[CLF-C01 Exam Retired] New AWS Certified Cloud Practitioner CLF-C02 Dumps Available

dumps2025-01-13T09:36:56+08:00

AWS Certified Cloud Practitioner CLF-C02 exam is designed for individuals who can proficiently showcase a comprehensive understanding of the AWS Cloud, irrespective of their specific job role. There are 65 questions (50 scored and 15 unscored) in the real AWS Certified CLF-C02 exam, and you have 90 minutes to answer all the questions. The exam cost is $100. The required passing score for the CLF-C02 exam is 700. We have cracked the latest AWS Certified Cloud Practitioner CLF-C02 exam dumps, which can guarantee you pass. Free AWS Certified CLF-C02 exam dumps are below.

Page 1 of 20

1. Which database engine is compatible with Amazon RDS?

Apache Cassandra

MongoDB

Neo4j

PostgreSQL

2. A company needs to run code in response to an event notification that occurs when objects are uploaded to an Amazon S3 bucket.

Which AWS service will integrate directly with the event notification?

AWS Lambda

Amazon EC2

Amazon Elastic Container Registry (Amazon ECR)

AWS Elastic Beanstalk

3. A company wants to centrally manage security policies and billing services within a multi-account AWS environment .

Which AWS service should the company use to meet these requirements?

AWS Identity and Access Management (IAM)

AWS Organizations

AWS Resource Access Manager (AWS RAM)

AWS Config

4. What are the characteristics of Availability Zones? (Select TWO.)

All Availability Zones in an AWS Region are interconnected with high-bandwidth, low-latency networking

Availability Zones are physically separated by a minimum of distance of 150 km (100 miles).

All traffic between Availability Zones is encrypted.

Availability Zones within an AWS Region share redundant power, networking, and connectivity.

Every Availability Zone contains a single data center.

5. Which AWS Well-Architected Framework concept represents a system's ability to remain functional when the system encounters operational problems?

Consistency

Elasticity

Durability

Latency

6. Which AWS service or tool does AWS Control Tower use to create resources?

AWS CloudFormation

AWS Trusted Advisor

AWS Directory Service

AWS Cost Explorer

7. What are some advantages of using Amazon EC2 instances lo host applications in the AWS Cloud instead of on premises? (Select TWO.)

EC2 includes operating system patch management

EC2 integrates with Amazon VP

AWS CloudTrail, and AWS Identity and Access Management (IAM)

EC2 has a 100% service level agreement (SLA).

EC2 has a flexible, pay-as-you-go pricing model.

EC2 has automatic storage cost optimization.

8. Which option is an advantage of AWS Cloud computing that minimizes variable costs?

High availability

Economies of scale

Global reach

Agility

9. Which pillar of the AWS Well-Architected Framework focuses on the ability to run workloads effectively, gain insight into operations, and continuously improve supporting processes and procedures?

Cost optimization

Reliability

Operational excellence

Performance efficiency

10. A developer needs to build an application for a retail company. The application must provide real-time product recommendations that are based on machine learning .

Which AWS service should the developer use to meet this requirement?

AWS Health Dashboard

Amazon Personalize

Amazon Forecast

Amazon Transcribe

Page 2 of 20

11. A company deploys its application on Amazon EC2 instances. The application occasionally experiences sudden increases in demand. The company wants to ensure that its application can respond to changes in demand at the lowest possible cost .

Which AWS service or tool will meet these requirements?

AWS Auto Scaling

AWS Compute Optimizer

AWS Cost Explorer

AWS Well-Architected Framework

12. Which AWS service or tool provides recommendations to help users get rightsized Amazon EC2 instances based on historical workload usage data?

AWS Pricing Calculator

AWS Compute Optimizer

AWS App Runner

AWS Systems Manager

13. A company wants to use a managed service to simplify the setup, operation, and scaling of its MySQL database in the AWS Cloud.

Which AWS service will meet these requirements?

Amazon EMR

Amazon RDS

Amazon Redshift

Amazon DynamoDB

14. A company deploys its application to multiple AWS Regions and configures automatic failover between those Regions.

Which cloud concept does this architecture represent?

Security

Reliability

Scalability

Cost optimization

15. A company's IT team is managing MySQL database server clusters. The IT team has to patch the database and take backup snapshots of the data in the clusters. The company wants to move this workload to AWS so that these tasks will be completed automatically .

What should the company do to meet these requirements?

Deploy MySQL database server clusters on Amazon EC2 instances.

Use Amazon RDS with a MySQL database.

Use an AWS Cloud Form at ion template to deploy MySQL database servers on Amazon EC2 instances.

Migrate all the MySQL database data to Amazon S3.

16. A company recently migrated to the AWS Cloud. The company needs to determine whether its newly imported Amazon EC2 instances are the appropriate size and type.

Which AWS services can provide this information to the company? {Select TWO.)

AWS Auto Scaling

AWS Control Tower

AWS Trusted Advisor

AWS Compute Optimizer

Amazon Forecast

17. A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove inappropriate photos. The company has no machine learning (ML) scientists and must build this detection capability with no ML expertise .

Which AWS service should the company use to build this capability?

Amazon SageMaker

Amazon Textract

Amazon Rekognition

Amazon Comprehend

18. Which AWS service or feature is used to Troubleshoot network connectivity issues between Amazon EC2 instances?

AWS Certificate Manager (ACM)

Internet gateway

VPC Flow Logs

AWS CloudHSM

19. Which factors affect costs in the AWS Cloud? (Select TWO.)

The number of unused AWS Lambda functions

The number of configured Amazon S3 buckets

Inbound data transfers without acceleration

Outbound data transfers without acceleration

Compute resources that are currently in use

20. Which design principles support the reliability pillar of the AWS Well-Architected Framework? (Select TWO.)

Perform operations as code.

Enable traceability.

Automatically scale to meet demand.

