[CLF-C01 Exam Retired] New AWS Certified Cloud Practitioner CLF-C02 Dumps Available

dumps2024-03-22T09:35:56+08:00

AWS Certified Cloud Practitioner CLF-C02 exam is designed for individuals who can proficiently showcase a comprehensive understanding of the AWS Cloud, irrespective of their specific job role. There are 65 questions (50 scored and 15 unscored) in the real AWS Certified CLF-C02 exam, and you have 90 minutes to answer all the questions. The exam cost is $100 USD. The required passing score for the CLF-C02 exam is 700. We have cracked the latest AWS Certified Cloud Practitioner CLF-C02 exam dumps, which can guarantee you pass. Free AWS Certified CLF-C02 exam dumps are below.

Page 1 of 19

1. Which database engine is compatible with Amazon RDS?

Apache Cassandra

MongoDB

Neo4j

PostgreSQL

2. A company needs to run code in response to an event notification that occurs when objects are uploaded to an Amazon S3 bucket.

Which AWS service will integrate directly with the event notification?

AWS Lambda

Amazon EC2

Amazon Elastic Container Registry (Amazon ECR)

AWS Elastic Beanstalk

3. A company wants to centrally manage security policies and billing services within a multi-account AWS environment.

Which AWS service should the company use to meet these requirements?

AWS Identity and Access Management (IAM)

AWS Organizations

AWS Resource Access Manager (AWS RAM)

AWS Config

4. What are the characteristics of Availability Zones? (Select TWO.)

All Availability Zones in an AWS Region are interconnected with high-bandwidth, low-latency networking

Availability Zones are physically separated by a minimum of distance of 150 km (100 miles).

All traffic between Availability Zones is encrypted.

Availability Zones within an AWS Region share redundant power, networking, and connectivity.

Every Availability Zone contains a single data center.

5. Which AWS Well-Architected Framework concept represents a system's ability to remain functional when the system encounters operational problems?

Consistency

Elasticity

Durability

Latency

6. Which AWS service or tool does AWS Control Tower use to create resources?

AWS CloudFormation

AWS Trusted Advisor

AWS Directory Service

AWS Cost Explorer

7. What are some advantages of using Amazon EC2 instances lo host applications in the AWS Cloud instead of on premises? (Select TWO.)

EC2 includes operating system patch management

EC2 integrates with Amazon VP

AWS CloudTrail, and AWS Identity and Access Management (IAM)

EC2 has a 100% service level agreement (SLA).

EC2 has a flexible, pay-as-you-go pricing model.

EC2 has automatic storage cost optimization.

8. Which option is an advantage of AWS Cloud computing that minimizes variable costs?

High availability

Economies of scale

Global reach

Agility

9. Which pillar of the AWS Well-Architected Framework focuses on the ability to run workloads effectively, gain insight into operations, and continuously improve supporting processes and procedures?

Cost optimization

Reliability

Operational excellence

Performance efficiency

10. Which benefit is included with an AWS Enterprise Support plan?

AWS Partner Network (APN) support at no cost

Designated support from an AWS technical account manager (TAM)

On-site support from AWS engineers

AWS managed compliance as code with AWS Config

Page 2 of 19

11. A company plans to migrate to AWS and wants to create cost estimates for its AWS use cases.

Which AWS service or tool can the company use to meet these requirements?

AWS Pricing Calculator

Amazon CloudWatch

AWS Cost Explorer

AWS Budgets

12. A developer needs to build an application for a retail company. The application must provide real-time product recommendations that are based on machine learning.

Which AWS service should the developer use to meet this requirement?

AWS Health Dashboard

Amazon Personalize

Amazon Forecast

Amazon Transcribe

13. A company deploys its application on Amazon EC2 instances. The application occasionally experiences sudden increases in demand. The company wants to ensure that its application can respond to changes in demand at the lowest possible cost.

Which AWS service or tool will meet these requirements?

AWS Auto Scaling

AWS Compute Optimizer

AWS Cost Explorer

AWS Well-Architected Framework

14. Which AWS service or tool provides recommendations to help users get rightsized Amazon EC2 instances based on historical workload usage data?

AWS Pricing Calculator

AWS Compute Optimizer

AWS App Runner

AWS Systems Manager

15. A company wants to use a managed service to simplify the setup, operation, and scaling of its MySQL database in the AWS Cloud.

Which AWS service will meet these requirements?

Amazon EMR

Amazon RDS

Amazon Redshift

Amazon DynamoDB

16. A company deploys its application to multiple AWS Regions and configures automatic failover between those Regions.

Which cloud concept does this architecture represent?

Security

Reliability

Scalability

Cost optimization

17. A company's IT team is managing MySQL database server clusters. The IT team has to patch the database and take backup snapshots of the data in the clusters. The company wants to move this workload to AWS so that these tasks will be completed automatically.

What should the company do to meet these requirements?

Deploy MySQL database server clusters on Amazon EC2 instances.

Use Amazon RDS with a MySQL database.

Use an AWS Cloud Form at ion template to deploy MySQL database servers on Amazon EC2 instances.

Migrate all the MySQL database data to Amazon S3.

18. A company recently migrated to the AWS Cloud. The company needs to determine whether its newly imported Amazon EC2 instances are the appropriate size and type.

Which AWS services can provide this information to the company? {Select TWO.)

AWS Auto Scaling

AWS Control Tower

AWS Trusted Advisor

AWS Compute Optimizer

Amazon Forecast

19. A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove inappropriate photos. The company has no machine learning (ML) scientists and must build this detection capability with no ML expertise.

Which AWS service should the company use to build this capability?

