AWS Certified Cloud Practitioner (CLF-C02) -100 Questions & Answers (Part 3)

The AWS Certified Cloud Practitioner (CLF-C02) exam is a foundational certification designed for individuals seeking to demonstrate their understanding of the AWS Cloud, its core services, security, pricing, and support. Whether you’re new to cloud computing or looking to solidify your knowledge, preparing for the CLF-C02 exam requires a comprehensive understanding of these topics.

To aid in your preparation, we present the “AWS Certified Cloud Practitioner CLF-C02 Past Questions and Answers” resource. This compilation is meticulously crafted by experts in the field to ensure you have the best possible preparation materials at your disposal. With a collection of past questions and detailed answers, this resource is an invaluable tool for anyone aiming to pass the CLF-C02 exam on their first attempt.

The question bank covers all essential domains of the CLF-C02 exam, including:
1. Cloud Concepts: Basic understanding of cloud computing principles, AWS Cloud, and its value proposition.
2. Security and Compliance: Understanding of AWS shared responsibility model, AWS Cloud security and compliance concepts, and AWS access management capabilities.
3. Technology: Core AWS services, including compute, storage, database, and networking, along with their use cases.
4. Billing and Pricing: AWS billing and pricing models, cost management, and how to find pricing information and determine costs.

Each question is designed to reflect the actual exam format, helping you become familiar with the types and styles of questions you will encounter. The answers not only provide the correct choice but also include comprehensive explanations and rationales, offering deeper insights into the concepts and the reasoning behind each solution. This helps reinforce your understanding and improves your ability to apply knowledge in a practical setting.

By regularly practicing with these past questions, you can identify your strengths and weaknesses, enabling you to focus your study efforts more effectively. This targeted approach enhances your readiness and boosts your confidence, significantly increasing your chances of passing the exam.

Our resource is user-friendly and accessible, allowing you to study anytime and anywhere at your convenience. Whether you prefer to practice on your computer, tablet, or smartphone, you can easily integrate study sessions into your daily routine.

Investing in the “AWS Certified Cloud Practitioner CLF-C02 Past Questions and Answers” is an investment in your future. Equip yourself with the knowledge and skills needed to succeed in the exam and advance your career in cloud computing. Join the ranks of certified AWS professionals and unlock new opportunities in the dynamic field of cloud technology.

0 votes, 0 avg

AWS Certified Cloud Practitioner (CLF-C02) Questions & Answers - Part 3

AWS Certified Cloud Practitioner (CLF-C02) Questions & Answers - Part 3

Questions will be picked at random from the question bank.

You can use the NEXT button to move to the next question, use the PREV button to move to the previous question, the CLEAR button to clear any answer of your choice and you have the FINISH button to end the exam if you choose to.

Any question not answered before the end of the exam time, will be marked as wrong and the exam will end by itself. So try to attempt all questions on time.

Goodluck!

1 / 100

1. What does the term 'Economies of scale' mean?

It means as more time passes using AWS, you pay more for its services.

It means that AWS will continuously lower costs as it grows.

It means that you have the ability to pay as you go.

It means that you save more when you consume more.

2 / 100

2. A company is building an online cloud storage platform. They need a storage
service that can scale capacity automatically, while minimizing cost. Which AWS
storage service should the company use to meet these requirements?

Amazon Elastic Block Store.

Amazon Elastic Container Service.

Amazon Simple Storage Service.

AWS Storage Gateway.

3 / 100

3. Which of the below options is a best practice for making your application on AWS
highly available?

Deploy the application code on at least two servers in the same Availability Zone.

Use Elastic Load Balancing (ELB) across multiple AWS Regions.

Rewrite the application code to handle all incoming requests.

Deploy the application to at least two Availability Zones.

4 / 100

4. A company is developing a mobile application and wants to allow users to use
their Amazon, Apple, Facebook, or Google identities to authenticate to the
application. Which AWS Service should the company use for this purpose?

