AWS Certified Cloud Practitioner CLF-C01 Exam Questions Part 5

Source:

    AWS: https://www.awslagi.com    GCP: https://www.gcp-examquestions.com

1. A company has a compliance requirement to record and evaluate configuration changes, as well as perform remediation actions on AWS resources. Which AWS service should the company use?

   A. AWS ConfigB. AWS Secrets ManagerC. AWS CloudTrailD. AWS Trusted Advisor

Answer: A

1. A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLI and AWS software development kits (SDKs). Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Choose two.)

   A. Create an IAM user and provide AWS Management Console access only.B. Create an IAM user and provide programmatic access only.C. Create an IAM role and provide AWS Management Console access only.D. Create an IAM policy with administrator access and attach it to the IAM user.E. Create an IAM policy with Amazon RDS access and attach it to the IAM user.

Answer: B E

1. Which AWS service gives users on-demand, self-service access to AWS compliance control reports?

   A. AWS ConfigB. Amazon GuardDutyC. AWS Trusted AdvisorD. AWS Artifact

Answer: D

1. A web developer is concerned that a DDoS attack could target an application. Which AWS services or features can help protect against such an attack? (Choose two.)

   A. AWS ShieldB. AWS CloudTrailC. Amazon CloudFrontD. AWS Support CenterE. AWS Service Health Dashboard

Answer: A C

1. Which AWS Trusted Advisor check is available to all AWS users?

   A. Core checksB. All checksC. Cost optimization checksD. Fault tolerance checks

Answer: A

1. A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud. Which service should be used to deploy the application?

   A. AWS CloudFormationB. AWS Elastic BeanstalkC. Amazon EC2D. AWS OpsWorks

Answer: B

1. Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceeds a certain threshold?

   A. Cost ExplorerB. AWS BudgetsC. AWS Cost and Usage ReportD. AWS CloudTrail

Answer: B

1. AnyCompany recently purchased Example Corp. Both companies use AWS resources, and AnyCompany wants a single aggregated bill. Which option allows AnyCompany to receive a single bill?

   A. Example Corp. must submit a request to its AWS solutions architect or AWS technical account manager to link the accounts and consolidate billing.B. AnyCompany must create a new support case in the AWS Support Center requesting that both bills be combined.C. Send an invitation to join the organization from AnyCompanys AWS Organizations master account to Example Corp.D. Migrate the Example Corp. VPCs, Amazon EC2 instances, and other resources into the AnyCompany AWS account.

Answer: C

1. A company is building an application that requires the ability to send, store, and receive messages between application components. The company has another requirement to process messages in first-in, first-out (FIFO) order. Which AWS service should the company use?

   A. AWS Step FunctionsB. Amazon Simple Notification Service (Amazon SNS)C. Amazon Kinesis Data StreamsD. Amazon Simple Queue Service (Amazon SQS)

Answer: D

1. Which AWS services offer compute capabilities? (Choose two.)

   A. Amazon EC2B. Amazon S3C. Amazon Elastic Block Store (Amazon EBS)D. Amazon CognitoE. AWS Lambda

Answer: A E

1. Which AWS service or feature requires an internet service provider (ISP) and a colocation facility to be implemented?

   A. AWS VPNB. Amazon ConnectC. AWS Direct ConnectD. Internet gateway

Answer: C

1. Which AWS service allows customers to purchase unused Amazon EC2 capacity at an often discounted rate?

   A. Reserved InstancesB. On-Demand InstancesC. Dedicated InstancesD. Spot Instances

Answer: D

1. Which AWS service provides the ability to host a NoSQL database in the AWS Cloud?

   A. Amazon AuroraB. Amazon DynamoDBC. Amazon RDSD. Amazon Redshift

Answer: B

1. A company wants to be notified when its AWS Cloud costs or usage exceed defined thresholds. Which AWS service will support these requirements?

