Worksheets(CLF-C02) AWS Certified Cloud Practitioner Practice Exam 2
Total questions: 65
Worksheet time: 3hrs 15mins
Your company needs to perform interactive log analytics and searches. What service can accomplish this?
Simple Storage Service (S3)
OpenStore
ElastiCache
OpenSearch
You need to deploy a web application without having to worry about the infrastructure. Which service can accomplish this?
Elastic Beanstalk.
EC2.
Wavelength.
Lambda.
A developer doesn't want to hardcode an instance password in their application code. Which service will access the password without having to hardcode it?
Trusted Advisor.
Key Management Service (KMS).
Secrets Manager.
IAM credential report.
Which types of deployments offer high availability?
(Choose2)
Single-AZ deployments
Single-Region deployments
Multi-AZ deployments
Multi-Region deployments
A financial company needs to migrate large amounts of data, at an petabyte scale, to AWS. Which of the following is the MOST cost-effective option?
Snowball
Snowmonster
Snowmobile
Snowcone
You want to ensure that all Amazon EC2 instances in your AWS account are launched with specific tags, such as Environment and Application. Which AWS service can help you enforce this requirement?
Config.
CloudFormation.
Trusted Advisor.
AWS Systems Manager.
You are creating a few IAM policies. This is the first time you have worked with IAM policies. Which tool can you use to test IAM policies?
Inspector.
IAM policy simulator.
CloudWatch.
GuardDuty.
You need to improve cost accountability for internal teams within your organization. What service can be used to accomplish this?
Cost Explorer.
Pricing Calculator.
Organizations.
Billing Conductor.
Which of the concepts listed confirms that users are who they say they are by presenting an identity (username) and verification (password)?
Principle of least privilege.
Authentication.
Root user.
Authorization.
How would you create and manage access for users who are accessing AWS services from the AWS Management Console?
Software development kits (SDKs).
Systems Manager.
Control Tower.
Identity and Access Management (IAM).
You need to implement a virtual firewall for your EC2 instances. What is the EASIEST way to do this?
Implement NACLs.
Use GuardDuty.
Implement security groups.
Use Shield.
You are selecting the support level you need in AWS. You only need service quotas, basic security Trusted Advisor checks. You do not need chat or phone support. What level of support meets these requirements?
(Choose2)
Enterprise On-Ramp.
Enterprise.
Business.
Developer.
Benefits of using the Cloud Adoption Framework include which of the following?
(Choose2)
It increases operational efficiency.
It reduces business risk.
It increases high availability.
It adds elasticity.
Your company needs to launch instances at random times for unknown lengths of time. They do not have to be up the whole time, and losing data would not cause any problems. What is the most cost-effective EC2 pricing option they can use?
On-Demand.
Reserved Instances.
Spot Instances.
A Savings Plan.
In regards to the Cloud Adoption Framework, what perspective do incident response and identity and access management fall under?
Operations
Security
Governance
People
You need to ensure that the passwords for your IAM users are updated every 30 days. Is this AWS's responsibility or yours?
User password enforcement is the customer's responsibility.
User passwords are AWS's responsibility.
User passwords are a default configuration, making it AWS's responsibility.
Passwords cannot be configured for IAM users.
You have infrequently accessed data in S3 buckets that you want to transfer to Glacier automatically after 90 days. What can you use in AWS to do this?
An IAM role
A bucket policy
A lifecycle policy
An IAM policy
You have been tasked with implementing encryption on your existing MySQL databases hosted in RDS. Can you do this?
Yes. All RDS databases are encrypted by default.
No. RDS encryption cannot be done once a database has been created.
Yes, but the databases must be copied to enable encryption when the database is created.
No. RDS has no encryption abilities.
You need a series of web-based tools for your developer team and do not want to worry about the underlying infrastructure. Which cloud computing model does this describe?
Infrastructure-as-a-Service (IaaS)
Software-as-a-Service (SaaS)
Platform-as-a-Service (PaaS)
Developer-as-a-Service (DaaS)
Your company has existing Windows licenses that are tied to CPU cores and specific servers. What pricing model can be used to allow them to migrate into AWS?
Dedicated hosts and dedicated instances
On-demand instances
Elastic Block Storage
Spot instances
Which of the following statements describes one of AWS's responsibilities?
AWS manages the lifecycle of resources in the cloud.
AWS manages and secures the hardware that provides the services they offer.