Amazon SageMaker

Amazon Textract

Amazon Rekognition

Amazon Comprehend

20. A company's user base needs to remotely access virtual desktop computers from the internet.

Which AWS service provides this functionality?

Amazon Connect

Amazon Cognito

Amazon Workspaces

Amazon Upstream 2.0

Page 3 of 19

21. Amazon Elastic File System (Amazon EFS) and Amazon FSx offer which type of storage?

File storage

Object storage

Block storage

Instance store

22. Which AWS service or feature is used to Troubleshoot network connectivity issues between Amazon EC2 instances?

AWS Certificate Manager (ACM)

Internet gateway

VPC Flow Logs

AWS CloudHSM

23. Which factors affect costs in the AWS Cloud? (Select TWO.)

The number of unused AWS Lambda functions

The number of configured Amazon S3 buckets

Inbound data transfers without acceleration

Outbound data transfers without acceleration

Compute resources that are currently in use

24. Which design principles support the reliability pillar of the AWS Well-Architected Framework? (Select TWO.)

Perform operations as code.

Enable traceability.

Automatically scale to meet demand.

Deploy resources globally to improve response time.

Automatically recover from failure.

25. Which of the following are user authentication services managed by AWS? (Select TWO.)

Amazon Cognito

AWS Lambda

AWS License Manager

AWS Identity and Access Management (IAM)

AWS CodeStar

26. company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.

Which pillar of the AWS Well-Architected Framework is supported by these goals?

Reliability

Security

Operational excellence

Performance efficiency

27. A company is configuring its AWS Cloud environment. The company's administrators need to group users together and apply permissions to the group.

Which AWS service or feature can the company use to meet these requirements?

AWS Organizations

Resource groups

Resource tagging

AWS Identity and Access Management (IAM)

28. A company has two AWS accounts in an organization in AWS Organizations for consolidated billing.

All of the company's AWS resources are hosted in one AWS Region.

Account A has purchased five Amazon EC2 Standard Reserved Instances (RIs) and has four EC2 instances running. Account B has not purchased any RIs and also has four EC2 instances running.

Which statement is true regarding pricing for these eight instances?

The eight instances will be charged as regular instances.

Four instances will be charged as RIs, and four will be charged as regular instances.

Five instances will be charged as RIs, and three will be charged as regular instances.

The eight instances will be charged as RIs.

29. Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?

Elimination of expenses for running and maintaining data centers

Price discounts that are identical to discounts from hardware providers

Distribution of all operational controls to AWS

Elimination of operational expenses

30. Which of the following is a cost efficiency principle related to the AWS Cloud?

Right-size services based on capacity requirements.

Use the Billing Dashboard to access information about monthly bills.

Use AWS Organizations to combine the expenses of multiple accounts into a single bill.

Tag all AWS resources.

Page 4 of 19

31. A cloud engineer needs to download AWS security and compliance documents for an upcoming audit.

Which AWS service can provide the documents?

AWS Trusted Advisor

AWS Artifact

AWS Well-Architected Tool

AWS Systems Manager

32. A company has been storing monthly reports in an Amazon S3 bucket. The company exports the report data into comma-separated values (.csv) files. A developer wants to write a simple query that can read all of these files and generate a summary report.

Which AWS service or feature should the developer use to meet these requirements with the LEAST amount of operational overhead?

Amazon S3 Select

Amazon Athena

Amazon Redshift

Amazon EC2

33. Which task requires the use of AWS account root user credentials?

The deletion of IAM users

The change to a different AWS Support plan

The creation of an organization in AWS Organizations

The deletion of Amazon EC2 instances

34. Which feature of the AWS Cloud gives users the ability to pay based on current needs rather than forecasted needs?

AWS Budgets

Pay-as-you-go pricing

Volume discounts

Savings Plans

35. What does the Amazon S3 Intelligent-Tiering storage class offer?

Payment flexibility by reserving storage capacity

Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon EBS) volume

Automatic cost savings by moving objects between tiers based on access pattern changes

Secure, durable, and lowest cost storage for data archival

36. Which AWS service gives users the ability to provision a dedicated and private network connection from their internal network to AWS?

AWS CloudHSM

AWS Direct Connect

AWS VPN

Amazon Connect

37. A company is hosting a web application in a Docker container on Amazon EC2.

AWS is responsible for which of the following tasks?

Scaling the web application and services developed with Docker

Provisioning or scheduling containers to run on clusters and maintain their availability

Performing hardware maintenance in the AWS facilities that run the AWS Cloud

Managing the guest operating system, including updates and security patches

38. Which design principle should be considered when architecting in the AWS Cloud?

Think of servers as non-disposable resources.

Use synchronous integration of services.

Design loosely coupled components.

Implement the least permissive rules for security groups.

39. Which AWS service or tool helps to centrally manage billing and allow controlled access to resources across AWS accounts?

AWS Identity and Access Management (IAM)

AWS Organizations

AWS Cost Explorer

AWS Budgets

40. Which AWS service or feature can be used to estimate costs before deployment?

AWS Free Tier

AWS Pricing Calculator

AWS Billing and Cost Management

AWS Cost and Usage Report

Page 5 of 19

41. Which of the following promotes AWS Cloud architectural best practices for designing and operating reliable, secure, efficient, and cost-effective systems?

AWS Serverless Application Model framework

AWS Business Support

Principle of least privilege

AWS Well-Architected Framework

42. Which task is a customer's responsibility, according to the AWS shared responsibility model?

Management of the guest operating systems

Maintenance of the configuration of infrastructure devices

Management of the host operating systems and virtualization

Maintenance of the software that powers Availability Zones A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.

