Font size
WorksheetsAWS CLF-C02 Exam Test
Total questions: 65
Worksheet time: 1hrs 7mins
Which of the following security group rules are valid? (Select TWO.)
Inbound HTTP rule with security group ID as source
Inbound TCP rule with instance ID as source
Inbound RDP rule with an address range as source
Outbound HTTPS rule with hostname as destination
Outbound MYSQL rule with IP address as source
You are tasked to simplify the migration of your databases from your on-premises server to AWS. Which service fits best for this purpose?
Server Migration Service
AWS Database Migration Service
AWS Snowball
AWS Snowmobile
You are planning to create point-in-time backups of your Amazon EBS volumes. Which of the following are correct statements? (Select TWO.)
You can create point-in-time backups through EBS snapshots
You can take EBS backups by creating Amazon Machine Images (AMIs)
Backing up the same EBS volume will create a new back up of the whole volume
EBS backups are stored durably in Amazon S3
Instances will have to be stopped first to start the EBS backup
Which AWS service lets you provision either Windows or Linux desktops in just a few minutes and can scale easily to provide thousands of desktops to workers?
AWS Organizations
AWS Systems Manager
Amazon WorkSpaces
AWS Cloud9
Which service in AWS is best used for data analytics and data warehousing?
Amazon Redshift
Amazon Aurora
Amazon DynamoDB
Amazon S3
Which AWS service lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources?
Internet gateway
Amazon VPC
Amazon EC2
AWS Elastic Beanstalk
What service should you use in order to add user sign-up, sign-in, and access control to your mobile app with a feature that supports sign-in with social identity providers such as Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0?
AWS Single Sign-On (SSO)
AWS Identity and Access Management (IAM)
AWS Directory Service
Amazon Cognito
Which of the following is a continuous delivery service that you should use to automate your release pipelines for fast and reliable application and infrastructure updates?
AWS CodeDeploy
Amazon Data Pipeline
AWS CodePipeline
AWS CodeCommit
A company is planning to deploy its high-frequency trading (HFT) application which will store constantly changing financial data in AWS and require low latency access. Which AWS services below should you use? (Select TWO.)
Amazon EFS
Amazon S3 Glacier Instant Retrieval
AWS Snowball Edge
Amazon RDS
Amazon S3
Which service in AWS allows you to host your own Puppet Enterprise infrastructure?
AWS Opsworks
AWS CloudFormation
AWS Elastic Beanstalk
AWS Service Catalog
Which type of Elastic Load Balancer allows you to forward the incoming request to a target group with a Lambda function as a target?
Network Load Balancer
Application Load Balancer
Gateway Load Balancer
Classic Load Balancer
A customer needs to identify the IAM user who terminated their production EC2 instance in AWS. Which service should they use in this situation?
Amazon CloudWatch
Amazon AppStream 2.0
AWS CloudTrail
AWS Systems Manager
Which type of EC2 instance is the most suitable and cost-effective if the customer will be running mission-critical workloads continuously for a whole year?
Reserved Instances
On-Demand
Dedicated Instance Types
Spot Instance
A customer wants to run their application in the cloud via EC2 instances. Their code is currently stored in Github. Which tool could they use to launch their code onto EC2 instances?
AWS CodeCommit
AWS CloudFormation
AWS CodeDeploy
Amazon Kinesis
You wish to host a static website of your own in AWS at a low cost. Which service should be used for this purpose?
Amazon S3 Infrequent Access
Amazon EC2
Amazon Elastic Load Balancer
Amazon S3 Standard
How can you easily and securely copy your infrastructure to another AWS Region?
Create a golden AMI which you can use to redeploy your instances to the new region
Create a CloudFormation template and deploy it in the new region
Take an EBS snapshot on all your storage devices and copy them to the new region
Enable RDS Multi-AZ to have a similar database instance running in the new region
Which service will allow you to quickly deploy your application into the AWS Cloud without having to build or launch the individual resources yourself?
Amazon EBS
AWS Elastic Beanstalk
Amazon ECS
Amazon EKS
Which service in AWS protects your resources from common DDoS attacks in a proactive manner?
AWS Shield
Amazon Inspector
Security groups
AWS WAF
Which AWS support plan includes a Concierge Support Team which will assist you with your billing and account inquiries, and work with you to implement billing and account best practices?
Basic
Business support plans
Enterprise support plan
Developer
How can your RDS production instances be more cost-effective when they will be used for a long period of time?
You can stop your RDS instances when idle to prevent AWS from charging you during this time
You can request reserved instances to get discounts on your instance costs
You can easily backup, terminate, and restore RDS instances when you need them
AWS does not charge you when your RDS is idle
Which of the following statements is true for AWS CloudTrail?