Amazon Cognito.

Amazon GuardDuty.

Amazon Personalize.

AWS IAM.

5 / 100

5. Who from the following will get the largest discount?

A user who chooses to buy Reserved, Standard, All upfront instances.

A user who chooses to buy Reserved, Standard, No upfront instances.

A user who chooses to buy Reserved, Convertible, All upfront instances.

A user who chooses to buy On-demand, Convertible, Partial upfront instances.

6 / 100

6. Which of the below options is true of Amazon Cloud Directory?

Amazon Cloud Directory allows for registration and management of domain names.

Amazon Cloud Directory allows the organization of hierarchies of data across multiple dimensions.

Amazon Cloud Directory enables the analysis of video and data streams in real time.

Amazon Cloud Directory allows users to access AWS with their existing Active Directory credentials

7 / 100

7. You are using several on-demand EC2 Instances to run your development
environment. What is the best way to reduce your charges when these instances
are not in use?

Deleting all EBS volumes attached to the instances.

You cannot minimize charges for on-demand instances.

Stopping the instances.

Terminating the instances

8 / 100

8. Which of the following are advantages of using AWS as a cloud computing
provider? (Choose TWO)

Provides custom hardware to meet any specification

Eliminates the need to monitor servers and applications.

Enables customers to trade their capital expenses for operational expenses.

Manages all the compliance and auditing tasks.

Eliminates the need to guess on infrastructure capacity needs.

9 / 100

9. Which methods can be used by customers to interact with AWS Identity and
Access Management (IAM)? (Choose TWO)

AWS Security Groups.

AWS CLI

AWS SDKs.

AWS Network Access Control Lists.

AWS CodeCommit.

10 / 100

10. Which of the below options are use cases of the Amazon Route 53 service?
(Choose TWO)

Manages global application traffic through a variety of routing types

Provides infrastructure security optimization recommendations.

Detects configuration changes in the AWS environment.

Point-to-point connectivity between an on-premises data center and AWS.

DNS configuration and management.

11 / 100

11. For Amazon RDS databases, what does AWS perform on your behalf? (Choose
TWO)

Database setup.

Management of the operating system

Access management.

Management of firewall rules

Network traffic protection.

12 / 100

12. A company's AWS workflow requires that it periodically perform large-scale image
and video processing jobs. The customer is seeking to minimize cost and has
stated that the amount of time it takes to process these jobs is not critical, but that
cost minimization is the most important factor in designing the solution. Which
EC2 instance class is best suited for this processing?

EC2 Spot Instances.

EC2 On-Demand Instances.

EC2 Reserved Instances - All Upfront.

EC2 Reserved Instances - No Upfront

13 / 100

13. Which features are included in the AWS Business Support Plan? (Choose TWO)

24x7 access to the TAM feature.

Partial access to the core Trusted Advisor checks.

Access to the Infrastructure Event Management (IEM) feature for additional fee.

Access to Cloud Support Engineers via email only during business hours.

24x7 access to customer service.

14 / 100

14. Which of the following can be used to enable the Virtual Multi-Factor
Authentication? (Choose TWO)

AWS Identity and Access Management (IAM).

Amazon SNS.

AWS CLI

Amazon Virtual Private Cloud.

Amazon Connect

15 / 100

15. Which of the following strategies helps protect your AWS root account?

Apply MFA for the root account and use it for all of your work.

Only share your AWS account password or access keys with trusted persons.

Delete root user access keys if you do not need them

Access the root account only from your personal Mobile Phone.

16 / 100

16. How does AWS notify customers about security and privacy events pertaining to
AWS services?

Using Compliance Resources

Using the AWS ACM service.

Using Security Bulletins.

Using the AWS Management Console.

17 / 100

17. Which of the following S3 storage classes is most appropriate to host static assets
for a popular e-commerce website with stable access patterns?

S3 Standard-IA.

S3 Standard.