Deploy resources globally to improve response time.

Automatically recover from failure.

Page 3 of 20

21. Which of the following are user authentication services managed by AWS? (Select TWO.)

Amazon Cognito

AWS Lambda

AWS License Manager

AWS Identity and Access Management (IAM)

AWS CodeStar

22. company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.

Which pillar of the AWS Well-Architected Framework is supported by these goals?

Reliability

Security

Operational excellence

Performance efficiency

23. A company is configuring its AWS Cloud environment. The company's administrators need to group users together and apply permissions to the group.

Which AWS service or feature can the company use to meet these requirements?

AWS Organizations

Resource groups

Resource tagging

AWS Identity and Access Management (IAM)

24. A company has two AWS accounts in an organization in AWS Organizations for consolidated billing.

All of the company's AWS resources are hosted in one AWS Region.

Account A has purchased five Amazon EC2 Standard Reserved Instances (RIs) and has four EC2 instances running. Account B has not purchased any RIs and also has four EC2 instances running.

Which statement is true regarding pricing for these eight instances?

The eight instances will be charged as regular instances.

Four instances will be charged as RIs, and four will be charged as regular instances.

Five instances will be charged as RIs, and three will be charged as regular instances.

The eight instances will be charged as RIs.

25. Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?

Elimination of expenses for running and maintaining data centers

Price discounts that are identical to discounts from hardware providers

Distribution of all operational controls to AWS

Elimination of operational expenses

26. A company has been storing monthly reports in an Amazon S3 bucket. The company exports the report data into comma-separated values (.csv) files. A developer wants to write a simple query that can read all of these files and generate a summary report.

Which AWS service or feature should the developer use to meet these requirements with the LEAST amount of operational overhead?

Amazon S3 Select

Amazon Athena

Amazon Redshift

Amazon EC2

27. Which task requires the use of AWS account root user credentials?

The deletion of IAM users

The change to a different AWS Support plan

The creation of an organization in AWS Organizations

The deletion of Amazon EC2 instances

28. Which feature of the AWS Cloud gives users the ability to pay based on current needs rather than forecasted needs?

AWS Budgets

Pay-as-you-go pricing

Volume discounts

Savings Plans

29. What does the Amazon S3 Intelligent-Tiering storage class offer?

Payment flexibility by reserving storage capacity

Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon EBS) volume

Automatic cost savings by moving objects between tiers based on access pattern changes

Secure, durable, and lowest cost storage for data archival

30. Which AWS service gives users the ability to provision a dedicated and private network connection from their internal network to AWS?

AWS CloudHSM

AWS Direct Connect

AWS VPN

Amazon Connect

Page 4 of 20

31. A company is hosting a web application in a Docker container on Amazon EC2.

AWS is responsible for which of the following tasks?

Scaling the web application and services developed with Docker

Provisioning or scheduling containers to run on clusters and maintain their availability

Performing hardware maintenance in the AWS facilities that run the AWS Cloud

Managing the guest operating system, including updates and security patches

32. Which design principle should be considered when architecting in the AWS Cloud?

Think of servers as non-disposable resources.

Use synchronous integration of services.

Design loosely coupled components.

Implement the least permissive rules for security groups.

33. Which AWS service or tool helps to centrally manage billing and allow controlled access to resources across AWS accounts?

AWS Identity and Access Management (IAM)

AWS Organizations

AWS Cost Explorer

AWS Budgets

34. Which task is a customer's responsibility, according to the AWS shared responsibility model?

Management of the guest operating systems

Maintenance of the configuration of infrastructure devices

Management of the host operating systems and virtualization

Maintenance of the software that powers Availability Zones A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.

35. Which best practice for cost governance does this example show?

Resource controls

Cost allocation

Architecture optimization

Tagging enforcement

36. Which activity can companies complete by using AWS Organizations?

Troubleshoot the performance of applications.

Manage service control policies (SCPs).

Migrate applications to microservices.

Monitor the performance of applications.

37. Which AWS service or feature is used to send both text and email messages from distributed applications?

Amazon Simple Notification Service (Amazon SNS)

Amazon Simple Email Service (Amazon SES)

Amazon CloudWatch alerts

Amazon Simple Queue Service (Amazon SQS)

38. Which of the following is a benefit of decoupling an AWS Cloud architecture?

Reduced latency

Ability to upgrade components independently

Decreased costs

Fewer components to manage

39. Which of the following describes an AWS Region?

A specific location within a geographic area that provides high availability

A set of data centers spanning multiple countries

A global picture of a user's cloud computing environment

A collection of databases that can be accessed from a specific geographic area only

40. A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS Cloud. responsibility model?

Amazon FSx for Windows File Server

Amazon Workspaces virtual Windows desktop

AWS Directory Service for Microsoft Active Directory

Amazon RDS for Microsoft SQL Server

Page 5 of 20

41. Which AWS service should a cloud practitioner use to receive real-time guidance for provisioning resources, based on AWS best practices related to security, cost optimization, and service limits?

AWS Trusted Advisor

AWS Config

AWS Security Hub

AWS Systems Manager

42. A company is reviewing its operating policies.

Which policy complies with guidance in the security pillar of the AWS Well-Architected Framework?

Ensure that employees have access to all company data.

Expand employees' permissions as they gain more experience.

Grant all privileges and access to all users.

Apply security requirements at all layers of a process.

43. Which task is the responsibility of a company that is using Amazon RDS?

Provision the underlying infrastructure.

Create IAM policies to control administrative access to the service.

Install the cables to connect the hardware for compute and storage.

Install and patch the RDS operating system.

44. A company is designing an identity access management solution for an application. The company wants users to be able to use their social media, email, or online shopping accounts to access the application.

Which AWS service provides this functionality?

