AWS Certified Cloud Practitioner (CLF-C01) Practice Exam #2

Question 1 of 70

1. Question

Which of the following are valid important characteristics of an IAM Group? (Choose all that apply.)

A group can contain many users
A user can't belong to multiple groups
Groups can't be nested
There's a default group that automatically includes all users in the AWS account
The number and size of IAM resources in an AWS account are limited

Question 2 of 70

2. Question

What you can use to delegate access to users, applications, or services that don’t normally have access to your AWS resources?

Policies
Access Control List
Roles
Groups

Question 3 of 70

3. Question

Which of the following policies are available for granting permission to your Amazon S3 resources and use JSON-based access policy language? (Choose all that apply.)

Session policies
Bucket policies
Service policies
User policies
Service control policies

Question 4 of 70

4. Question

Recently your company migrated to AWS and now you are responsible to implement a solution to identify unexpected and potentially unauthorized or malicious activity in your AWS environment. Which of the following AWS services will you implement to meet the requirement?

Amazon GuardDuty
Amazon Inspector
AWS Shield
AWS WAF

Question 5 of 70

5. Question

Which of the following are some common things you can do with the policy simulator? (Choose all that apply.)

Test policies that are attached to AWS resources, such as Amazon Inspector
Test policies that are attached to IAM users, groups, or roles in your AWS account
You can only simulate multiple permissions boundaries at a time
Test new policies that are not yet attached to a user, group, or role by typing or copying them into the simulator
Identify which specific statement in a policy results in allowing or denying access to a particular resource or action

Question 6 of 70

6. Question

Which statements are true regarding how to configure CloudFront to deliver your content? (Choose all that apply.)

You upload your files to your origin servers
You assign a domain name to your new distribution that you can see in the CloudFront console
CloudFront sends your distribution's configuration and your content to all of its edge locations
You create a CloudFront distribution, which tells CloudFront which origin servers to get your files from when users request the files
You specify origin servers, like an Amazon S3 bucket, from which CloudFront gets your files which will then be distributed

Question 7 of 70

7. Question

Amazon CloudFront is a highly-secure CDN that provides both network and application-level protection.

TRUE
FALSE

Question 8 of 70

8. Question

You are working on a video sharing web app that recently encounters a huge amount of traffic from users all over the world. As a result, the application faced availability and slow performance issues. Which of the following service will you implement to fix these issues?

AWS Global Accelerator
Amazon Virtual Private Cloud
Amazon API Gateway
Amazon Route 53

Question 9 of 70

9. Question

Which of the following services makes it easy to move massive volumes of data to the cloud, including video libraries, image repositories, or even a complete data center migration with a secure, fast, and cost-effective way?

AWS Snow Family
AWS Transfer Family
AWS DataSync
AWS Snowmobile

Question 10 of 70

10. Question

Which state does the instance enter when you launch it for the first time?

running
stopping
terminated
pending

Question 11 of 70

11. Question

Resource _____________ make it easier to manage and automate tasks on large numbers of resources at one time.

Handler
Groups
Management
Automation

Question 12 of 70

12. Question

Which of the following cloud computing deployment models connects infrastructure and applications between cloud-based resources and existing resources that are not located in the cloud?

Cloud
Hybrid
On-premises
Mixed

Question 13 of 70

13. Question

Which of the following services takes care of provisioning and configuring the resources (like Amazon EC2 instances or Amazon RDS DB instances) for you, so you can spend less time managing those resources?

AWS CloudFormation
AWS CloudTrail
Amazon CloudWatch
Amazon EC2 Auto Scaling

Question 14 of 70

14. Question

Which of the following is true regarding Elastic Load Balancing?

Elastic Load Balancing enables you to launch Amazon Web Services (AWS) resources into a virtual network that you've defined
Elastic Load Balancing speeds up the distribution of your static and dynamic web content
Elastic Load Balancing automatically distributes incoming application traffic across multiple targets, such as Amazon EC2
Elastic Load Balancing is a highly available and scalable Domain Name System (DNS) web service

Question 15 of 70

15. Question

Which of the following is true regarding CloudFront?

