wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

CLF-C01 - Quiz 4

Total questions: 60

Worksheet time: 3600secs

Name
Class
Date
1.

Which AWS service can a company use to store and manage Docker images?

a)

Amazon DynamoDB

b)

Amazon Kinesis Data Streams

c)

Amazon Elastic Container Registry (Amazon ECR)

d)

Amazon Elastic File System (Amazon EFS)

2.

A company needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances. The report also must identify operating system vulnerabilities on those instances.

Which AWS service or feature should the company use to meet this requirement?

a)

AWS Trusted Advisor

b)

Security groups

c)

Amazon Macie

d)

Amazon Inspector

3.

A global company is building a simple time-tracking mobile app. The app needs to operate globally and must store collected data in a database. Data must be accessible from the AWS Region that is closest to the user.

What should the company do to meet these data storage requirements with the LEAST amount of operational overhead?

a)

Use Amazon EC2 in multiple Regions to host separate databases

b)

Use Amazon RDS cross-Region replication

c)

Use Amazon DynamoDB global tables

d)

Use AWS Database Migration Service (AWS DMS)

4.

Which of the following are economic advantages of the AWS Cloud? (Choose two.)

a)

Increased workforce productivity

b)

Decreased need to encrypt user data

c)

Manual compliance audits

d)

Simplified total cost of ownership (TCO) accounting

e)

Faster product launches

5.

Which controls does the customer fully inherit from AWS in the AWS shared responsibility model?

a)

Patch management controls

b)

Awareness and training controls

c)

Physical and environmental controls

d)

Configuration management controls

6.

Which task is a customer's responsibility, according to the AWS shared responsibility model?

a)

Management of the guest operating systems

b)

Maintenance of the configuration of infrastructure devices

c)

Management of the host operating systems and virtualization

d)

Maintenance of the software that powers Availability Zones

7.

A company needs to deliver new website features quickly in an iterative manner to minimize the time to market. Which AWS Cloud concept does this requirement represent?

a)

Reliability

b)

Elasticity

c)

Agility

d)

High availability

8.

A company wants to increase its ability to recover its infrastructure in the case of a natural disaster. Which pillar of the AWS Well-Architected Framework does this ability represent?

a)

Cost optimization

b)

Performance efficiency

c)

Reliability

d)

Security

9.

Which AWS service tracks API calls and user activity?

a)

AWS Organizations

b)

AWS Config

c)

Amazon CloudWatch

d)

AWS CloudTrail

10.

Which AWS service, feature, or tool uses machine learning to continuously monitor cost and usage for unusual cloud spending?

a)

Amazon Lookout for Metrics

b)

AWS Budgets

c)

Amazon CloudWatch

d)

AWS Cost Anomaly Detection

11.

A company deployed an application on an Amazon EC2 instance. The application ran as expected for 6 months but in the past week, users have reported latency issues. A system administrator found that the CPU utilization was at 100% during business hours. The company wants a scalable solution to meet demand. Which AWS service or feature should the company use to handle the load for its application during periods of high demand?

a)

Auto Scaling groups

b)

AWS Global Accelerator

c)

Amazon Route 53

d)

An Elastic IP address

12.

A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS. Where can the company purchase the security solution?

a)

AWS Partner Solutions Finder

b)

AWS Support Center

c)

AWS Management Console

d)

AWS Marketplace

13.

A company is generating large sets of critical data in its on-premises data center. The company needs to securely transfer the data to AWS for processing. These transfers must occur daily over a dedicated connection.

Which AWS service should the company use to meet these requirements?

a)

AWS Backup

b)

AWS DataSync

c)

AWS Direct Connect

d)

AWS Snowball

14.

A company wants to run production workloads on AWS. The company wants access to technical support from engineers 24 hours a day, 7 days a week. The company also wants access to the AWS Health API and contextual architectural guidance for business use cases. The company has a strong IT support team and does not need concierge support. Which AWS Support plan will meet these requirements at the LOWEST cost?

a)

AWS Basic Support

b)

AWS Developer Support

c)

AWS Business Support

d)

AWS Enterprise Support

15.

Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data?

a)

Amazon Athena

b)

AWS Glue

c)

Amazon S3

d)

AWS Snowball Edge

16.

Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)

a)

Control access to AWS service APIs and to other specific resources.

b)

Provide intelligent threat detection and continuous monitoring.

c)

Protect the AWS environment using multi-factor authentication (MFA).

d)

Grant users access to AWS datacenters.

e)

Provide firewall protection for applications from common web attacks.