AWS IAM Identity Center (AWS Single Sign-On)

AWS Config

Amazon Cognito

AWS Identity and Access Management (IAM)

45. Which AWS service aggregates, organizes, and prioritizes security alerts and findings from multiple AWS services?

Amazon Detective

Amazon Inspector

Amazon Macie

AWS Security Hub

46. Which of the following are advantages of the AWS Cloud? (Select TWO.)

Trade variable expenses for capital expenses

High economies of scale

Launch globally in minutes

Focus on managing hardware infrastructure

Overprovision to ensure capacity

47. Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?

Amazon DynamoDB

Amazon Aurora

Amazon DocumentDB (with MongoDB compatibility)

Amazon Neptune

48. Which AWS service or tool provides users with the ability to monitor AWS service quotas?

AWS CloudTrail

AWS Cost and Usage Reports

AWS Trusted Advisor

AWS Budgets

49. Which of the following is an advantage of AWS Cloud computing?

Trade security for elasticity.

Trade operational excellence for agility.

Trade fixed expenses for variable expenses.

Trade elasticity for performance.

50. Which of the following are components of an AWS Site-to-Site VPN connection? (Select TWO.)

AWS Storage Gateway

Virtual private gateway

NAT gateway

Customer gateway

Internet gateway

Page 6 of 20

51. A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.

Which pricing model enables the company to optimize costs and meet these requirements?

Reserved Instances

Spot Instances

On-Demand Instances

Dedicated Instances

52. A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-cost laptops.

Which AWS service will help the company deploy the application without investing in backend infrastructure or high end client hardware?

Amazon AppStream 2.0

AWS AppSync

Amazon WorkLink

AWS Elastic Beanstalk

53. Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday?

Amazon CloudWatch

AWS Trusted Advisor

AWS CloudTrail

Amazon Inspector

54. Which AWS database service provides in-memory data storage?

Amazon DynamoDB

Amazon ElastiCache

Amazon RDS

Amazon Timestream

55. A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. The company wants to use AWS services for the backups without changing its existing backup workflows.

Which AWS service should the company use to meet these requirements?

Amazon Elastic Block Store (Amazon EBS)

AWS Storage Gateway

Amazon Elastic Container Service (Amazon ECS)

AWS Lambda

56. Which AWS Support plan provides customers with access to an AWS technical account manager (TAM)?

AWS Basic Support

AWS Developer Support

AWS Business Support

AWS Enterprise Support

57. A company is designing a web application that will run on Amazon EC2 instances.

Which AWS services and features will improve availability and reduce the impact of failures for this application? (Select TWO.)

Amazon EC2 Auto Scaling for the EC2 instances

VPC subnet ACLs to check the health of a service

Resources that are distributed across multiple Availability Zones

Configuration of AWS Server Migration Service (AWS SMS) to move the EC2 instances to a different AWS Region

Resources that are distributed across multiple AWS points of presence

58. Which of the following acts as an instance-level firewall to control inbound and outbound access?

Network access control list

Security groups

AWS Trusted Advisor

Virtual private gateways

59. A company has an application that uses AWS services. During scaling events, the company wants to keep application usage within AWS service quotas.

Which AWS services or tools can report on the quotas so that the company can improve the reliability of the application? (Select TWO.)

Service Quotas console

AWS Trusted Advisor

AWS Systems Manager

AWS Shield

AWS Cost Explorer

60. Which of the following are AWS Cloud design principles? (Select TWO.)

Pay for compute resources in advance.

Make data-driven decisions to determine cloud architectural design.

Emphasize manual processes to allow for changes.

Test systems at production scale.

Refine operational procedures infrequently.

Page 7 of 20

61. A company needs to migrate all of its development teams to a cloud-based integrated development

environment (IDE).

Which AWS service should the company use?

AWS CodeBuild

AWS Cloud9

AWS OpsWorks

AWS Cloud Development Kit (AWS CDK)

62. A company needs to run its existing custom, nonproduction workloads in the AWS Cloud quickly and cost-effectively.

The workloads can recover from interruptions easily.

Which pricing model should the company use?

Reserved Instances

On-Demand Instances

Spot Instances

Dedicated Hosts

63. According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Select TWO.)

Network infrastructure and virtualization of infrastructure

Security of application data

Guest operating systems

Physical security of hardware

Credentials and policies

64. Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Select TWO.)

AWS Trusted Advisor

AWS Online Tech Talks

AWS Blog

AWS Forums

AWS Classroom Training

65. A company wants to host its relational databases on AWS. The databases have predefined schemas that the company needs to replicate on AWS.

Which AWS services could the company use for the databases? (Select TWO.)

Amazon Aurora

Amazon RDS

Amazon DocumentDB (with MongoDB compatibility)

Amazon Neptune

Amazon DynamoDB

66. An application is running on multiple Amazon EC2 instances. The company wants to make the application highly available by configuring a load balancer with requests forwarded to the EC2 instances based on URL paths.

Which AWS load balancer will meet these requirements and take the LEAST amount of effort to deploy?

Network Load Balancer

Application Load Balancer

AWS OpsWorks Load Balancer

Custom Load Balancer on Amazon EC2

67. A company needs to use dashboards and charts to analyze insights from business data.

Which AWS service will provide the dashboards and charts for these insights?

Amazon Macie

Amazon Aurora

Amazon QuickSight

AWS CloudTrail

68. A large company has a workload that requires hardware to remain on premises. The company wants to use the same management and control plane services that it currently uses on AWS .

Which AWS service should the company use to meet these requirements?

AWS Device Farm

AWS Fargate

AWS Outposts

AWS Ground Station

69. When a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?

Spot Instances

Dedicated Instances

Dedicated Hosts

Reserved Instances

70. Which AWS service should a cloud engineer use to view API calls to AWS services?

Amazon CloudWatch

AWS CloudTrail

AWS Config

AWS Artifact

Page 8 of 20

71. What can a user accomplish using AWS CloudTrail?

Generate an IAM user credentials report.

