AWS Certified Cloud Practitioner (CLF-C01) Practice Exam #1

Question 1 of 70

1. Question

Which of the following statements describes the difference between an Availability Zone and a Local Zone?

An Availability Zone is an isolated location within an AWS region while a Local Zone is an extension of an AWS Region in geographic proximity to your users
An Availability Zone is an extension of an AWS Region in geographic proximity to your users while a Local Zone is an isolated location within an AWS region
An Availability Zone is an extension of an AWS Region in geographic proximity to your users while a Local Zone enables developers to build applications that deliver ultra-low latencies to mobile devices and end-users
An Availability Zone is a fully managed service that extends AWS infrastructure, services, APIs, and tools to customer premises while a Local Zone is an extension of an AWS Region in geographic proximity to your users

Question 2 of 70

2. Question

You need to explore all the available AWS services via an intuitive web-based user interface. Which of the following options will you choose in order to explore all the AWS services and get helpful tips for each one?

AWS Command Line Interface
AWS Software Development Kit
AWS Web-Based Interface
AWS Management Console

Question 3 of 70

3. Question

Which of the following services enables customers to build and run applications on-premises using the same programming interfaces as in AWS Regions?

AWS Lambda
AWS Batch
AWS Outposts
Amazon EC2

Question 4 of 70

4. Question

Given the following Cloud Architecture Principles, which one is followed if you automate the deployment process and streamline the configuration to ensure that the system can scale without any human intervention?

Design for failure
Decouple your components
Implement elasticity
Think parallel

Question 5 of 70

5. Question

According to Amazon Inc., there are six advantages of cloud computing. Which of the following is not considered an advantage?

Increase speed and agility
Stop spending money running and maintaining data centers
Go global in minutes
Increase infrastructure capacity needs

Question 6 of 70

6. Question

Given the following advantages of Cloud Computing, which one solves the following problem?
“When you make a capacity decision prior to deploying an application, you often end up either sitting on expensive idle resources or dealing with limited capacity.”

Increase speed and agility
Stop guessing capacity
Stop spending money running and maintaining data centers
Go global in minutes

Question 7 of 70

7. Question

Which of the following statements is correct regarding Availability Zones?

Availability Zones provide you the ability to place resources, such as compute and storage, in multiple locations closer to your end-users
Availability Zones are multiple, isolated locations within each Region
Availability Zones brings native AWS services, infrastructure, and operating models to virtually any data center, co-location space, or on-premises facility
Availability Zones allow developers to build applications that deliver ultra-low latencies to 5G devices and end-users

Question 8 of 70

8. Question

The AWS Cloud infrastructure is built around AWS Regions and Availability Zones.

TRUE
FALSE

Question 9 of 70

9. Question

Which of the following services is an extremely low-cost storage service that provides secure, durable, and flexible storage for data backup and archival?

Amazon S3 Glacier
Amazon S3
Amazon DocumentDB
Amazon Redshift

Question 10 of 70

10. Question

Which AWS service should you use if you need to set up and operate a highly scalable MongoDB database?

Amazon DynamoDB
Amazon Aurora
Amazon Redshift
Amazon DocumentDB

Question 11 of 70

11. Question

Which AWS service should you use if you need to set up and operate a highly scalable MySQL database?

Amazon DynamoDB
Amazon Aurora
Amazon Redshift
Amazon DocumentDB

Question 12 of 70

12. Question

Amazon _______________ enables you to launch AWS resources into a virtual network that you’ve defined.

CloudFront
EC2
VPC
S3

Question 13 of 70

13. Question

You are thinking to migrate the entire on-premise infrastructure to AWS. Which of the following is a benefit of using AWS over traditional data centers or virtualized data centers?