When you create a trail in the AWS Management Console, the trail applies to all AWS Regions by default
CloudTrail is disabled by default for newly created AWS accounts
CloudTrail is able to capture application error logs from your EC2
CloudTrail charges you for every management event trail created
A customer wants to send push notifications to her mobile users whenever a new patch comes out. What service is the most appropriate for this task?
Amazon SES
Amazon SQS
Amazon SNS
AWS Server Migration Service (SMS)
A customer wants to further secure his network beyond security groups and network access control lists. Which of the services below can be used to provide the additional security features? (Select TWO.)
Amazon GuardDuty
AWS WAF
Amazon SQS
AWS Single Sign-On
AWS KMS or Key Management Service
In implementing continuous integration and continuous delivery (CI/CD) in your cloud architecture, which service will make it easy for you to set up your entire development and continuous delivery toolchain for coding, building, testing, and deploying your application code?
AWS CodeStar
AWS CodeBuild
AWS CodeCommit
AWS CodePipeline
Availability Zones are physically separated by a meaningful distance from any other AZ, although all are within 100 km or 60 miles of each other. What is the primary reason why Availability Zones are set up the way they are now?
To keep them as far apart from each other in case of a disaster
To maximize area coverage in a Region
To achieve better network connectivity to users in the location
Price of the land is cheaper in those locations
What is the lowest support plan that allows an unlimited number of technical support cases to be opened?
Developer
Basic
Business
Enterprise
A customer has recently experienced an SQL injection attack on their web application’s database hosted in EC2. They submitted a complaint ticket to AWS. What should be the response from AWS?
AWS should reiterate that the customer is responsible for the security of their applications in the Cloud
AWS should secure their infrastructure better to reduce these kinds of incidents
AWS and the customer should contact a third-party auditor to verify the incident
AWS should not be liable for the damages since the customer should have properly patched the EC2 instance
What is the right arrangement of the AWS Global Infrastructure components according to their geographical coverage area size, in descending order?
Regions, Availability Zones, Edge Locations
Regions, Edge Locations, Availability Zones
Availability Zones, Edge Locations, Regions
Edge Locations, Availability Zones, Regions
You have an Amazon Linux EC2 instance running for an hour and thirty minutes. How will AWS bill you in terms of usage?
You will only be billed for an hour according to the hourly billing rule
You will be billed for one hour and thirty minutes according to the hourly billing rule
You will be billed for an hour and thirty minutes according to the per-second billing rule
You will be billed for an hour and twenty-nine minutes according to the per second billing rule
Which of the following services combine 5G networks with AWS compute and storage services for the benefit of high-performance mobile applications?
AWS Wavelength
AWS Cloud9
AWS Amplify
AWS Control Tower
What AWS service can monitor the compliance status of your AWS resources against a set of compliance guidelines?
Amazon CloudWatch
AWS Config
AWS Artifact
AWS IAM
Which AWS service allows me to patch my Windows EC2 instances without having to RDP into them?
AWS Systems Manager
AWS CodeDeploy
AWS CloudFormation
Amazon SWF
Which of the following options helps cloud architects build secure, high-performing, resilient, and efficient infrastructure for their applications based on the six pillars?
AWS Serverless Application Model
AWS Well-Architected Framework
AWS Security Hub
AWS Cloud Adoption Framework
In the event of a disaster or an outage, AWS recommends that you spread your servers and databases at least in different _____?
Availability Zones
Regions
VPCs
AWS Accounts
Auto-Scaling based on demand is an implementation of which AWS cloud best practice?
Implement elasticity
Driving architectures using data
Design for perfection
Design for failure
Which AWS service will allow you to serve your dynamic web content to users globally?
Amazon S3
Amazon Route 53
Amazon CloudFront
AWS Elastic Load Balancer
Which of the following instances is it better to use IAM roles rather than IAM users? (Select TWO.)
When you want to provide AWS services permissions to do certain actions
When you have outside entities that need to perform specific actions in your AWS account
If you have employees who will constantly need access to your AWS resources
When you need a GUI to interact with your AWS environment
When you need an administrator to handle the AWS account for you
Which of the following services should you provision if your local data center requires additional storage space without having to migrate data?
AWS Storage Gateway
AWS Direct Connect
AWS Snowball Edge
AWS Backup
Which of the following purchase options offers the most significant discount compared to On-Demand instance pricing to process steady-state workloads that will continuously be running for a year and also provide capacity reservation?
Savings Plans
Standard Reserved Instance
Convertible Reserved Instance
Dedicated Instance
How is expense shifted when moving from traditional servers to the Cloud?
Trade capital expense for variable expense
Capital expense is traded for operational expense
Variable expense is traded for capital expense
Operational expense is traded for variable expense
Where can the customer view his Reserved Instance usage for the past month?
AWS Billing Console
Amazon S3
Amazon EC2
AWS Organizations
Which payment plan will give you the largest discount when purchasing EC2 reserved instances?
