS Cloud? (Select TWO.)

A. Website capacity can expand or contract as website traffic changes.

B. Data that is stored in the AWS Cloud is automatically encrypted.

C. AWS automatically provides the company with the lowest-cost pricing model.

D. The company can take advantage of the pay-as-you-go pricing model

E. The website shows up with higher priority in internet search engines

Correct Answer: AD

QUESTION 14 A company is running an Amazon EC2 instance in a VPC. Which of the following can the company use to route and filter incoming network requests for the EC2 instance?

A. Route tables and web application firewalls

B. Security groups and a network intrusion system

C. Security groups and route tables

D. Route tables and AWS Shield

Correct Answer: B

QUESTION 15 Which of the following does Amazon CloudFront use to distribute content to users around the world?

A. Amazon VPC

B. Edge locations

C. AWS Local Zones

D. Availability Zones

Correct Answer: B

QUESTION 16 A company plans to migrate complex legacy systems to AWS. The company will use several operating systems, multiple databases and multiple programming languages. Which benefit of the AWS Cloud does this scenario represent?

A. Reliability

B. Scalability

C. Flexibility

D. Security

Correct Answer: A

QUESTION 17 A company is reviewing the current costs of running its own infrastructure on premises. The company wants to compare these on-premises costs to the costs of running infrastructure in the AWS Cloud. How should the company make this comparison?

A. Review the AWS shared responsibility model.

B. Use Migration Evaluator.

C. Audit existing software and hardware licensing costs.

D. Analyze the AWS Well-Architected Framework.

Correct Answer: B

QUESTION 18 A company needs to automatically protect its Amazon EC2 instances from distributed denial of service (DDoS) attacks. Which AWS service or tool will provide this protection?

A. Network access control list (ACL)

B. Security group

C. AWS Shield

D. Amazon GuardDuty

Correct Answer: C

QUESTION 19 A system administrator notices that several Amazon EC2 instances have been terminated. The system administrator needs to identify the user or AWS API call that terminated these instances. Which AWS service should the system administrator use to meet this requirement?

A. AWS CloudTrail

B. AWS Trusted Advisor

C. Amazon Inspector

D. Amazon Detective

Correct Answer: A

QUESTION 20 A company wants to offer direct phone and chat channels for customer service. The company needs a pay-as-you-go solution that remote customer service agents can use to create and manage voice and chat contact flows. Which AWS service will meet these requirements?

A. Amazon EventBridge (Amazon CloudWatch Events)

B. Amazon Cognito

C. Amazon Connect

D. AWS Direct Connect

Correct Answer: C

QUESTION 21 A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup Language (SAML) 2.0. Which AWS service will meet this requirement?

A. AWS Identity and Access Management (IAM)

B. AWS Single Sign-On

C. Amazon Cognito

D. AWS CL

Correct Answer: C

QUESTION 22 A company that uses AWS needs to transfer 2 TB of data. Which type of transfer of that data would result in no cost for the company?

A. Outbound data transfer to the internet

B. Inbound data transfer from the internet

C. Data transfer between AWS Regions

D. Data transfer between Availability Zones

Correct Answer: A

QUESTION 23 A company wants to push VPC Flow Logs to an Amazon S3 bucket. Which action is the company's responsibility?

A. Managing the infrastructure that runs the S3 bucket.

B. Managing the data in transit.

C. Managing the operating system updates on the S3 bucket

D. Managing the encryption options on the S3 bucket

Correct Answer: D

QUESTION 24 A company is hosting an application in the AWS Cloud. The company wants to verify that underlying AWS services and general AWS infrastructure are operating normally. Which combination of AWS services can the company use to gather the required information? (Select TWO).

A. AWS Personal Health Dashboard.

B. AWS trusted Advisor

C. AWS System Manager

D. AWS Service Catalog

E. AWS Service Health Dashboard

Correct Answer: BE

QUESTION 25 Which component of the AWS global infrastructure does Amazon CloudFront use to deliver content to end users with low latency?