The benefit of using AWS is a lower variable cost and lower upfront cost
The benefit of using AWS is a lower variable cost and higher upfront cost
The benefit of using AWS is a higher variable cost and lower upfront cost
The benefit of using AWS is a higher variable cost and higher upfront cost

Question 14 of 70

14. Question

Which of the following design patterns and architectural options takes place through an increase in the specifications of an individual resource, such as upgrading a server with a larger hard drive or a faster CPU?

Disposable resources
Automation
Loose Coupling
Scalability

Question 15 of 70

15. Question

You have been tasked to implement a NoSQL database service that provides fast and predictable performance with seamless scalability for your new APP. Which of the following database services will you implement in order to meet the requirement?

Amazon Redshift
Amazon Aurora
Amazon DynamoDB
Amazon Neptune

Question 16 of 70

16. Question

Which of the following resources can be used specifically to Availability Zone in which they reside? (Choose all that apply)

Elastic IP addresses
EBS volumes
Amazon EC2 resource identifiers
Instances
Key pairs

Question 17 of 70

17. Question

You are working on a global scale application that recently met underperformance issues. You have been tasked to implement a solution to speed up the distribution of your static and dynamic web content. Which of the following AWS service will you implement to fix the issue?

Amazon VPC
Amazon Route 53
Amazon CloudFront
Amazon API Gateway

Question 18 of 70

18. Question

Which of the following services are defined as global services in AWS? (Choose all that apply)

AWS STS
Amazon S3 Glacier
Amazon CloudFront
AWS Identity and Access Management (IAM)
Amazon VPC

Question 19 of 70

19. Question

Which of the following is considered a benefit of migrating your on-premises infrastructure data centers to AWS Cloud? (Choose all that apply.)

You spend more money on the AWS Cloud but you have a more scalable infrastructure
Deploying your application on AWS is not as easy as it is on your infrastructure, but the application on AWS is highly available
On AWS you can pay only when you consume computing resources
Eliminate guessing on your infrastructure capacity needs
AWS lets you focus on your own customers, rather than on the heavy lifting of racking, stacking, and powering servers

Question 20 of 70

20. Question

Moving to the cloud lets you respond to market needs and opportunities immediately.

TRUE
FALSE

Question 21 of 70

21. Question

Which of the following statements are true when a company uses AWS and decouple from their on-premises data centers? (Choose all that apply.)

Eliminate many of the costs related to building and maintaining a data center
Increase the need to manage infrastructure
Spend less time conducting security reviews on infrastructure
Use automation to reduce or eliminate IT management activities
Design and develop new IT projects slower

Question 22 of 70

22. Question

In which of the following cloud best practices you end up thinking about recovery strategies during design time, which helps in designing an overall system better?

Implement elasticity
Decouple your components
Design for failure and nothing will fail
Think parallel

Question 23 of 70

23. Question

Which of the following pillars of the AWS Well-Architected Framework includes the ability to run workloads effectively, gain insight into their operations, and to continuously improve supporting processes and procedures to deliver business value?

Operational Excellence
Security
Reliability
Performance Efficiency

Question 24 of 70

24. Question

The ________________ includes the ability to run systems to deliver business value at the lowest price point.

Performance Efficiency pillar
Cost Optimization pillar
Operational Excellence pillar
Security pillar

Question 25 of 70

25. Question

Go global in minutes is one of the six advantages of Cloud Computing that provides customers with what benefit?

Focus on projects that differentiate your business, not the infrastructure
You can achieve a lower variable cost than you can get on your own
Easily deploy your application in multiple regions around the world with just a few clicks
Eliminate guessing on your infrastructure capacity needs

Question 26 of 70

26. Question

You are developing an APP that needs to store JSON documents in a fully managed, and durable database with built-in security. Which of the following AWS service will you implement in order to meet the requirement?

Amazon VPC
Amazon CloudFront
Amazon EC2
Amazon DynamoDB

Question 27 of 70

27. Question

Which of the following do you need to implement for as many Amazon EC2 workloads as possible so that you horizontally scale up and scale down when needed and automatically reduce your spending when you don’t need that capacity anymore?

