Question 1

Which of the following is a best practice for creating policies for IAM users?

Accepted Answer

A)  Start with a large set of permissions and remove the permissions that are not required. 
B)  Use only Amazon managed policies. 
C)  Start with a minimum set of permissions and grant additional permissions as necessary. 
D)  Attach policies directly to each user individually. 
A)  Start with a large set of permissions and remove the permissions that are not required. 
B)  Use only Amazon managed policies. 
C)  Start with a minimum set of permissions and grant additional permissions as necessary. 
D)  Attach policies directly to each user individually.

Question 2

A company needs protection from expanded distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events. Which AWS managed service will meet these requirements?

Accepted Answer

A)  AWS Shield Advanced 
B)  AWS Firewall Manager 
C)  AWS WAF 
D)  Amazon GuardDuty 
A)  AWS Shield Advanced 
B)  AWS Firewall Manager 
C)  AWS WAF 
D)  Amazon GuardDuty

Question 3

Treating infrastructure as code in the AWS Cloud allows users to:

Accepted Answer

A)  automate migration of on-premises hardware to AWS data centers. 
B)  let a third party automate an audit of the AWS infrastructure. 
C)  turn over application code to AWS so it can run on the AWS infrastructure. 
D)  automate the infrastructure provisioning process. 
A)  automate migration of on-premises hardware to AWS data centers. 
B)  let a third party automate an audit of the AWS infrastructure. 
C)  turn over application code to AWS so it can run on the AWS infrastructure. 
D)  automate the infrastructure provisioning process.

Question 4

Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceeds a certain threshold?

Accepted Answer

A)  Cost Explorer 
B)  AWS Budgets 
C)  AWS Cost and Usage Report 
D)  AWS CloudTrail 
A)  Cost Explorer 
B)  AWS Budgets 
C)  AWS Cost and Usage Report 
D)  AWS CloudTrail

Question 5

The AWS Cost Management tools give users the ability to do which of the following? (Choose two.)

Accepted Answer

A)  Terminate all AWS resources automatically if budget thresholds are exceeded. 
B)  Break down AWS costs by day, service, and linked AWS account. 
C)  Create budgets and receive notifications if current of forecasted usage exceeds the budgets. 
D)  Switch automatically to Reserved Instances or Spot Instances, whichever is most cost-effective. 
E)  Move data stored in Amazon S3 to a more cost-effective storage class. 
A)  Terminate all AWS resources automatically if budget thresholds are exceeded. 
B)  Break down AWS costs by day, service, and linked AWS account. 
C)  Create budgets and receive notifications if current of forecasted usage exceeds the budgets. 
D)  Switch automatically to Reserved Instances or Spot Instances, whichever is most cost-effective. 
E)  Move data stored in Amazon S3 to a more cost-effective storage class.

Question 6

A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?

Accepted Answer

A)  Amazon CloudWatch 
B)  Amazon Inspector 
C)  AWS Cloud Trail 
D)  AWS IAM 
A)  Amazon CloudWatch 
B)  Amazon Inspector 
C)  AWS Cloud Trail 
D)  AWS IAM

Question 7

During a compliance review, one of the auditors requires a copy of the AWS SOC 2 report. Which service should be used to submit this request?

Accepted Answer

A)  AWS Personal Health Dashboard 
B)  AWS Trusted Advisor 
C)  AWS Artifact 
D)  Amazon S3 
A)  AWS Personal Health Dashboard 
B)  AWS Trusted Advisor 
C)  AWS Artifact 
D)  Amazon S3

Question 8

Which of the following tasks can only be performed after signing in with AWS account root user credentials? (Choose two.)

Accepted Answer

A)  Closing an AWS account 
B)  Creating a new IAM policy 
C)  Changing AWS Support plans 
D)  Attaching a role to an Amazon EC2 instance 
E)  Generating access keys for IAM users 
A)  Closing an AWS account 
B)  Creating a new IAM policy 
C)  Changing AWS Support plans 
D)  Attaching a role to an Amazon EC2 instance 
E)  Generating access keys for IAM users

Question 9

A company wants to forecast its AWS Cloud costs for the upcoming year by analyzing its past AWS Cloud spending trends. Which AWS service should the company use to meet this requirement?