S3 Intelligent-Tiering.

S3 Glacier Deep Archive.

18 / 100

18. Your company requires a response time of less than 15 minutes from support
interactions about their business-critical systems that are hosted on AWS if those
systems go down. Which AWS Support Plan should this company use?

AWS Business Support.

AWS Basic Support.

AWS Enterprise Support.

AWS Developer Support.

19 / 100

19. Which of the following approaches will help you eliminate human error and
automate the process of creating and updating your AWS environment?

Use AWS CodeDeploy to build and automate your AWS environment.

Use Software test automation tools.

Use code to provision and operate your AWS infrastructure.

Migrate all of your applications to a dedicated host.

20 / 100

20. You have a real-time IoT application that requires sub-millisecond latency. Which
of the following services should you use?

AWS Cloud9.

Amazon Redshift.

Amazon ElastiCache for Redis.

Amazon Athena.

21 / 100

21. Which tool can a non-AWS customer use to compare the cost of on-premises
environment resources to AWS?

AWS Pricing Calculator.

AWS TCO Calculator.

AWS Budgets.

AWS Cost Explorer

22 / 100

22. What is the AWS Support feature that allows customers to manage support cases
programmatically?

AWS Trusted Advisor

AWS Support API.

AWS Personal Health Dashboard

AWS Operations Support

23 / 100

23. A company wants to grant a new employee long-term access to manage Amazon
DynamoDB databases. Which of the following is a recommended best-practice
when granting these permissions?

Create an IAM user and attach a policy with Administrator access permissions.

Create an IAM role and attach a policy with Amazon DynamoDB access permissions.

Create an IAM role and attach a policy with Administrator access permissions.

Create an IAM user and attach a policy with Amazon DynamoDB access permissions.

24 / 100

24. Which of the following has the greatest impact on cost? (Choose TWO)

Data Transfer In charges

The number of services used.

Compute charges.

The number of IAM roles provisioned.

Data Transfer Out charges.

25 / 100

25. A key practice when designing solutions on AWS is to minimize dependencies
between components so that the failure of a single component does not impact
other components. What is this practice called?

Elastic coupling

Loosely coupling.

Scalable coupling.

Tightly coupling.

26 / 100

26. You have just hired a skilled sys-admin to join your team. As usual, you have
created a new IAM user for him to interact with AWS services. On his first day, you
ask him to create snapshots of all existing Amazon EBS volumes and save them in
a new Amazon S3 bucket. However, the new member reports back that he is
unable to create neither EBS snapshots nor S3 buckets. What might prevent him
from doing this simple task?

There is not enough space in S3 to store the snapshots

The systems administrator must contact AWS Support first to activate his new IAM account.

EBS and S3 are accessible only to the root account owner.

There is a non-explicit deny to all new users.

27 / 100

27. Which AWS Service allows customers to create a template that programmatically
defines policies and configurations of all AWS resources as code and so that the
same template can be reused among multiple projects?

AWS CloudTrail.

AWS Config.

AWS Auto Scaling.

AWS CloudFormation

28 / 100

28. A company is developing an application that will leverage facial recognition to
automate photo tagging. Which AWS Service should the company use for facial
recognition?

Amazon Comprehend.

Amazon Rekognition.

AWS IAM

Amazon Polly.

29 / 100

29. What are the capabilities of AWS X-Ray? (Choose TWO)

Deploys applications to on-premises servers.

Facilitates tracking of user requests to identify application issues.

Deploys applications to Amazon EC2 instances.

Helps improve application performance.

Automatically decouples application components

30 / 100

30. An AWS customer has used one Amazon Linux instance for 2 hours, 5 minutes and
9 seconds, and one CentOS instance for 4 hours, 23 minutes and 7 seconds. How
much time will the customer be billed for?

3 hours for the Linux instance and 5 hours for the CentOS instance

2 hours, 5 minutes and 9 seconds for the Linux instance and 4 hours, 23 minutes and 7 seconds for the CentOS instance.