43. Which best practice for cost governance does this example show?

Resource controls

Cost allocation

Architecture optimization

Tagging enforcement

44. Which activity can companies complete by using AWS Organizations?

Troubleshoot the performance of applications.

Manage service control policies (SCPs).

Migrate applications to microservices.

Monitor the performance of applications.

45. Which AWS service or feature is used to send both text and email messages from distributed applications?

Amazon Simple Notification Service (Amazon SNS)

Amazon Simple Email Service (Amazon SES)

Amazon CloudWatch alerts

Amazon Simple Queue Service (Amazon SQS)

46. Which of the following is a benefit of decoupling an AWS Cloud architecture?

Reduced latency

Ability to upgrade components independently

Decreased costs

Fewer components to manage

47. Which of the following describes an AWS Region?

A specific location within a geographic area that provides high availability

A set of data centers spanning multiple countries

A global picture of a user's cloud computing environment

A collection of databases that can be accessed from a specific geographic area only

48. A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS Cloud. responsibility model?

Amazon FSx for Windows File Server

Amazon Workspaces virtual Windows desktop

AWS Directory Service for Microsoft Active Directory

Amazon RDS for Microsoft SQL Server

49. Which AWS service should a cloud practitioner use to receive real-time guidance for provisioning resources, based on AWS best practices related to security, cost optimization, and service limits?

AWS Trusted Advisor

AWS Config

AWS Security Hub

AWS Systems Manager

50. Which of the following are advantages of moving to the AWS Cloud? (Select TWO.)

The ability to turn over the responsibility for all security to AW

The ability to use the pay-as-you-go model.

The ability to have full control over the physical infrastructure.

No longer having to guess what capacity will be required.

No longer worrying about users access controls.

Page 6 of 19

51. A company is migrating a relational database server to the AWS Cloud. The company wants to minimize administrative overhead of database maintenance tasks.

Which AWS service will meet these requirements?

Amazon DynamoDB

Amazon EC2

Amazon Redshift

Amazon RDS

52. A company is reviewing its operating policies.

Which policy complies with guidance in the security pillar of the AWS Well-Architected Framework?

Ensure that employees have access to all company data.

Expand employees' permissions as they gain more experience.

Grant all privileges and access to all users.

Apply security requirements at all layers of a process.

53. Which task is the responsibility of a company that is using Amazon RDS?

Provision the underlying infrastructure.

Create IAM policies to control administrative access to the service.

Install the cables to connect the hardware for compute and storage.

Install and patch the RDS operating system.

54. A company is designing an identity access management solution for an application. The company wants users to be able to use their social media, email, or online shopping accounts to access the application.

Which AWS service provides this functionality?

AWS IAM Identity Center (AWS Single Sign-On)

AWS Config

Amazon Cognito

AWS Identity and Access Management (IAM)

55. Which AWS service aggregates, organizes, and prioritizes security alerts and findings from multiple AWS services?

Amazon Detective

Amazon Inspector

Amazon Macie

AWS Security Hub

56. Which of the following are advantages of the AWS Cloud? (Select TWO.)

Trade variable expenses for capital expenses

High economies of scale

Launch globally in minutes

Focus on managing hardware infrastructure

Overprovision to ensure capacity

57. Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?

Amazon DynamoDB

Amazon Aurora

Amazon DocumentDB (with MongoDB compatibility)

Amazon Neptune

58. Which AWS service or tool provides users with the ability to monitor AWS service quotas?

AWS CloudTrail

AWS Cost and Usage Reports

AWS Trusted Advisor

AWS Budgets

59. Which of the following is an advantage of AWS Cloud computing?

Trade security for elasticity.

Trade operational excellence for agility.

Trade fixed expenses for variable expenses.

Trade elasticity for performance.

60. A company is running applications on Amazon EC2 instances in the same AWS account for several different projects. The company wants to track the infrastructure costs for each of the projects separately. The company must conduct this tracking with the least possible impact to the existing infrastructure and with no additional cost.

What should the company do to meet these requirements?

Use a different EC2 instance type for each project.

Publish project-specific custom Amazon CloudWatch metrics for each application.

Deploy EC2 instances for each project in a separate AWS account.

Use cost allocation tags with values that are specific to each project.

Page 7 of 19

61. A company has an online shopping website and wants to store customers' credit card data. The company must meet Payment Card Industry (PCI) standards.

Which service can the company use to access AWS compliance documentation?

Amazon Cloud Directory

AWS Artifact

AWS Trusted Advisor

Amazon Inspector

62. Which of the following are components of an AWS Site-to-Site VPN connection? (Select TWO.)

AWS Storage Gateway

Virtual private gateway

NAT gateway

Customer gateway

Internet gateway

63. A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.

Which pricing model enables the company to optimize costs and meet these requirements?

Reserved Instances

Spot Instances

On-Demand Instances

Dedicated Instances

64. A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-cost laptops.

Which AWS service will help the company deploy the application without investing in backend infrastructure or high end client hardware?

Amazon AppStream 2.0

AWS AppSync

Amazon WorkLink

AWS Elastic Beanstalk

65. Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday?

Amazon CloudWatch

AWS Trusted Advisor

AWS CloudTrail

Amazon Inspector

66. Which AWS database service provides in-memory data storage?

Amazon DynamoDB

Amazon ElastiCache

Amazon RDS

Amazon Timestream

67. A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. The company wants to use AWS services for the backups without changing its existing backup workflows.

Which AWS service should the company use to meet these requirements?

Amazon Elastic Block Store (Amazon EBS)

AWS Storage Gateway

Amazon Elastic Container Service (Amazon ECS)

AWS Lambda

68. Which AWS Support plan provides customers with access to an AWS technical account manager (TAM)?

AWS Basic Support

AWS Developer Support

AWS Business Support

AWS Enterprise Support

69. A company is designing a web application that will run on Amazon EC2 instances.

Which AWS services and features will improve availability and reduce the impact of failures for this

application? (Select TWO.)

