Font size
WorksheetsAWS CLF-C02 Practised Test 5
Total questions: 65
Worksheet time: 1hrs 2mins
A company needs to troubleshoot an issue on their serverless application which is composed of an API Gateway, Lambda function, and a DynamoDB database. Which service should they use to trace user requests as they travel through their entire application?
AWS X-Ray
Amazon CloudWatch
Amazon Inspector
AWS CloudTrail
Which of the following is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads?
Amazon Macie
Amazon GuardDuty
AWS Shield
AWS WAF
A space agency is using Amazon S3 to store their high-resolution satellite images and videos everyday. Which of the following should they do to minimize the upload time?
Shift to S3 Intelligent-Tiering storage class
Use the BatchWriteItem API
Enable Cross-Origin Resource Sharing (CORS)
Use the Multipart Upload API
There is an incident with your team where an S3 object was deleted using an account without the owner's knowledge. What can be done to prevent unauthorized deletion of your S3 objects?
Create access control policies so that only you can perform S3-related actions
Set up stricter IAM policies that will prevent users from deleting S3 objects
Configure MFA delete on the S3 bucket
Set your S3 buckets to private so that objects are not publicly readable/writable
A company plans to migrate their on-premises MySQL database to Amazon RDS. Which AWS service should they use for this task?
AWS Database Migration Service (AWS DMS)
AWS Schema Conversion Tool (AWS SCT)
AWS Server Migration Service
AWS Glue
Which of the following actions below will allow you to take advantage of volume discounts in AWS?
Move all of your AWS resources from multiple accounts to a single global account
Use AWS Organizations and enable the consolidated billing feature
Opt for an All upfront Convertible Reserved Instance pricing for a 3-year term
Upgrade to an AWS Enterprise support plan
Which service allows you to add powerful visual analysis feature to your applications that enables you to search, verify, and organize millions of images?
Amazon CloudSearch
Amazon Macie
Amazon SageMaker
Amazon Rekognition
Which of the following is the most cost-effective payment option when you purchase either a Standard or Convertible Reserved Instance for a 1-year term?
Partial Upfront
All Upfront
Deferred
No Upfront
Which of the following AWS Cost Management tools enable you to forecast future costs and usage of your AWS resources based on your past consumption?
AWS Pricing Calculator
AWS Cost and Usage report
AWS Cost Explorer
Amazon Forecast
What is the most secure way to provide applications temporary access to your AWS resources?
Create an IAM user with access keys and assign it to the application
Create an IAM role and have the application assume the role.
Create an IAM group that has access to the resources, and add the application there
Create an IAM policy that allows the application to access the resources, and attach the policy to the application
Which of the following will allow you to create a data warehouse in AWS for your business intelligence needs?
Amazon S3
Amazon Relational Database Service (Amazon RDS)
Amazon DynamoDB
Amazon Redshift
Which of the following is a fully managed database in AWS that can be used to store JSON documents?
Amazon DynamoDB
Amazon Aurora
Amazon ElastiCache
Amazon Redshift
A website is experiencing varying levels of traffic throughout the day and is not fully consuming server capacity all the time. Which advantage does AWS Cloud provide over traditional data centers when it comes to handling traffic load?
Durability
High availability
Elasticity
Quick capacity provisioning
Which service allows you to send, store, and receive messages between software components at any volume, without losing messages or requiring other services to be available?
Amazon Route 53
Amazon SQS
Amazon SWF
Amazon SNS
What is the best type of instance purchasing option to choose if you will run an EC2 instance for 3 months to perform a job that is uninterruptible?
On-Demand Instance
Reserved instance
Spot instance
Dedicated Instance
Which service does AWS use to notify you when AWS is experiencing events that may impact you?
AWS Health
AWS Support Center
Amazon CloudWatch
Amazon SNS
A customer in North Virginia, USA is doing some drone work and collecting environmental data. Which of the following services allows him to easily obtain terabytes of data storage for use in a space-constrained environment and allows him to transfer these data to AWS?
AWS Snowball Edge
AWS Snowmobile
AWS Snowcone
AWS Transit Gateway
Which of the following allows you to create and deploy infrastructure-as-code templates in AWS?
AWS Elastic Beanstalk
Amazon Lightsail
AWS Systems Manager
AWS CloudFormation
Which service will allow you to group together users who perform a similar function and apply function-specific privileges?
Resource group
AWS IAM
AWS IAM Role
AWS Directory Service
Which of the following should you use to automatically transfer your infrequently accessed data in your S3 bucket to a more cost-effective storage class?
Lifecycle policy
Cross-Region replication
S3 access control list
Cross-Origin Resource Sharing (CORS)
Which of the following is a valid characteristic of an IAM Group?