Record API calls made to AWS services.

Assess the compliance of AWS resource configurations with policies and guidelines.

Ensure that Amazon EC2 instances are patched with the latest security updates. A company uses Amazon Workspaces.

72. Which task is the responsibility of AWS, according to the AWS shared responsibility model?

Set up multi-factor authentication (MFA) for each Workspaces user account.

Ensure the environmental safety and security of the AWS infrastructure that hosts Workspaces.

Provide security for Workspaces user accounts through AWS Identity and Access Management (IAM).

Configure AWS CloudTrail to log API calls and user activity. A company stores data in an Amazon S3 bucket. The company must control who has permission to read, write, or delete objects that the company stores in the S3 bucket.

73. Which AWS features will meet these requirements? (Select TWO.)

Security groups

Network ACLs

S3 bucket policies

IAM user policies

S3 bucket versioning

74. Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Select TWO.)

Patch AWS network devices.

Set user password rules.

Provide physical security for compute resources.

Configure security groups.

Patch the operating system of an Amazon EC2 instance.

75. Which AWS service or feature captures information about the network traffic to and from an Amazon EC2 instance?

VPC Reachability Analyzer

Amazon Athena

VPC Flow Logs

AWS X-Ray

76. Which of the following are pillars of the AWS Well-Architected Framework? (Select TWO.)

Availability

Reliability

Scalability

Responsive design

Operational excellence

77. Which tasks are customer responsibilities according to the AWS shared responsibility model? (Select TWO.)

Determine application dependencies with operating systems.

Provide user access with AWS Identity and Access Management (IAM).

Secure the data center in an Availability Zone.

Patch the hypervisor.

Provide network availability in Availability Zones.

78. A user wants to identify any security group that is allowing unrestricted incoming SSH traffic.

Which AWS service can be used to accomplish this goal?

Amazon Cognito

AWS Shield

Amazon Macie

AWS Trusted Advisor

79. Which AWS feature or resource is a deployable Amazon EC2 instance template that is prepackaged with software and security requirements?

Amazon Elastic Block Store (Amazon EBS) volume

AWS CloudFormation template

Amazon Elastic Block Store (Amazon EBS) snapshot

Amazon Machine Image (AMI)

80. Which AWS service is a highly available and scalable DNS web service?

Amazon VPC

Amazon CloudFront

Amazon Route 53

Amazon Connect

Page 9 of 20

81. Which of the following is a characteristic of the AWS account root user?

The root user is the only user that can be configured with multi-factor authentication (MFA).

The root user is the only user that can access the AWS Management Console.

The root user is the first sign-in identity that is available when an AWS account is created.

The root user has a password that cannot be changed.

82. Which AWS network services or features allow Cl DR block notation when providing an IP address

range? (Select TWO.)

Security groups

Amazon Machine Image (AMI)

Network access control list (network ACL)

AWS Budgets

Amazon Elastic Block Store (Amazon EBS)

83. A company has a workload that requires data to be collected, analyzed, and stored on premises. The company wants to extend the use of AWS services to run on premises with access to the company network and the company's VPC.

Which AWS service meets this requirement?

AWS Outposts

AWS Storage Gateway

AWS Direct Connect

AWS Snowball

84. A company wants to deploy and manage a Docker-based application on AWS.

Which solution meets these requirements with the LEAST amount of operational overhead?

An open-source Docker orchestrator on Amazon EC2 instances

AWS AppSync

Amazon Elastic Container Registry (Amazon ECR)

Amazon Elastic Container Service (Amazon ECS)

85. When designing AWS workloads to be operational even when there are component failures, what is an AWS best practice?

Perform quarterly disaster recovery tests.

Place the main component on the us-east-1 Region.

Design for automatic failover to healthy resources.

Design workloads to fit on a single Amazon EC2 instance.

86. Which AWS service provides highly durable object storage?

Amazon S3

Amazon Elastic File System (Amazon EFS)

Amazon Elastic Block Store (Amazon EBS)

Amazon FSx

87. Which pillar of the AWS Well-Architected Framework includes a design principle about measuring the overall efficiency of workloads in terms of business value?

Operational excellence

Security

Reliability

Cost optimization

88. Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?

AWS Support

AWS customers

AWS Key Management Service (AWS KMS)

AWS Trusted Advisor

89. Who is responsible for decommissioning end-of-life underlying storage devices that are used to host data on AWS?

Customer

AWS

Account creator

Auditing team

90. A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular geographic area.

Which solution achieves this goal?

Use EC2 instances in a single Availability Zone.

Use EC2 instances in multiple AWS Regions.

Use EC2 instances in multiple edge locations.

Use Amazon CloudFront with the EC2 instances configured as the source.

Page 10 of 20

91. Using Amazon Elastic Container Service (Amazon ECS) to break down a monolithic architecture into microservices is an example of:

a loosely coupled architecture.

a tightly coupled architecture.

a stateless architecture.

a stateful architecture.

92. Which of the following are design principles for reliability in the AWS Cloud? (Select TWO.)

Build architectures with tightly coupled resources.

Use AWS Trusted Advisor to meet security best practices.

Use automation to recover immediately from failure.

Rightsize Amazon EC2 instances to ensure optimal performance.

Simulate failures to test recovery processes.

93. Which statements represent the cost-effectiveness of the AWS Cloud? (Select TWO.)

Users can trade fixed expenses for variable expenses.

Users can deploy all over the world in minutes.

AWS offers increased speed and agility.

AWS is responsible for patching the infrastructure.

Users benefit from economies of scale.

94. A company wants to migrate its on-premises data warehouse to AWS. The information in the data warehouse is used to populate analytics dashboards.

Which AWS service should the company use for the data warehouse?

