Question 1

Web servers running on Amazon EC2 access a legacy application running in a corporate data center. What term would describe this model?

Accepted Answer

A)   Cloud-native
B)   Partner network
C)   Hybrid architecture
D)   Infrastructure as a serviceE) A) and B)
F) A) and C)

Question 2

Fault tolerance refers to:

Accepted Answer

A)   the ability of an application to accommodate growth without changing design
B)   how well and how quickly an application's environment can have lost data restored
C)   how secure your application is
D)   the built-in redundancy of an application's componentsE) A) and C)
F) A) and D)

Question 3

How would an AWS customer easily apply common access controls to a large set of users?

Accepted Answer

A)   Apply an IAM policy to an IAM group.
B)   Apply an IAM policy to an IAM role.
C)   Apply the same IAM policy to all IAM users with access to the same workload.
D)   Apply an IAM policy to an Amazon Cognito user pool.E) A) and D)
F) A) and B)

Question 4

A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access. What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?

Accepted Answer

A)   EC2 key pairs
B)   AWS Systems Manager Session Manager
C)   AWS Identity and Access Management (IAM) 
D)   Network ACLsE) A) and B)
F) A) and C)

Question 5

Which AWS Trusted Advisor feature is available exclusively to users with AWS Business Support or AWS Enterprise Support?

Accepted Answer

A)   Notification setup
B)   Refresh checks
C)   AWS Support API
D)   Action linksE) A) and B)
F) A) and C)

Question 6

Which AWS service is suitable for an event-driven workload?

Accepted Answer

A)   Amazon EC2
B)   AWS Elastic Beanstalk
C)   AWS Lambda
D)   Amazon LumberyardE) B) and C)
F) C) and D)

Question 7

Which AWS service can serve a static website?

Accepted Answer

A)   Amazon S3
B)   Amazon Route 53
C)   Amazon QuickSight
D)   AWS X-RayE) C) and D)
F) B) and D)

Question 8

Under the AWS shared responsibility model, AWS is responsible for which security-related task?

Accepted Answer

A)   Lifecycle management of IAM credentials
B)   Physical security of global infrastructure
C)   Encryption of Amazon EBS volumes
D)   Firewall configurationE) C) and D)
F) A) and B)

Question 9

Which service provides a user the ability to warehouse data in the AWS Cloud?

Accepted Answer

A)   Amazon EFS
B)   Amazon Redshift
C)   Amazon RDS
D)   Amazon VPCE) A) and D)
F) None of the above

Question 10

Which of the following are user authentication services managed by AWS? (Choose two.)

Accepted Answer

A)   Amazon Cognito
B)   AWS Lambda
C)   AWS License Manager
D)   AWS Identity and Access Management (IAM) 
E)   AWS CodeStarF) C) and D)
G) A) and D)

Question 11

Which tool is used to forecast AWS spending?

Accepted Answer

A)   AWS Trusted Advisor
B)   AWS Organizations
C)   Cost Explorer
D)   Amazon InspectorE) B) and C)
F) All of the above

Question 12

When using Amazon RDS, what is the customer responsible for?

Accepted Answer

A)   Patching and maintenance of the underlying operating system.
B)   Managing automatic backups of the database.
C)   Controlling network access through security groups.
D)   Replacing failed instances in the event of a hardware failure.E) A) and C)
F) A) and D)

Question 13

Using Amazon Elastic Container Service (Amazon ECS)  to break down a monolithic architecture into microservices is an example of:

Accepted Answer

A)   a loosely coupled architecture.
B)   a tightly coupled architecture.
C)   a stateless architecture.
D)   a stateful architecture.E) All of the above
F) A) and D)

Question 14

Which guideline is a well-architected design principle for building cloud applications?

Accepted Answer

A)   Keep static data closer to compute resources.
B)   Provision resources for peak capacity.
C)   Design for automated recovery from failure.
D)   Use tightly coupled components.E) B) and C)
F) C) and D)

Question 15

Which AWS services can be used to move data from on-premises data centers to AWS? (Choose two.)