   A. AWS BudgetsB. Cost ExplorerC. AWS CloudTrailD. Amazon Macie

Answer: A

1. What is the customers responsibility when using AWS Lambda?

   A. Operating system configurationB. Application managementC. Platform managementD. Code encryption

Answer: B

1. Which of the following is the customers responsibility when using Amazon RDS?

   A. Patching the operating system of underlying hardwareB. Controlling traffic to and from the database through security groupsC. Running backups that enable point-in-time recovery of a DB instanceD. Replacing failed DB instances

Answer: B

1. Which tool can be used to identify scheduled changes to the AWS infrastructure?

   A. AWS Personal Health DashboardB. AWS Trusted AdvisorC. Billing DashboardD. AWS Config

Answer: D

1. A workload on AWS will run for the foreseeable future by using a consistent number of Amazon EC2 instances. What pricing model will minimize cost while ensuring that compute resources remain available?

   A. Dedicated HostsB. On-Demand InstancesC. Spot InstancesD. Reserved Instances

Answer: D

1. What are the advantages of deploying an application with Amazon EC2 instances in multiple Availability Zones? (Choose two.)

   A. Preventing a single point of failureB. Reducing the operational costs of the applicationC. Allowing the application to serve cross-region users with low latencyD. Increasing the availability of the applicationE. Increasing the load of the application

Answer: A D

1. A company is running a self-managed Oracle database directly on Amazon EC2 for its steady-state database. The company wants to reduce compute costs. Which option should the company use to maximize savings over a 3-year term?

   A. EC2 Dedicated InstancesB. EC2 Spot InstancesC. EC2 Reserved InstancesD. EC2 On-Demand Instances

Answer: C

1. How should a web application be deployed to ensure high availability in the AWS Cloud?

   A. Deploy multiple instances of the application in multiple Availability Zones.B. Deploy multiple instances of the application in a single Availability Zone.C. Deploy the application to a compute-optimized Amazon EC2 instance in a single Availability Zone.D. Deploy the application in one Amazon EC2 instance in an Auto Scaling group.

Answer: A

1. A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross- site scripting. Which AWS service should the company use?

   A. Amazon GuardDutyB. AWS WAFC. AWS Trusted AdvisorD. Amazon Inspector

Answer: B

1. Which AWS service can be used to retrieve compliance reports on demand?

   A. AWS Secrets ManagerB. AWS ArtifactC. AWS Security HubD. AWS Certificate Manager

Answer: B

1. A company wants to connect to AWS over a private, low-latency connection from its remote office. What is the recommended method to meet these requirements?

   A. Create a VPN tunnelB. Connect across the public internetC. Use VPC peering to create a connection.D. Use AWS Direct Connect.

Answer: D

1. Which AWS Cloud design principles can help increase reliability? (Choose two.)

   A. Using monolithic architectureB. Measuring overall efficiencyC. Testing recovery proceduresD. Adopting a consumption modelE. Automatically recovering from failure

Answer: C E

1. Which AWS service or feature is used to send both text and email messages from distributed applications?

   A. Amazon Simple Notification Service (Amazon SNS)B. Amazon Simple Email Service (Amazon SES)C. Amazon CloudWatch alertsD. Amazon Simple Queue Service (Amazon SQS)

Answer: A

1. A company wants to ensure its infrastructure is designed for fault tolerance and business continuity in the event of an environmental disruption. Which AWS infrastructure component should the company replicate across?

   A. Edge locationsB. Availability ZonesC. RegionsD. Amazon Route 53

Answer: C

1. Which AWS service should a cloud practitioner use to identify security vulnerabilities of an AWS account?

   A. AWS Secrets ManagerB. Amazon CognitoC. Amazon MacieD. AWS Trusted Advisor

Answer: D

1. Which AWS service can be used to privately store and manage versions of source code?

   A. AWS CodeBuildB. AWS CodeCommitC. AWS CodePipelineD. AWS CodeStar

Answer: B

1. Which AWS service or feature can be used to prevent SQL injection attacks?

   A. Security groupsB. Network ACLsC. AWS WAFD. IAM policy

Answer: C

1. How can AWS enable a company to control expenses as an applications usage changes unpredictably?

   A. AWS will refund the cost difference if a customer moves to larger servers.B. The application can be built to scale up or down automatically as resources are neededC. Spot instances will automatically be used if the price is lower than on-demand instances.D. Amazon CloudWatch will automatically predict what resources are needed.