A. AWS Regions

B. Edge locations

C. Availability Zones

D. AWS Direct Connect connections

Correct Answer: B

QUESTION 26 Which of the following can be used to identify a specific user who slopped an Amazon EC2 instance?

A. Amazon inspector

B. Amazon CloudWatch

C. AWS CloudTrail

D. VPC Flow Logs

Correct Answer: C

QUESTION 27 A company wants to organise its users so that the company can grant permissions to the users as a group. Which AWS service or tool can the company use to meet this requirement?

A. AWS identity and Access Management (IAM)

B. Security groups

C. Resource groups

D. AWS Security Hub

Correct Answer: A

QUESTION 28 Which actions is the responsibility of AWS under the AWS shared responsibility model (Select TWO.)

A. Enabling encryption on an Amazon S3 bucket

B. Scanning AWS service endpoints for vulnerabilities

C. Configuring security group rules

D. Encrypting traffic on the AWS backbone between global and regional AWS facilities

E. Enforcing application access restrictions

Correct Answer: BD

QUESTION 29 A company is developing a new Node.js application. The application must have a scalable NoSQL database to meet increasing demand as the popularity of the application grew. Which AWS services will meet the requirements for the database?

A. Amazon Aurora Serverless

B. Amazon DynamoDB

C. Amazon ElastiCache

D. Amazon Redshift

Correct Answer: B

QUESTION 30 A company recently mutated to AWS and wants to enable intelligent threat protection and continuous monitoring across all of its AWS accounts. Which AWS service should the company use to achieve this goal?

A. Amazon GuardDuty

B. Amazon Macie

C. AWS Shield

D. Amazon Detective

Correct Answer: A

QUESTION 31 Which solution provides a fast, automated and repeatable method of deploying AWS Cloud infrastructure to multiple AWS Regions?

A. Use AWS CodeStar to set up a continuous delivery toolchain for automated deployment

B. Create and launch an Amazon EC2 Amazon Machine Image (AMI) containing the source code with butt-m deployment hooks lo launch other AWS services

C. Use AWS Systems Manager to automate management tasks such as creating Amazon EC2 Amazon Machine images (AMIS) and applying patches

D. Create and use an AWS CloudFormation template

Correct Answer: D

QUESTION 32 A company wants to use a server-less computer service for an application. When will the AWS service meet its requirement?

A. AWS CloudFormation

B. AWS Elastic Beanstalk

C. Elastic Load Balancing

D. AWS Lambda

Correct Answer: D

QUESTION 33 A company is considering implementing a new workload m the AWS Cloud However, the company first wants to forecast the potential cost. Which tool should the company use to estimate the cost of the workload?

A. Cost Explorer

B. AWS Billing and Cost Management dashboard

C. AWS Pricing Calculator

D. AWS Cost and Usage Report

Correct Answer: C

QUESTION 34 An ecommerce company is using Amazon EC2 Auto Scaling groups to manage a fleet of web servers running on Amazon EC2. This architecture follows which AWS Well/architected Framework best practice?

A. Design for failure

B. Secure the workload

C. Decouple infrastructure components

D. Think parallel

Correct Answer: A

QUESTION 35 A developer wants to deploy an application on a container-based service. The service must automatically provision and manage the backend instances. The service must provision only the necessary resources. Which AWS service will meet these requirements?

A. Amazon EC2

B. Amazon Lightsail

C. AWS Margate

D. Amazon Elastic Kubernetes Service (Amazon EKS)

Correct Answer: C

QUESTION 36 Wh.cn of the following are advantages of the AWS Cloud? (Select TWO.)

A. Launch globally in minutes

B. Overprovision to ensure capacity

C. Trade variable expenses tor capital expenses

D. High economies of scale

E. Focus on managing hardware infrastructure

Correct Answer: AB

QUESTION 37 Which task is the responsibility of the customer according to the AWS snared responsibility model?