Accepted Answer

A)  AWS Control Tower 
B)  Cost Explorer 
C)  AWS OpsWorks 
D)  AWS CloudFormation 
A)  AWS Control Tower 
B)  Cost Explorer 
C)  AWS OpsWorks 
D)  AWS CloudFormation

Question 10

Which AWS service can be used to retrieve compliance reports on demand?

Accepted Answer

A)  AWS Secrets Manager 
B)  AWS Artifact 
C)  AWS Security Hub 
D)  AWS Certificate Manager 
A)  AWS Secrets Manager 
B)  AWS Artifact 
C)  AWS Security Hub 
D)  AWS Certificate Manager

Question 11

Which AWS service should a company use to decouple large monolithic applications into smaller microservices components?

Accepted Answer

A)  AWS Direct Connect 
B)  Amazon Lightsail 
C)  Amazon Simple Queue Service (Amazon SQS) 
D)  Amazon CloudWatch 
A)  AWS Direct Connect 
B)  Amazon Lightsail 
C)  Amazon Simple Queue Service (Amazon SQS) 
D)  Amazon CloudWatch

Question 12

Which of the following is a fast and reliable NoSQL database service?

Accepted Answer

A)  Amazon Redshift 
B)  Amazon RDS 
C)  Amazon DynamoDB 
D)  Amazon S3 
A)  Amazon Redshift 
B)  Amazon RDS 
C)  Amazon DynamoDB 
D)  Amazon S3

Question 13

A company wants to ensure that AWS Management Console users are meeting password complexity requirements. How can the company configure password complexity?

Accepted Answer

A)  Using an AWS IAM user policy 
B)  Using an AWS Organizations service control policy (SCP) 
C)  Using an AWS IAM account password policy 
D)  Using an AWS Security Hub managed insight 
A)  Using an AWS IAM user policy 
B)  Using an AWS Organizations service control policy (SCP) 
C)  Using an AWS IAM account password policy 
D)  Using an AWS Security Hub managed insight

Question 14

A Cloud Practitioner is developing a disaster recovery plan and intends to replicate data between multiple geographic areas. Which of the following meets these requirements?

Accepted Answer

A)  AWS Accounts 
B)  AWS Regions 
C)  Availability Zones 
D)  Edge locations 
A)  AWS Accounts 
B)  AWS Regions 
C)  Availability Zones 
D)  Edge locations

Question 15

Which of the following is an important architectural design principle when designing cloud applications?

Accepted Answer

A)  Use multiple Availability Zones. 
B)  Use tightly coupled components. 
C)  Use open source software. 
D)  Provision extra capacity. 
A)  Use multiple Availability Zones. 
B)  Use tightly coupled components. 
C)  Use open source software. 
D)  Provision extra capacity.

Question 16

Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users?

Accepted Answer

A)  A public and private key-pair 
B)  Amazon Inspector 
C)  AWS Identity and Access Management (IAM) policies 
D)  Security Groups 
A)  A public and private key-pair 
B)  Amazon Inspector 
C)  AWS Identity and Access Management (IAM) policies 
D)  Security Groups

Question 17

Which feature can be used to protect Amazon S3 buckets from accidental overwrites or deletes?

Accepted Answer

A)  Lifecycle policy 
B)  Object versioning 
C)  Server-side encryption 
D)  Bucket ACL 
A)  Lifecycle policy 
B)  Object versioning 
C)  Server-side encryption 
D)  Bucket ACL

Question 18

Which AWS service acts as a data extract, transform, and load (ETL) tool to make it easy to prepare data for analytics?

Accepted Answer

A)  Amazon QuickSight 
B)  Amazon Athena 
C)  AWS Glue 
D)  AWS Elastic Beanstalk 
A)  Amazon QuickSight 
B)  Amazon Athena 
C)  AWS Glue 
D)  AWS Elastic Beanstalk

Question 19

A company has performance and regulatory requirements that call for it to run its workload only in its on-premises data center. Which AWS services or resources should the company use? (Choose two.)