Amazon EC2 Auto Scaling for the EC2 instances

VPC subnet ACLs to check the health of a service

Resources that are distributed across multiple Availability Zones

Configuration of AWS Server Migration Service (AWS SMS) to move the EC2 instances to a Different AWS Region

Resources that are distributed across multiple AWS points of presence

70. An Availability Zone consists of:

one or more data centers in a single location.

two or more data centers in multiple locations.

one or more physical hosts in a single data center.

two or more physical hosts in multiple data centers.

Page 8 of 19

71. A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal communication latency between the data centers.

How can the company meet this requirement?

Place the EC2 instances in two separate AWS Regions connected with a VPC peering connection.

Place the EC2 instances in two separate Availability Zones within the same AWS Region.

Place one EC2 instance on premises and the other in an AWS Region. Then connect them by using an AWS VPN connection.

Place both EC2 instances in a placement group for dedicated bandwidth.

72. Which of the following acts as an instance-level firewall to control inbound and outbound access?

Network access control list

Security groups

AWS Trusted Advisor

Virtual private gateways

73. A company has an application that uses AWS services. During scaling events, the company wants to keep application usage within AWS service quotas.

Which AWS services or tools can report on the quotas so that the company can improve the reliability of the application? (Select TWO.)

Service Quotas console

AWS Trusted Advisor

AWS Systems Manager

AWS Shield

AWS Cost Explorer

74. Which of the following are AWS Cloud design principles? (Select TWO.)

Pay for compute resources in advance.

Make data-driven decisions to determine cloud architectural design.

Emphasize manual processes to allow for changes.

Test systems at production scale.

Refine operational procedures infrequently.

75. A company needs to migrate all of its development teams to a cloud-based integrated development environment (IDE).

Which AWS service should the company use?

AWS CodeBuild

AWS Cloud9

AWS OpsWorks

AWS Cloud Development Kit (AWS CDK)

76. A company needs to run its existing custom, nonproduction workloads in the AWS Cloud quickly and cost-effectively.

The workloads can recover from interruptions easily.

Which pricing model should the company use?

Reserved Instances

On-Demand Instances

Spot Instances

Dedicated Hosts

77. According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Select TWO.)

Network infrastructure and virtualization of infrastructure

Security of application data

Guest operating systems

Physical security of hardware

Credentials and policies

78. Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Select TWO.)

AWS Trusted Advisor

AWS Online Tech Talks

AWS Blog

AWS Forums

AWS Classroom Training

79. A company wants to host its relational databases on AWS. The databases have predefined schemas that the company needs to replicate on AWS.

Which AWS services could the company use for the databases? (Select TWO.)

Amazon Aurora

Amazon RDS

Amazon DocumentDB (with MongoDB compatibility)

Amazon Neptune

Amazon DynamoDB

80. Which of the following are benefits that a company receives when it moves an on-premises production workload to AWS? (Select TWO.)

AWS trains the company's staff on the use of all the AWS services.

AWS manages all security in the cloud.

AWS offers free support from technical account managers (TAMs).

AWS offers high availability.

AWS provides economies of scale.

Page 9 of 19

81. A company needs a content delivery network that provides secure delivery of data, videos, applications, and APIs to users globally with low latency and high transfer speeds.

Which AWS service meets these requirements?

Amazon CloudFront

Elastic Load Balancing

Amazon S3

Amazon Elastic Transcoder

82. An application is running on multiple Amazon EC2 instances. The company wants to make the application highly available by configuring a load balancer with requests forwarded to the EC2 instances based on URL paths.

Which AWS load balancer will meet these requirements and take the LEAST amount of effort to deploy?

Network Load Balancer

Application Load Balancer

AWS OpsWorks Load Balancer

Custom Load Balancer on Amazon EC2

83. A company needs to use dashboards and charts to analyze insights from business data.

Which AWS service will provide the dashboards and charts for these insights?

Amazon Macie

Amazon Aurora

Amazon QuickSight

AWS CloudTrail

84. A large company has a workload that requires hardware to remain on premises. The company wants to use the same management and control plane services that it currently uses on AWS.

Which AWS service should the company use to meet these requirements?

AWS Device Farm

AWS Fargate

AWS Outposts

AWS Ground Station

85. When a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?

Spot Instances

Dedicated Instances

Dedicated Hosts

Reserved Instances

86. Which AWS service should a cloud engineer use to view API calls to AWS services?

Amazon CloudWatch

AWS CloudTrail

AWS Config

AWS Artifact

87. What can a user accomplish using AWS CloudTrail?

Generate an IAM user credentials report.

Record API calls made to AWS services.

Assess the compliance of AWS resource configurations with policies and guidelines.

Ensure that Amazon EC2 instances are patched with the latest security updates. A company uses Amazon Workspaces.

88. Which task is the responsibility of AWS, according to the AWS shared responsibility model?

Set up multi-factor authentication (MFA) for each Workspaces user account.

Ensure the environmental safety and security of the AWS infrastructure that hosts Workspaces.

Provide security for Workspaces user accounts through AWS Identity and Access Management (IAM).

Configure AWS CloudTrail to log API calls and user activity. A company stores data in an Amazon S3 bucket. The company must control who has permission to read, write, or delete objects that the company stores in the S3 bucket.

89. Which AWS features will meet these requirements? (Select TWO.)

Security groups

Network ACLs

S3 bucket policies

IAM user policies

S3 bucket versioning

90. Which of the following is a recommended design principle of the AWS Well-Architected Framework?

Reduce downtime by making infrastructure changes infrequently and in large increments.