Auto Workload
Auto Scaling
Auto Capacity
Auto Spending

Question 28 of 70

28. Question

Which of the following AWS tactics is used to automate your infrastructure for implementing Elasticity? (Choose all that apply.)

Define Auto-scaling groups for different clusters using the Amazon Auto-scaling feature in Amazon EC2
Use smart open-source configuration management tools like Chef, Puppet, CFEngine or Genome
Use Amazon SQS to isolate components
Monitor your system metrics (CPU, Memory, Disk I/O, Network I/O) using Amazon CloudWatch and take appropriate actions
Use the Elastic Load Balancing service and spread your load across multiple web app servers dynamically

Question 29 of 70

29. Question

The use of multi-threading in your Amazon S3 for faster data retrieval is an example of which AWS cloud best practices?

Implement elasticity
Think parallel
Decouple your components
Design for failure

Question 30 of 70

30. Question

Which of the following is the responsibility of the AWS and which of the customer in the AWS cloud? (Choose all that apply.)

AWS is responsible for patching and fixing flaws within the infrastructure
The customer is responsible for configuring their own guest operating systems
The customer is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud
AWS is responsible for maintaining the configuration of its infrastructure devices
AWS is responsible for managing their data including encryption options

Question 31 of 70

31. Question

Which of the following usage patterns are the most common for Amazon S3? (Choose all that apply.)

Amazon S3 is used to store and distribute static web content and media
Amazon S3 can be used as a database or search engine by itself
Amazon S3 is used to host entire static websites
Amazon S3 can be used for data that must be updated very frequently
Amazon S3 is often used as a highly durable, scalable, and secure solution for backup and archiving of critical data

Question 32 of 70

32. Question

Amazon S3 is ideal for dynamic content websites that depend on database interaction or server-side scripting.

TRUE
FALSE

Question 33 of 70

33. Question

Which of the following design principles demonstrate the Operational Excellence pillar of AWS Well-Architected Framework? (Choose all that apply.)

Implement a strong identity foundation
Make frequent, small, reversible changes
Scale horizontally to increase aggregate workload availability
Measure overall efficiency
Learn from all operational failures

Question 34 of 70

34. Question

Which AWS service provides resizable computing capacity that you can use to build and host your software systems?

Amazon EC2
AWS Lambda
Amazon S3
Amazon Redshift

Question 35 of 70

35. Question

If a subnet doesn’t have a route to the internet gateway but has its traffic routed to a virtual private gateway for a Site-to-Site VPN connection, the subnet is known as a ______________ subnet.

Public
Private
VPN-only
Secure

Question 36 of 70

36. Question

Scaling just when you are expecting a big surge of traffic requests due to a scheduled business event is an implementation of which AWS cloud best practices?

Design for failure
Decouple your components
Think parallel
Implement elasticity

Question 37 of 70

37. Question

Which of the following cloud computing model removes the need for organizations to manage the underlying infrastructure and allows you to focus on the deployment and management of your applications?

UCaaS
IaaS
SaaS
PaaS

Question 38 of 70

38. Question

By launching your instances in separate Availability Zones, you can protect your applications from the failure of a single location.

TRUE
FALSE

Question 39 of 70

39. Question

Which of the following AWS services is an example of Infrastructure as a Service in AWS?

AWS Elastic Beanstalk
Heroku
EC2
DigitalOcean

Question 40 of 70

40. Question

Your company needs to submit the security and compliance documents such as AWS ISO certifications and Payment Card Industry (PCI). Which of the following AWS service provides on-demand downloads of AWS security and compliance documents?

AWS Secrets Manager
AWS WAF
AWS Artifact
AWS Identity and Access Management

Question 41 of 70

41. Question

Which of the following options is not a consolidated billing benefit?

