Deck 3: AWS Certified Cloud Practitioner (CLF-C01)

Question 1

Which AWS feature will reduce the customer's total cost of ownership (TCO)?

A) Shared responsibility security model
B) Single tenancy
C) Elastic computing
D) Encryption

Answer 1

Elastic computing

Question 2

What costs are included when comparing AWS Total Cost of Ownership (TCO) with on-premises TCO?

A) Project management
B) Antivirus software licensing
C) Data center security
D) Software development

Answer 2

Project management

Question 3

What approach to transcoding a large number of individual video files adheres to AWS architecture principles?

A) Using many instances in parallel
B) Using a single large instance during off-peak hours
C) Using dedicated hardware
D) Using a large GPU instance type

Answer 3

Using many instances in parallel

Question 4

Which of the following Amazon EC2 pricing models allow customers to use existing server-bound software licenses?

A) Spot Instances
B) Reserved Instances
C) Dedicated Hosts
D) On-Demand Instances

Question 5

Which service stores objects, provides real-time access to those objects, and offers versioning and lifecycle capabilities?

A) Amazon Glacier
B) AWS Storage Gateway
C) Amazon S3
D) Amazon EBS

Question 6

A company is considering using AWS for a self-hosted database that requires a nightly shutdown for maintenance and cost-saving purposes. Which service should the company use?

A) Amazon Redshift
B) Amazon DynamoDB
C) Amazon Elastic Compute Cloud (Amazon EC2) with Amazon EC2 instance store
D) Amazon EC2 with Amazon Elastic Block Store (Amazon EBS)

Question 7

What is one of the advantages of the Amazon Relational Database Service (Amazon RDS)?

A) It simplifies relational database administration tasks.
B) It provides 99.99999999999% reliability and durability.
C) It automatically scales databases for loads.
D) It enabled users to dynamically adjust CPU and RAM resources.

Question 8

Which services can be used across hybrid AWS Cloud architectures? (Choose two.)

A) Amazon Route 53
B) Virtual Private Gateway
C) Classic Load Balancer
D) Auto Scaling
E) Amazon CloudWatch default metrics

Question 9

A customer would like to design and build a new workload on AWS Cloud but does not have the AWS-related software technical expertise in-house. Which of the following AWS programs can a customer take advantage of to achieve that outcome?

A) AWS Partner Network Technology Partners
B) AWS Marketplace
C) AWS Partner Network Consulting Partners
D) AWS Service Catalog

Question 10

Which AWS IAM feature allows developers to access AWS services through the AWS CLI?

A) API keys
B) Access keys
C) User names/Passwords
D) SSH keys

Question 11

Which of the following is a correct relationship between regions, Availability Zones, and edge locations?

A) Data centers contain regions.
B) Regions contain Availability Zones.
C) Availability Zones contain edge locations.
D) Edge locations contain regions.

Question 12

Compared with costs in traditional and virtualized data centers, AWS has:

A) greater variable costs and greater upfront costs.
B) fixed usage costs and lower upfront costs.
C) lower variable costs and greater upfront costs.
D) lower variable costs and lower upfront costs.

Question 13

How many Availability Zones should compute resources be provisioned across to achieve high availability?

A) A minimum of one
B) A minimum of two
C) A minimum of three
D) A minimum of four or more

Question 14

AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Choose two.)

A) Implementing Amazon Rekognition
B) Using AWS Shield-protected resources
C) Blocking access with Security Groups
D) Using Multi-Factor Authentication (MFA)
E) Enforcing password strength and expiration

Question 15

Which of the following is a shared control between the customer and AWS?

A) Providing a key for Amazon S3 client-side encryption
B) Configuration of an Amazon EC2 instance
C) Environmental controls of physical AWS data centers
D) Awareness and training

Question 16

Which of the following are advantages of AWS consolidated billing? (Choose two.)