Invest the time to configure infrastructure manually.

Learn to improve from operational failures.

Use monolithic application design for centralization.

Page 10 of 19

91. A security engineer wants a single-tenant AWS solution to create, control, and manage their own cryptographic keys to meet regulatory compliance requirements for data security.

Which AWS service should the engineer use?

AWS Key Management Service (AWS KMS)

AWS Certificate Manager (ACM)

AWS CloudHSM

AWS Systems Manager

92. Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Select TWO.)

Patch AWS network devices.

Set user password rules.

Provide physical security for compute resources.

Configure security groups.

Patch the operating system of an Amazon EC2 instance.

93. Which AWS service or feature captures information about the network traffic to and from an Amazon EC2 instance?

VPC Reachability Analyzer

Amazon Athena

VPC Flow Logs

AWS X-Ray

94. Which of the following are pillars of the AWS Well-Architected Framework? (Select TWO.)

Availability

Reliability

Scalability

Responsive design

Operational excellence

95. Which tasks are customer responsibilities according to the AWS shared responsibility model? (Select TWO.)

Determine application dependencies with operating systems.

Provide user access with AWS Identity and Access Management (IAM).

Secure the data center in an Availability Zone.

Patch the hypervisor.

Provide network availability in Availability Zones.

96. A user wants to identify any security group that is allowing unrestricted incoming SSH traffic.

Which AWS service can be used to accomplish this goal?

Amazon Cognito

AWS Shield

Amazon Macie

AWS Trusted Advisor

97. Which AWS feature or resource is a deployable Amazon EC2 instance template that is prepackaged with software and security requirements?

Amazon Elastic Block Store (Amazon EBS) volume

AWS CloudFormation template

Amazon Elastic Block Store (Amazon EBS) snapshot

Amazon Machine Image (AMI)

98. Which AWS service is a highly available and scalable DNS web service?

Amazon VPC

Amazon CloudFront

Amazon Route 53

Amazon Connect

99. Which of the following is a characteristic of the AWS account root user?

The root user is the only user that can be configured with multi-factor authentication (MFA).

The root user is the only user that can access the AWS Management Console.

The root user is the first sign-in identity that is available when an AWS account is created.

The root user has a password that cannot be changed.

100. Which AWS service provides the ability to host a NoSQL database in the AWS Cloud?

Amazon Aurora

Amazon DynamoDB

Amazon RDS

Amazon Redshift

Page 11 of 19

101. What is the total amount of storage offered by Amazon S3?

WOMB

5 GB

5 TB

Unlimited

102. Which AWS network services or features allow Cl DR block notation when providing an IP address

range? (Select TWO.)

Security groups

Amazon Machine Image (AMI)

Network access control list (network ACL)

AWS Budgets

Amazon Elastic Block Store (Amazon EBS)

103. A company has a workload that requires data to be collected, analyzed, and stored on premises. The company wants to extend the use of AWS services to run on premises with access to the company network and the company's VPC.

Which AWS service meets this requirement?

AWS Outposts

AWS Storage Gateway

AWS Direct Connect

AWS Snowball

104. A company wants to deploy and manage a Docker-based application on AWS.

Which solution meets these requirements with the LEAST amount of operational overhead?

An open-source Docker orchestrator on Amazon EC2 instances

AWS AppSync

Amazon Elastic Container Registry (Amazon ECR)

Amazon Elastic Container Service (Amazon ECS)

105. When designing AWS workloads to be operational even when there are component failures, what is an AWS best practice?

Perform quarterly disaster recovery tests.

Place the main component on the us-east-1 Region.

Design for automatic failover to healthy resources.

Design workloads to fit on a single Amazon EC2 instance.

106. Which AWS service provides highly durable object storage?

Amazon S3

Amazon Elastic File System (Amazon EFS)

Amazon Elastic Block Store (Amazon EBS)

Amazon FSx

107. Which pillar of the AWS Well-Architected Framework includes a design principle about measuring the overall efficiency of workloads in terms of business value?

Operational excellence

Security

Reliability

Cost optimization

108. Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?

AWS Support

AWS customers

AWS Key Management Service (AWS KMS)

AWS Trusted Advisor

109. Who is responsible for decommissioning end-of-life underlying storage devices that are used to host data on AWS?

Customer

AWS

Account creator

Auditing team

110. A company wants to manage access and permissions for its third-party software as a service (SaaS) applications. The company wants to use a portal where end users can access assigned AWS accounts and AWS Cloud applications.

Which AWS service should the company use to meet these requirements?

Amazon Cognito

AWS IAM Identity Center (AWS Single Sign-On)

AWS Identity and Access Management (IAM)

AWS Directory Service for Microsoft Active Directory

Page 12 of 19

111. A large company wants to track the combined AWS usage costs of all of its linked accounts.

How can this be accomplished?

Use AWS Trusted Advisor to generate customized summary reports.

Use AWS Organizations to generate consolidated billing reports.

Use AWS Budgets to set utilization targets and receive summary reports.

Use the AWS Control Tower dashboard to get a summary report of all linked account costs.

112. A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular geographic area.

Which solution achieves this goal?

Use EC2 instances in a single Availability Zone.

Use EC2 instances in multiple AWS Regions.

Use EC2 instances in multiple edge locations.

Use Amazon CloudFront with the EC2 instances configured as the source.

113. Using Amazon Elastic Container Service (Amazon ECS) to break down a monolithic architecture into microservices is an example of:

a loosely coupled architecture.

a tightly coupled architecture.

a stateless architecture.

a stateful architecture.