AWS manages and secures customer users.
AWS manages and secures customer applications and deployments.
You need to send notifications in response to some CloudWatch alarms. Which AWS service can help meet these requirements?
Simple Notification Service (SNS).
CloudTrail.
Simple Email Service (SES).
Simple Queue Service (SQS).
Your company needs to implement a workflow for a series of Lambda functions in a specific order. Which service can accomplish this?
CodePipeline
Lambda
Step Functions
EC2
You need S3 to access EC2 instances. Which service can you use to gain this access?
CloudWatch
CloudFormation
EC2
Identity and Access Management (IAM)
You are tasked with creating reliable virtual desktops that have browser access ability. Which AWS service should you use?
FSx
Workspaces Web
Workspaces Core
Elastic Block Storage (EBS)
You have received a report that several EC2 instances and S3 buckets have been deleted, causing an outage of your application. How can you find out who deleted those resources?
Trusted Advisor
CloudFront
CloudTrail
Inspector
Your company is migrating into the cloud, but they cannot share hardware with other companies. Which of the following options meets their needs?
They will use a hybrid cloud deployment model.
They will use a public cloud deployment model.
They will need to use a Virtual Private Network (VPN) connection.
They will use a private cloud deployment model.
Several EC2 instances in a private subnet need internet access. What can you implement to provide them with internet access?
Internet gateway
API Gateway
VPC peering
NAT gateway
Your company is migrating into the cloud and needs to provide users with a way to federate into AWS. What service can help with this?
Multi-factor authentication (MFA).
Cognito.
Security Token Service (STS).
Organizations.
You need to deploy an environment using a code template. What service allows you to do this?
CloudTrail
CloudFormation
CloudWatch
Elastic Beanstalk
A developer has created an application that will allow viewers of a popular TV show to vote for their favorite contestants. They expect to have 50 million viewers all voting at the same time at the end of each performance. When designing the system, they want to keep the voting and tallying functionality as separate standalone components. Which service will promote loose coupling between the two components using asynchronous integration?
Simple Queue Service (SQS)
Simple Notification Service (SNS)
Simple Email Service (SES)
Identity and Access Management (IAM)
You need an AWS service that can turn text into speech for an audiobook you are working on. Which service would you choose?
Polly
SageMaker
Rekognition
Lex
Which of the following is a design principle of the AWS Well-Architected Framework?
Only build in one Availability Zone.
Never experiment.
Disregard the business requirements.
Architect for failure.
Broadly speaking, AWS is responsible for:
No security — security is up to the customer to manage.
Security both in and of the cloud.
Security of the cloud.
Security in the cloud.
Your company needs to migrate 5 TB of data to AWS. Which AWS service can perform this type of migration MOST cost-effectively?
Snowmaster
Snowmobile
Snowcone
Snowball Edge
You are storing large datasets in S3, and you want to run SQL queries against those files. What service can do this for you?
CloudWatch
Athena
Cost Explorer
S3 Storage Lens
Your team requires the use of a ledger database and are migrating into the cloud. What service meets this requirement?
DynamoDB
Neptune
Relational Database Service (RDS)
Relational Database Service (RDS)
You need to access your AWS resources. How can you do this?
Sessions Interface
The AWS Management Console
The Command Line Interface (CLI)
Software Development Kits (SDKs)
Systems Manager
A customer has created a Developers group in IAM containing 10 users. What does the customer need to attach to the group to ensure all the users have the correct permissions?
An access control list
An IAM service role
An IAM policy
An IAM role
Which security service provides enhanced protections and 24/7 access to AWS experts for a fee when issues arise?
Trusted Advisor.
Macie.
Shield Standard.
Shield Advanced.
Your company has multiple AWS accounts and wants you to provide a centralized view of security alerts and compliance status. Which service can do this for you?
Security Hub.
Inspector.
Organizations.
WAF.
A company is considering migrating to the cloud. How does moving to the cloud reduce upfront costs?
By replacing large variable expenditures with lower capital investments
By replacing large capital expenditures with lower variable costs spread over time
By allowing you to pay upfront for software to lock in savings
By allowing the provisioning of resources at a fixed price even during high peak times
According to the AWS shared responsibility model, who is responsible for patching and updating the underlying infrastructure of the Lambda service?
Customers.
AWS.
Neither customers nor AWS.
Both customers and AWS.
Your company needs to discover and protect sensitive data. Which AWS service does this?
