Question 1

Under the shared responsibility model, which of the following is a shared control between a customer and AWS?

Accepted Answer

A)  Physical controls 
B)  Patch management 
C)  Zone security 
D)  Data center auditing 
A)  Physical controls 
B)  Patch management 
C)  Zone security 
D)  Data center auditing

Question 2

A user can increase operational efficiency in the AWS Cloud by:

Accepted Answer

A)  leveraging AWS managed services. 
B)  right-sizing AWS infrastructure. 
C)  manually creating all necessary resources. 
D)  managing their own software licenses. 
A)  leveraging AWS managed services. 
B)  right-sizing AWS infrastructure. 
C)  manually creating all necessary resources. 
D)  managing their own software licenses.

Question 3

What does Amazon CloudFront provide?

Accepted Answer

A)  Automatic scaling for all resources to power an application from a single unified interface 
B)  Secure delivery of data, videos, applications, and APIs to users globally with low latency 
C)  Ability to directly manage traffic globally through a variety of routing types, including latency-based routing, geo DNS, geoproximity, and weighted round robin 
D)  Automatic distribution of incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and AWS Lambda functions 
A)  Automatic scaling for all resources to power an application from a single unified interface 
B)  Secure delivery of data, videos, applications, and APIs to users globally with low latency 
C)  Ability to directly manage traffic globally through a variety of routing types, including latency-based routing, geo DNS, geoproximity, and weighted round robin 
D)  Automatic distribution of incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and AWS Lambda functions

Question 4

When a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?

Accepted Answer

A)  Spot Instances 
B)  Dedicated Instances 
C)  Dedicated Hosts 
D)  Reserved Instances 
A)  Spot Instances 
B)  Dedicated Instances 
C)  Dedicated Hosts 
D)  Reserved Instances

Question 5

A company wants to route its traffic directly and privately to a VPC without going over the public internet. Which connectivity option provides this capability?

Accepted Answer

A)  AWS VPN 
B)  AWS Direct Connect 
C)  VPC NAT gateway 
D)  VPC internet gateway 
A)  AWS VPN 
B)  AWS Direct Connect 
C)  VPC NAT gateway 
D)  VPC internet gateway

Question 6

What can assist in evaluating an application for migration to the cloud? (Choose two.)

Accepted Answer

A)  AWS Trusted Advisor 
B)  AWS Professional Services 
C)  AWS Systems Manager 
D)  AWS Partner Network (APN) 
E)  AWS Secrets Manager 
A)  AWS Trusted Advisor 
B)  AWS Professional Services 
C)  AWS Systems Manager 
D)  AWS Partner Network (APN) 
E)  AWS Secrets Manager

Question 7

Which aspect of AWS infrastructure enables global deployment of compute and storage?

Accepted Answer

A)  Availability Zones 
B)  Regions 
C)  Tags 
D)  Resource groups 
A)  Availability Zones 
B)  Regions 
C)  Tags 
D)  Resource groups

Question 8

Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?

Accepted Answer

A)  Ensuring network connectivity from AWS to the internet 
B)  Patching and fixing flaws within the AWS Cloud infrastructure 
C)  Ensuring the physical security of cloud data centers 
D)  Ensuring Amazon EBS volumes are backed up 
A)  Ensuring network connectivity from AWS to the internet 
B)  Patching and fixing flaws within the AWS Cloud infrastructure 
C)  Ensuring the physical security of cloud data centers 
D)  Ensuring Amazon EBS volumes are backed up

Question 9

A user wants guidance on possible savings when migrating from on-premises to AWS. Which tool is suitable for this scenario?

Accepted Answer

A)  AWS Budgets 
B)  Cost Explorer 
C)  AWS Total Cost of Ownership (TCO) Calculator 
D)  AWS Well-Architected Tool 
A)  AWS Budgets 
B)  Cost Explorer 
C)  AWS Total Cost of Ownership (TCO) Calculator 
D)  AWS Well-Architected Tool

Question 10

A Cloud Practitioner must determine if any security groups in an AWS account have been provisioned to allow unrestricted access for specific ports. What is the SIMPLEST way to do this?

Accepted Answer

A)  Review the inbound rules for each security group in the Amazon EC2 management console to check for port 0.0.0.0/0. 
B)  Run AWS Trusted Advisor and review the findings. 
C)  Open the AWS IAM console and check the inbound rule filters for open access. 
D)  In AWS Config, create a custom rule that invokes an AWS Lambda function to review rules for inbound access. 
A)  Review the inbound rules for each security group in the Amazon EC2 management console to check for port 0.0.0.0/0. 
B)  Run AWS Trusted Advisor and review the findings. 
C)  Open the AWS IAM console and check the inbound rule filters for open access. 
D)  In AWS Config, create a custom rule that invokes an AWS Lambda function to review rules for inbound access.

Question 11

A user needs to generate a report that outlines the status of key security checks in an AWS account. The report must include: The status of Amazon S3 bucket permissions. Whether multi-factor authentication is enabled for the AWS account root user. If any security groups are configured to allow unrestricted access. Where can all this information be found in one location?

Accepted Answer

A)  Amazon QuickSight dashboard 
B)  AWS CloudTrail trails 
C)  AWS Trusted Advisor report 
D)  IAM credential report 
A)  Amazon QuickSight dashboard 
B)  AWS CloudTrail trails 
C)  AWS Trusted Advisor report 
D)  IAM credential report

Question 12

A company will be moving from an on-premises data center to the AWS Cloud. What would be one financial difference after the move?