17.

Which of the following are shared controls that apply to both AWS and the customer, according to the AWS shared responsibility model? (Choose two.)

a)

A. Resource configuration management

b)

Network data integrity

c)

Employee awareness and training

d)

Physical and environmental security

e)

Replacement and disposal of disk drives

18.

What information is found on an AWS Identity and Access Management (IAM) credential report? (Choose two.)

a)

The date and time when an IAM user's password was last used to sign in to the AWS Management Console.

b)

The type of multi-factor authentication (MFA) device assigned to an IAM user.

c)

The User-Agent browser identifier for each IAM user currently logged in.

d)

Whether multi-factor authentication (MFA) has been enabled for an IAM user.

e)

The number of incorrect login attempts by each IAM user in the previous 30 days.

19.

What is the LEAST expensive AWS Support plan that contains a full set of AWS Trusted Advisor best practice checks?

a)

AWS Enterprise Support

b)

AWS Business Support

c)

AWS Developer Support

d)

AWS Basic Support

20.

Which AWS service provides domain registration, DNS routing, and service health checks?

a)

AWS Direct Connect

b)

Amazon Route 53

c)

Amazon CloudFront

d)

Amazon API Gateway

21.

A bank needs to store recordings of calls made to its contact center for 6 years. The recordings must be accessible within 48 hours from the time they are requested. Which AWS service will provide a secure and cost-effective solution for retaining these files?

a)

Amazon DynamoDB

b)

Amazon S3 Glacier

c)

Amazon Connect

d)

Amazon ElastiCache

22.

Which AWS service should be used to migrate a company's on-premises MySQL database to Amazon RDS?

a)

AWS Direct Connect

b)

AWS Server Migration Service (AWS SMS)

c)

AWS Database Migration Service (AWS DMS)

d)

AWS Schema Conversion Tool (AWS SCT)

23.

Which benefits does a company gain when the company moves from on-premises IT architecture to the AWS Cloud? (Choose two.)

a)

Reduced or eliminated tasks for hardware troubleshooting, capacity planning, and procurement

b)

Elimination of the need for trained IT staff

c)

Automatic security configuration of all applications that are migrated to the cloud

d)

Elimination of the need for disaster recovery planning

e)

Faster deployment of new features and applications

24.

Which of the following is a benefit of decoupling an AWS Cloud architecture?

a)

Reduced latency

b)

Ability to upgrade components independently

c)

Decreased costs

d)

Fewer components to manage

25.

Which task is the responsibility of the customer according to the AWS shared responsibility model?

a)

Maintain the security of the hardware that runs Amazon EC2 instances.

b)

Patch the guest operating system of Amazon EC2 instances.

c)

Protect the security of the AWS global infrastructure.

d)

Patch Amazon RDS software.

26.

Which AWS Organizations feature can be used to track charges across multiple accounts and report the combined cost?

a)

Service control policies (SCPs)

b)

Cost Explorer

c)

Consolidated billing

d)

AWS Identity and Access Management (IAM)

27.

Which of the following is a cloud benefit that AWS offers to its users?

a)

The ability to configure AWS data center hypervisors

b)

The ability to purchase hardware in advance of increased traffic

c)

The ability to deploy to AWS on a global scale

d)

Compliance audits for user IT environments

28.

An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company's direct responsibility?

a)

Cost of application software licenses

b)

Cost of the hardware infrastructure on AWS

c)

Cost of power for the AWS servers

d)

Cost of physical security for the AWS data center

29.

What are the five pillars of the AWS Well-Architected Framework?

a)

Encryption, documentation, speed, hybrid design, and cost optimization

b)

Containerization, cost margins, globalization, marketplace, and developer operations

c)

Network, compute, storage, security, and developer operations

d)

Operational excellence, reliability, performance efficiency, security, and cost optimization

30.

A company accepts enrollment applications on handwritten paper forms. The company uses a manual process to enter the form data into its backend systems. The company wants to automate the process by scanning the forms and capturing the enrollment data from scanned PDF files. Which AWS service should the company use to build this process?

a)

Amazon Rekognition

b)

Amazon Textract

c)

Amazon Transcribe

d)

Amazon Comprehend

31.

Which AWS service should a company use to organize, characterize, and search large numbers of images?

a)

Amazon Transcribe

b)

Amazon Rekognition

c)

Amazon Aurora

d)

Amazon QuickSight

32.