Amazon CloudFront speeds up the distribution of your static and dynamic web content
Amazon CloudFront automatically distributes incoming application traffic across multiple targets, such as Amazon EC2
Amazon CloudFront enables you to launch Amazon Web Services (AWS) resources into a virtual network that you've defined
Amazon CloudFront is a highly available and scalable Domain Name System (DNS) web service

Question 16 of 70

16. Question

What do you have to ensure before creating an application load balancer?

Ensure that you have a virtual private cloud (VPC) with at least one public subnet in each of the Availability Zones used by your targets
Ensure that you have a virtual private cloud (VPC) with at least two public subnets in each of the Availability Zones used by your targets
Ensure that you have a virtual private cloud (VPC) with at least three public subnets in each of the Availability Zones used by your targets
Ensure that you have a virtual private cloud (VPC) with at least four public subnets in each of the Availability Zones used by your targets

Question 17 of 70

17. Question

You have been tasked to create a highly available architecture for your Application Load Balancer, as cost-effective as possible. What’s the minimum number of Availability Zones required to set up to complete the task?

Four
Three
Five
Two

Question 18 of 70

18. Question

Which of the following AWS services will you use in order to scale your relational database in the cloud and automate time-consuming administration tasks such as hardware provisioning patching and backups?

Amazon Redshift
Amazon RDS
Amazon ElastiCache
Amazon DynamoDB

Question 19 of 70

19. Question

Which of the following is not a benefit of using an Application Load Balancer instead of a Classic Load Balancer?

Support for returning a custom HTTP response
Enables you to route requests to multiple domains using multiple load balancers
You can register each instance or IP address with the same target group using multiple ports
Support for path-based routing

Question 20 of 70

20. Question

Given the following characteristics which of those describes the AWS Lambda? (Choose all that apply.)

Speed up the distribution of your static and dynamic web content
Run code without provisioning or managing servers
Build data processing triggers for AWS services like Amazon S3
Store and retrieve any amount of data at any time
Distribute your incoming application traffic across multiple targets

Question 21 of 70

21. Question

You have been tasked to implement a solution to store, and access your log files from Amazon Elastic Compute Cloud (Amazon EC2) instances and Route 53 and get access to them as a single and consistent flow of events. Which AWS service will you use to meet the requirement?

AWS CloudFormation
Amazon CloudWatch Logs
AWS CloudTrail
Amazon CloudFront

Question 22 of 70

22. Question

Which of the following storage types is a recommended storage option when you run a database on an instance?

Amazon EBS
Amazon EFS file system
Amazon EC2 instance store
Amazon S3

Question 23 of 70

23. Question

Which of the following cases is the most common use for Amazon S3?

Use as the primary storage for a database or file system
Use for any applications that require access to raw block-level storage
Storage and distribution of static web content and media
Ideal for temporary storage of information that is continually changing

Question 24 of 70

24. Question

Amazon S3 is optimal for storing numerous classes of information that are relatively static and benefit from its durability, availability, and elasticity features. However, in a number of situations, Amazon S3 is not the optimal solution. Which of the following options is considered an anti-pattern for Amazon S3? (Choose all that apply.)

Dynamic website hosting
Static website hosting
Rapidly changing data
Software delivery
Media hosting

Question 25 of 70

25. Question

The instances that you launch into an Amazon VPC can’t communicate with your own (remote) network. Which of the following services do you need to create and configure in order to enable access to your remote network from your VPC?

AWS Direct Connect
Amazon API Gateway
AWS Global Accelerator
AWS Site-to-Site VPN

Question 26 of 70

26. Question

Given the below AWS services, which one is a highly available and scalable cloud Domain Name System (DNS) web service?