A) The ability to receive one bill for multiple accounts
B) Service limits increasing by default in all accounts
C) A fixed discount on the monthly bill
D) Potential volume discounts, as usage in all accounts is combined
E) The automatic extension of the master account's AWS support plan to all accounts

Question 17

Which of the following security-related actions are available at no cost?

A) Calling AWS Support
B) Contacting AWS Professional Services to request a workshop
C) Accessing forums, blogs, and whitepapers
D) Attending AWS classes at a local university

Question 18

Where are AWS compliance documents, such as an SOC 1 report, located?

A) Amazon Inspector
B) AWS CloudTrail
C) AWS Artifact
D) AWS Certificate Manager

Question 19

According to best practices, how should an application be designed to run in the AWS Cloud?

A) Use tighly coupled components.
B) Use loosely coupled components.
C) Use infrequently coupled components.
D) Use frequently coupled components.

Question 20

One of the advantages to moving infrastructure from an on-premises data center to the AWS Cloud is:

A) it allows the business to eliminate IT bills.
B) it allows the business to put a server in each customer's data center.
C) it allows the business to focus on business activities.
D) it allows the business to leave servers unpatched.

Question 21

Which of the following are valid ways for a customer to interact with AWS services? (Choose two.)

A) Command line interface
B) On-premises
C) Software Development Kits
D) Software-as-a-service
E) Hybrid

Question 22

When architecting cloud applications, which of the following are a key design principle?

A) Use the largest instance possible
B) Provision capacity for peak load
C) Use the Scrum development process
D) Implement elasticity

Question 23

Which feature of the AWS Cloud will support an international company's requirement for low latency to all of its customers?

A) Fault tolerance
B) Global reach
C) Pay-as-you-go pricing
D) High availability

Question 24

Which statement best describes Elastic Load Balancing?

A) It translates a domain name into an IP address using DNS.
B) It distributes incoming application traffic across one or more Amazon EC2 instances.
C) It collects metrics on connected Amazon EC2 instances.
D) It automatically adjusts the number of Amazon EC2 instances to support incoming traffic.

Question 25

Which Amazon EC2 pricing model adjusts based on supply and demand of EC2 instances?

A) On-Demand Instances
B) Reserved Instances
C) Spot Instances
D) Convertible Reserved Instances

Question 26

Which of the following is an AWS managed Domain Name System (DNS) web service?

A) Amazon Route 53
B) Amazon Neptune
C) Amazon SageMaker
D) Amazon Lightsail

Question 27

Which of the following steps should be taken by a customer when conducting penetration testing on AWS?

A) Conduct penetration testing using Amazon Inspector, and then notify AWS support.
B) Request and wait for approval from the customer's internal security team, and then conduct testing.
C) Notify AWS support, and then conduct testing immediately.
D) Request and wait for approval from AWS support, and then conduct testing.

Question 28

Which Amazon EC2 instance pricing model can provide discounts of up to 90%?

A) Reserved Instances
B) On-Demand
C) Dedicated Hosts
D) Spot Instances

Question 29

Which of the following Identity and Access Management (IAM) entities is associated with an access key ID and secret access key when using AWS Command Line Interface (AWS CLI)?

A) IAM group
B) IAM user
C) IAM role
D) IAM policy

Question 30

If a customer needs to audit the change management of AWS resources, which of the following AWS services should the customer use?

A) AWS Config
B) AWS Trusted Advisor
C) Amazon CloudWatch
D) Amazon Inspector

Question 31

Which AWS service allows companies to connect an Amazon VPC to an on-premises data center?

A) AWS VPN
B) Amazon Redshift
C) API Gateway
D) Amazon Direct Connect

Question 32

Which of the following AWS services can be used to serve large amounts of online video content with the lowest possible latency? (Choose two.)

A) AWS Storage Gateway
B) Amazon S3
C) Amazon Elastic File System (EFS)
D) Amazon Glacier
E) Amazom CloudFront

Question 33

What is Amazon CloudWatch?