Amazon ElastiCache

Amazon Aurora

Amazon RDS

Amazon Redshift

95. Which benefit does Amazon Rekognition provide?

The ability to place watermarks on images

The ability to detect objects that appear in pictures

The ability to resize millions of images automatically

The ability to bid on object detection jobs

96. Which AWS service uses a combination of publishers and subscribers?

AWS Lambda

Amazon Simple Notification Service (Amazon SNS)

Amazon CloudWatch

AWS CloudFormation

97. A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs.

Which AWS service or feature should the company use to meet these authentication requirements?

Amazon API Gateway

IAM users

AWS Security Token Service (AWS STS)

IAM instance profiles

98. A company needs to continuously monitor its environment to analyze network and account activity and identify potential security threats.

Which AWS service should the company use to meet these requirements?

AWS Artifact

Amazon Macie

AWS Identity and Access Management (IAM)

Amazon GuardDuty

99. Which AWS service can report how AWS resource configurations have changed over time?

AWS CloudTrail

Amazon CloudWatch

AWS Config

Amazon Inspector

100. Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses?

High availability

Economies of scale

Pay-as-you-go pricing

Global reach

Page 11 of 20

101. A company is using AWS Lambda functions to build an application.

Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Select TWO.)

Patch the servers where the Lambda functions are deployed.

Establish the IAM permissions that define who can run the Lambda functions.

Write the code for the Lambda functions to define the application logic.

Deploy Amazon EC2 instances to support the Lambda functions.

Scale out the Lambda functions when the load increases.

102. Which services can be used to deploy applications on AWS? (Select TWO.)

AWS Elastic Beanstalk

AWS Config

AWS OpsWorks

AWS Application Discovery Service

Amazon Kinesis

103. Which statement describes a characteristic of the AWS global infrastructure?

Edge locations contain multiple AWS Regions.

AWS Regions contain multiple Regional edge caches.

Availability Zones contain multiple data centers.

Each data center contains multiple edge locations.

104. Which of the following is available to a company that has an AWS Business Support plan?

AWS Support concierge

AWS DDoS Response Team (DRT)

AWS technical account manager (TAM)

AWS Health API

105. Which pillar of the AWS Well-Architected Framework focuses on the return on investment of moving into the AWS Cloud?

Sustainability

Cost optimization

Operational excellence

Reliability

106. Which of the following is a cloud benefit that AWS offers to its users?

The ability to configure AWS data center hypervisors

The ability to purchase hardware in advance of increased traffic

The ability to deploy to AWS on a global scale

Compliance audits for user IT environments

107. Which AWS service can a company use to perform complex analytical queries?

Amazon RDS

Amazon DynamoDB

Amazon Redshift

Amazon ElastiCache

108. A company wants to track its AWS account's service costs. The company also wants to receive notifications when costs are forecasted to reach a specific level .

Which AWS service or tool provides this functionality?

AWS Budgets

AWS Cost Explorer

Savings Plans

AWS Billing Conductor

109. An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.

Which AWS service is used to track, record, and audit configuration changes made to AWS resources?

AWS Shield

AWS Config

AWS IAM

Amazon Inspector

110. A company needs to test a new application that was written in Python. The code will activate when new images are stored in an Amazon S3 bucket. The application will put a watermark on each image and then will store the images in a different S3 bucket.

Which AWS service should the company use to conduct the test with the LEAST amount of operational overhead?

Amazon EC2

AWS CodeDeploy

AWS Lambda

Amazon Lightsail

Page 12 of 20

111. Which of the following are customer responsibilities under the AWS shared responsibility model? (Select TWO.)

Physical security of AWS facilities

Configuration of security groups

Encryption of customer data on AWS

Management of AWS Lambda infrastructure

Management of network throughput of each AWS Region

112. Which AWS service or tool can be used to consolidate payments for a company with multiple AWS accounts?

AWS Cost and Usage Report

AWS Organizations

Cost Explorer

AWS Budgets

113. How can an AWS user conduct security assessments of Amazon EC2 instances, NAT gateways, and Elastic Load Balancers in a way that is approved by AWS?

Flood a target with requests.

Use Amazon Inspector.

Perform penetration testing.

Use the AWS Service Health Dashboard.

114. Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?

Ensuring network connectivity from AWS to the internet

Patching and fixing flaws within the AWS Cloud infrastructure

Ensuring the physical security of cloud data centers

Ensuring Amazon EBS volumes are backed up

115. Which AWS service meets this requirement?

AWS CloudFormation

AWS Elastic Beanstalk

AWS Cloud9

AWS CloudShell

116. A company wants to use the AWS Cloud as an offsite backup location for its on-premises infrastructure.

Which AWS service will meet this requirement MOST cost-effectively?

Amazon S3

Amazon Elastic File System (Amazon EFS)

Amazon FSx

Amazon Elastic Block Store (Amazon EBS)

117. A company is building a serverless architecture that connects application data from multiple data sources. The company needs a solution that does not require additional code .

Which AWS service meets these requirements?

AWS Lambda

Amazon Simple Queue Service (Amazon SQS)

Amazon CloudWatch

Amazon EventBridge

118. A company needs to use standard SQL to query and combine exabytes of structured and semi-structured data across a data warehouse, operational database, and data lake .

Which AWS service meets these requirements?

Amazon DynamoDB

Amazon Aurora

Amazon Athena

Amazon Redshift

119. A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials.

Which of the following is an AWS best practice for using the AWS account root user credentials?

Allow only the manager to use the account root user credentials for normal activities.

Use the account root user credentials only for Amazon EC2 instances from the AWS Free Tier.

Use the account root user credentials only when they alone must be used to perform a required function.

Use the account root user credentials only for the creation of private VPC subnets.

120. A company needs to store data across multiple Availability Zones in an AWS Region. The data will not be accessed regularly but must be immediately retrievable.

Which Amazon Elastic File System (Amazon EFS) storage class meets these requirements MOST cost effectively?

