AWS Certified Cloud Practitioner (CLF-C01) Practice Exam #3

Question 1 of 30

1. Question

In compliance with PCI DSS, an EU-based company is required to provide compliance documents, such as Payment Card Industry (PCI). Where are these AWS compliance documents located?

AWS Certificate Manager
AWS Security Hub
AWS Secrets Manager
AWS Artifact

Question 2 of 30

2. Question

Which of the following design patterns and architectural options takes place through an increase in the specifications of an individual resource, such as upgrading a server with a larger hard drive or a faster CPU?

Disposable resources
Automation
Loose Coupling
Scalability

Question 3 of 30

3. Question

You are thinking to migrate the entire on-premise infrastructure to AWS. Which of the following is a benefit of using AWS over traditional data centers or virtualized data centers?

The benefit of using AWS is a lower variable cost and lower upfront cost
The benefit of using AWS is a lower variable cost and higher upfront cost
The benefit of using AWS is a higher variable cost and lower upfront cost
The benefit of using AWS is a higher variable cost and higher upfront cost

Question 4 of 30

4. Question

You are developing an APP that needs to store JSON documents in a fully managed, and durable database with built-in security. Which of the following AWS service will you implement in order to meet the requirement?

Amazon VPC
Amazon CloudFront
Amazon EC2
Amazon DynamoDB

Question 5 of 30

5. Question

Your company needs to deny any permission to any user to perform any Amazon S3 operations on objects in an S3 bucket unless the request originates from the range of 83.122.40.0/24 IP addresses. Which of the following should you use to meet the requirement?

Network Access Control List
Bucket Policy
AWS Resource Groups
AWS Firewall Manager

Question 6 of 30

6. Question

You are working on a global scale application that recently met underperformance issues. You have been tasked to implement a solution to speed up the distribution of your static and dynamic web content. Which of the following AWS service will you implement to fix the issue?

Amazon VPC
Amazon Route 53
Amazon CloudFront
Amazon API Gateway

Question 7 of 30

7. Question

You are developing a new application that focuses on background processing related tasks. Which of the following instance purchasing option consider the most cost-effective solution for your application?

Spot Instances
On-Demand Instances
Reserved Instances
Dedicated Instances

Question 8 of 30

8. Question

Which of the following AWS services is a fully managed data security service that uses machine learning and pattern matching to discover, classify, and help you protect your sensitive data in Amazon S3?

Amazon Inspector
Amazon GuardDuty
Amazon Macie
Amazon Detective

Question 9 of 30

9. Question

Your company needs to submit the security and compliance documents such as AWS ISO certifications and Payment Card Industry (PCI). Which of the following AWS service provides on-demand downloads of AWS security and compliance documents?

AWS Secrets Manager
AWS WAF
AWS Artifact
AWS Identity and Access Management

Question 10 of 30

10. Question

Assuming you are in the Identity and Access Management (IAM) dashboard of your AWS Management Console, which of the following services below can you manage? (Select all that apply)

Groups
Instances
Identity providers
Policies
Dedicated hosts

Question 11 of 30

11. Question

According to Amazon Inc., there are six advantages of cloud computing. Which of the following is not considered an advantage?

Increase speed and agility
Stop spending money running and maintaining data centers
Go global in minutes
Increase infrastructure capacity needs

Question 12 of 30

12. Question

You have been tasked to implement a NoSQL database service that provides fast and predictable performance with seamless scalability for your new APP. Which of the following database services will you implement in order to meet the requirement?

Amazon Redshift
Amazon Aurora
Amazon DynamoDB
Amazon Neptune

Question 13 of 30

13. Question

Which AWS service should you use if you need to set up and operate a highly scalable MongoDB database?

Amazon DynamoDB
Amazon Aurora
Amazon Redshift
Amazon DocumentDB

Question 14 of 30

14. Question

AWS customers are welcome to carry out security assessments or penetration tests against AWS infrastructure without prior approval for 8 services. Which of the following services are included? (Choose all that apply.)

Elastic Load Balancers
Amazon Route 53
Amazon CloudFront
Amazon API Gateways
Amazon Redshift

Question 15 of 30

15. Question

You have been tasked to implement a solution to attach policies to multiple users at one time. Which AWS service will help you to meet the requirement?

AWS Identity and Access Management
AWS Resource Access Manager
AWS Resource Groups
AWS Secrets Manager

Question 16 of 30

16. Question

You have been tasked to implement a solution to receive an alert if the EC2 cost budget reaches the threshold of $2,500.00. Which service will you use to track and inspect your budget?