Amazon S3
Amazon Route 53
AWS Lambda
AWS Elastic Beanstalk

Question 27 of 70

27. Question

You have been tasked to deploy a MariaDB for a new project. Which AWS service will you use to complete the task?

Amazon Redshift
Amazon Neptune
Amazon RDS
Amazon DynamoDB

Question 28 of 70

28. Question

Which of the following can a developer use to interact with your AWS services? (Choose all that apply.)

AWS CLI
AWS Config
AWS SDK
AWS OpsWorks
AWS Systems Manager

Question 29 of 70

29. Question

Which of the following options is not a consolidated billing benefit?

You get one bill for multiple accounts
You can track the charges across multiple accounts and download the combined cost and usage data
You can combine the usage across all accounts in the organization to share the volume pricing discounts
Consolidated billing is offered for a small extra charge

Question 30 of 70

30. Question

You have been tasked to implement a solution for your application so automatically scaling your application’s resources based on the demand. Which AWS service will you enable to meet the requirement?

Amazon CloudWatch
AWS Auto Scaling
AWS Health
AWS Systems Manager

Question 31 of 70

31. Question

You are using AWS Trusted Advisor as it provides you real-time guidance to help you provision your resources following AWS best practices. Which of the following categories is not included in the AWS Trusted Advisor’s best practice recommendations?

Cost optimization
Performance
Security
Sales

Question 32 of 70

32. Question

In order to speed up your dynamic database-driven website, your company decides to implement Memcache as a distributed memory object caching system. Now, your company wants to migrate the app to the cloud for all the benefits cloud computing has to offer. Which AWS service your company will use to set up, manage, and scale a distributed in-memory data store or cache environment in the cloud?

Amazon Redshift
Amazon DynamoDB
Amazon ElastiCache
Amazon DocumentDB

Question 33 of 70

33. Question

Which AWS service will you use to configure alarm actions to stop, start, or terminate Amazon EC2 instances when certain criteria are met?

Amazon Cognito
Amazon Inspector
Amazon CloudWatch
AWS CloudFormation

Question 34 of 70

34. Question

Amazon _____________ is a web service that provides secure, resizable compute capacity in the cloud.

CloudFront
EC2
Route 53
Lightsail

Question 35 of 70

35. Question

Your database-driven application transfers gigabytes to terabytes of data on a regular basis across continents. Which of the following services will you use to enable fast, easy, and secure transfers of your files over long distances between your client and an S3 bucket?

Amazon S3 Requester Pays buckets
Amazon S3 Access Points
Amazon S3 Object Tagging
Amazon S3 Transfer Acceleration

Question 36 of 70

36. Question

Why do you need to use Amazon Relational Database Service (Amazon RDS) over traditional database management?

Manual software patching
Easy storage scaling
Manual backups
Pay monthly fixed cost

Question 37 of 70

37. Question

Which of the following are typical scenarios for using Kinesis Data Streams? (Choose all that apply.)

Real-time metrics and reporting
Complex stream processing
Feed real-time dashboards
Create real-time metrics
Real-time data analytics

Question 38 of 70

38. Question

Which of the following options is not considered a benefit of using Kinesis Video Streams?

Kinesis Video Streams offers you a fixed cost pricing model
Kinesis Video Streams enables you to connect and stream video, audio, and other data from millions of devices
Kinesis Video Streams is serverless, so there is no infrastructure to set up or manage
Kinesis Video Streams encrypts all data as it flows through the service and when it persists the data

Question 39 of 70

39. Question

Which of the following VPC networking components allows communication between your VPC and the internet?

Internet gateways
VPC peering
Elastic IP address
ClassicLink

Question 40 of 70

40. Question

CloudFront speeds up the distribution of your content by routing each user request through the AWS backbone network to the edge location that can best serve your content.

TRUE
FALSE

Question 41 of 70

41. Question

Given the following types of Elastic Load Balancing, which one will you choose for load balancing of HTTP and HTTPS traffic?