There's no limit to the number of groups you can have
Groups can be nested
A group can contain many users, and a user can belong to multiple groups
There is a default group that automatically includes all users in the AWS account
Which of the following is one of the benefits of migrating your systems from an on-premises data center to AWS Cloud?
Enables the customer to eliminate high IT infrastructure costs since cloud computing is absolutely free
Completely eliminate the administrative overhead of patching the guest operating system of their EC2 instances
Enables the customer to focus on business activities rather than on the heavy lifting of racking, stacking, and powering servers
Eliminates the need for the customer to implement client-side or service-side encryption for their data
A customer needs to establish a dedicated connection between their on-premises network and their AWS VPC that provides a more consistent network experience than Internet-based connections. Which of the following network services should they use?
VPC Peering
VPN Connection
AWS VPN CloudHub
AWS Direct Connect
Which of the following is not required when launching an EBS-backed EC2 instance?
Security group
Elastic IP address
EBS Root volume
VPC and subnet specification
Which of the following is the most cost-effective instance purchasing option for hosting an application which will run non-interruptible workloads for a period of three years?
Amazon EC2 Spot Instances
Amazon EC2 Convertible Reserved Instances
Amazon EC2 Standard Reserved Instances
Amazon EC2 On-Demand Instances
In the AWS Shared Responsibility Model, whose responsibility is it to patch the host operating system of an Amazon EC2 instance?
AWS
Neither AWS nor the customer
Customer
Both AWS and the customer
Which of the following is typically used to secure your VPC subnets?
Security group
Network ACL
AWS IAM
AWS Config
Which of the following are defined as global services in AWS? (Select TWO.)
AWS Identity and Access Management
AWS Batch
Amazon RDS
Amazon DynamoDB
Amazon CloudFront
Which is a machine learning-powered security service that discovers, classifies, and protects sensitive data such as personally identifiable information (PII) or intellectual property?
Amazon Rekognition
Amazon GuardDuty
Amazon Cognito
Amazon Macie
What services will help you create a highly available and scalable web app in the cloud? (Select TWO.)
Amazon CloudWatch
AWS ELB
Amazon CloudFront
Amazon EC2 Auto Scaling
Amazon AppStream 2.0
Availability Zones are physically separated by a meaningful distance from any other AZ, although all are within 100 km or 60 miles of each other. What is the primary reason why Availability Zones are set up the way they are now?
To maximize area coverage in a Region
To keep them as far apart from each other in case of a disaster
To achieve better network connectivity to users in the location
Price of the land is cheaper in those locations
What is the lowest support plan that allows an unlimited number of technical support cases to be opened?
Basic
Business
Enterprise
Developer
What is the right arrangement of the AWS Global Infrastructure components according to their geographical coverage area size, in descending order?
Regions, Edge Locations, Availability Zones
Regions, Availability Zones, Edge Locations
Availability Zones, Edge Locations, Regions
Edge Locations, Availability Zones, Regions
You have an Amazon Linux EC2 instance running for an hour and thirty minutes. How will AWS bill you in terms of usage?
You will only be billed for an hour according to the hourly billing rule
You will be billed for one hour and thirty minutes according to the hourly billing rule
You will be billed for an hour and thirty minutes according to the per-second billing rule
You will be billed for an hour and twenty-nine minutes according to the per second billing rule
What AWS service can monitor the compliance status of your AWS resources against a set of compliance guidelines?
Amazon CloudWatch
AWS IAM
AWS Artifact
AWS Config
Which AWS service allows me to patch my Windows EC2 instances without having to RDP into them?
AWS CodeDeploy
AWS Systems Manager
AWS CloudFormation
Amazon SWF
Auto-Scaling based on demand is an implementation of which AWS cloud best practice?
Driving architectures using data
Design for perfection
Implement elasticity
Design for failure
Which AWS service will allow you to serve your dynamic web content to users globally?
Amazon CloudFront
Amazon S3
Amazon Route 53
AWS Elastic Load Balancer
How is expense shifted when moving from traditional servers to the Cloud?
Variable expense is traded for capital expense
Capital expense is traded for operational expense
Trade capital expense for variable expense
Operational expense is traded for variable expense
What is the primary benefit of creating a scalable system?
Applications are able to handle varying loads of work
Application resources will cost less than usual
Applications are able to failover gracefully
Applications are not easily targeted by malicious attacks
Which of the following services connects VPCs and on-premises networks through a central hub?
AWS Client VPN
AWS Transit Gateway
VPC Peering
AWS Direct Connect
A developer needs to install their application in Docker containers. Which of the following services eliminates the need to manage containers manually?