An ecommerce company wants to use Amazon EC2 Auto Scaling to add and remove EC2 instances based on CPU utilization. Which AWS service or feature can initiate an Amazon EC2 Auto Scaling action to achieve this goal?

a)

Amazon Simple Queue Service (Amazon SQS)

b)

Amazon Simple Notification Service (Amazon SNS)

c)

AWS Systems Manager

d)

Amazon CloudWatch alarm

33.

A company wants to host a private version control system for its application code in the AWS Cloud. Which AWS service should the company use to meet this requirement?

a)

AWS CodePipeline

b)

AWS CodeStar

c)

AWS CodeCommit

d)

AWS CodeDeploy

34.

Which AWS service or tool can a company set up to send notifications that a custom spending threshold has been reached or exceeded?

a)

AWS Budgets

b)

AWS Trusted Advisor

c)

AWS CloudTrail

d)

AWS Support

35.

Which AWS service is used to host static websites?

a)

Amazon S3

b)

Amazon Elastic Block Store (Amazon EBS)

c)

AWS CloudFormation

d)

Amazon Elastic File System (Amazon EFS)

36.

Which AWS service contains built-in engines to protect web applications that run in the cloud from SQL injection attacks and cross-site scripting?

a)

AWS WAF

b)

AWS Shield Advanced

c)

Amazon GuardDuty

d)

Amazon Detective

37.

A company owns per-core software licenses. Which Amazon EC2 instance purchasing option must the company use for this license type?

a)

Reserved Instances

b)

Dedicated Hosts

c)

Spot Instances

d)

Dedicated Instances

38.

A company needs to set up user authentication for a new application. Users must be able to sign in directly with a username and password, or through a third-party provider. Which AWS service should the company use to meet these requirements?

a)

AWS Single Sign-On

b)

AWS Signer

c)

Amazon Cognito

d)

AWS Directory Service

39.

A company's IT team is managing MySQL database server clusters. The IT team has to patch the database and take backup snapshots of the data in the clusters. The company wants to move this workload to AWS so that these tasks will be completed automatically. What should the company do to meet these requirements?

a)

Deploy MySQL database server clusters on Amazon EC2 instances.

b)

Use Amazon RDS with a MySQL database.

c)

Use an AWS CloudFormation template to deploy MySQL database servers on Amazon EC2 instances.

d)

Migrate all the MySQL database data to Amazon S3.

40.

What is the primary use case for Amazon GuardDuty?

a)

Prevention of DDoS attacks

b)

Protection against SQL injection attacks

c)

Automatic monitoring for threats to AWS workloads

d)

Automatic provisioning of AWS resources

41.

Which statements explain the business value of migration to the AWS Cloud? (Choose two.)

a)

The migration of enterprise applications to the AWS Cloud makes these applications automatically available on mobile devices.

b)

AWS availability and security provide the ability to improve service level agreements (SLAs) while reducing risk and unplanned downtime.

c)

Companies that migrate to the AWS Cloud eliminate the need to plan for high availability and disaster recovery.

d)

Companies that migrate to the AWS Cloud reduce IT costs related to infrastructure, freeing budget for reinvestment in other areas.

e)

Applications are modernized because migration to the AWS Cloud requires companies to rearchitect and rewrite all enterprise applications.

42.

A company needs to identify personally identifiable information (PII), such as credit card numbers, from data that is stored in Amazon S3. Which AWS service should the company use to meet this requirement?

a)

Amazon Inspector

b)

AWS Shield

c)

Amazon GuardDuty

d)

Amazon Macie

43.

Which AWS services or tools are designed to protect a workload from SQL injections, cross-site scripting, and DDoS attacks? (Choose two.)

a)

VPC endpoint

b)

Virtual private gateway

c)

AWS Shield Standard

d)

AWS Config

e)

AWS WAF

44.

A company wants to forecast future costs and usage of AWS resources based on past consumption. Which AWS service or tool will provide this forecast?

a)

AWS Cost and Usage Report

b)

Amazon Forecast

c)

AWS Pricing Calculator

d)

Cost Explorer

45.

Which AWS services use cloud-native storage that provides replication across multiple Availability Zones by default? (Choose two.)

a)

Amazon ElastiCache

b)

Amazon RDS for Oracle

c)

Amazon Neptune

d)

Amazon DocumentDB (with MongoDB compatibility)

e)

Amazon Redshift

46.