A) A code repository with customizable build and team commit features.
B) A metrics repository with customizable notification thresholds and channels.
C) A security configuration repository with threat analytics.
D) A rule repository of a web application firewall with automated vulnerability prevention features.

Question 34

Which AWS service provides alerts when an AWS event may impact a company's AWS resources?

A) AWS Personal Health Dashboard
B) AWS Service Health Dashboard
C) AWS Trusted Advisor
D) AWS Infrastructure Event Management

Question 35

Where can AWS compliance and certification reports be downloaded?

A) AWS Artifact
B) AWS Concierge
C) AWS Certificate Manager
D) AWS Trusted Advisor

Question 36

Which AWS services are defined as global instead of regional? (Choose two.)

A) Amazon Route 53
B) Amazon EC2
C) Amazon S3
D) Amazon CloudFront
E) Amazon DynamoDB

Question 37

Which storage service can be used as a low-cost option for hosting static websites?

A) Amazon Glacier
B) Amazon DynamoDB
C) Amazon Elastic File System (Amazon EFS)
D) Amazon Simple Storage Service (Amazon S3)

Question 38

Which is the MINIMUM AWS Support plan that allows for one-hour target response time for support cases?

A) Enterprise
B) Business
C) Developer
D) Basic

Question 39

Which service allows a company with multiple AWS accounts to combine its usage to obtain volume discounts?

A) AWS Server Migration Service
B) AWS Organizations
C) AWS Budgets
D) AWS Trusted Advisor

Question 40

Which design principles for cloud architecture are recommended when re-architecting a large monolithic application? (Choose two.)

A) Use manual monitoring.
B) Use fixed servers.
C) Implement loose coupling.
D) Rely on individual components.
E) Design for scalability.

Question 41

Which of the following is an AWS Cloud architecture design principle?

A) Implement single points of failure.
B) Implement loose coupling.
C) Implement monolithic design.
D) Implement vertical scaling.

Question 42

An administrator needs to rapidly deploy a popular IT solution and start using it immediately. Where can the administrator find assistance?

A) AWS Well-Architected Framework documentation
B) Amazon CloudFront
C) AWS CodeCommit
D) AWS Quick Start reference deployments

Question 43

Which of the following is an important architectural design principle when designing cloud applications?

A) Use multiple Availability Zones.
B) Use tightly coupled components.
C) Use open source software.
D) Provision extra capacity.

Question 44

If each department within a company has its own AWS account, what is one way to enable consolidated billing?

A) Use AWS Budgets on each account to pay only to budget.
B) Contact AWS Support for a monthly bill.
C) Create an AWS Organization from the payer account and invite the other accounts to join.
D) Put all invoices into one Amazon Simple Storage Service (Amazon S3) bucket, load data into Amazon Redshift, and then run a billing report.

Question 45

Which of the following security measures protect access to an AWS account? (Choose two.)

A) Enable AWS CloudTrail.
B) Grant least privilege access to IAM users.
C) Create one IAM user and share with many developers and users.
D) Enable Amazon CloudFront.
E) Activate multi-factor authentication (MFA) for privileged users.

Question 46

Which of the following common IT tasks can AWS cover to free up company IT resources? (Choose two.)

A) Patching databases software
B) Testing application releases
C) Backing up databases
D) Creating database schema
E) Running penetration tests

Question 47

Which is the MINIMUM AWS Support plan that provides technical support through phone calls?

A) Enterprise
B) Business
C) Developer
D) Basic

Question 48

Which services are parts of the AWS serverless platform?

A) Amazon EC2, Amazon S3, Amazon Athena
B) Amazon Kinesis, Amazon SQS, Amazon EMR
C) AWS Step Functions, Amazon DynamoDB, Amazon SNS
D) Amazon Athena, Amazon Cognito, Amazon EC2

Question 49

Which AWS service can be used to manually launch instances based on resource requirements?

A) Amazon EBS
B) Amazon S3
C) Amazon EC2
D) Amazon ECS

Question 50

What can AWS edge locations be used for? (Choose two.)