A. Patch the Amazon DynamoDB operating system

B. Secure Amazon CloudFront edge locations by allowing physical access according to the principle of least privilege

C. Use AWS Identity and Access Management (IAM) according to the principle of least privilege

D. Protect the hardware that runs AWS services

Correct Answer: C

QUESTION 38 A company that is migrating to the AWS Cloud wants to reduce the operational costs of running its databases. Which combination of actions should the company take to achieve this goal (Select TWO.)

A. Activate Amazon DynamoDB Accelerator (DAX)

B. Deploy resources across multiple Availability Zones.

C. Use the AWS global infrastructure to benefit from economies of scale

D. Decrease operational tasks by using AWS managed services.

E. Automate changes and responses to events.

Correct Answer: DE

QUESTION 39 A company wants to design its cloud architecture so that its workloads are resilient can consistently perform their intended functions correctly and can recover from failure quickly. Which pillar of the AWS Well-Architected Framework does this architecture represent?

A. Security

B. Performance efficiency

C. Reliability

D. Operational excellence

Correct Answer: C

QUESTION 40 According to the AWS shared responsibility model, which activities are the customer's responsibility for security in the AWS Cloud? (Select TWO.)

A. Hardware maintenance

B. Configuration management of infrastructure devices

C. Maintenance of an Availability Zone

D. Amazon EC2 operating system patching

E. API access control for AWS resources

Correct Answer: DE

QUESTION 41 Which AWS service allows for file sharing between multiple Amazon EC2 instances?

A. AWS Direct Connect

B. AWS Snowball Edge

C. Amazon Elastic File System (Amazon EFS)

D. AWS Backup

Correct Answer: C

QUESTION 42 Which AWS services provide high availability across multiple Availability Zones by default? (Select TWO.)

A. Amazon Elastic Block Store (Amazon EBS)

B. Amazon EC2

C. Amazon Elastic File System (Amazon EFS)

D. Amazon S3

E. Amazon Redshift

Correct Answer: AE

QUESTION 43 Which pillar of the AWS Well-Architected Framework includes the continual improvement of processes and procedures as a priority?

A. Cost optimization

B. Reliability

C. Operational excellence

D. Performance efficiency

Correct Answer: C

QUESTION 44 Which of the following are design principles of the reliability pillar of the AWS Well- Architected Framework? (Select TWO.)

A. Perform operations as code.

B. Adopt serverless architecture whenever possible.

C. Stop guessing capacity.

D. Make changes to infrastructure by using automation.

E. Use build and deployment management systems.

Correct Answer: CD

QUESTION 45 A user is a new AWS account owner who has no special access requirements. What should this user do with the AWS account root user access keys?

A. Share the keys with all relevant internal users so that those users can programmatically access AWS services.

B. Use the keys for access, but do not share the keys with anyone.

C. Post the keys on GitHub to provide development teams with access to AWS services.

D. Delete the keys and create IAM users.

Correct Answer: B

QUESTION 46 A company needs to design an AWS disaster recovery plan to cover multiple geographic areas. Which Will action meets this requirement?

A. Configure multiple AWS accounts.

B. Configure the architecture across multiple AWS Regions.

C. Configure the architecture across multiple Availability Zones in an AWS Region.

D. Configure the architecture among many edge locations.

Correct Answer: B

QUESTION 47 A company is using an Amazon RDS database to run reports that are input/output (I/O) intensive. Which Are AWS services used to improve the database performance?

A. Amazon DynamoDB Accelerator (DAX)

B. Amazon EMR

C. Amazon Redshift

D. Amazon ElastiCache

Correct Answer: D

QUESTION 48 Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?

A. Amazon Workspaces virtual Windows desktop

B. Amazon FSx for Windows File Server

C. AWS Directory Service for Microsoft Active Directory

D. Amazon RDS for Microsoft SQL Server

Correct Answer: A

QUESTION 49 Which AWS service is a fully hosted version control serviceWhich AWS service supports the analysis, investigation, and identification of the root cause of security events and suspicious activities in an AWS account?