You get one bill for multiple accounts
You can track the charges across multiple accounts and download the combined cost and usage data
You can combine the usage across all accounts in the organization to share the volume pricing discounts
Consolidated billing is offered for a small extra charge

Question 42 of 70

42. Question

Which of the following AWS support plan provides access to Application architecture guidance and Technical account manager features?

Basic
Developer
Business
Enterprise

Question 43 of 70

43. Question

Which of the following plans is recommended to those who experiment or test the AWS services?

Basic
Developer
Business
Enterprise

Question 44 of 70

44. Question

Spot Instance enables you to purchase capacity reservations that recur on a daily, weekly, or monthly basis, with a specified start time and duration, for a one-year term. You reserve the capacity in advance so that you know it is available when you need it. You pay for the time that the instances are scheduled, even if you do not use them.

TRUE
FALSE

Question 45 of 70

45. Question

As your startup is growing you need to implement a solution to centrally manage billing; control access, and security; and share resources across your AWS accounts. Which of the following AWS services will you implement to meet the requirement?

Service Quotas
AWS OpsWorks
AWS Organizations
AWS Well-Architected Tool

Question 46 of 70

46. Question

You have been tasked to implement a solution to receive an alert if the EC2 cost budget reaches the threshold of $2,500.00. Which service will you use to track and inspect your budget?

AWS Budgets
AWS Pricing Calculator
Amazon Simple Workflow Service
AWS Support

Question 47 of 70

47. Question

_____________ enable you to use your existing server-bound software licenses and address corporate compliance and regulatory requirements.

Dedicated Hosts
Dedicated Instances
Dedicated Servers
Dedicated License

Question 48 of 70

48. Question

Which of the following is true regarding the Business support plan in AWS? (Choose all that apply.)

Advisor Best Practice Checks: 7 Core checks
Advisor Best Practice Checks: Full set of checks
Programmatic Case Management: AWS Support API
Training: Access to online self-paced labs
Third-Party Software Support: Interoperability and configuration guidance and troubleshooting

Question 49 of 70

49. Question

Which AWS tool provides you real-time guidance to help you optimize your AWS infrastructure, increase security and performance and reduce your overall costs?

AWS Service Quotas
AWS Trusted Advisor
AWS Health
AWS Control Tower

Question 50 of 70

50. Question

Which feature in Cost Explorer helps you identify cost-saving opportunities by downsizing or terminating instances in Amazon Elastic Compute Cloud (Amazon EC2)?

Rightsizing Recommendations
Cost Allocation Tags
Trusted Advisor Checks
AWS Pricing Calculator

Question 51 of 70

51. Question

Which of the following Amazon EC2 instances lets you take advantage of unused EC2 capacity in the AWS Cloud and provides up to a 90% discount compared to On-Demand prices.

Scheduled Instances
Reserved Instances
Dedicated Instances
Spot Instances

Question 52 of 70

52. Question

Which of the following options are AWS Cost & Usage Report features? (Choose all that apply.)

Track your Amazon EC2 Reserved Instance (RI) usage
Leverage strategic data integrations with AWS services
Access comprehensive AWS cost and usage information
Forecast future costs and usage
Add notifications to your budget

Question 53 of 70

53. Question

If you purchase a large number of Amazon EC2 Reserved Instances in an AWS Region, you will automatically receive discounts on your upfront fees and hourly fees for future purchases of Standard Reserved Instances in that AWS Region.

TRUE
FALSE

Question 54 of 70

54. Question

Which of the following pricing models that AWS offer, you pay for compute or database capacity with no long-term commitments or upfront payments?

Dedicated Instances
Spot Instances
On Demand
Reservations

Question 55 of 70

55. Question

You are developing a new application that focuses on background processing related tasks. Which of the following instance purchasing option consider the most cost-effective solution for your application?

Spot Instances
On-Demand Instances
Reserved Instances
Dedicated Instances

Question 56 of 70

56. Question

Which of the following AWS service is a security management service which allows you to centrally configure and manage firewall rules across your accounts and applications in AWS Organization?