114. Which of the following are design principles for reliability in the AWS Cloud? (Select TWO.)

Build architectures with tightly coupled resources.

Use AWS Trusted Advisor to meet security best practices.

Use automation to recover immediately from failure.

Rightsize Amazon EC2 instances to ensure optimal performance.

Simulate failures to test recovery processes.

115. Which statements represent the cost-effectiveness of the AWS Cloud? (Select TWO.)

Users can trade fixed expenses for variable expenses.

Users can deploy all over the world in minutes.

AWS offers increased speed and agility.

AWS is responsible for patching the infrastructure.

Users benefit from economies of scale.

116. A company wants to migrate its on-premises data warehouse to AWS. The information in the data warehouse is used to populate analytics dashboards.

Which AWS service should the company use for the data warehouse?

Amazon ElastiCache

Amazon Aurora

Amazon RDS

Amazon Redshift

117. Which benefit does Amazon Rekognition provide?

The ability to place watermarks on images

The ability to detect objects that appear in pictures

The ability to resize millions of images automatically

The ability to bid on object detection jobs

118. Which AWS service uses a combination of publishers and subscribers?

AWS Lambda

Amazon Simple Notification Service (Amazon SNS)

Amazon CloudWatch

AWS CloudFormation

119. A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs.

Which AWS service or feature should the company use to meet these authentication requirements?

Amazon API Gateway

IAM users

AWS Security Token Service (AWS STS)

IAM instance profiles

120. A company is migrating an application that includes an Oracle database to AWS. The company cannot rewrite the application.

To which AWS service could the company migrate the database?

Amazon Athena

Amazon DynamoDB

Amazon RDS

Amazon DocumentDB (with MongoDB compatibility)

Page 13 of 19

121. Which of the following is an AWS value proposition that describes a user's ability to scale infrastructure based on demand?

Speed of innovation

Resource elasticity

Decoupled architecture

Global deployment

122. A company needs to continuously monitor its environment to analyze network and account activity and identify potential security threats.

Which AWS service should the company use to meet these requirements?

AWS Artifact

Amazon Macie

AWS Identity and Access Management (IAM)

Amazon GuardDuty

123. Which AWS service can report how AWS resource configurations have changed over time?

AWS CloudTrail

Amazon CloudWatch

AWS Config

Amazon Inspector

124. Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses?

High availability

Economies of scale

Pay-as-you-go pricing

Global reach

125. A company is using AWS Lambda functions to build an application.

Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Select TWO.)

Patch the servers where the Lambda functions are deployed.

Establish the IAM permissions that define who can run the Lambda functions.

Write the code for the Lambda functions to define the application logic.

Deploy Amazon EC2 instances to support the Lambda functions.

Scale out the Lambda functions when the load increases.

126. Which services can be used to deploy applications on AWS? (Select TWO.)

AWS Elastic Beanstalk

AWS Config

AWS OpsWorks

AWS Application Discovery Service

Amazon Kinesis

127. Which statement describes a characteristic of the AWS global infrastructure?

Edge locations contain multiple AWS Regions.

AWS Regions contain multiple Regional edge caches.

Availability Zones contain multiple data centers.

Each data center contains multiple edge locations.

128. Which of the following is available to a company that has an AWS Business Support plan?

AWS Support concierge

AWS DDoS Response Team (DRT)

AWS technical account manager (TAM)

AWS Health API

129. Which pillar of the AWS Well-Architected Framework focuses on the return on investment of moving into the AWS Cloud?

Sustainability

Cost optimization

Operational excellence

Reliability

130. Which AWS service or feature offers HTTP attack protection to users running public-facing web applications?

Security groups

Network ACLs

AWS Shield Standard

AWS WAF

Page 14 of 19

131. What is an Availability Zone?

A location where users can deploy compute, storage, database, and other select AWS services where no AWS Region currently exists

One or more discrete data centers with redundant power, networking, and connectivity

One or more clusters of servers where new workloads can be deployed

A fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to users globally

132. Which of the following is a cloud benefit that AWS offers to its users?

The ability to configure AWS data center hypervisors

The ability to purchase hardware in advance of increased traffic

The ability to deploy to AWS on a global scale

Compliance audits for user IT environments

133. Which AWS service can a company use to perform complex analytical queries?

Amazon RDS

Amazon DynamoDB

Amazon Redshift

Amazon ElastiCache

134. A company wants to track its AWS account's service costs. The company also wants to receive notifications when costs are forecasted to reach a specific level.

Which AWS service or tool provides this functionality?

AWS Budgets

AWS Cost Explorer

Savings Plans

AWS Billing Conductor

135. An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.

Which AWS service is used to track, record, and audit configuration changes made to AWS resources?

AWS Shield

AWS Config

AWS IAM

Amazon Inspector

136. A company needs to test a new application that was written in Python. The code will activate when new images are stored in an Amazon S3 bucket. The application will put a watermark on each image and then will store the images in a different S3 bucket.

Which AWS service should the company use to conduct the test with the LEAST amount of operational overhead?

Amazon EC2

AWS CodeDeploy

AWS Lambda

Amazon Lightsail

137. Which of the following are customer responsibilities under the AWS shared responsibility model? (Select TWO.)

Physical security of AWS facilities

Configuration of security groups

Encryption of customer data on AWS

Management of AWS Lambda infrastructure

Management of network throughput of each AWS Region

138. Which AWS service or tool can be used to consolidate payments for a company with multiple AWS accounts?

AWS Cost and Usage Report

AWS Organizations

Cost Explorer

AWS Budgets

139. How can an AWS user conduct security assessments of Amazon EC2 instances, NAT gateways, and Elastic Load Balancers in a way that is approved by AWS?