Accepted Answer

A)  Amazon Pinpoint 
B)  Amazon WorkLink 
C)  AWS Outposts 
D)  AWS Snowball Edge 
E)  AWS AppSync 
A)  Amazon Pinpoint 
B)  Amazon WorkLink 
C)  AWS Outposts 
D)  AWS Snowball Edge 
E)  AWS AppSync

Question 20

Why should a company choose AWS instead of a traditional data center?

Accepted Answer

A)  AWS provides users with full control over the underlying resources. 
B)  AWS does not require long-term contracts and provides a pay-as-you-go model. 
C)  AWS offers edge locations in every country, supporting global reach. 
D)  AWS has no limits on the number of resources that can be created. 
A)  AWS provides users with full control over the underlying resources. 
B)  AWS does not require long-term contracts and provides a pay-as-you-go model. 
C)  AWS offers edge locations in every country, supporting global reach. 
D)  AWS has no limits on the number of resources that can be created.

Which of the following is a best practice for creating policies for IAM users?

A company needs protection from expanded distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events. Which AWS managed service will meet these requirements?

Treating infrastructure as code in the AWS Cloud allows users to:

Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceeds a certain threshold?

The AWS Cost Management tools give users the ability to do which of the following? (Choose two.)

A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?

During a compliance review, one of the auditors requires a copy of the AWS SOC 2 report. Which service should be used to submit this request?

Which of the following tasks can only be performed after signing in with AWS account root user credentials? (Choose two.)

A company wants to forecast its AWS Cloud costs for the upcoming year by analyzing its past AWS Cloud spending trends. Which AWS service should the company use to meet this requirement?

Which AWS service can be used to retrieve compliance reports on demand?

Which AWS service should a company use to decouple large monolithic applications into smaller microservices components?

Which of the following is a fast and reliable NoSQL database service?

A company wants to ensure that AWS Management Console users are meeting password complexity requirements. How can the company configure password complexity?

A Cloud Practitioner is developing a disaster recovery plan and intends to replicate data between multiple geographic areas. Which of the following meets these requirements?

Which of the following is an important architectural design principle when designing cloud applications?

Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users?

Which feature can be used to protect Amazon S3 buckets from accidental overwrites or deletes?

Which AWS service acts as a data extract, transform, and load (ETL) tool to make it easy to prepare data for analytics?

A company has performance and regulatory requirements that call for it to run its workload only in its on-premises data center. Which AWS services or resources should the company use? (Choose two.)

Why should a company choose AWS instead of a traditional data center?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

AWS Certified SysOps Administrator (SOA-C01)

Filters

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)

Which of the following is a best practice for creating policies for IAM users?

A company needs protection from expanded distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events. Which AWS managed service will meet these requirements?

Treating infrastructure as code in the AWS Cloud allows users to:

Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceeds a certain threshold?

The AWS Cost Management tools give users the ability to do which of the following? (Choose two.)

A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources. Which AWS tool or service can be used to meet these requirements?

During a compliance review, one of the auditors requires a copy of the AWS SOC 2 report. Which service should be used to submit this request?

Which of the following tasks can only be performed after signing in with AWS account root user credentials? (Choose two.)

A company wants to forecast its AWS Cloud costs for the upcoming year by analyzing its past AWS Cloud spending trends. Which AWS service should the company use to meet this requirement?

Which AWS service can be used to retrieve compliance reports on demand?

Which AWS service should a company use to decouple large monolithic applications into smaller microservices components?

Which of the following is a fast and reliable NoSQL database service?

A company wants to ensure that AWS Management Console users are meeting password complexity requirements. How can the company configure password complexity?

A Cloud Practitioner is developing a disaster recovery plan and intends to replicate data between multiple geographic areas. Which of the following meets these requirements?

Which of the following is an important architectural design principle when designing cloud applications?

Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users?

Which feature can be used to protect Amazon S3 buckets from accidental overwrites or deletes?

Which AWS service acts as a data extract, transform, and load (ETL) tool to make it easy to prepare data for analytics?

A company has performance and regulatory requirements that call for it to run its workload only in its on-premises data center. Which AWS services or resources should the company use? (Choose two.)

Why should a company choose AWS instead of a traditional data center?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

AWS Certified SysOps Administrator (SOA-C01)

Filters