3 hours for the Linux instance and 4 hours, 23 minutes and 7 seconds for the CentOS instance.

2 hours, 5 minutes and 9 seconds for the Linux instance and 5 hours for the CentOS instance.

31 / 100

31. Which of the following should be taken into account when performing a TCO
analysis regarding the costs of running an application on AWS VS on-premises?
(Choose TWO)

Amazon EBS computing power

Software architecture.

Labor and IT costs.

Software compatibility.

Cooling and power consumption.

32 / 100

32. Which of the following are examples of the customer's responsibility to implement
'security IN the cloud'? (Choose TWO)

Creating a new hypervisor.

File system encryption.

Building a schema for an application.

Replacing physical hardware.

Patch management of the underlying infrastructure.

33 / 100

33. Which of the following AWS services uses Puppet to automate how EC2 instances
are configured?

AWS OpsWorks.

AWS CloudFormation.

AWS Quick Starts

AWS CloudTrail

34 / 100

34. Which AWS service enables you to quickly purchase and deploy SSL/TLS
certificates?

Amazon GuardDuty

AWS ACM.

Amazon Detective

AWS WAF

35 / 100

35. What should you do if you see resources, which you don't remember creating, in
the AWS Management Console? (Choose TWO)

Give your root account password to AWS Support so that they can assistin troubleshooting and securing the account.

Open an investigation and delete any potentially compromised IAM users.

Check the AWS CloudTrail logs and delete all IAM users that have access to your resources.

Stop all running services and open an investigation

Change your AWS root account password and the passwords of any IAM users.

36 / 100

36. To protect against data loss, you need to backup your database regularly. What is
the most cost-effective storage option that provides immediate retrieval of your
backups?

Amazon S3 Glacier.

Amazon S3 Glacier Deep Archive.

Amazon S3 Standard-Infrequent Access.

Instance Store

37 / 100

37. You are running a financial services web application on AWS. The application uses
a MySQL database to store the data. Which of the following AWS services would
improve the performance of your application by allowing you to retrieve
information from fast in-memory caches?

Amazon Neptune

Amazon ElastiCache.

Amazon EFS

DAX.

38 / 100

38. An external auditor is requesting a log of all accesses to the AWS resources in the
company's account. Which of the following services will provide the auditor with
the requested information?

Amazon CloudWatch.

AWS CloudFormation

Amazon CloudFront.

AWS CloudTrail.

39 / 100

39. Your CTO has asked you to contact AWS support using the chat feature to ask for
guidance related to EBS. However, when you open the AWS support center you
can't see a way to contact support via Chat. What should you do?

Upgrade from the Basic Support plan to Developer Support.

At a minimum, upgrade to Business support plan.

There is no chat feature in AWS support.

The chat feature is available for all plans for an additional fee, but you have to request it first.

40 / 100

40. Which of the following is an available option when purchasing Amazon EC2
instances? The ability to bid to get the lowest possible prices.

The ability to register EC2 instances to get volume discounts on every hour the instances are running.

The ability to bid to get the lowest possible prices.

The ability to buy Dedicated Instances for up to 90% discount

The ability to pay upfront to get lower hourly costs.

41 / 100

41. According to best practices, which of the below options is best suited for
processing a large number of binary files?

Vertically scaling RDS instances.

Running RDS instances in parallel

Running EC2 instances in parallel.

Vertically scaling EC2 instances.

42 / 100

42. A company is using EC2 Instances to run their e-commerce site on the AWS
platform. If the site becomes unavailable, the company will lose a significant
amount of money for each minute the site is unavailable. Which design principle
should the company use to minimize the risk of an outage?

Multi-threading.

Fault Tolerance

Least Privilege

Pilot Light

43 / 100

43. Why are Serverless Architectures more economical than Server-based
Architectures?

With the Server-based Architectures, compute resources continue to run all the time but with serverless architecture, compute resources are only used when code is being executed.