Flood a target with requests.

Use Amazon Inspector.

Perform penetration testing.

Use the AWS Service Health Dashboard.

140. Which AWS service will help protect applications running on AWS from DDoS attacks?

Amazon GuardDuty

AWS WAF

AWS Shield

Amazon Inspector

Page 15 of 19

141. A cloud engineer wants to know the percentage of the allocated compute units that are in use for a specific Amazon EC2 instance.

Which AWS service can provide this information?

AWS CloudTrail

AWS Config

Amazon CloudWatch

AWS Artifact

142. Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?

Ensuring network connectivity from AWS to the internet

Patching and fixing flaws within the AWS Cloud infrastructure

Ensuring the physical security of cloud data centers

Ensuring Amazon EBS volumes are backed up

143. Which AWS service meets this requirement?

AWS CloudFormation

AWS Elastic Beanstalk

AWS Cloud9

AWS CloudShell

144. A company wants to use the AWS Cloud as an offsite backup location for its on-premises infrastructure.

Which AWS service will meet this requirement MOST cost-effectively?

Amazon S3

Amazon Elastic File System (Amazon EFS)

Amazon FSx

Amazon Elastic Block Store (Amazon EBS)

145. A company is building a serverless architecture that connects application data from multiple data sources. The company needs a solution that does not require additional code.

Which AWS service meets these requirements?

AWS Lambda

Amazon Simple Queue Service (Amazon SQS)

Amazon CloudWatch

Amazon EventBridge

146. A company needs to use standard SQL to query and combine exabytes of structured and semi-structured data across a data warehouse, operational database, and data lake.

Which AWS service meets these requirements?

Amazon DynamoDB

Amazon Aurora

Amazon Athena

Amazon Redshift

147. A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials.

Which of the following is an AWS best practice for using the AWS account root user credentials?

Allow only the manager to use the account root user credentials for normal activities.

Use the account root user credentials only for Amazon EC2 instances from the AWS Free Tier.

Use the account root user credentials only when they alone must be used to perform a required function.

Use the account root user credentials only for the creation of private VPC subnets.

148. A company needs to store data across multiple Availability Zones in an AWS Region. The data will not be accessed regularly but must be immediately retrievable.

Which Amazon Elastic File System (Amazon EFS) storage class meets these requirements MOST cost effectively?

EFS Standard

EFS Standard-Infrequent Access (EFS Standard-IA)

EFS One Zone

EFS One Zone-Infrequent Access (EFS One Zone-IA)

149. A company wants to establish a security layer in its VPC that will act as a firewall to control subnet traffic.

Which AWS service or feature will meet this requirement?

Routing tables

Network access control lists (network ACLs)

Security groups

Amazon GuardDuty

150. A newly created IAM user has no IAM policy attached.

What will happen when the user logs in and attempts to view the AWS resources in the account?

All AWS services will be read-only access by default.

Access to all AWS resources will be denied.

Access to the AWS billing services will be allowed.

Access to AWS resources will be allowed through the AWS CLL

Page 16 of 19

151. A cloud practitioner is analyzing Amazon EC2 instance performance and usage to provide recommendations for potential cost savings.

Which cloud concept does this analysis demonstrate?

Auto scaling

Rightsizing

Load balancing

High availability

152. An auditor needs to find out whether a specific AWS service is compliant with specific compliance frameworks.

Which AWS service will provide this information?

AWS Artifact

AWS Trusted Advisor

Amazon GuardDuty

AWS Certificate Manager (ACM)

153. Which duties are the responsibility of a company that is using AWS Lambda? (Select TWO.)

Security inside of code

Selection of CPU resources

Patching of operating system

Writing and updating of code

Security of underlying infrastructure

154. Which AWS services and features are provided to all customers at no charge? (Select TWO.)

Amazon Aurora

VPC

Amazon SageMaker

AWS Identity and Access Management (IAM)

Amazon Polly

155. Which AWS services or features can control VPC traffic? (Select TWO.)

Security groups

AWS Direct Connect

Amazon GuardDuty

Network ACLs

Amazon Connect

156. A company needs to identify the last time that a specific user accessed the AWS Management Console.

Which AWS service will provide this information?

Amazon Cognito

AWS CloudTrail

Amazon Inspector

Amazon GuardDuty

157. A company's application stores data in an Amazon S3 bucket. The company has an AWS Lambda function that processes data in the S3 bucket. The company needs to invoke the function once a day at a specific time.

Which AWS service should the company use to meet this requirement?

AWS Managed Services (AMS)

AWS CodeStar

Amazon EventBridge

AWS Step Functions

158. A company uses Amazon Aurora as its database service. The company wants to encrypt its databases and database backups.

Which party manages the encryption of the database clusters and database snapshots, according to the AWS shared responsibility model?

AWS

The company

AWS Marketplace partners

Third-party partners

159. Which AWS solution gives companies the ability to use protocols such as NFS to store and retrieve objects in Amazon S3?

Amazon FSx for Lustre

AWS Storage Gateway volume gateway

AWS Storage Gateway file gateway

Amazon Elastic File System (Amazon EFS)

160. A company is launching a new application in the AWS Cloud. The application will run on an Amazon EC2 instance. More EC2 instances will be needed when the workload increases.

Which AWS service or tool can the company use to launch the number of EC2 instances that will be needed to handle the workload?

Elastic Load Balancing

Amazon EC2 Auto Scaling

AWS App2Container (A2C)

AWS Systems Manager

Page 17 of 19

161. Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?

