Question 1

Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?

Accepted Answer

A)  Vertical scaling 
B)  Manual failure recovery 
C)  Testing recovery procedures 
D)  Changing infrastructure manually

Question 2

A director has been tasked with investigating hybrid cloud architecture. The company currently accesses AWS over the public internet. Which service will facilitate private hybrid connectivity?

Accepted Answer

A)  Amazon Virtual Private Cloud (Amazon VP
C)  NAT Gateway 
B)  AWS Direct Connect 
C)  Amazon Simple Storage Service (Amazon S3) Transfer Acceleration 
D)  AWS Web Application Firewall (AWS WAF)

Question 3

A company needs an Amazon S3 bucket that cannot have any public objects due to compliance requirements. How can this be accomplished?

Accepted Answer

A)  Enable S3 Block Public Access from the AWS Management Console. 
B)  Hold a team meeting to discuss the importance if only uploading private S3 objects. 
C)  Require all S3 objects to be manually approved before uploading. 
D)  Create a service to monitor all S3 uploads and remove any public uploads.

Question 4

When building a cloud Total Cost of Ownership (TCO) model, which cost elements should be considered for workloads running on AWS? (Choose three.)

Accepted Answer

A)  Compute costs 
B)  Facilities costs 
C)  Storage costs 
D)  Data transfer costs 
E)  Network infrastructure costs
F) Hardware lifecycle costs

Question 5

Which of the following is a correct relationship between regions, Availability Zones, and edge locations?

Accepted Answer

A)  Data centers contain regions. 
B)  Regions contain Availability Zones. 
C)  Availability Zones contain edge locations. 
D)  Edge locations contain regions.

Question 6

How can AWS enable a company to control expenses as an application's usage changes unpredictably?

Accepted Answer

A)  AWS will refund the cost difference if a customer moves to larger servers. 
B)  The application can be built to scale up or down automatically as resources are needed 
C)  Spot instances will automatically be used if the price is lower than on-demand instances. 
D)  Amazon CloudWatch will automatically predict what resources are needed.

Question 7

Which features and benefits does the AWS Organizations service provide? (Choose two.)

Accepted Answer

A)  Establishing real-time communications between members of an internal team 
B)  Facilitating the use of NoSQL databases 
C)  Providing automated security checks 
D)  Implementing consolidated billing 
E)  Enforcing the governance of AWS accounts

Question 8

One benefit of On-Demand Amazon Elastic Compute Cloud (Amazon EC2) pricing is:

Accepted Answer

A)  the ability to bid for a lower hourly cost. 
B)  paying a daily rate regardless of time used. 
C)  paying only for time used. 
D)  pre-paying for instances and paying a lower hourly rate.

Question 9

Which AWS service or feature requires an internet service provider (ISP) and a colocation facility to be implemented?

Accepted Answer

A)  AWS VPN 
B)  Amazon Connect 
C)  AWS Direct Connect 
D)  Internet gateway

Question 10

Which of the following are categories of AWS Trusted Advisor? (Choose two.)

Accepted Answer

A)  Fault Tolerance 
B)  Instance Usage 
C)  Infrastructure 
D)  Performance 
E)  Storage Capacity

Question 11

A company has a managed IAM policy that does not grant the necessary permissions for users to accomplish required tasks. How can this be resolved?

Accepted Answer

A)  Enable AWS Shield Advanced 
B)  Create a custom IAM policy 
C)  Use a third-party web application firewall (WAF) managed rule from the AWS Marketplace 
D)  Use AWS Key Management Service (AWS KMS) to create a customer-managed key

Question 12

Which AWS service should a cloud practitioner use to identify security vulnerabilities of an AWS account?

Accepted Answer

A)  AWS Secrets Manager 
B)  Amazon Cognito 
C)  Amazon Macie 
D)  AWS Trusted Advisor

Question 13

What is a benefit of consolidated billing for AWS accounts?

Accepted Answer

A)  Access to AWS Personal Health Dashboard 
B)  Combined usage volume discounts 
C)  Improved account security 
D)  Centralized AWS IAM

Question 14

Which AWS service provides a simple and scalable shared file storage solution for use with Linux-based AWS and on-premises servers?

Accepted Answer

A)  Amazon S3 
B)  Amazon Glacier 
C)  Amazon EBS 
D)  Amazon EFS

Question 15

Which AWS service provides inbound and outbound network ACLs to harden external connectivity to Amazon EC2?

Accepted Answer

A)  AWS IAM 
B)  Amazon Connect 
C)  Amazon VPC 
D)  Amazon API Gateway

Question 16

A company is launching a new application in the AWS Cloud. The application will run on an Amazon EC2 instance. More EC2 instances will be needed when the workload increases. Which AWS service or tool can the company use to launch the number of EC2 instances that will be needed to handle the workload?

Accepted Answer

A)  Elastic Load Balancing 
B)  Amazon EC2 Auto Scaling 
C)  AWS App2Container (A2
C)  
D)  AWS Systems Manager

Question 17

Which of the following AWS services can be used to run a self-managed database?

Accepted Answer

A)  Amazon Route 53 
B)  AWS X-Ray 
C)  AWS Snowmobile 
D)  Amazon Elastic Compute Cloud (Amazon EC2)

Question 18

What are the benefits of using the AWS Cloud for companies with customers in many countries around the world? (Choose two.)

Accepted Answer

A)  Companies can deploy applications in multiple AWS Regions to reduce latency. 
B)  Amazon Translate automatically translates third-party website interfaces into multiple languages. 
C)  Amazon CloudFront has multiple edge locations around the world to reduce latency. 
D)  Amazon Comprehend allows users to build applications that can respond to user requests in many languages. 
E)  Elastic Load Balancing can distribute application web traffic to multiple AWS Regions around the world, which reduces latency.

Question 19

A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS. Where can the company purchase the security solution?

Accepted Answer

A)  AWS Partner Solutions Finder 
B)  AWS Support Center 
C)  AWS Management Console 
D)  AWS Marketplace

Question 20

AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Choose two.)

Accepted Answer

A)  Implementing Amazon Rekognition 
B)  Using AWS Shield-protected resources 
C)  Blocking access with Security Groups 
D)  Using Multi-Factor Authentication (MF
A)  
E)  Enforcing password strength and expiration

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)