A. Amazon Inspector

B. Amazon Macie

C. Amazon CloudWatch

D. Amazon Detective

Correct Answer: D

QUESTION 50 An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company's direct responsibility?

A. Cost of the hardware infrastructure on AWS

B. Cost of application software licences

C. Cost of power for the AWS servers

D. Cost of physical security for the AWS data centre

Correct Answer: B

QUESTION 51 A company is planning to build a workload in the AWS Cloud. The company needs to estimate the costs of the network, compute, storage, and database for the workload. Which AWS service or tool should the company used to generate this estimate?

A. AWS Budgets

B. AWS Organizations

C. AWS Pricing Calculator

D. Cost Explorer

Correct Answer: C

QUESTION 52 A company is moving its virtual machines (VMs) from an on-premises environment to the AWS Cloud. The company plans to deploy Amazon EC2 instances. Which cloud computing model will the company use in this scenario?

A. Infrastructure as a service (laaS)

B. Platform as a service (PaaS)

C. Function as a service (FaaS)

D. Software as a service (SaaS)

Correct Answer: A

QUESTION 53 A company needs to audit its AWS resources. The company must document any changes that have been made to the resources. Which AWS service will meet these requirements?

A. AWS Config

B. AWS Artefact

C. Amazon Inspector

D. Amazon CloudWatch

Correct Answer: A

QUESTION 54 Which of the following consists of one or more isolated data centres in the same regional area that are interconnected through low-latency networks?

A. Edge location

B. AWS Region

C. Availability Zone

D. Private networking

Correct Answer: C

QUESTION 55 A company is moving its on-premises NoSQL database to the AWS Cloud. Which AWS service should the company use for the NoSQL database?

A. Amazon Redshift

B. Amazon RDS for MySQL

C. Amazon DynamoDB

D. Amazon Quantum Ledger Database (Amazon QLDB)

Correct Answer: C

QUESTION 56 Which AWS service offers threat detection and continuously monitors for malicious activity and unauthorised behaviour in AWS accounts?

A. Amazon Made

B. Amazon GuardDuty

C. AWS Config

D. Amazon Inspector

Correct Answer: B

QUESTION 57 A company's on-premises application deployment cycle was 3-4 weeks. After migrating to the AWS Cloud, The company can deploy the application in 2-3 days. Which benefit has this company experienced by moving to the AWS Cloud?

A. Elasticity

B. Agility

C. Flexibility

D. Resilience

Correct Answer: B

QUESTION 58 A company's system administrator discovers that someone logged in to the company's AWS account during the weekend and terminated an Amazon EC2 instance. Which AWS service should the system administrator use to identify who made this change?

A. AWS CloudTrail

B. Amazon Inspector

C. Amazon Pinpoint

D. AWS Trusted Advisor

Correct Answer: A

QUESTION 59 Which Reserved Instance (Rl) provides the HIGHEST average cost savings compared to an On-Demand Instance?

A. 1-year. No Upfront. Standard Rl

B. 1-year. All Upfront. Convertible Rl

C. 3-year. No Upfront. Convertible Rl

D. 3-year. All Upfront, Standard Rl

Correct Answer: D

QUESTION 60 A company wants to set up an entire development and continuous delivery toolchain for coding, building, testing, and deploying application code. Which AWS service will meet these requirements?

A. Amazon CodeGuru

B. AWS CodeCommit

C. AWS CodeStar

D. AWS CodeDeploy

Correct Answer: C

QUESTION 61 Which service is an AWS in-memory data store service?

A. Amazon Aurora

B. Amazon ElastiCache

C. Amazon RDS

D. Amazon DynamoDB

Correct Answer: B

QUESTION 62 Which Amazon S3 feature or storage class uses the AWS backbone network and edge locations to reduce latencies from the end user to Amazon S3?

A. S3 Transfer Acceleration

B. S3 Cross-Region Replication

C. S3 Event Notifications

D. S3 Standard-Infrequent Access (S3 Standard-IA)

Correct Answer: A

QUESTION 63 Which AWS service or tool lists all the users in an account and reports on the status of account details, including passwords, access keys, and multi-factor authentication (MFA) devices?