Answer: B

1. A pharmaceutical company operates its infrastructure in a single AWS Region. The company has thousands of VPCs in a various AWS accounts that it wants to interconnect. Which AWS service or feature should the company use to help simplify management and reduce operational costs?

   A. VPC endpointB. AWS Direct ConnectC. AWS Transit GatewayD. VPC peering

Answer: C

1. Which cloud computing benefit does AWS demonstrate with its ability to offer lower variable costs as a result of high purchase volumes?

   A. Pay-as-you-go pricingB. High availabilityC. Global reachD. Economies of scale

Answer: A

1. The AWS IAM best practice for granting least privilege is to:

   A. apply an IAM policy to an IAM group and limit the size of the group.B. require multi-factor authentication (MFA) for all IAM users.C. require each IAM user who has different permissions to have multiple passwords.D. apply an IAM policy only to IAM users who require it.

Answer: D

1. A company is building an application that needs to deliver images and videos globally with minimal latency. Which approach can the company use to accomplish this in a cost effective manner?

   A. Deliver the content through Amazon CloudFront.B. Store the content on Amazon S3 and enable S3 cross-region replication.C. Implement a VPN across multiple AWS Regions.D. Deliver the content through AWS PrivateLink.

Answer: A

1. A company wants to track AWS resource configuration changes for compliance reasons. Which AWS feature can be used to meet this requirement?

   A. AWS Cost and Usage ReportB. AWS Organizations service control policies (SCPs)C. AWS Config rulesD. VPC Flow Logs

Answer: C

1. A company is expecting a short-term spike in internet traffic for its application. During the traffic increase, the application cannot be interrupted. The company also needs to minimize cost and maximize flexibility. Which Amazon EC2 instance type should the company use to meet these requirements?

   A. On-Demand InstancesB. Spot InstancesC. Reserved InstancesD. Dedicated Hosts

Answer: A

1. What are the benefits of consolidated billing for AWS Cloud services? (Choose two.)

   A. Volume discountsB. A minimal additional fee for useC. One bill for multiple accountsD. Installment payment optionsE. Custom cost and usage budget creation

Answer: A C

1. An external auditor has requested that a company provide a list of all its IAM users, including the status of users credentials and access keys. What it the SIMPLEST way to provide this information?

   A. Create an IAM user account for the auditor, granting the auditor administrator permissions.B. Take a screenshot of each users page in the AWS Management Console, then provide the screenshots to the auditor.C. Download the IAM credential report, then provide the report to the auditor.D. Download the AWS Trusted Advisor report, then provide the report to the auditor.

Answer: C

1. A company wants to transfer petabytes of data as quickly as possible from on-premises locations to the AWS Cloud. Which AWS service should the company use?

   A. AWS SnowballB. AWS Global AcceleratorC. Amazon S3 Transfer AccelerationD. Amazon Connect

Answer: A

1. Which of the following services can be used to block network traffic to an instance? (Choose two.)

   A. Security groupsB. Amazon Virtual Private Cloud (Amazon VPC) flow logsC. Network ACLsD. Amazon CloudWatchE. AWS CloudTrail

Answer: A C

1. According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Choose two.)

   A. Network infrastructure and virtualization of infrastructureB. Security of application dataC. Guest operating systemsD. Physical security of hardwareE. Credentials and policies

Answer: A D

1. A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?

   A. Amazon CloudWatchB. Amazon InspectorC. AWS Cloud TrailD. AWS IAM

Answer: C

1. Under the AWS shared responsibility model, which task is the customers responsibility when managing AWS Lambda functions?