Application Load Balancer
Network Load Balancer
Classic Load Balancer
HTTP and HTTPS Load Balancer

Question 42 of 70

42. Question

You have been tasked to implement a solution to automate security vulnerability assessments throughout your development and deployment pipelines. Which of the following services will you enable to meet the requirement?

Amazon Macie
GuardDuty
Amazon Inspector
AWS Shield

Question 43 of 70

43. Question

Which of the following AWS service will you configure if you upload periodic logs to a bucket, that your application might need them for a week or a month, and you want to store those logs as cost-effective as possible throughout their lifecycle?

Amazon S3 Versioning
Amazon S3 Lifecycle
Amazon S3 Subresources
Amazon S3 Batch Operations

Question 44 of 70

44. Question

Which of the following recommendations is NOT considered a best practice for using AWS CloudFormation more effectively and securely throughout its entire workflow?

Embed credentials in your templates
Use nested stacks to reuse common template patterns
Reuse templates to replicate stacks in multiple environments
Use IAM to control access

Question 45 of 70

45. Question

Amazon Simple Queue Service (Amazon SQS) offers a secure, durable, and available hosted queue that lets you integrate and decouple distributed software systems and components. Which of the following are the main benefits of using SQS? (Choose all that apply.)

Reliability
Scalability
Availability
Cost
Security

Question 46 of 70

46. Question

Which of the following AWS support plan provides access to Application architecture guidance and Technical account manager features?

Basic
Developer
Business
Enterprise

Question 47 of 70

47. Question

Which of the following plans is recommended to those who experiment or test the AWS services?

Basic
Developer
Business
Enterprise

Question 48 of 70

48. Question

Spot Instance enables you to purchase capacity reservations that recur on a daily, weekly, or monthly basis, with a specified start time and duration, for a one-year term. You reserve the capacity in advance so that you know it is available when you need it. You pay for the time that the instances are scheduled, even if you do not use them.

TRUE
FALSE

Question 49 of 70

49. Question

As your startup is growing you need to implement a solution to centrally manage billing; control access, and security; and share resources across your AWS accounts. Which of the following AWS services will you implement to meet the requirement?

Service Quotas
AWS OpsWorks
AWS Organizations
AWS Well-Architected Tool

Question 50 of 70

50. Question

You have been tasked to implement a solution to receive an alert if the EC2 cost budget reaches the threshold of $2,500.00. Which service will you use to track and inspect your budget?

AWS Budgets
AWS Pricing Calculator
Amazon Simple Workflow Service
AWS Support

Question 51 of 70

51. Question

You need to explore all the available AWS services via an intuitive web-based user interface. Which of the following options will you choose in order to explore all the AWS services and get helpful tips for each one?

AWS Command Line Interface
AWS Software Development Kit
AWS Web-Based Interface
AWS Management Console

Question 52 of 70

52. Question

Which of the following services enables customers to build and run applications on-premises using the same programming interfaces as in AWS Regions?

AWS Lambda
AWS Batch
AWS Outposts
Amazon EC2

Question 53 of 70

53. Question

Given the following Cloud Architecture Principles, which one is followed if you automate the deployment process and streamline the configuration to ensure that the system can scale without any human intervention?

Design for failure
Decouple your components
Implement elasticity
Think parallel

Question 54 of 70

54. Question

You are working on a global scale application that recently met underperformance issues. You have been tasked to implement a solution to speed up the distribution of your static and dynamic web content. Which of the following AWS service will you implement to fix the issue?

Amazon VPC
Amazon Route 53
Amazon CloudFront
Amazon API Gateway

Question 55 of 70

55. Question

Moving to the cloud lets you respond to market needs and opportunities immediately.

TRUE
FALSE

Question 56 of 70

56. Question

Which of the following design patterns and architectural options takes place through an increase in the specifications of an individual resource, such as upgrading a server with a larger hard drive or a faster CPU?