Serverless Architectures use new powerful computing devices.

When you reserve serverless capacity, you will get large discounts compared to server reservation.

With Serverless Architectures you have the ability to scale automatically up or down as demand changes.

44 / 100

44. A customer is seeking to store objects in their AWS environment and to make
those objects downloadable over the internet. Which AWS Service can be used to
accomplish this?

Amazon EBS.

Amazon EFS.

Amazon S3.

Amazon Instance Store.

45 / 100

45. Which of the following is a type of MFA device that customers can use to protect
their AWS resources?

U2F Security Key.

AWS CloudHSM.

AWS Key Pair

AWS Access Keys.

46 / 100

46. What is the main benefit of the AWS Storage Gateway service?

It provides physical devices to migrate data from on premises to AWS.

It automates the process of building, maintaining, and running ETL jobs.

It provides hardware-based key storage for regulatory compliance.

It allows integration of on-premises IT environments with Cloud Storage.

47 / 100

47. Which statement is true in relation to the security of Amazon EC2?

You can track all API calls using Amazon Athena

You should regularly patch the operating system and applications on your EC2 instances.

You should use instance store volumes to store login data

You should deploy critical components of your application in the Availability Zone that you trust.

48 / 100

48. An organization uses a hybrid cloud architecture to run their business. Which AWS
service enables them to deploy their applications to any AWS or on-premises
server?

Amazon Kinesis.

AWS CodeDeploy.

Amazon Athena

Amazon QuickSight.

49 / 100

49. Which of the following will help AWS customers save on costs when migrating
their workloads to AWS?

Use AWS Outposts to run all workloads in a cost-optimized environment.

Use existing third-party software licenses on AWS

Use servers instead of managed services

Migrate production workloads to AWS edge locations instead of AWS Regions.

50 / 100

50. A company is migrating a web application to AWS. The application's compute
capacity is continually utilized throughout the year. Which of the below options
offers the company the most cost-effective solution?

Dedicated Hosts.

Spot Instances.

Reserved Instances.

On-demand Instances.

51 / 100

51. A user has opened a 'Production System Down' support case to get help from
AWS Support after a production system disruption. What is the expected response
time for this type of support case?

24 hours

12 hours.

15 minutes.

One hour.

52 / 100

52. Which of the following are true regarding the languages that are supported on
AWS Lambda? (Choose TWO)

Lambda doesn't support programming languages; it is a serverless compute service.

Lambda natively supports a number of programming languages such as Node.js, Python, and Java.

Lambda can support any programming language using an API.

Lambda is AWS' proprietary programming language for microservices.

Lambda only supports Python and Node.js, but third party plugins are available to convert code in other languages to these formats.

53 / 100

53. Which of the below options is true of Amazon VPC?

AWS is responsible for all the management and configuration details of Amazon VPC.

Amazon VPC allows customers to control user interactions with all other AWS resources.

AWS Customers have complete control over their Amazon VPC virtual networking environment.

Amazon VPC helps customers to review their AWS architecture and adopt best practices.

54 / 100

54. A developer wants to quickly deploy and manage his application in the AWS
Cloud, but he doesn't have any experience with cloud computing. Which of the
following AWS services would help the developer achieve his goal?

AWS Batch.

AWS Elastic Beanstalk.

Amazon Personalize.

AWS Fargate.

55 / 100

55. Which AWS Service allows customers to download AWS SOC & PCI reports?

Amazon Chime.

AWS Artifact

AWS Glue

AWS Well-Architected Tool.

56 / 100

56. The TCO gap between AWS infrastructure and traditional infrastructure has
widened over the recent years. Which of the following could be the reason for
that?

AWS automates all infrastructure operations, so customers save more on human resources costs.

AWS helps customers invest more in capital expenditures.

AWS continues to lower the cost of cloud computing for its customers

AWS secures AWS resources at no additional charge.