A. WS Shield

B. AWS Trusted Advisor

C. IAM credential report

D. Amazon Inspector

Correct Answer: C

QUESTION 64 A company needs to store code in a version control system. The company also needs to continually deploy updated code through a series of automated steps (build test package and deploy). Which combination of Do AWS services meet these requirements? (Select TWO.)

A. AWS CodeCommit

B. AWS CloudFormation

C. AWS Control Tower

D. AWS CodePipeline

E. AWS Elastic Beanstalk

Correct Answer: AD

QUESTION 65 Which AWS service provides intelligent recommendations to improve code quality and identify an application is the most expensive line of code?

A. AWS CodeStar

B. Amazon CodeGuru

C. AWS CodeCommit

D. AWS CodeDeploy

Correct Answer: B

QUESTION 66 A company is using Amazon EC2 instances. Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Select TWO.)

A. Provide physical security for the underlying hardware Of the EC2 instances.

B. Manage the underlying hypervisor.

C. Maintain the network infrastructure.

D. Patch the guest operating system.

E. Configure a security group on deployed EC2 instances.

Correct Answer: AB

QUESTION 67 What should a user do if the user loses an IAM secret access key?

A. Create a new user with a new access key and a new secret access key.

B. Retrieve the secret access key by using the IAM console.

C. Rotate the secret access key.

D. Request a new secret access key from AWS Support.

Correct Answer: B

QUESTION 68 A company needs to deploy an Amazon EC2 instance and attach a storage mount for the operating system and application files. Which AWS service will meet these requirements?

A. AWS Backup

B. Amazon Elastic File System (Amazon EFS)

C. Amazon Elastic Block Store (Amazon EBS)

B. Amazon S3

Correct Answer: C

QUESTION 69 A company needs to perform queries and interactively search and analyse log data. Which AWS service or feature will meet this requirement?

A. Amazon EventBridge (Amazon CloudWatch Events)

B. Amazon CloudWatch Logs Insights

C. Amazon CloudWatch anomaly detection

D. Amazon CloudWatch Logs streams

Correct Answer: B

QUESTION 70 Which AWS service adds speech-to-text capabilities to applications?

A. Amazon Transcribe

B. Amazon Polly

C. Amazon Textract

D. Amazon Comprehend

Correct Answer: A

QUESTION 71 A company is using Amazon RDS. Which task is the company's responsibility, according to the AWS shared responsibility model?

A. Manage the underlying server hardware on which Amazon RDS runs.

B. Apply encryption options for the database.

C. Apply patches to the underlying operating system.

D. Apply minor patches to the database.

Correct Answer: B

QUESTION 72 Which design principles of the AWS WelL-Architected Framework help increase reliability? (Select TWO.)

A. Enable traceability.

B. Automatically recover from failure.

C. Automate security best practices.

D Scale horizontally to increase workload availability.

E. Keep people away from data.

Correct Answer: BD

QUESTION 73 A company is using AWS for all its IT infrastructure. The company's developers are allowed to deploy applications on their own. The developers want to deploy their applications without having to provision the infrastructure themselves Which AWS service should the developers use to meet these requirements?

A. AWS CloudFormation

B. AWS CodeBuild

C. AWS CodeDeploy

D. AWS Elastic Beanstalk

Correct Answer: C

QUESTION 74 Management at a large company wants to avoid long-term contracts and is interested in AWS to move from fixed costs to variable costs. What is the value proposition of AWS for this company?

A. Pay-as-you-go pricing

B. Economy of scale

C. Volume discounts

D. Cost optimization

Correct Answer: A

QUESTION 75 A company stores several terabytes of data in an Amazon S3 bucket. The company needs to query the data by using standard SQL and does not want to set up infrastructure. Which AWS service should the companies use to meet these requirements?