All upfront payment for a 3-year term purchase
Partial upfront payment for a 1-year term purchase
All upfront payment for a 1-year term purchase
Partial upfront payment for a 3-year term purchase
Which cloud computing advantage describes how you can easily deploy your application in multiple AWS regions with just a few clicks?
Going global in minutes
Benefit from massive economies of scale
Stop guessing capacity
Stop spending money running and maintaining data centers
What is the primary benefit of creating a scalable system?
Applications are able to handle varying loads of work
Application resources will cost less than usual
Applications are able to failover gracefully
Applications are not easily targeted by malicious attacks
What are the benefits of using Amazon DynamoDB as your database? (Select TWO.)
Database size scales automatically so you won’t have to worry about capacity
DynamoDB is self-healing, which means your data is scanned for errors and is repaired continuously
DynamoDB offers 11 9’s in terms of durability, according to the SLA
You can perform very complex queries and joins without deterioration in performance
You can store different kinds of unstructured data that would normally not be suitable for relational databases
Where is the best place to archive logs and other infrequently accessed files for a long period of time?
Amazon S3 Standard-IA
Amazon EBS
Amazon S3 Glacier Flexible Retrieval
Amazon Storage Gateway
Which AWS storage service offers faster disk read and write performance and provides temporary block-level storage for your instance?
EFS
Instance Store
EBS Provisioned IOPS SSD
EBS Throughput Optimized HDD
Which of the following is an example of having a highly available application in AWS?
Running your RDS instance with multi-AZ enabled
Running spot instances for your EC2 workloads
Using SQS to decouple messages
Running CloudFront for the static website in your S3 bucket
When is using Amazon RDS a better choice than using a local database?
When you want to offload administration responsibilities from yourself
When you need full control of your SQL database
When you need a fast network connection to your local web servers
When you need a free Enterprise license for your Enterprise databases
Which of the following is not a standard design principle when designing systems in AWS?
Servers, not services
Loose coupling
design for failure
disposable resources instead of fixed servers
Which of the following does the Enterprise support plan provide to customers in AWS? (Select TWO.)
Proactive Technical Account Management
Access to online self-paced labs
Limited access to the 7 Core Trusted Advisor checks
15-minute response time support if your production system goes down
5-minute response time support if your business-critical system goes down
A customer has a popular website that has millions of viewers from all over the world and has read-heavy database workloads. Which of the following is the best option to use to increase the read throughput on their database?
Enable Amazon RDS Read Replicas
Enable Multi-AZ deployments
Enable Amazon RDS Standby Replicas
Use SQS to queue up the requests
Which of the following actions does not affect costs when using Amazon S3?
Making GET requests to your S3 objects
Moving objects out of your S3 bucket to another bucket
Data transfer costs for uploading objects into your S3 bucket
Choosing S3 Standard IA rather than One Zone IA
Which among the following is the most cost-effective and scalable choice for object storage?
Amazon S3
Amazon EFS
Amazon EBS
AWS Storage Gateway
What cloud computing model deals with services such as EC2 instances?
IaaS
PaaS
SaaS
FaaS
Which of the following do you need to programmatically interact with your AWS environment? (Select TWO.)
AWS SDK
AWS Management Console
Account username and password
Access keys
AWS Lambda
Which of the following does AWS automatically handle for you? (Select TWO.)
Secure AWS data centers from environmental hazards
Introduce updates and patches to EC2 guest operating systems
Introduce updates and patches to EC2 hypervisors
Makes sure your data is safely kept and replicated between AZs
Provide web application firewall protection to your public endpoints
Which service offers volume discounts when you enable Consolidated Billing?
Amazon S3
AWS CloudTrail
Amazon CloudFront
Amazon SNS
A number of servers in your on-premises data center have been collecting dust over the past few years. What is the benefit of moving to the Cloud in this case?
The ability to provision resources only when you need them
Physical servers are managed by AWS for you
The ability to pay for only what you use
AWS has automated services for you
What infrastructure does Amazon CloudFront utilize to speed up content delivery to customers?
Edge Locations
AWS Direct Connect
Availability Zones
AWS Local Zones
Which of the following is not a part of the AWS Global Infrastructure?
Placement group
Region
Availability Zones
Edge Locations
Which of the following is part of the best practices in securing your AWS account?
Create an IAM user with admin privileges instead of using root
Enable MFA only on the root account
Grant Most Privilege
Always manually define permissions to each and every individual IAM user
What type of EBS volume is recommended for most workloads and is also usable as a boot volume?
Throughput Optimized HDD
General Purpose SSD
Provisioned IOPS SSD
Cold HDD
Which of the following AWS services are considered to be global services? (Select TWO.)
Amazon Route 53
AWS WAF
AWS Lambda
AWS CloudTrail
Amazon VPC
A startup is in need of a database that is capable of self-healing and has a high throughput. Which of the following services fits these criteria?
Amazon Aurora
Amazon RDS
Amazon DynamoDB
Amazon Redshift