AWS Budgets
AWS Pricing Calculator
Amazon Simple Workflow Service
AWS Support

Question 17 of 30

17. Question

As your startup is growing you need to implement a solution to centrally manage billing; control access, and security; and share resources across your AWS accounts. Which of the following AWS services will you implement to meet the requirement?

Service Quotas
AWS OpsWorks
AWS Organizations
AWS Well-Architected Tool

Question 18 of 30

18. Question

Which of the following statements is correct regarding Availability Zones?

Availability Zones provide you the ability to place resources, such as compute and storage, in multiple locations closer to your end-users
Availability Zones are multiple, isolated locations within each Region
Availability Zones brings native AWS services, infrastructure, and operating models to virtually any data center, co-location space, or on-premises facility
Availability Zones allow developers to build applications that deliver ultra-low latencies to 5G devices and end-users

Question 19 of 30

19. Question

You have been tasked to increase the security of your VPC to control traffic in and out of your company’s subnets. Which of the following services will you use to complete the task?

Network ACL
AWS Shield
AWS WAF
AWS Resource Group

Question 20 of 30

20. Question

You have been tasked to implement a solution to automate security vulnerability assessments throughout your development and deployment pipelines. Which of the following services will you enable to meet the requirement?

Amazon Macie
GuardDuty
Amazon Inspector
AWS Shield

Question 21 of 30

21. Question

Which of the following options is not considered a benefit of using Kinesis Video Streams?

Kinesis Video Streams offers you a fixed cost pricing model
Kinesis Video Streams enables you to connect and stream video, audio, and other data from millions of devices
Kinesis Video Streams is serverless, so there is no infrastructure to set up or manage
Kinesis Video Streams encrypts all data as it flows through the service and when it persists the data

Question 22 of 30

22. Question

Which of the following is true regarding Elastic Load Balancing?

Elastic Load Balancing enables you to launch Amazon Web Services (AWS) resources into a virtual network that you've defined
Elastic Load Balancing speeds up the distribution of your static and dynamic web content
Elastic Load Balancing automatically distributes incoming application traffic across multiple targets, such as Amazon EC2
Elastic Load Balancing is a highly available and scalable Domain Name System (DNS) web service

Question 23 of 30

23. Question

Your database-driven application transfers gigabytes to terabytes of data on a regular basis across continents. Which of the following services will you use to enable fast, easy, and secure transfers of your files over long distances between your client and an S3 bucket?

Amazon S3 Requester Pays buckets
Amazon S3 Access Points
Amazon S3 Object Tagging
Amazon S3 Transfer Acceleration

Question 24 of 30

24. Question

Amazon Simple Queue Service (Amazon SQS) offers a secure, durable, and available hosted queue that lets you integrate and decouple distributed software systems and components. Which of the following are the main benefits of using SQS? (Choose all that apply.)

Reliability
Scalability
Availability
Cost
Security

Question 25 of 30

25. Question

You are working on a video sharing web app that recently encounters a huge amount of traffic from users all over the world. As a result, the application faced availability and slow performance issues. Which of the following service will you implement to fix these issues?

AWS Global Accelerator
Amazon Virtual Private Cloud
Amazon API Gateway
Amazon Route 53

Question 26 of 30

26. Question

Which of the following VPC networking components allows communication between your VPC and the internet?

Internet gateways
VPC peering
Elastic IP address
ClassicLink

Question 27 of 30

27. Question

You have been tasked to implement a solution for your application so automatically scaling your application’s resources based on the demand. Which AWS service will you enable to meet the requirement?

Amazon CloudWatch
AWS Auto Scaling
AWS Health
AWS Systems Manager

Question 28 of 30

28. Question

Amazon S3 is optimal for storing numerous classes of information that are relatively static and benefit from its durability, availability, and elasticity features. However, in a number of situations, Amazon S3 is not the optimal solution. Which of the following options is considered an anti-pattern for Amazon S3? (Choose all that apply.)

Dynamic website hosting
Static website hosting
Rapidly changing data
Software delivery
Media hosting

Question 29 of 30

29. Question

Which of the following AWS services will you use in order to scale your relational database in the cloud and automate time-consuming administration tasks such as hardware provisioning patching and backups?

Amazon Redshift
Amazon RDS
Amazon ElastiCache
Amazon DynamoDB

Question 30 of 30

30. Question

You are using AWS Trusted Advisor as it provides you real-time guidance to help you provision your resources following AWS best practices. Which of the following categories is not included in the AWS Trusted Advisor’s best practice recommendations?

Cost optimization
Performance
Security
Sales