57 / 100

57. Which statement best describes the AWS Pay-As-You-Go pricing model?

With AWS, you replace large capital expenses with low variable payments.

With AWS, you replace low upfront expenses with large fixed payments.

With AWS, you replace low upfront expenses with large variable payments.

With AWS, you replace large upfront expenses with low fixed payments

58 / 100

58. Which of the following is a feature of Amazon RDS that performs automatic
failover when the primary database fails to respond?

RDS Snapshots.

RDS Single-AZ.

RDS Write Replica.

RDS Multi-AZ.

59 / 100

59. An organization has a legacy application designed using monolithic-based
architecture. Which AWS Service can be used to decouple the components of the
application?

Amazon SQS

Virtual Private Gateway.

Amazon CloudFront.

AWS Artifact.

60 / 100

60. Which AWS Service helps enterprises extend their on-premises storage to AWS in
a cost-effective manner?

Amazon Aurora.

AWS Data Pipeline.

Amazon EFS.

AWS Storage Gateway.

61 / 100

61. Which of the following are use cases for Amazon EMR? (Choose TWO)

Enables you to backup extremely large amounts of data at very low costs.

Enables you to easily run and manage Docker containers.

Enables you to easily run and scale Apache Spark, Hadoop,and other Big Data frameworks.

Enables you to move Exabyte-scale data from on-premises datacenters into AWS

Enables you to analyze and process extremely large amounts of data in a timely manner.

62 / 100

62. Which of the following AWS offerings are serverless services? (Choose TWO)

AWS Lambda.

Amazon DynamoDB.

Amazon EMR.

Amazon RDS.

Amazon EC2.

63 / 100

63. You want to transfer 200 Terabytes of data from on-premises locations to the AWS
Cloud, which of the following can do the job in a cost-effective way?

AWS DMS.

AWS Snowmobile.

AWS Snowbal

AWS Import/Export.

64 / 100

64. You need to migrate a large number of on-premises workloads to AWS. Which
AWS service is the most appropriate?

AWS Server Migration Service.

AWS Database Migration Service.

AWS File Transfer Acceleration.

AWS Application Discovery Service.

65 / 100

65. Which of the following is NOT a factor when estimating the costs of Amazon EC2?
(Choose TWO

Number of Hosted Zones.

Number of instances.

Number of security groups.

The amount of time the instances will be running.

Allocated Elastic IP Addresses.

66 / 100

66. Which AWS Service offers an NFS file system that can be mounted concurrently
from multiple EC2 instances?

Amazon Simple Storage Service.

AWS Storage Gateway.

Amazon Elastic Block Store.

Amazon Elastic File System.

67 / 100

67. What are the advantages of using Auto Scaling Groups for EC2 instances?

Auto Scaling Groups distributes application traffic across multiple Availability Zones to enhance performance.

Auto Scaling Groups caches the most recent responses at global edge locations to reduce latency and improve performance.

Auto Scaling Groups scales EC2 instances across multiple regions to reduce latency for global users.

Auto Scaling Groups scales EC2 instances in multiple Availability Zones to increase application availability and fault tolerance.

68 / 100

68. A company experiences fluctuations in traffic patterns to their e-commerce
website when running flash sales. What service can help the company dynamically
match the required compute capacity to handle spikes in traffic during flash sales?

AWS Auto Scalin

Amazon Elastic File System.

Amazon Elastic Compute Cloud.

Amazon ElastiCache.

69 / 100

69. Which AWS Service provides integration with Chef to automate the configuration
of EC2 instances?

AutoScaling

AWS Config

AWS OpsWork

AWS CloudFormation

70 / 100

70. Availability Zones within a Region are connected over low-latency links. Which of
the following is a benefit of these links?

Automate the process of provisioning new compute resources.

Create private connection to your data center.

Make synchronous replication of your data possible.

Achieve global high availability.

71 / 100

71. Which service can you use to route traffic to the endpoint that provides the best
application performance for your users worldwide?