   A. Creating versions of Lambda functionsB. Maintaining server and operating systemsC. Scaling Lambda resources according to demandD. Updating the Lambda runtime environment

Answer: A

1. Which AWS service automatically handles application health monitoring?

   A. Amazon API GatewayB. AWS Elastic BeanstalkC. AWS LambdaD. AWS Config

Answer: B

1. A user can increase operational efficiency in the AWS Cloud by:

   A. leveraging AWS managed services.B. right-sizing AWS infrastructure.C. manually creating all necessary resources.D. managing their own software license.

Answer: A

1. According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

   A. Hard code an IAM users secret key and access key directly in the application, and upload the file.B. Store the IAM users secret key and access key in a text file on the EC2 instance, read the keys, then upload the file.C. Have the EC2 instance assume a role to obtain the privileges to upload the file.D. Modify the S3 bucket policy so that any service can upload to it at any time.

Answer: C

1. Which of the following IT tasks does AWS perform to offload a companys IT resource management responsibilities? (Choose two.)

   A. Configuring operating system firewallsB. Setting up access controls for dataC. Backing up databasesD. Configuring database user accountsE. Installing operating systems

Answer: C E

1. Which AWS service can help a company detect an outage of its website servers and redirect users to alternate servers?

   A. Amazon CloudFrontB. Amazon GuardDutyC. Amazon Route 53D. AWS Trusted Advisor

Answer: C

1. Which AWS Trusted Advisor feature is available exclusively to users with AWS Business Support or AWS Enterprise Support?

   A. Notification setupB. Refresh checksC. AWS Support APID. Action links

Answer: C

1. The AWS global infrastructure consists of Regions, Availability Zones, and what else?

   A. VPCsB. Data centersC. Dark fiber network linksD. Edge locations

Answer: D

1. A media company wants to distribute video content to millions of users worldwide over the internet. The company wants to use the AWS global network backbone to distribute cached content with low latency and high data transfer speeds. Which AWS service will meet these requirements?

   A. Amazon CloudFrontB. AWS Global AcceleratorC. AWS Direct ConnectD. Amazon Connect

Answer: A

1. A bank needs to store recordings of calls made to its contact center for 6 years. The recordings must be accessible within 48 hours from the time they are requested.
   Which AWS service will provide a secure and cost-effective solution for retaining these files?

   A. Amazon DynamoDBB. Amazon S3 GlacierC. Amazon ConnectD. Amazon ElastiCache

Answer: B

1. Which AWS service or feature provides information about ongoing or upcoming scheduled events that can affect an AWS account?

   A. AWS ConfigB. AWS Systems ManagerC. AWS Personal Health DashboardD. AWS Trusted Advisor

Answer: C

1. Which statement is true about AWS global infrastructure?

   A. Availability Zones can span multiple AWS Regions.B. A VPC can have different subnets in different AWS Regions.C. AWS Regions consist of multiple Availability Zones.D. A single subnet can span multiple Availability Zones.

Answer: C

1. A company wants to securely access an Amazon S3 bucket from an Amazon EC2 instance without accessing the internet. What should the company use to accomplish this goal?

   A. VPN connectionB. Internet gatewayC. VPC endpointD. NAT gateway

Answer: D

1. Which of the following is an AWS best practice for managing an AWS account root user?

   A. Keep the root user password with the security team.B. Enable multi-factor authentication (MFA) for the root user.C. Create an access key for the root user.D. Keep the root user password consistent for compliance purposes.

Answer: B

1. A company hosts images in an Amazon S3 bucket for a public-facing website that is viewed by millions of users around the globe. Which AWS service will deliver this content with reduced latency?

   A. AWS WAFB. Amazon CloudWatchC. Amazon Cloud FrontD. AWS CloudFormation

Answer: C

1. A company has refined its workload to use specific AWS services to improve efficiency and reduce cost. Which best practice for cost governance does this example show?

   A. Resource controlsB. Cost allocationC. Architecture optimizationD. Tagging enforcement

Answer: C