Accepted Answer

A)  Moving from variable operational expense (opex) to upfront capital expense (capex). 
B)  Moving from upfront capital expense (capex) to variable capital expense (capex). 
C)  Moving from upfront capital expense (capex) to variable operational expense (opex). 
D)  Elimination of upfront capital expense (capex) and elimination of variable operational expense (opex) 
A)  Moving from variable operational expense (opex) to upfront capital expense (capex). 
B)  Moving from upfront capital expense (capex) to variable capital expense (capex). 
C)  Moving from upfront capital expense (capex) to variable operational expense (opex). 
D)  Elimination of upfront capital expense (capex) and elimination of variable operational expense (opex)

Question 13

Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking?

Accepted Answer

A)  Amazon RDS 
B)  Amazon EC2 
C)  Amazon ElastiCache 
D)  AWS Fargate 
A)  Amazon RDS 
B)  Amazon EC2 
C)  Amazon ElastiCache 
D)  AWS Fargate

Question 14

Compared with costs in traditional and virtualized data centers, AWS has:

Accepted Answer

A)  greater variable costs and greater upfront costs. 
B)  fixed usage costs and lower upfront costs. 
C)  lower variable costs and greater upfront costs. 
D)  lower variable costs and lower upfront costs. 
A)  greater variable costs and greater upfront costs. 
B)  fixed usage costs and lower upfront costs. 
C)  lower variable costs and greater upfront costs. 
D)  lower variable costs and lower upfront costs.

Question 15

Service control policies (SCPs) manage permissions for which of the following?

Accepted Answer

A)  Availability Zones 
B)  AWS Regions 
C)  AWS Organizations 
D)  Edge locations 
A)  Availability Zones 
B)  AWS Regions 
C)  AWS Organizations 
D)  Edge locations

Question 16

Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?

Accepted Answer

A)  AWS Secrets Manager 
B)  AWS CloudHSM 
C)  AWS Key Management Service (AWS KMS) 
D)  AWS Directory Service 
A)  AWS Secrets Manager 
B)  AWS CloudHSM 
C)  AWS Key Management Service (AWS KMS) 
D)  AWS Directory Service

Question 17

Which component must be attached to a VPC to enable inbound Internet access?

Accepted Answer

A)  NAT gateway 
B)  VPC endpoint 
C)  VPN connection 
D)  Internet gateway 
A)  NAT gateway 
B)  VPC endpoint 
C)  VPN connection 
D)  Internet gateway

Question 18

Which AWS service or feature allows the user to manager cross-region application traffic?

Accepted Answer

A)  Amazon AppStream 2.0 
B)  Amazon VPC 
C)  Elastic Load Balancer 
D)  Amazon Route 53 
A)  Amazon AppStream 2.0 
B)  Amazon VPC 
C)  Elastic Load Balancer 
D)  Amazon Route 53

Question 19

Which of the following is an advantage of consolidated billing on AWS?

Accepted Answer

A)  Volume pricing qualification 
B)  Shared access permissions 
C)  Multiple bills per account 
D)  Eliminates the need for tagging 
A)  Volume pricing qualification 
B)  Shared access permissions 
C)  Multiple bills per account 
D)  Eliminates the need for tagging

Question 20

Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?

Accepted Answer

A)  Amazon DynamoDB 
B)  Amazon Athena 
C)  Amazon RDS 
D)  Amazon EMR 
A)  Amazon DynamoDB 
B)  Amazon Athena 
C)  Amazon RDS 
D)  Amazon EMR

Under the shared responsibility model, which of the following is a shared control between a customer and AWS?

A user can increase operational efficiency in the AWS Cloud by:

What does Amazon CloudFront provide?

When a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?

A company wants to route its traffic directly and privately to a VPC without going over the public internet. Which connectivity option provides this capability?

What can assist in evaluating an application for migration to the cloud? (Choose two.)

Which aspect of AWS infrastructure enables global deployment of compute and storage?

Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?

A user wants guidance on possible savings when migrating from on-premises to AWS. Which tool is suitable for this scenario?

A Cloud Practitioner must determine if any security groups in an AWS account have been provisioned to allow unrestricted access for specific ports. What is the SIMPLEST way to do this?

A company will be moving from an on-premises data center to the AWS Cloud. What would be one financial difference after the move?

Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking?

Compared with costs in traditional and virtualized data centers, AWS has:

Service control policies (SCPs) manage permissions for which of the following?

Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?

Which component must be attached to a VPC to enable inbound Internet access?

Which AWS service or feature allows the user to manager cross-region application traffic?

Which of the following is an advantage of consolidated billing on AWS?

Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

AWS Certified SysOps Administrator (SOA-C01)

Filters

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)

Under the shared responsibility model, which of the following is a shared control between a customer and AWS?

A user can increase operational efficiency in the AWS Cloud by:

What does Amazon CloudFront provide?

When a user wants to utilize their existing per-socket, per-core, or per-virtual machine software licenses for a Microsoft Windows server running on AWS, which Amazon EC2 instance type is required?

A company wants to route its traffic directly and privately to a VPC without going over the public internet. Which connectivity option provides this capability?

What can assist in evaluating an application for migration to the cloud? (Choose two.)

Which aspect of AWS infrastructure enables global deployment of compute and storage?

Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?

A user wants guidance on possible savings when migrating from on-premises to AWS. Which tool is suitable for this scenario?

A Cloud Practitioner must determine if any security groups in an AWS account have been provisioned to allow unrestricted access for specific ports. What is the SIMPLEST way to do this?

A company will be moving from an on-premises data center to the AWS Cloud. What would be one financial difference after the move?

Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking?

Compared with costs in traditional and virtualized data centers, AWS has:

Service control policies (SCPs) manage permissions for which of the following?

Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?

Which component must be attached to a VPC to enable inbound Internet access?

Which AWS service or feature allows the user to manager cross-region application traffic?

Which of the following is an advantage of consolidated billing on AWS?

Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

AWS Certified SysOps Administrator (SOA-C01)

Filters