EFS Standard

EFS Standard-Infrequent Access(EFS Standard-IA)

EFS One Zone

EFS One Zone-Infrequent Access (EFS One Zone-IA)

Page 13 of 20

121. A company wants to establish a security layer in its VPC that will act as a firewall to control subnet traffic.

Which AWS service or feature will meet this requirement?

Routing tables

Network access control lists (network ACLs)

Security groups

Amazon GuardDuty

122. An auditor needs to find out whether a specific AWS service is compliant with specific compliance frameworks.

Which AWS service will provide this information?

AWS Artifact

AWS Trusted Advisor

Amazon GuardDuty

AWS Certificate Manager (ACM)

123. Which duties are the responsibility of a company that is using AWS Lambda? (Select TWO.)

Security inside of code

Selection of CPU resources

Patching of operating system

Writing and updating of code

Security of underlying infrastructure

124. Which AWS services and features are provided to all customers at no charge? (Select TWO.)

Amazon Aurora

VPC

Amazon SageMaker

AWS Identity and Access Management (IAM)

Amazon Polly

125. Which AWS services or features can control VPC traffic? (Select TWO.)

Security groups

AWS Direct Connect

Amazon GuardDuty

Network ACLs

Amazon Connect

126. A company needs to identify the last time that a specific user accessed the AWS Management Console.

Which AWS service will provide this information?

Amazon Cognito

AWS CloudTrail

Amazon Inspector

Amazon GuardDuty

127. A company's application stores data in an Amazon S3 bucket. The company has an AWS Lambda function that processes data in the S3 bucket. The company needs to invoke the function once a day at a specific time.

Which AWS service should the company use to meet this requirement?

AWS Managed Services (AMS)

AWS CodeStar

Amazon EventBridge

AWS Step Functions

128. A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups.

Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model?

AWS

The company

AWS Marketplace partners

Third-party partners

129. Which AWS solution gives companies the ability to use protocols such as NFS to store and retrieve objects in Amazon S3?

Amazon FSx for Lustre

AWS Storage Gateway volume gateway

AWS Storage Gateway file gateway

Amazon Elastic File System (Amazon EFS)

130. What is a benefit of moving to the AWS Cloud in terms of improving time to market?

Decreased deployment speed

Increased application security

Increased business agility

Increased backup capabilities

Page 14 of 20

131. In which of the following AWS services should database credentials be stored for maximum security?

AWS Identity and Access Management (IAM)

AWS Secrets Manager

Amazon S3

AWS Key Management Service (AWS KMS)

132. A company needs to configure rules to identify threats and protect applications from malicious network access.

Which AWS service should the company use to meet these requirements?

AWS Identity and Access Management (IAM)

Amazon QuickSight

AWS WAF

Amazon Detective

133. Which option is an advantage of AWS Cloud computing that minimizes variable costs?

High availability

Economies of scale

Global reach

Agility

134. A company moves its infrastructure from on premises to the AWS Cloud. The company can now provision additional Amazon EC2 instances whenever the instances are required. With this ability, the company can launch new marketing campaigns in 3 days instead of 3 weeks .

Which benefit of the AWS Cloud does this scenario demonstrate?

Cost savings

Improved operational resilience

Increased business agility

Enhanced security

135. A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud .

Which costs will the company eliminate with this migration? (Select TWO.)

Cost of data center operations

Cost of application licensing

Cost of marketing campaigns

Cost of physical server hardware

Cost of network management

136. Which AWS Support plan assigns an AWS concierge agent to a company's account?

AWS Basic Support

AWS Developer Support

AWS Business Support

AWS Enterprise Support

137. A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB .

What is the MOST operationally efficient solution to delegate permissions?

Create an IAM role with the required permissions. Attach the role to the EC2 instance.

Create an IAM user and use its access key and secret access key in the application.

Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance.

Create an IAM role with the required permissions. Attach the role to the administrativeIAM user.

138. An application runs on multiple Amazon EC2 instances that access a shared file system simultaneously.

Which AWS storage service should be used?

Amazon EBS

Amazon EFS

Amazon S3

AWS Artifact

139. Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

Security awareness and training

Development of an IAM password policy

Patching of the guest operating system

Physical and environmental controls

140. A company does not want to rely on elaborate forecasting to determine its usage of compute resources. Instead, the company wants to pay only for the resources that it uses. The company also needs the ability to increase or decrease its resource usage to meet business requirements .

Which pillar of the AWS Well-Architected Framework aligns with these requirements?

Operational excellence

Security

Reliability

Cost optimization

Page 15 of 20

141. A company wants to use Amazon EC2 instances to run a stateless and restartable process after business hours.

Which AWS service provides DNS resolution?

Amazon CloudFront

Amazon VPC

Amazon Route 53

AWS Direct Connect

142. Which group shares responsibility with AWS for security and compliance of AWS accounts and resources?

Third-party vendors

Customers

Reseller partners

Internet providers

143. A company wants to migrate its Microsoft SQL Server database management system from on premises to the AWS Cloud.

Which AWS service should the company use to reduce management overhead for this environment?

Amazon Elastic Container Service (Amazon ECS)

Amazon SageMaker

Amazon RDS

Amazon Athena

144. A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way.

What can the company do to meet this requirement?

Use AWS Key Management Service (AWS KMS).

Use multiple AWS accounts and consolidated billing.

Use AWS CloudFormation to deploy the infrastructure.

Rightsized all the EC2 instances that are used in the deployment.

145. A company needs to launch an Amazon EC2 instance.

Which of the following can the company use during the launch process to configure the root volume of the EC2 instance?

Amazon EC2 Auto Scaling

Amazon Data Lifecycle Manager (Amazon DLM)

Amazon Machine Image (AMI)

Amazon Elastic Block Store (Amazon EBS) volume

146. A company wants an in-memory data store that is compatible with open source in the cloud .

Which AWS service should the company use?