AWS Transfer Acceleration.

AWS Data Pipeline.

AWS Global Accelerator.

AWS DAX Accelerator.

72 / 100

72. What does AWS Cost Explorer provide to help manage your AWS spend?

Highly accurate cost forecasts for up to 12 months ahead.

Consolidated billing

Accurate estimates of AWS service costs based on your expected usage.

Cost comparisons between AWS Cloud environments and on-premises environments

73 / 100

73. You want to create a backup of your data in another geographical location. Where
should you create this backup?

In another Region

In another Availability Zone.

In another Edge location.

In another VPC.

74 / 100

74. Which of the following services can be used to monitor the HTTP and HTTPS
requests that are forwarded to Amazon CloudFront?

Amazon CloudWatch.

AWS CloudTrail

AWS WAF.

AWS Cloud9

75 / 100

75. Which of the following Amazon RDS features facilitates offloading of database
read activity?

Multi-AZ Deployments.

Database Snapshots.

Automated Backups.

Read Replicas.

76 / 100

76. Which of the following is true regarding the AWS availability zones and edge
locations?

Edge locations are located in separate Availability Zones worldwide to serve global customers.

An AWS Availability Zone is an isolated location within an AWS Region, however edge locations are located in multiple cities worldwide

An availability zone exists within an edge location to distribute content globally with low latency.

An Availability Zone is a geographic location where AWS provides multiple, physically separated and isolated edge locations.

77 / 100

77. A company is seeking to deploy an existing .NET application onto AWS as quickly
as possible. Which AWS Service should the customer use to achieve this goal?

AWS Elastic Beanstalk.

Amazon SNS.

AWS Systems Manager.

AWS Trusted Advisor.

78 / 100

78. Which of the following strategies help analyze costs in AWS?

Using tags to group resources.

Using AWS CloudFormation to automate the deployment of resources.

Configuring Amazon Inspector to automatically analyze costs and email reports.

Deploying resources of the same type in different regions.

79 / 100

79. Which of the following are types of AWS Identity and Access Management (IAM)
identities? (Choose TWO)

AWS Organizations.

IAM Policies.

AWS Resource Groups.

IAM Users

IAM Roles.

80 / 100

80. When granting permissions to applications running on Amazon EC2 instances,
which of the following is considered best practice?

Generate new IAM access keys every time you delegate permissions.

Use temporary security credentials (IAM roles) instead of long-term access keys

Do nothing; Applications that run on Amazon EC2 instances do not need permission to interact with other AWS services or resources.

Store the required AWS credentials directly within the application code

81 / 100

81. Which of the following factors should be considered when determining the region
in which AWS Resources will be deployed? (Choose TWO)

Data sovereignt

The AWS Region's security level.

Cost.

Geographic proximity to the company's location

The planned number of VPCs.

82 / 100

82. Which of the following are factors should be considered for Amazon EBS pricing?
(Choose TWO

The amount of data you have stored in snapshots.

The compute time you consume

The compute capacity you consume.

The size of volumes provisioned per month.

The number of Snowball storage devices you request.

83 / 100

83. A company is hosting business critical workloads in an AWS Region. To protect
against data loss and ensure business continuity, a mirror image of the current
AWS environment should be created in another AWS Region. Company policy
requires that the standby environment must be available in minutes in case of an
outage in the primary AWS Region. Which AWS service can be used to meet these
requirements?

AWS Glue.

AWS Backup

CloudEndure Migration.

CloudEndure Disaster Recovery.

84 / 100

84. You decide to buy a reserved instance for a term of one year. Which option
provides the largest total discount?

All reserved instance payment options provide the same discount level

No up-front reservation.

Partial up-front reservation.

All up-front reservation

85 / 100

85. A company is planning to use Amazon S3 and Amazon CloudFront to distribute its
video courses globally. What tool can the company use to estimate the costs of
these services?