Rekognition
Inspector
SageMaker
Macie
Your company has a set of five EC2 instances that periodically have spikes of traffic. What is the most effective way to optimize these instances with the lowest operational overhead?
Write a script to stop instances when demand is low.
Use an elastic load balancer to scale out and in based on demand.
Use an auto scaling group to scale out and in based on demand.
Use Reserved Instances instead of On-Demand Instances.
Which of the following is utilized by CloudFront?
Regions
Edge locations
Availability Zones
Data centers
Your company is interested in migrating to the cloud and wants to ensure that they can innovate fast with a high speed to market. Which cloud benefit does this describe?
Elasticity
Agility
Durability
High availability
Which of the following are included in the Cloud Adoption Framework's Governance perspective?
Data architecture
Cloud financial management
Application portfolio ,anagement
Data protection
Which AWS service provides an additional layer of security at the subnet level?
Virtual Private Clouds (VPCs).
Route 53.
Security groups.
Network Access Control Lists (NACLs).
Your EC2 instances need to be patched after the latest vulnerability fix was released. Is this your responsibility?
No, AWS takes care of the security of all EC2 instances in the world.
No, AWS automatically patches every EC2 instance daily.
Yes, this is the customer's responsibility.
Partially, as AWS updates all large EC2 instance types.
Your company wants to store files in S3, but they want to make sure objects are moved to other storage classes automatically. Which of the following can implement a solution and be cost-effective?
S3 Intelligent-Tiering
S3 Storage Lens
S3 Glacier Flexible Retrieval
S3 Glacier Instant Retrieval
Your company requires that all services used in AWS are managed. Which of the following are managed services?
Elastic Container Service (ECS)
Identity and Access Management (IAM)
Elastic Compute Cloud (EC2)
Route53
You need to implement appropriate access levels based on the roles of users on your team. What service can you use to create and manage this access?
Systems Manager.
CloudTrail.
Identity and Access Management (IAM).
Access control lists.
The benefits of cloud computing include which of the following?
Focus on operational excellence.
Go global in minutes.
Migrate without disruption.
Create economies of scale.
Your company wants you to implement protection against Distributed Denial of Service (DDoS) attacks. Which service can do this?
Inspector.
Shield.
GuardDuty.
Detective.
A company is planning for increased sales and traffic during an upcoming holiday sale. How can the company best prepare to meet the upcoming change in demand?
Implement EC2 Auto Scaling.
Develop a page to display when demand can't be met, asking the customer to try again later.
Review traffic from the previous year's sale and add additional instances to match the capacity used.
Cache content using Amazon ElastiCache.
Which tool can be used to help estimate a potential cloud bill and calculate overall total cost of ownership (TCO) based on current workloads?
You have to research the published prices of the AWS services and manually calculate the estimate.
Use Cost Explorer to visualize estimated TCO.
Use the AWS Pricing Calculator.
Open an account and billing support case with AWS Support to get help with estimating the TCO.
A project manager wants to identify, organize, search for, and filter all EC2 instances belonging to a specific project. What is the best strategy for the project manager to identify these resources?
Talk with a Technical Account Manager (TAM).
Open a case with AWS Support.
Use Systems Manager.
Use tags.
Which of the following is not a database service?
Lambda
Aurora
Neptune
DynamoDB
A company would like to call or chat with AWS support when issues arise and have billing support. What's the minimum support plan they need to subscribe to in order to have this access?
Enterprise.
Business.
Basic.
Developer.
Which of the following is a way you can apply the AWS Well-Architected Framework?
Launching your application in one availability zone.
Manually scale EC2 instances in and out.
Using Direct Connect to support a public deployment model.
Use S3 Intelligent-Tiering to automatically move data.
Your company needs to migrate into AWS and wants to have a contact center that can scale. What service can be implemented to accomplish this?
Elastic Beanstalk
Simple Email Service (SES)
Connect
Direct Connect
You need to implement a high-performance MySQL database. Which AWS service would you use?
Neptune
Redshift
Aurora
DynamoDB
You are launching an application that uses Fargate and EC2 instances for 1 year with very little to no downtime. What is the most cost-effective pricing option that still meets these requirements?
On-Demand instances.
A Savings Plan.
Spot instances.
Lambda.
Which of the following aspects of security are the customer's responsibility?
Physical security of AWS data centers
Security of customer data and deployments
Security of AWS infrastructure
Security of users, groups, and roles