Vertical scaling

Manual failure recovery

Testing recovery procedures

Changing infrastructure manually

162. What is a benefit of moving to the AWS Cloud in terms of improving time to market?

Decreased deployment speed

Increased application security

Increased business agility

Increased backup capabilities

163. In which of the following AWS services should database credentials be stored for maximum security?

AWS Identity and Access Management (IAM)

AWS Secrets Manager

Amazon S3

AWS Key Management Service (AWS KMS)

164. A company needs to configure rules to identify threats and protect applications from malicious network access.

Which AWS service should the company use to meet these requirements?

AWS Identity and Access Management (IAM)

Amazon QuickSight

AWS WAF

Amazon Detective

165. Which option is an advantage of AWS Cloud computing that minimizes variable costs?

High availability

Economies of scale

Global reach

Agility

166. A company moves its infrastructure from on premises to the AWS Cloud. The company can now provision additional Amazon EC2 instances whenever the instances are required. With this ability, the company can launch new marketing campaigns in 3 days instead of 3 weeks.

Which benefit of the AWS Cloud does this scenario demonstrate?

Cost savings

Improved operational resilience

Increased business agility

Enhanced security

167. A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.

Which costs will the company eliminate with this migration? (Select TWO.)

Cost of data center operations

Cost of application licensing

Cost of marketing campaigns

Cost of physical server hardware

Cost of network management

168. Which AWS Support plan assigns an AWS concierge agent to a company's account?

AWS Basic Support

AWS Developer Support

AWS Business Support

AWS Enterprise Support

169. A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB.

What is the MOST operationally efficient solution to delegate permissions?

Create an IAM role with the required permissions. Attach the role to the EC2 instance.

Create an IAM user and use its access key and secret access key in the application.

Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance.

Create an IAM role with the required permissions. Attach the role to the administrativeIAM user.

170. Which encryption types can be used to protect objects at rest in Amazon S3? (Select TWO.)

Server-side encryption with AmazonS3 managed encryption keys (SSE-S3)

Server-side encryption with AWS KMSmanaged keys (SSE-KMS)

TLS

SSL

Transparent Data Encryption (TDE)

Page 18 of 19

171. A company is building an application that will receive millions of database queries each second. The company needs the data store for the application to scale to meet these needs.

Which AWS service will meet this requirement?

Amazon DynamoDB

AWS Cloud9

Amazon ElastiCache for Memcached

Amazon Neptune

172. An application runs on multiple Amazon EC2 instances that access a shared file system simultaneously.

Which AWS storage service should be used?

Amazon EBS

Amazon EFS

Amazon S3

AWS Artifact

173. Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

Security awareness and training

Development of an IAM password policy

Patching of the guest operating system

Physical and environmental controls

174. A company does not want to rely on elaborate forecasting to determine its usage of compute resources. Instead, the company wants to pay only for the resources that it uses. The company also needs the ability to increase or decrease its resource usage to meet business requirements.

Which pillar of the AWS Well-Architected Framework aligns with these requirements?

Operational excellence

Security

Reliability

Cost optimization

175. A company wants to use Amazon EC2 instances to run a stateless and restartable process after business hours.

Which AWS service provides DNS resolution?

Amazon CloudFront

Amazon VPC

Amazon Route 53

AWS Direct Connect

176. Which group shares responsibility with AWS for security and compliance of AWS accounts and resources?

Third-party vendors

Customers

Reseller partners

Internet providers

177. A company wants to migrate its Microsoft SQL Server database management system from on premises to the AWS Cloud.

Which AWS service should the company use to reduce management overhead for this environment?

Amazon Elastic Container Service (Amazon ECS)

Amazon SageMaker

Amazon RDS

Amazon Athena

178. A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way.

What can the company do to meet this requirement?

Use AWS Key Management Service (AWS KMS).

Use multiple AWS accounts and consolidated billing.

Use AWS CloudFormation to deploy the infrastructure.

Rightsized all the EC2 instances that are used in the deployment.

179. A company needs to launch an Amazon EC2 instance.

Which of the following can the company use during the launch process to configure the root volume of the EC2 instance?

Amazon EC2 Auto Scaling

Amazon Data Lifecycle Manager (Amazon DLM)

Amazon Machine Image (AMI)

Amazon Elastic Block Store (Amazon EBS) volume

180. A company plans to migrate its on-premises workload to AWS. Before the migration, the company needs to estimate its future AWS service costs.

Which AWS service or tool should the company use to meet this requirement?

AWS Trusted Advisor

AWS Budgets

AWS Pricing Calculator

AWS Cost Explorer

Page 19 of 19

181. A company suspects that its AWS resources are being used for illegal activities.

Which AWS group or team should the company notify?

AWS Abuse team

AWS Support team

AWS technical account managers

AWS Professional Services team

182. A company wants an in-memory data store that is compatible with open source in the cloud.

Which AWS service should the company use?

Amazon DynamoDB

Amazon ElastiCache

Amazon Elastic Block Store (Amazon EBS)

Amazon Redshift

183. A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access. According to the AWS shared responsibility model, which task is the responsibility of the customer?

Protect the global infrastructure that runs all of the services offered in the AWS Cloud.

Configure logical access controls for resources, and protect account credentials.

Configure the security used by managed services.

Patch and back up Amazon Aurora.

184. Which task is the responsibility of AWS when using AWS services?

Management of IAM user permissions

Creation of security group rules for outbound access

Maintenance of physical and environmental controls

Application of Amazon EC2 operating system patches

[CLF-C01 Exam Retired] New AWS Certified Cloud Practitioner CLF-C02 Dumps Available

[CLF-C01 Exam Retired] New AWS Certified Cloud Practitioner CLF-C02 Dumps Available

Share this post

Leave a Reply Cancel reply

Related Posts