A) Hosting applications
B) Delivering content closer to users
C) Running NoSQL database caching services
D) Reducing traffic on the server by caching responses
E) Sending notification messages to end users

Question 51

Which of the following tasks is the responsibility of AWS?

A) Encrypting client-side data
B) Configuring AWS Identity and Access Management (IAM) roles
C) Securing the Amazon EC2 hypervisor
D) Setting user password policies

Question 52

How does AWS shorten the time to provision IT resources?

A) It supplies an online IT ticketing platform for resource requests.
B) It supports automatic code validation services.
C) It provides the ability to programmatically provision existing resources.
D) It automates the resource request process from a company's IT vendor list.

Question 53

Which of the following is a component of the shared responsibility model managed entirely by AWS?

A) Patching operating system software
B) Encrypting data
C) Enforcing multi-factor authentication
D) Auditing physical data center assets

Question 54

According to the AWS shared responsibility model, what is the sole responsibility of AWS?

A) Application security
B) Edge location management
C) Patch management
D) Client-side data

Question 55

A company is migrating an application that is running non-interruptible workloads for a three-year time frame. Which pricing construct would provide the MOST cost-effective solution?

A) Amazon EC2 Spot Instances
B) Amazon EC2 Dedicated Instances
C) Amazon EC2 On-Demand Instances
D) Amazon EC2 Reserved Instances

Question 56

Which is the minimum AWS Support plan that includes Infrastructure Event Management without additional costs?

A) Enterprise
B) Business
C) Developer
D) Basic

Question 57

Which of the following can a customer use to enable single sign-on (SSO) to the AWS Console?

A) Amazon Connect
B) AWS Directory Service
C) Amazon Pinpoint
D) Amazon Rekognition

Question 58

Which of the following services is in the category of AWS serverless platform?

A) Amazon EMR
B) Elastic Load Balancing
C) AWS Lambda
D) AWS Mobile Hub

Question 59

Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking?

A) Amazon RDS
B) Amazon EC2
C) Amazon ElastiCache
D) AWS Fargate

Question 60

Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Choose two.)

A) AWS Trusted Advisor
B) AWS Online Tech Talks
C) AWS Blog
D) AWS Forums
E) AWS Classroom Training

Question 61

Under the AWS shared responsibility model, customers are responsible for which aspects of security in the cloud? (Choose two.)

A) Visualization management
B) Hardware management
C) Encryption management
D) Facilities management
E) Firewall management

Question 62

A company is designing an application hosted in a single AWS Region serving end-users spread across the world. The company wants to provide the end-users low latency access to the application data. Which of the following services will help fulfill this requirement?

A) Amazon CloudFront
B) AWS Direct Connect
C) Amazon Route 53 global DNS
D) Amazon Simple Storage Service (Amazon S3) transfer acceleration

Question 63

How is asset management on AWS easier than asset management in a physical data center?

A) AWS provides a Configuration Management Database that users can maintain.
B) AWS performs infrastructure discovery scans on the customer's behalf.
C) Amazon EC2 automatically generates an asset report and places it in the customer's specified Amazon S3 bucket.
D) Users can gather asset metadata reliably with a few API calls.

Question 64

A company has multiple AWS accounts and wants to simplify and consolidate its billing process. Which AWS service will achieve this?

A) AWS Cost and Usage Reports
B) AWS Organizations
C) AWS Cost Explorer
D) AWS Budgets

Question 65

Which managed AWS service provides real-time guidance on AWS security best practices?

A) AWS X-Ray
B) AWS Trusted Advisor
C) Amazon CloudWatch
D) AWS Systems Manager

Question 66

How does AWS charge for AWS Lambda?

A) Users bid on the maximum price they are willing to pay per hour.
B) Users choose a 1-, 3- or 5-year upfront payment term.
C) Users pay for the required permanent storage on a file system or in a database.
D) Users pay based on the number of requests and consumed compute resources.