AWS Pricing Calculator.

AWS Cost Explorer.

AWS Budgets

AWS Cost & Usage Report.

86 / 100

86. What best describes penetration testing?

Testing your instances to check for the unhealthy ones.

Testing your software for bugs and errors.

Testing your application's response time from different locations.

Testing your network to find security vulnerabilities that an attacker could exploit.

88 / 100

88. What are some key benefits of using AWS Cloud Formation? (Choose TWO)

It helps AWS customers deploy their applications without worrying about the underlying infrastructure.

It applies advanced IAM security features automatically.

It allows you to model your entire infrastructure in just a text file.

It compiles and builds application code in a timely manner.

It automates the provisioning and updating of your infrastructure in a safe and controlled manner.

89 / 100

89. Which of the following services provide real-time auditing for compliance and
vulnerabilities? (Choose TWO)

Amazon Redshift

Amazon MQ.

AWS Config

Amazon Cognito.

AWS Trusted Advisor.

90 / 100

90. A media company has an application that requires the transfer of large data sets
to and from AWS every day. This data is business critical and should be transferred
over a consistent connection. Which AWS service should the company use?

Amazon Comprehend.

AWS Direct Connect.

AWS Snowmobile.

AWS VPN.

91 / 100

91. Which of the following is a cloud computing deployment model that connects
infrastructure and applications between cloud-based resources and existing
resources not located in the cloud?

Hybrid.

Cloud.

Mixed.

On-premises.

92 / 100

92. Which AWS Service offers volume discounts based on usage?

Amazon VPC.

AWS Cost Explorer.

Amazon S3.

Amazon Lightsail

93 / 100

93. What features does AWS offer to help protect your data in the Cloud? (Choose
TWO)

Physical MFA devices.

Data encryption

Unlimited storage

Load balancing.

Access control.

94 / 100

94. Which IAM entity can best be used to grant temporary access to your AWS
resources?

IAM Groups.

IAM Users.

Key Pair.

IAM Roles

95 / 100

95. A company is seeking to better secure its AWS account from unauthorized access.
Which of the below options can the customer use to achieve this goal?

Require Multi-Factor Authentication (MFA) for all IAM User access.

Set up two login passwords

Create one IAM account for each department in the company (Development, QA, Production), and share it across all staff in that department.

Restrict any API call made through SDKs or CLI.

96 / 100

96. You have just set up your AWS environment and have created six IAM user
accounts for the DevOps team. What is the AWS recommendation when granting
permissions to these IAM accounts?

For security purposes, you should not grant any permission to the DevOps team.

Create six different IAM passwords

Attach a separate IAM policy for each individual account.

Apply the Principle of Least Privilege.

97 / 100

97. A customer is planning to migrate their Microsoft SQL Server databases to AWS.
Which AWS Services can the customer use to run their Microsoft SQL Server
database on AWS? (Choose TWO)

Amazon RDS.

Amazon Elastic Compute Cloud.

AWS Database Migration service (DMS).

AWS Lambda.

AWS Fargate.

98 / 100

98. Which AWS Service can perform health checks on Amazon EC2 instances?

Amazon Chime.

AWS CloudFormation.

Amazon Route 53.

Amazon Aurora.

99 / 100

99. Which of the following are examples of AWS-managed databases? (Choose TWO)

Microsoft SQL Server on Amazon EC2.

MySQL on Amazon EC2.

Amazon Neptune.

Amazon RDS for MySQL.

Amazon CloudSearch.

100 / 100

100. A company has a web application that is hosted on a single EC2 instance and is
approaching 100 percent CPU Utilization during peak loads. Rather than scaling
the server vertically, the company has decided to deploy three Amazon EC2
instances in parallel and to distribute traffic across the three servers. What AWS
Service should the company use to distribute the traffic evenly?

Transit VPC.

AWS Global Accelerator

AWS Application Load Balancer (ALB).

Amazon CloudFront.

Your score is