AWS Secrets Manager
AWS Firewall Manager
AWS Shield
AWS WAF

Question 57 of 70

57. Question

Which of the following options below is a control which a customer fully inherits from AWS in accordance with the AWS shared responsibility model?

Patch Management
Physical and Environmental controls
Configuration Management
Zone Security

Question 58 of 70

58. Question

Which of the following guidelines is not considered as a best practice for Amazon S3?

Ensure that your Amazon S3 buckets use the correct policies and are publicly accessible
Implement least privilege access
Use IAM roles for applications and AWS services that require Amazon S3 access
Enable multi-factor authentication (MFA) Delete

Question 59 of 70

59. Question

Your company needs to deny any permission to any user to perform any Amazon S3 operations on objects in an S3 bucket unless the request originates from the range of 83.122.40.0/24 IP addresses. Which of the following should you use to meet the requirement?

Network Access Control List
Bucket Policy
AWS Resource Groups
AWS Firewall Manager

Question 60 of 70

60. Question

You have been tasked to implement a solution to attach policies to multiple users at one time. Which AWS service will help you to meet the requirement?

AWS Identity and Access Management
AWS Resource Access Manager
AWS Resource Groups
AWS Secrets Manager

Question 61 of 70

61. Question

Which of the following AWS services support Access Control Lists (ACLs)? (Choose all that apply.)

Amazon S3
AWS WAF
Amazon Redshift
Amazon VPC
Amazon Elastic Container

Question 62 of 70

62. Question

Which of the following actions you can follow to improve the security of your Identity and Access Management (IAM) users? (Select all that apply.)

Configure a strong password policy for your users
Disable MFA
Share access keys
Keep unnecessary credentials
Monitor activity in your AWS account
Create individual IAM users

Question 63 of 70

63. Question

Assuming you are in the Identity and Access Management (IAM) dashboard of your AWS Management Console, which of the following services below can you manage? (Select all that apply)

Groups
Instances
Identity providers
Policies
Dedicated hosts

Question 64 of 70

64. Question

In compliance with PCI DSS, an EU-based company is required to provide compliance documents, such as Payment Card Industry (PCI). Where are these AWS compliance documents located?

AWS Certificate Manager
AWS Security Hub
AWS Secrets Manager
AWS Artifact

Question 65 of 70

65. Question

You have been tasked to increase the security of your VPC to control traffic in and out of your company’s subnets. Which of the following services will you use to complete the task?

Network ACL
AWS Shield
AWS WAF
AWS Resource Group

Question 66 of 70

66. Question

Which of the following AWS services is a fully managed data security service that uses machine learning and pattern matching to discover, classify, and help you protect your sensitive data in Amazon S3?

Amazon Inspector
Amazon GuardDuty
Amazon Macie
Amazon Detective

Question 67 of 70

67. Question

Which of the followings are considered prohibited activities when you conduct security assessments and penetration testing against AWS infrastructure? (Choose all that apply.)

DNS zone walking via Amazon Route 53 Hosted Zones
Conduct pen testing on Amazon CloudFront
Port flooding
Protocol flooding
Conduct pen testing on Amazon EC2 instances

Question 68 of 70

68. Question

AWS customers are welcome to carry out security assessments or penetration tests against AWS infrastructure without prior approval for 8 services. Which of the following services are included? (Choose all that apply.)

Elastic Load Balancers
Amazon Route 53
Amazon CloudFront
Amazon API Gateways
Amazon Redshift

Question 69 of 70

69. Question

Which of the following should you use if you need to provide temporary AWS credentials for users who have been authenticated via their social media logins as well as for guest users who do not require any authentication?

Amazon Cognito identity pool
Amazon Detective
Amazon GuardDuty
Amazon Inspector

Question 70 of 70

70. Question

Which of the following tasks fall under the sole responsibility of customer based on the shared responsibility model?

Patch Management
Service and Communications Protection
Configuration Management
Physical and Environmental controls