Question 67

What function do security groups serve related to Amazon Elastic Compute Cloud (Amazon EC2) instance security?

A) Act as a virtual firewall for the Amazon EC2 instance.
B) Secure AWS user accounts with AWS Identity and Access Management (IAM) policies.
C) Provide DDoS protection with AWS Shield.
D) Use Amazon CloudFront to protect the Amazon EC2 instance.

Question 68

What are the multiple, isolated locations within an AWS Region that are connected by low-latency networks called?

A) AWS Direct Connects
B) Amazon VPCs
C) Edge locations
D) Availability Zones

Question 69

Which scenarios represent the concept of elasticity on AWS? (Choose two.)

A) Scaling the number of Amazon EC2 instances based on traffic.
B) Resizing Amazon RDS instances as business needs change.
C) Automatically directing traffic to less-utilized Amazon EC2 instances.
D) Using AWS compliance documents to accelerate the compliance process.
E) Having the ability to create and govern environments using code.

Question 70

How can a customer increase security to AWS account logons? (Choose two.)

A) Configure AWS Certificate Manager
B) Enable Multi-Factor Authentication (MFA)
C) Use Amazon Cognito to manage access
D) Configure a strong password policy
E) Enable AWS Organizations

Question 71

When comparing AWS Cloud with on-premises Total Cost of Ownership, which expenses must be considered? (Choose two.)

A) Software development
B) Project management
C) Storage hardware
D) Physical servers
E) Antivirus software license

Question 72

Which of the following provides the ability to share the cost benefits of Reserved Instances across AWS accounts?

A) AWS Cost Explorer between AWS accounts
B) Linked accounts and consolidated billing
C) Amazon Elastic Compute Cloud (Amazon EC2) Reserved Instance Utilization Report
D) Amazon EC2 Instance Usage Report between AWS accounts

Question 73

Which methods can be used to identify AWS costs by departments? (Choose two.)

A) Enable multi-factor authentication for the AWS account root user.
B) Create separate accounts for each department.
C) Use Reserved Instances whenever possible.
D) Use tags to associate each instance with a particular department.
E) Pay bills using purchase orders.

Question 74

Which of the following benefits does the AWS Compliance program provide to AWS customers? (Choose two.)

A) It verifies that hosted workloads are automatically compliant with the controls of supported compliance frameworks.
B) AWS is responsible for the maintenance of common compliance framework documentation.
C) It assures customers that AWS is maintaining physical security and data protection.
D) It ensures the use of compliance frameworks that are being used by other cloud providers.
E) It will adopt new compliance frameworks as they become relevant to customer workloads.

Question 75

Which of the following services provides on-demand access to AWS compliance reports?

A) AWS IAM
B) AWS Artifact
C) Amazon GuardDuty
D) AWS KMS

Question 76

Which type of AWS storage is ephemeral and is deleted when an instance is stopped or terminated?

A) Amazon EBS
B) Amazon EC2 instance store
C) Amazon EFS
D) Amazon S3

Question 77

What is a responsibility of AWS in the shared responsibility model?

A) Updating the network ACLs to block traffic to vulnerable ports.
B) Patching operating systems running on Amazon EC2 instances.
C) Updating the firmware on the underlying EC2 hosts.
D) Updating the security group rules to block traffic to the vulnerable ports.

Question 78

Which of the following is an AWS Well-Architected Framework design principle related to reliability?

A) Deployment to a single Availability Zone
B) Ability to recover from failure
C) Design for cost optimization
D) Perform operations as code

Question 79

Which AWS hybrid storage service enables your on-premises applications to seamlessly use AWS Cloud storage through standard file-storage protocols?

A) AWS Direct Connect
B) AWS Snowball
C) AWS Storage Gateway
D) AWS Snowball Edge

Question 80

As part of the AWS shared responsibility model, which of the following operational controls do users fully inherit from AWS?

A) Security management of data center
B) Patch management
C) Configuration management
D) User and access management