Which AWS services are serverless? (Choose two.)

a)

AWS Fargate

b)

Amazon Managed Streaming for Apache Kafka

c)

Amazon EMR

d)

Amazon S3

e)

Amazon EC2

47.

Which task is the responsibility of AWS, according to the AWS shared responsibility model?

a)

Apply guest operating system patches to Amazon EC2 instances.

b)

Provide monitoring of human resources information management (HRIM) systems.

c)

Perform automated backups of Amazon RDS instances.

d)

Optimize the costs of running AWS services.

48.

A company needs to deploy a PostgreSQL database into Amazon RDS. The database must be highly available and fault tolerant. Which AWS solution should the company use to meet these requirements?

a)

Amazon RDS with a single Availability Zone

b)

Amazon RDS snapshots

c)

Amazon RDS with multiple Availability Zones

d)

AWS Database Migration Service (AWS DMS)

49.

A company wants to add facial identification to its user verification process on an application. Which AWS service should the company use to meet this requirement?

a)

Amazon Polly

b)

Amazon Transcribe

c)

Amazon Lex

d)

Amazon Rekognition

50.

A company wants the ability to quickly upload its applications to the AWS Cloud without needing to provision underlying resources. Which AWS service will meet these requirements?

a)

AWS CloudFormation

b)

AWS Elastic Beanstalk

c)

AWS CodeDeploy

d)

AWS CodeCommit

51.

Which AWS service monitors CPU utilization on Amazon EC2 instances?

a)

AWS CloudTrail

b)

Amazon Inspector

c)

AWS Config

d)

Amazon CloudWatch

52.

A company needs to label its AWS resources so that the company can categorize and track costs. What should the company do to meet this requirement?

a)

Use cost allocation tags.

b)

Use AWS Identity and Access Management (IAM).

c)

Use AWS Organizations.

d)

Use the AWS Cost Management coverage report.

53.

A company wants its employees to have access to virtual desktop infrastructure to securely access company-provided desktops through the employees' personal devices. Which AWS service should the company use to meet these requirements?

a)

Amazon AppStream 2.0

b)

AWS AppSync

c)

Amazon FSx for Windows File Server

d)

Amazon WorkSpaces

54.

Which task can a company complete by using AWS Organizations?

a)

Track application deployment statuses globally

b)

Remove unused and underutilized AWS resources across all accounts.

c)

Activate DDoS protection across all accounts.

d)

Share pre-purchased Amazon EC2 resources across accounts.

55.

A user has been granted permission to change their own IAM user password. Which AWS services can the user use to change the password? (Choose two.)

a)

AWS Command Line Interface (AWS CLI)

b)

AWS Key Management Service (AWS KMS)

c)

AWS Management Console

d)

AWS Resource Access Manager (AWS RAM)

e)

AWS Secrets Manager

56.

A company needs to run an application on Amazon EC2 instances. The instances cannot be interrupted at any time. The company needs an instance purchasing option that requires no long-term commitment or upfront payment. Which instance purchasing option will meet these requirements MOST cost-effectively?

a)

On-Demand Instances

b)

Spot Instances

c)

Dedicated Hosts

d)

Reserved Instances

57.

A company uses Amazon EC2 instances to run its web application. The company uses On-Demand Instances and Spot Instances. The company needs to visualize its monthly spending on both types of instances. Which AWS service or feature will meet this requirement?

a)

AWS Cost Explorer

b)

AWS Budgets

c)

Amazon CloudWatch

d)

AWS Cost Categories

58.

Which task can a user complete by using AWS Identity and Access Management (IAM)?

a)

Validate JSON syntax from an application configuration file.

b)

Analyze logs from an Amazon API Gateway call.

c)

Filter traffic to or from an Amazon EC2 instance.

d)

Grant permissions to applications that run on Amazon EC2 instances.

59.

A company needs to generate reports for business intelligence and operational analytics on petabytes of semi-structured and structured data. These reports are produced from standard SQL queries on data that is in an Amazon S3 data lake. Which AWS service provides the ability to analyze this data?

a)

Amazon RDS

b)

Amazon Neptune

c)

Amazon DynamoDB

d)

Amazon Redshift

60.

A system automatically recovers from failure when a company launches its workload on the AWS Cloud services platform. Which pillar of the AWS Well-Architected Framework does this situation demonstrate?

a)

Cost optimization

b)

Operational excellence

c)

Performance efficiency

d)

Reliability