Amazon DynamoDB

Amazon ElastiCache

Amazon Elastic Block Store (Amazon EBS)

Amazon Redshift

147. A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access. According to the AWS shared responsibility model, which task is the responsibility of the customer?

Protect the global infrastructure that runs all of the services offered in the AWS Cloud.

Configure logical access controls for resources, and protect account credentials.

Configure the security used by managed services.

Patch and back up Amazon Aurora.

148. Which task is the responsibility of AWS when using AWS services?

Management of IAM user permissions

Creation of security group rules for outbound access

Maintenance of physical and environmental controls

Application of Amazon EC2 operating system patches

149. A company wants to push VPC Flow Logs to an Amazon S3 bucket.

A company wants to optimize long-term compute costs of AWS Lambda functions and Amazon EC2 instances.

Which AWS purchasing option should the company choose to meet these requirements?

Dedicated Hosts

Compute Savings Plans

Reserved Instances

Spot Instances

150. Which task can a company perform by using security groups in the AWS Cloud?

Allow access to an Amazon EC2 instance through only a specific port.

Deny access to malicious IP addresses at a subnet level.

Protect data that is cached by Amazon CloudFront.

Apply a stateless firewall to an Amazon EC2 instance.

Page 16 of 20

151. A company needs to centralize its operational data. The company also needs to automate tasks across all of its Amazon EC2 instances.

Which AWS service can the company use to meet these requirements?

AWS Trusted Advisor

AWS Systems Manager

AWS CodeDeploy

AWS Elastic Beanstalk

152. A company needs Amazon EC2 instances for a workload that can tolerate interruptions.

Which EC2 instance purchasing option meets this requirement with the LARGEST discount compared to On-Demand prices?

Spot Instances

Convertible Reserved Instances

Standard Reserved Instances

Dedicated Hosts

153. Which AWS service can defend against DDoS attacks?

AWS Firewall Manager

AWS Shield Standard

AWS WAF

Amazon Inspector

154. What does "security of the cloud" refer to in the AWS shared responsibility model?

Availability of AWS services such as Amazon EC2

Security of the cloud infrastructure that runs all the AWS services

Implementation of password policies for IAM users

Security of customer environments by using AWS Network Firewall partners

155. Which AWS service or tool should a company use to forecast AWS spending?

Amazon DevPay

AWS Organizations

AWS Trusted Advisor

Cost Explorer

156. Which AWS service is always free of charge for users?

Amazon S3

Amazon Aurora

Amazon EC2

AWS Identity and Access Management (IAM)

157. A company has multiple AWS accounts that include compute workloads that cannot be interrupted.

The company wants to obtain billing discounts that are based on the company's use of AWS services.

Which AWS feature or purchasing option will meet these requirements?

Resource tagging

Consolidated billing

Pay-as-you-go pricing

Spot Instances

158. A company has an environment that includes Amazon EC2 instances, Amazon Lightsail, and on-premises servers. The company wants to automate the security updates for its operating systems and applications.

Which solution will meet these requirements with the LEAST operational effort?

Use AWS Shield to identify and manage security events.

Connect to each server by using a remote desktop connection. Run an update script.

Use the AWS Systems Manager Patch Manager capability.

Schedule Amazon GuardDuty to run on a nightly basis.

159. A company that is planning to migrate to the AWS Cloud is based in an isolated area that has limited internet connectivity. The company needs to perform local data processing on premises. The company needs a solution that can operate without a stable internet connection .

Which AWS service will meet these requirements?

Amazon S3

AWS Snowball Edge

AWS StorageGateway

AWS Backup

160. A company wants to migrate its applications to the AWS Cloud. The company plans to identify and prioritize any business transformation opportunities and evaluate its AWS Cloud readiness .

Which AWS service or tool should the company use to meet these requirements?

AWS Cloud Adoption Framework (AWS CAF)

AWS Managed Services (AMS)

AWS Well-Architected Framework

AWS Migration Hub

Page 17 of 20

161. Which controls are the responsibility of both AWS and AWS customers, according to the AWS shared responsibility model? (Select TWO.)

Physical and environmental controls

Patch management

Configuration management

Account structures

Choice of the AWS Region where data is stored

162. Which AWS service or tool helps companies measure the environmental impact of their AWS usage?

AWS customer carbon footprint tool

AWS Compute Optimizer

Sustainability pillar

OS-Climate (Open Source Climate Data Commons)

163. Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

Sustainability

Operations

Performance efficiency

Reliability

164. Which AWS service can a company use to securely store and encrypt passwords for a database?

AWS Shield

AWS Secrets Manager

AWS Identity and Access Management (IAM)

Amazon Cognito

165. Which of the following is the customer's responsibility, according to the AWS shared responsibility model?

Identity and access management

Hard drive initialization

Protection of data center hardware

Security of Availability Zones

166. A company wants to create multiple isolated networks in the same AWS account.

Which AWS service or component will provide this functionality?

AWS Transit Gateway

Internet gateway

Amazon VPC

Amazon EC2

167. Which AWS service offers a global content delivery network (CDN) that helps companies securely deliver websites, videos, applications, and APIs at high speeds with low latency?

Amazon EC2

Amazon CloudFront

Amazon CloudWatch

AWS CloudFormation

168. Which benefit of AWS Cloud computing provides lower latency between users and applications?

Agility

Economies of scale

Global reach

Pay-as-you-go pricing

169. Which design principles should a company apply to AWS Cloud workloads to maximize sustainability and minimize environmental impact? (Select TWO.)

Maximize utilization of Amazon EC2 instances.

Minimize utilization of Amazon EC2 instances.

Minimize usage of managed services.

Force frequent application reinstallations by users.

Reduce the need for users to reinstall applications.