Amazon ECS
Amazon FSx
Amazon EC2
AWS Fargate
A developer needs to collect and process large streams of data records in real-time. Which AWS service should be used for this task?
Amazon Kinesis Data Streams (KDS)
AWS CloudTrail
Amazon CloudWatch
Amazon SQS
A startup company plans to create a user management and authentication service for its customers. The users need to sign in through an external identity provider to access their web and mobile applications. Which AWS service should they use to meet this requirement?
AWS IAM
Amazon Cognito
Amazon Macie
AWS Artifact
Which of the following AWS resources is a zonal service? (Select TWO.)
Amazon EC2
Amazon S3
Amazon Route 53
Amazon EBS
AWS IAM
A company is planning to launch an Amazon EC2 instance with an attached EBS volume in a default configuration. You will be charged for your EBS storage only when your instance is in which instance state?
Running
Terminated
Stopped
Pending
The security team needs to automate security vulnerability assessments throughout their development and production environments. Which service should they use to comply with this requirement?
AWS Shield
AWS WAF
Amazon Macie
Amazon Inspector
Which of the following pricing options will automatically reduce your cost on any EC2 instance usage regardless of region, instance family, size, OS, or tenancy?
AWS Savings Plan
On-Demand Instances
Reserved Instances
Dedicated Hosts
A developer plans to build a serverless application with a key-value database. Which of the following AWS services can be used to fulfill this requirement?
Amazon DynamoDB
Amazon RDS
AWS Lambda
Amazon ECR
Which of the following provides the key concepts, design principles, and architectural best practices for designing and running workloads in the cloud?
AWS Well-Architected Framework
AWS Reference Architecture Diagrams
AWS Marketplace
Shared Security Model
Which of the following Amazon RDS features should you use to achieve high availability with automatic failover?
RDS Read Replica
DB Snapshots
RDS Performance Insights
RDS Multi-AZ Deployments
What service will allow you to safely store and automatically rotate database secrets for services such as Amazon RDS and Amazon Redshift?
AWS Secrets Manager
AWS Systems Manager Parameter Store
AWS Artifact
AWS Managed Services
Which of the following services can establish a connection from your on-premises environment and resources hosted on AWS? (Select TWO.)
AWS Direct Connect
Amazon Connect
AWS Directory Service
AWS Site-to-Site VPN
AWS Snowcone
Which of the following services protects your web applications from application-layer attacks such as SQL injection and cross-site scripting?
Network Access Control List
Security Group
AWS Web Application Firewall (WAF)
AWS Shield
Which AWS services should you use to upload SSL certificates?
AWS Systems Manager
AWS Certificate Manager (ACM)
AWS License Manager
AWS Key Management Service
Which service lets you create rules to filter web traffic based on conditions that include IP addresses, HTTP headers, or custom URIs?
AWS Trusted Advisor
AWS Web Application Firewall
Network Access Control List
Security Group
What is the main benefit of deploying instances to multiple availability zones?
Agility
Cost Optimization
Security
High Availability
A customer needs to store objects that are frequently accessed. To help the customer save costs, you must select a storage service free from retrieval charges. Which of the following S3 storage classes would meet this requirement? (Select TWO.)
S3 Standard
S3 Glacier Deep Archive
S3 Standard-IA
S3 One Zone-IA
S3 Intelligent-Tiering
Which AWS service can automatically detect a large and growing list of sensitive data types, including personally identifiable information (PII) such as names, addresses, and credit card numbers?
Amazon Rekognition
Amazon CloudSearch
Amazon Macie
Amazon SageMaker
What is the cloud computing model for services like Amazon RDS and Amazon ECS?
Infrastructure as a Service (IaaS)
Platform as a Service (PaaS)
Software as a Service (SaaS)
Function as a Service (FaaS)
The Chief Technology Officer wants to control the use of services across multiple AWS accounts using AWS Organizations. Which of the following must be used to satisfy this requirement?
Service Control Policy
Resource-based policy
AWS Systems Manager
AWS Secrets Manager
Which AWS service or feature allows users to connect with and deploy AWS services programmatically?
AWS Management Console
AWS CodePipeline
AWS Cloud9
AWS software development kits (SDKs)
A company is launching an ecommerce application that must always be available. The application will run on Amazon EC2 instances continuously for the next
12 months.
What is the MOST cost-effective instance purchasing option that meets these requirements?
Spot Instances
Savings Plans
Dedicated Hosts
On-Demand Instances
Which AWS service or tool should a company use to centrally request and track service limit increases?
Service Quotas
AWS Service Catalog
AWS Config
AWS Budgets
Which AWS service will help protect applications running on AWS from DDoS attacks?
Amazon GuardDuty
AWS WAF
AWS Shield
Amazon Inspector