Accepted Answer

A)   AWS Snowball
B)   AWS Lambda
C)   Amazon ElastiCache
D)   AWS Database Migration Service (AWS DMS) 
E)   Amazon API GatewayF) A) and B)
G) None of the above

Question 16

Which of the following describes a security best practice that can be implemented using AWS IAM?

Accepted Answer

A)   Disable AWS Management Console access for all users
B)   Generate secret keys for every IAM user
C)   Grant permissions to users who are required to perform a given task only
D)   Store AWS credentials within Amazon EC2 instancesE) A) and B)
F) A) and C)

Question 17

Which of the following are advantages of the AWS Cloud? (Choose two.)

Accepted Answer

A)   AWS manages the maintenance of the cloud infrastructure
B)   AWS manages the security of applications built on AWS
C)   AWS manages capacity planning for physical servers
D)   AWS manages the development of applications on AWS
E)   AWS manages cost planning for virtual serversF) A) and B)
G) D) and E)

Question 18

What is a characteristic of Convertible Reserved Instances (RIs) ?

Accepted Answer

A)   Users can exchange Convertible RIs for other Convertible RIs from a different instance family.
B)   Users can exchange Convertible RIs for other Convertible RIs in different AWS Regions.
C)   Users can sell and buy Convertible RIs on the AWS Marketplace.
D)   Users can shorten the term of their Convertible RIs by merging them with other Convertible RIs.E) A) and C)
F) A) and B)

Question 19

A user needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances and vulnerabilities on those instances. Which AWS service will provide this assessment report?

Accepted Answer

A)   EC2 security groups
B)   AWS Config
C)   Amazon Macie
D)   Amazon InspectorE) A) and D)
F) B) and C)

Question 20

When comparing AWS with on-premises Total Cost of Ownership (TCO) , what costs are included?

Accepted Answer

A)   Data center security
B)   Business analysis
C)   Project management
D)   Operating system administrationE) A) and D)
F) C) and D)

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)

Which AWS service is suitable for an event-driven workload?

Correct AnswerverifiedShow Answer

Web servers running on Amazon EC2 access a legacy application running in a corporate data center. What term would describe this model?

Correct AnswerverifiedShow Answer

How would an AWS customer easily apply common access controls to a large set of users?

Correct AnswerverifiedShow Answer

Which tool is used to forecast AWS spending?

Correct AnswerverifiedShow Answer

Which AWS Trusted Advisor feature is available exclusively to users with AWS Business Support or AWS Enterprise Support?

Correct AnswerverifiedShow Answer

What is a characteristic of Convertible Reserved Instances (RIs) ?

Correct AnswerverifiedShow Answer

Which guideline is a well-architected design principle for building cloud applications?

Correct AnswerverifiedShow Answer

Under the AWS shared responsibility model, AWS is responsible for which security-related task?

Correct AnswerverifiedShow Answer

Which AWS service can serve a static website?

Correct AnswerverifiedShow Answer

A user needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances and vulnerabilities on those instances. Which AWS service will provide this assessment report?

Correct AnswerverifiedShow Answer

Which AWS services can be used to move data from on-premises data centers to AWS? (Choose two.)

Correct AnswerverifiedShow Answer

Which of the following describes a security best practice that can be implemented using AWS IAM?

Correct AnswerverifiedShow Answer

Which of the following are advantages of the AWS Cloud? (Choose two.)

Correct AnswerverifiedShow Answer

When using Amazon RDS, what is the customer responsible for?

Correct AnswerverifiedShow Answer

When comparing AWS with on-premises Total Cost of Ownership (TCO) , what costs are included?

Correct AnswerverifiedShow Answer

Fault tolerance refers to:

Correct AnswerverifiedShow Answer

A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access. What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?

Correct AnswerverifiedShow Answer

Which of the following are user authentication services managed by AWS? (Choose two.)

Correct AnswerverifiedShow Answer

Which service provides a user the ability to warehouse data in the AWS Cloud?

Correct AnswerverifiedShow Answer

Using Amazon Elastic Container Service (Amazon ECS) to break down a monolithic architecture into microservices is an example of:

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified