wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

AWS CLF-C02 Practised Test 5

Total questions: 65

Worksheet time: 1hrs 2mins

Name
Class
Date
1.

A company needs to troubleshoot an issue on their serverless application which is composed of an API Gateway, Lambda function, and a DynamoDB database. Which service should they use to trace user requests as they travel through their entire application?

a)

AWS X-Ray

b)

Amazon CloudWatch

c)

Amazon Inspector

d)

AWS CloudTrail

2.

Which of the following is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads?

a)

Amazon Macie

b)

Amazon GuardDuty

c)

AWS Shield

d)

AWS WAF

3.

A space agency is using Amazon S3 to store their high-resolution satellite images and videos everyday. Which of the following should they do to minimize the upload time?

a)

Shift to S3 Intelligent-Tiering storage class

b)

Use the BatchWriteItem API

c)

Enable Cross-Origin Resource Sharing (CORS)

d)

Use the Multipart Upload API

4.

There is an incident with your team where an S3 object was deleted using an account without the owner's knowledge. What can be done to prevent unauthorized deletion of your S3 objects?

a)

Create access control policies so that only you can perform S3-related actions

b)

Set up stricter IAM policies that will prevent users from deleting S3 objects

c)

Configure MFA delete on the S3 bucket

d)

Set your S3 buckets to private so that objects are not publicly readable/writable

5.

A company plans to migrate their on-premises MySQL database to Amazon RDS. Which AWS service should they use for this task?

a)

AWS Database Migration Service (AWS DMS)

b)

AWS Schema Conversion Tool (AWS SCT)

c)

AWS Server Migration Service

d)

AWS Glue

6.

Which of the following actions below will allow you to take advantage of volume discounts in AWS?

a)

Move all of your AWS resources from multiple accounts to a single global account

b)

Use AWS Organizations and enable the consolidated billing feature

c)

Opt for an All upfront Convertible Reserved Instance pricing for a 3-year term

d)

Upgrade to an AWS Enterprise support plan

7.

Which service allows you to add powerful visual analysis feature to your applications that enables you to search, verify, and organize millions of images?

a)

Amazon CloudSearch

b)

Amazon Macie

c)

Amazon SageMaker

d)

Amazon Rekognition

8.

Which of the following is the most cost-effective payment option when you purchase either a Standard or Convertible Reserved Instance for a 1-year term?

a)

Partial Upfront

b)

All Upfront

c)

Deferred

d)

No Upfront

9.

Which of the following AWS Cost Management tools enable you to forecast future costs and usage of your AWS resources based on your past consumption?

a)

AWS Pricing Calculator

b)

AWS Cost and Usage report

c)

AWS Cost Explorer

d)

Amazon Forecast

10.

What is the most secure way to provide applications temporary access to your AWS resources?

a)

Create an IAM user with access keys and assign it to the application

b)

Create an IAM role and have the application assume the role.

c)

Create an IAM group that has access to the resources, and add the application there

d)

Create an IAM policy that allows the application to access the resources, and attach the policy to the application

11.

Which of the following will allow you to create a data warehouse in AWS for your business intelligence needs?

a)

Amazon S3

b)

Amazon Relational Database Service (Amazon RDS)

c)

Amazon DynamoDB

d)

Amazon Redshift

12.

Which of the following is a fully managed database in AWS that can be used to store JSON documents?

a)

Amazon DynamoDB

b)

Amazon Aurora

c)

Amazon ElastiCache

d)

Amazon Redshift

13.

A website is experiencing varying levels of traffic throughout the day and is not fully consuming server capacity all the time. Which advantage does AWS Cloud provide over traditional data centers when it comes to handling traffic load?

a)

Durability

b)

High availability

c)

Elasticity

d)

Quick capacity provisioning

14.

Which service allows you to send, store, and receive messages between software components at any volume, without losing messages or requiring other services to be available?

a)

Amazon Route 53

b)

Amazon SQS

c)

Amazon SWF

d)

Amazon SNS

15.

What is the best type of instance purchasing option to choose if you will run an EC2 instance for 3 months to perform a job that is uninterruptible?

a)

On-Demand Instance

b)

Reserved instance

c)

Spot instance

d)

Dedicated Instance

16.

Which service does AWS use to notify you when AWS is experiencing events that may impact you?

a)

AWS Health

b)

AWS Support Center

c)

Amazon CloudWatch

d)

Amazon SNS

17.

A customer in North Virginia, USA is doing some drone work and collecting environmental data. Which of the following services allows him to easily obtain terabytes of data storage for use in a space-constrained environment and allows him to transfer these data to AWS?

a)

AWS Snowball Edge

b)

AWS Snowmobile

c)

AWS Snowcone

d)

AWS Transit Gateway

18.

Which of the following allows you to create and deploy infrastructure-as-code templates in AWS?

a)

AWS Elastic Beanstalk

b)

Amazon Lightsail

c)

AWS Systems Manager

d)

AWS CloudFormation

19.

Which service will allow you to group together users who perform a similar function and apply function-specific privileges?

a)

Resource group

b)

AWS IAM

c)

AWS IAM Role

d)

AWS Directory Service

20.

Which of the following should you use to automatically transfer your infrequently accessed data in your S3 bucket to a more cost-effective storage class?

a)

Lifecycle policy

b)

Cross-Region replication

c)

S3 access control list

d)

Cross-Origin Resource Sharing (CORS)

21.

Which of the following is a valid characteristic of an IAM Group?

a)

There's no limit to the number of groups you can have

b)

Groups can be nested

c)

A group can contain many users, and a user can belong to multiple groups

d)

There is a default group that automatically includes all users in the AWS account

22.

Which of the following is one of the benefits of migrating your systems from an on-premises data center to AWS Cloud?

a)

Enables the customer to eliminate high IT infrastructure costs since cloud computing is absolutely free

b)

Completely eliminate the administrative overhead of patching the guest operating system of their EC2 instances

c)

Enables the customer to focus on business activities rather than on the heavy lifting of racking, stacking, and powering servers

d)

Eliminates the need for the customer to implement client-side or service-side encryption for their data

23.

A customer needs to establish a dedicated connection between their on-premises network and their AWS VPC that provides a more consistent network experience than Internet-based connections. Which of the following network services should they use?

a)

VPC Peering

b)

VPN Connection

c)

AWS VPN CloudHub

d)

AWS Direct Connect

24.

Which of the following is not required when launching an EBS-backed EC2 instance?

a)

Security group

b)

Elastic IP address

c)

EBS Root volume

d)

VPC and subnet specification

25.

Which of the following is the most cost-effective instance purchasing option for hosting an application which will run non-interruptible workloads for a period of three years?

a)

Amazon EC2 Spot Instances

b)

Amazon EC2 Convertible Reserved Instances

c)

Amazon EC2 Standard Reserved Instances

d)

Amazon EC2 On-Demand Instances

26.

In the AWS Shared Responsibility Model, whose responsibility is it to patch the host operating system of an Amazon EC2 instance?

a)

AWS

b)

Neither AWS nor the customer

c)

Customer

d)

Both AWS and the customer

27.

Which of the following is typically used to secure your VPC subnets?

a)

Security group

b)

Network ACL

c)

AWS IAM

d)

AWS Config

28.

Which of the following are defined as global services in AWS? (Select TWO.)

a)

AWS Identity and Access Management

b)

AWS Batch

c)

Amazon RDS

d)

Amazon DynamoDB

e)

Amazon CloudFront

29.

Which is a machine learning-powered security service that discovers, classifies, and protects sensitive data such as personally identifiable information (PII) or intellectual property?

a)

Amazon Rekognition

b)

Amazon GuardDuty

c)

Amazon Cognito

d)

Amazon Macie

30.

What services will help you create a highly available and scalable web app in the cloud? (Select TWO.)

a)

Amazon CloudWatch

b)

AWS ELB

c)

Amazon CloudFront

d)

Amazon EC2 Auto Scaling

e)

Amazon AppStream 2.0

31.

Availability Zones are physically separated by a meaningful distance from any other AZ, although all are within 100 km or 60 miles of each other. What is the primary reason why Availability Zones are set up the way they are now?

a)

To maximize area coverage in a Region

b)

To keep them as far apart from each other in case of a disaster

c)

To achieve better network connectivity to users in the location

d)

Price of the land is cheaper in those locations

32.

What is the lowest support plan that allows an unlimited number of technical support cases to be opened?

a)

Basic

b)

Business

c)

Enterprise

d)

Developer

33.

What is the right arrangement of the AWS Global Infrastructure components according to their geographical coverage area size, in descending order?

a)

Regions, Edge Locations, Availability Zones

b)

Regions, Availability Zones, Edge Locations

c)

Availability Zones, Edge Locations, Regions

d)

Edge Locations, Availability Zones, Regions

34.

You have an Amazon Linux EC2 instance running for an hour and thirty minutes. How will AWS bill you in terms of usage?

a)

You will only be billed for an hour according to the hourly billing rule

b)

You will be billed for one hour and thirty minutes according to the hourly billing rule

c)

You will be billed for an hour and thirty minutes according to the per-second billing rule

d)

You will be billed for an hour and twenty-nine minutes according to the per second billing rule

35.

What AWS service can monitor the compliance status of your AWS resources against a set of compliance guidelines?

a)

Amazon CloudWatch

b)

AWS IAM

c)

AWS Artifact

d)

AWS Config

36.

Which AWS service allows me to patch my Windows EC2 instances without having to RDP into them?

a)

AWS CodeDeploy

b)

AWS Systems Manager

c)

AWS CloudFormation

d)

Amazon SWF

37.

Auto-Scaling based on demand is an implementation of which AWS cloud best practice?

a)

Driving architectures using data

b)

Design for perfection

c)

Implement elasticity

d)

Design for failure

38.

Which AWS service will allow you to serve your dynamic web content to users globally?

a)

Amazon CloudFront

b)

Amazon S3

c)

Amazon Route 53

d)

AWS Elastic Load Balancer

39.

How is expense shifted when moving from traditional servers to the Cloud?

a)

Variable expense is traded for capital expense

b)

Capital expense is traded for operational expense

c)

Trade capital expense for variable expense

d)

Operational expense is traded for variable expense

40.

What is the primary benefit of creating a scalable system?

a)

Applications are able to handle varying loads of work

b)

Application resources will cost less than usual

c)

Applications are able to failover gracefully

d)

Applications are not easily targeted by malicious attacks

41.

Which of the following services connects VPCs and on-premises networks through a central hub?

a)

AWS Client VPN

b)

AWS Transit Gateway

c)

VPC Peering

d)

AWS Direct Connect

42.

A developer needs to install their application in Docker containers. Which of the following services eliminates the need to manage containers manually?

a)

Amazon ECS

b)

Amazon FSx

c)

Amazon EC2

d)

AWS Fargate

43.

A developer needs to collect and process large streams of data records in real-time. Which AWS service should be used for this task?

a)

Amazon Kinesis Data Streams (KDS)

b)

AWS CloudTrail

c)

Amazon CloudWatch

d)

Amazon SQS

44.

A startup company plans to create a user management and authentication service for its customers. The users need to sign in through an external identity provider to access their web and mobile applications. Which AWS service should they use to meet this requirement?

a)

AWS IAM

b)

Amazon Cognito

c)

Amazon Macie

d)

AWS Artifact

45.

Which of the following AWS resources is a zonal service? (Select TWO.)

a)

Amazon EC2

b)

Amazon S3

c)

Amazon Route 53

d)

Amazon EBS

e)

AWS IAM

46.

A company is planning to launch an Amazon EC2 instance with an attached EBS volume in a default configuration. You will be charged for your EBS storage only when your instance is in which instance state?

a)

Running

b)

Terminated

c)

Stopped

d)

Pending

47.

The security team needs to automate security vulnerability assessments throughout their development and production environments. Which service should they use to comply with this requirement?

a)

AWS Shield

b)

AWS WAF

c)

Amazon Macie

d)

Amazon Inspector

48.

Which of the following pricing options will automatically reduce your cost on any EC2 instance usage regardless of region, instance family, size, OS, or tenancy?

a)

AWS Savings Plan

b)

On-Demand Instances

c)

Reserved Instances

d)

Dedicated Hosts

49.

A developer plans to build a serverless application with a key-value database. Which of the following AWS services can be used to fulfill this requirement?

a)

Amazon DynamoDB

b)

Amazon RDS

c)

AWS Lambda

d)

Amazon ECR

50.

Which of the following provides the key concepts, design principles, and architectural best practices for designing and running workloads in the cloud?

a)

AWS Well-Architected Framework

b)

AWS Reference Architecture Diagrams

c)

AWS Marketplace

d)

Shared Security Model

51.

Which of the following Amazon RDS features should you use to achieve high availability with automatic failover?

a)

RDS Read Replica

b)

DB Snapshots

c)

RDS Performance Insights

d)

RDS Multi-AZ Deployments

52.

What service will allow you to safely store and automatically rotate database secrets for services such as Amazon RDS and Amazon Redshift?

a)

AWS Secrets Manager

b)

AWS Systems Manager Parameter Store

c)

AWS Artifact

d)

AWS Managed Services

53.

Which of the following services can establish a connection from your on-premises environment and resources hosted on AWS? (Select TWO.)

a)

AWS Direct Connect

b)

Amazon Connect

c)

AWS Directory Service

d)

AWS Site-to-Site VPN

e)

AWS Snowcone

54.

Which of the following services protects your web applications from application-layer attacks such as SQL injection and cross-site scripting?

a)

Network Access Control List

b)

Security Group

c)

AWS Web Application Firewall (WAF)

d)

AWS Shield

55.

Which AWS services should you use to upload SSL certificates?

a)

AWS Systems Manager

b)

AWS Certificate Manager (ACM)

c)

AWS License Manager

d)

AWS Key Management Service

56.

Which service lets you create rules to filter web traffic based on conditions that include IP addresses, HTTP headers, or custom URIs?

a)

AWS Trusted Advisor

b)

AWS Web Application Firewall

c)

Network Access Control List

d)

Security Group

57.

What is the main benefit of deploying instances to multiple availability zones?

a)

Agility

b)

Cost Optimization

c)

Security

d)

High Availability

58.

A customer needs to store objects that are frequently accessed. To help the customer save costs, you must select a storage service free from retrieval charges. Which of the following S3 storage classes would meet this requirement? (Select TWO.)

a)

S3 Standard

b)

S3 Glacier Deep Archive

c)

S3 Standard-IA

d)

S3 One Zone-IA

e)

S3 Intelligent-Tiering

59.

Which AWS service can automatically detect a large and growing list of sensitive data types, including personally identifiable information (PII) such as names, addresses, and credit card numbers?

a)

Amazon Rekognition

b)

Amazon CloudSearch

c)

Amazon Macie

d)

Amazon SageMaker

60.

What is the cloud computing model for services like Amazon RDS and Amazon ECS?

a)

Infrastructure as a Service (IaaS)

b)

Platform as a Service (PaaS)

c)

Software as a Service (SaaS)

d)

Function as a Service (FaaS)

61.

The Chief Technology Officer wants to control the use of services across multiple AWS accounts using AWS Organizations. Which of the following must be used to satisfy this requirement?

a)

Service Control Policy

b)

Resource-based policy

c)

AWS Systems Manager

d)

AWS Secrets Manager

62.

Which AWS service or feature allows users to connect with and deploy AWS services programmatically?

a)

AWS Management Console

b)

AWS CodePipeline

c)

AWS Cloud9

d)

AWS software development kits (SDKs)

63.

A company is launching an ecommerce application that must always be available. The application will run on Amazon EC2 instances continuously for the next
12 months.
What is the MOST cost-effective instance purchasing option that meets these requirements?

a)

Spot Instances

b)

Savings Plans

c)

Dedicated Hosts

d)

On-Demand Instances

64.

Which AWS service or tool should a company use to centrally request and track service limit increases?

a)

Service Quotas

b)

AWS Service Catalog

c)

AWS Config

d)

AWS Budgets

65.

Which AWS service will help protect applications running on AWS from DDoS attacks?

a)

Amazon GuardDuty

b)

AWS WAF

c)

AWS Shield

d)

Amazon Inspector