A. Amazon RDS

B. Amazon Athena

C. Amazon Redshift

D. Amazon EC2

Correct Answer: B

QUESTION 76 A company has an on-premises Oracle database. The company spends a significant amount of time on database administration activities. The company is moving the database to AWS and needs to minimise the time that is requited lot these administration activities Which AWS service should the company use to meet this requirement?

A. Amazon ElastiCache

B. Amazon RDS

C. Amazon EC2

D. Amazon DynamoDB

Correct Answer: B

QUESTION 77 A company wants to receive alerts when resources that are launched in the company's AWS account reach 80% of their service quotas. Which AWS service should the company use to meet this requirement?

A. AWS Trusted Advisor

B. AWS CloudTrail

C. AWS Config

D. Amazon inspector

Correct Answer: A

QUESTION 78 A company is running a workload on AWS. The company wants to protect the workload from DDoS attacks. When does the AWS service meet these requirements?

A. AWS Identity and Access Management (IAM)

B. Amazon VPC

C. AWS Shield

D. AWS Artefact

Correct Answer: C

QUESTION 79 A company has deployed its IT infrastructure in the AWS Cloud. The company's database must support reads with sub-millisecond latency.Which AWS service will meet this requirement?

A. Amazon EMR

B. Amazon ElastiCache

C. Amazon RDS

D. AWS Glue

Correct Answer: B

QUESTION 80 Which of the following is available to a company that has an AWS Business Support plan?

A. AWS Support concierge

B. AWS DDoS Response Team (DRT)

C. AWS Health API

D. AWS technical account manager (TAM)

Correct Answer: C

QUESTION 81 Which of the following is an advantage of AWS Cloud computing?

A. Trade fixed expenses for variable expenses

B. Trade security for elasticity

C. Trade operational excellence for agility

D. Trade elasticity for performance.

Correct Answer: A

QUESTION 82 Which AWS service tool or feature helps companies reduce costs by identifying underutilised Amazon EC2 instances?

A. Amazon Inspector

B. AWS Trusted Advisor

C. Cost Explorer

D. Consolidated billing

Correct Answer: C

QUESTION 83 Which AWS service or feature will search for and identify AWS resources that are stared externally?

A. Amazon OpenSearch Service (Amazon Elasticsearch Service)

B. AWS IAM Access Analyzer

C. AWS Control Tower

D. AWS Fargate

Correct Answer: B

QUESTION 84 A company wants to deploy, scale, and manage third-party virtual appliances in a cluster in the AWS Cloud. These applications include firewalls, intrusion detection and prevention systems, and deep packet inspection systems. Which AWS service or resource will meet these requirements?

A. Application Load Balancer

B. Network Load Balancer

C. AWS Global Accelerator

D. Gateway Load Balancer

Correct Answer: D

QUESTION 85 Which AWS Cloud benefit is shown by architecture's ability to withstand minimal downtime?

A. Agility

B. Scalability

C. Elasticity

D. High availability

Correct Answer: B

QUESTION 86 Which of the following gives a company the ability to fake advantage of tiered pricing tor services across multiple AWS member accounts?

A. AWS Organizations service control policies (SCPs)

B. AWS Organizations consolidated billing

C. All Upfront Reserved instances

D. Cost Explorer utilisation reports

Correct Answer: B

QUESTION 87 A company wants to accelerate migration from its data center to the AWS Cloud. Which combination of AWS services should the company use to meet this requirement? (Select TWO.)

A. AWS Direct Connect

B. Amazon Connect

C. Amazon Route 53

D. AWS Server Migration Service (AWS SMS)

E. AWS Organizations

Correct Answer: AD

QUESTION 88 A company needs an AWS service that will continuously monitor the company's AWS account for suspicious activity. The service must have the ability to initiate automated actions against threats that are identified in the security findings. Which service will meet these requirements?

A. AWS Trusted Advisor

B. Amazon GuardDuty

C. Amazon Detective

D. Amazon Inspector

Correct Answer: B

QUESTION 89 What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?

A. Customer data

B. Software licences

C. Networking

D. Encryption keys

Correct Answer: A

QUESTION 90 Which of the following are advantages of moving to the AWS Cloud? (Select TWO.)