Disposable resources
Automation
Loose Coupling
Scalability

Question 57 of 70

57. Question

Which of the following services are defined as global services in AWS? (Choose all that apply)

AWS STS
Amazon S3 Glacier
Amazon CloudFront
AWS Identity and Access Management (IAM)
Amazon VPC

Question 58 of 70

58. Question

Which of the following is considered a benefit of migrating your on-premises infrastructure data centers to AWS Cloud? (Choose all that apply.)

You spend more money on the AWS Cloud but you have a more scalable infrastructure
Deploying your application on AWS is not as easy as it is on your infrastructure, but the application on AWS is highly available
On AWS you can pay only when you consume computing resources
Eliminate guessing on your infrastructure capacity needs
AWS lets you focus on your own customers, rather than on the heavy lifting of racking, stacking, and powering servers

Question 59 of 70

59. Question

Which of the following AWS service is a security management service which allows you to centrally configure and manage firewall rules across your accounts and applications in AWS Organization?

AWS Secrets Manager
AWS Firewall Manager
AWS Shield
AWS WAF

Question 60 of 70

60. Question

Which of the following options below is a control which a customer fully inherits from AWS in accordance with the AWS shared responsibility model?

Patch Management
Physical and Environmental controls
Configuration Management
Zone Security

Question 61 of 70

61. Question

Which of the following guidelines is not considered as a best practice for Amazon S3?

Ensure that your Amazon S3 buckets use the correct policies and are publicly accessible
Implement least privilege access
Use IAM roles for applications and AWS services that require Amazon S3 access
Enable multi-factor authentication (MFA) Delete

Question 62 of 70

62. Question

Which of the following AWS services support Access Control Lists (ACLs)? (Choose all that apply.)

Amazon S3
AWS WAF
Amazon Redshift
Amazon VPC
Amazon Elastic Container

Question 63 of 70

63. Question

Assuming you are in the Identity and Access Management (IAM) dashboard of your AWS Management Console, which of the following services below can you manage? (Select all that apply)

Groups
Instances
Identity providers
Policies
Dedicated hosts

Question 64 of 70

64. Question

Which of the following statements are true when a company uses AWS and decouple from their on-premises data centers? (Choose all that apply.)

Eliminate many of the costs related to building and maintaining a data center
Increase the need to manage infrastructure
Spend less time conducting security reviews on infrastructure
Use automation to reduce or eliminate IT management activities
Design and develop new IT projects slower

Question 65 of 70

65. Question

In which of the following cloud best practices you end up thinking about recovery strategies during design time, which helps in designing an overall system better?

Implement elasticity
Decouple your components
Design for failure and nothing will fail
Think parallel

Question 66 of 70

66. Question

Go global in minutes is one of the six advantages of Cloud Computing that provides customers with what benefit?

Focus on projects that differentiate your business, not the infrastructure
You can achieve a lower variable cost than you can get on your own
Easily deploy your application in multiple regions around the world with just a few clicks
Eliminate guessing on your infrastructure capacity needs

Question 67 of 70

67. Question

Which of the following do you need to implement for as many Amazon EC2 workloads as possible so that you horizontally scale up and scale down when needed and automatically reduce your spending when you don’t need that capacity anymore?

Auto Workload
Auto Scaling
Auto Capacity
Auto Spending

Question 68 of 70

68. Question

Which of the following usage patterns are the most common for Amazon S3? (Choose all that apply.)

Amazon S3 is used to store and distribute static web content and media
Amazon S3 can be used as a database or search engine by itself
Amazon S3 is used to host entire static websites
Amazon S3 can be used for data that must be updated very frequently
Amazon S3 is often used as a highly durable, scalable, and secure solution for backup and archiving of critical data

Question 69 of 70

69. Question

By launching your instances in separate Availability Zones, you can protect your applications from the failure of a single location.

TRUE
FALSE

Question 70 of 70

70. Question

Which of the following cloud computing model removes the need for organizations to manage the underlying infrastructure and allows you to focus on the deployment and management of your applications?

UCaaS
IaaS
SaaS
PaaS