170. A company wants to move its data warehouse application to the AWS Cloud. The company wants to run and scale its analytics services without needing to provision and manage data warehouse clusters.

Which AWS service will meet these requirements?

Amazon Redshift provisioned data warehouse

Amazon Redshift Serverless

Amazon Athena

Amazon S3

Page 18 of 20

171. Which tasks are the responsibility of AWS according to the AWS shared responsibility model? (Select TWO.)

Configure AWS Identity and Access Management (IAM).

Configure security groups on Amazon EC2 instances.

Secure the access of physical AWS facilities.

Patch applications that run on Amazon EC2 instances.

Perform infrastructure patching and maintenance.

172. A company is running an order processing system on Amazon EC2 instances. The company wants to migrate microservices-based application.

Which combination of AWS services can the application use to meet these requirements? (Select TWO.)

Amazon Simple Queue Service (Amazon SQS)

AWS Lambda

AWS Migration Hub

AWS AppSync

AWS Application Migration Service

173. A company wants to access a report about the estimated environmental impact of the company's AWS usage.

Which AWS service or feature should the company use to meet this requirement?

AWS Organizations

IAM policy

AWS Billing console

Amazon Simple Notification Service (Amazon SNS)

174. A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross-site scripting .

Which AWS service should the company use?

Amazon GuardDuty

AWS WAF

AWS Trusted Advisor

Amazon Inspector

175. A company needs to host a web server on Amazon EC2 instances for at least 1 year. The web server cannot tolerate interruption.

Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

On-Demand Instances

Partial Upfront Reserved Instances

Spot Instances

No Upfront Reserved Instances

176. A company runs a database on Amazon Aurora in the us-east-1 Region. The company has a disaster recovery requirement that the database be available in another Region.

Which solution meets this requirement with minimal disruption to the database operations?

Perform an Aurora Multi-AZ deployment.

Deploy Aurora cross-Region read replicas.

Create Amazon Elastic Block Store (Amazon EBS) volume snapshots for Aurora and copy them to another Region.

Deploy Aurora Replicas.

177. Which AWS service requires the customer to patch the guest operating system?

AWS Lambda

Amazon OpenSearch Service

Amazon EC2

Amazon ElastiCache

178. A company wants to migrate to the AWS Cloud. The company needs the ability to acquire resources when the resources are necessary.

The company also needs the ability to release those resources when the resources are no longer necessary.

Which architecture concept of the AWS Cloud meets these requirements?

Elasticity

Availability

Reliability

Durability

179. Which AWS service or tool provides recommendations to help users get rightsized Amazon EC2 instances based on historical workload usage data?

AWS Pricing Calculator

AWS Compute Optimizer

AWS App Runner

AWS Systems Manager

180. Which AWS service is designed to help users orchestrate a workflow process for a set of AWS Lambda functions?

Amazon DynamoDB

AWS CodePipeline

AWS Batch

AWS Step Functions

Page 19 of 20

181. Which options are perspectives that include foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)? (Select TWO.)

Sustainability

Security

Operations

Performance efficiency

Reliability

182. Which perspective of the AWS Cloud Adoption Framework (AWS CAF) connects technology and business?

Operations

People

Security

Governance

183. A company needs to host a highly available application in the AWS Cloud. The application runs

infrequently for short periods of time.

Which AWS service will meet these requirements with the LEAST amount of operational overhead?

Amazon EC2

AWS Fargate

AWS Lambda

Amazon Aurora

184. A company is planning a migration to the AWS Cloud and wants to examine the costs that are associated with different workloads.

Which AWS tool will meet these requirements?

AWS Budgets

AWS Cost Explorer

AWS Pricing Calculator

AWS Cost and Usage Report

185. A company is hosting a web application on Amazon EC2 instances. The company wants to implement custom conditions to filter and control inbound web traffic .

Which AWS service will meet these requirements?

Amazon GuardDuty

AWSWAF

Amazon Macie

AWS Shield

186. A company wants to securely store Amazon RDS database credentials and automatically rotate user passwords periodically.

Which AWS service or capability will meet these requirements?

Amazon S3

AWS Systems Manager Parameter Store

AWS Secrets Manager

AWS CloudTrail

187. A company has an application that runs periodically in an on-premises environment. The application runs for a few hours most days, but runs for 8 hours a day for a week at the end of each month .

Which AWS service or feature should be used to host the application in the AWS Cloud?

Amazon EC2 Standard Reserved Instances

Amazon EC2 On-Demand Instances

AWS Wavelength

Application Load Balancer

188. A company is reviewing the design of an application that will be migrated from on premises to a single Amazon EC2 instance.

What should the company do to make the application highly available?

Provision additional EC2 instances in other Availability Zones.

Configure an Application Load Balancer (ALB). Assign the EC2 instance as the ALB's target.

Use an Amazon Machine Image (AMI) to create the EC2 instance.

Provision the application by using an EC2 Spot Instance.

189. Which AWS service provides a highly accurate and easy-to-use enterprise search service that is powered by machine learning (ML)?

Amazon Kendra

Amazon SageMaker

Amazon Augmented Al (Amazon A2I)

Amazon Polly

190. A company provides a software as a service (SaaS) application. The company has a new customer that is based in a different country.

The new customer's data needs to be hosted in that country.

Which AWS service or infrastructure component should the company use to meet this requirement?

AWS Shield

Amazon S3 Object Lock

AWS Regions

Placement groups

Page 20 of 20

191. Which credential allows programmatic access to AWS resources for use from the AWS CLI or the AWS API?

User name and password

Access keys

SSH public keys

AWS Key Management Service (AWS KMS) keys

[CLF-C01 Exam Retired] New AWS Certified Cloud Practitioner CLF-C02 Dumps Available

[CLF-C01 Exam Retired] New AWS Certified Cloud Practitioner CLF-C02 Dumps Available

Share this post

Leave a Reply Cancel reply

Related Posts