A. Users experience increased speed and agility.

B. Users benefit from massive economies of scale.

C. Users can implement all AWS services in seconds.

D. AWS assumes all responsibility for the security of infrastructure and applications.

E. Users can move hardware from their data centre to the AWS Cloud.

Correct Answer: AB

QUESTION 91 A company runs a web application on Amazon EC2 instances. The application has consistent usage and is expected to run indefinitely. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

A. 1-year All Upfront Reserved Instances

B. 1-year No Upfront Reserved Instances

C. 3-year No Upfront Reserved Instances

D. 3-year All Upfront Reserved Instances

Correct Answer: D

QUESTION 92 Which of the following are advantages of moving from on premises to the AWS Cloud? (Select TWO)

A. Eliminate costs related to running and maintaining data centres.

B. Trade variable expenses for capital expenses

C. Eliminate the need to train IT staff.

D. Benefit from massive economies of scale.

E. Gain the ability to reserve capacity for 7 years or more

Correct Answer: BC

QUESTION 93 A company wants to build an application that consists entirely of microservices. Which AWS Cloud architecture design principle supports this goal?

A. Think parallel

B. Implement elasticity

C. Decoupled components

D. Stop guessing capacity

Correct Answer: C

QUESTION 94 A company needs an AWS service that can monitor the company's AWS account If the service identifies misconfigurations; the company's operations team must receive an alert Additionally, the service must remediate the issues by invoking AWS Lambda functions. Which service will meet these requirements?

A. Amazon Macie

B. AWS Trusted Advisor

C. Amazon GuardDuty

D. AWS Config

Correct Answer: B

QUESTION 95 A company wants to deploy a Docker application to the AWS Cloud. However, the company does not want to manage the underlying servers. Which combination of AWS services should the company use to meet these requirements? (Select TWO)

A Amazon EC2 Auto Scaling

B. Amazon EC2

C. AWS Elastic Beanstalk

D. AWS Fargate

E. Amazon CloudFront

Correct Answer: BD

QUESTION 96 A company notices suspicious network activity against an application that is running on a fleet of Amazon EC2 instances The suspicious activity is coming from a single IP address Which AWS service should the company use to block access from this IP address?

A. AWS Shield

B. AWS Config

C. AWS WAF

D. Amazon GuardDuty

Correct Answer: C

QUESTION 97 A company is designing an application. For the data persistence layer, the company wants to use a NoSQL database. Which AWS service should the company use for the database?

A. Amazon Redshift

B. Amazon DynamoDB

C. AWS DataSync

D. Amazon Athena

Correct Answer: B

QUESTION 98 A company needs to transfer 60 TB of data to the AWS Cloud in a secure manner. Which of the following should the company use to meet these requirements?

A. Amazon Elastic Block Store (Amazon EBS)

B. Amazon Elastic File System (Amazon EFS)

C. AWS Snowball Edge device

D. Amazon S3

Correct Answer: C

QUESTION 99 Which AWS service can a company use to analyse and debug performance issues of an AWS Lambda function?

A. Amazon Inspector

B. Amazon Detective

C. AWS X-Ray

D. AWS CodeStar

Correct Answer: C

QUESTION 100 Which of the following are advantages of the AWS Cloud? (Select TWO.)

A. Ability to quickly change required capacity

B. AWS management of user-owned infrastructure

C. Increased deployment time to market

D. High economies of scale

E. Increased fixed expenses

Correct Answer: AC

QUESTION 101 A company is choosing an AWS Support plan. The company needs the ability to contact cloud support engineers by phone, email, and chat 24 hours a day, 7 days a week. What is the LEAST expensive AWS Support plan that meets these requirements?

A. AWS Basic Support

B. AWS Business Support

C. AWS Developer Support

D. AWS Enterprise Support

Correct Answer: B

techinsightslabs

AWS Certified Cloud Practitioner (CLF-C01)Exam L

Solverwp- WordPress Theme and Plugin