Wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

(CLF-C02) AWS Certified Cloud Practitioner Practice Exam 2

Total questions: 65

Worksheet time: 3hrs 15mins

Name
Class
Date
1.

Your company needs to perform interactive log analytics and searches. What service can accomplish this?

a)

Simple Storage Service (S3)

b)

OpenStore

c)

ElastiCache

d)

OpenSearch

2.

You need to deploy a web application without having to worry about the infrastructure. Which service can accomplish this?

a)

Elastic Beanstalk.

b)

EC2.

c)

Wavelength.

d)

Lambda.

3.

A developer doesn't want to hardcode an instance password in their application code. Which service will access the password without having to hardcode it?

a)

Trusted Advisor.

b)

Key Management Service (KMS).

c)

Secrets Manager.

d)

IAM credential report.

4.

Which types of deployments offer high availability?

(Choose2)

a)

Single-AZ deployments

b)


Single-Region deployments

c)

Multi-AZ deployments

d)

Multi-Region deployments

5.

A financial company needs to migrate large amounts of data, at an petabyte scale, to AWS. Which of the following is the MOST cost-effective option?

a)

Snowball

b)

Snowmonster

c)

Snowmobile

d)

Snowcone

6.

You want to ensure that all Amazon EC2 instances in your AWS account are launched with specific tags, such as Environment and Application. Which AWS service can help you enforce this requirement?

a)

Config.

b)

CloudFormation.

c)

Trusted Advisor.

d)

AWS Systems Manager.

7.

You are creating a few IAM policies. This is the first time you have worked with IAM policies. Which tool can you use to test IAM policies?

a)

Inspector.

b)

IAM policy simulator.

c)

CloudWatch.

d)

GuardDuty.

8.

You need to improve cost accountability for internal teams within your organization. What service can be used to accomplish this?

a)

Cost Explorer.

b)

Pricing Calculator.

c)

Organizations.

d)

Billing Conductor.

9.

Which of the concepts listed confirms that users are who they say they are by presenting an identity (username) and verification (password)?

a)

Principle of least privilege.

b)

Authentication.

c)

Root user.

d)

Authorization.

10.

How would you create and manage access for users who are accessing AWS services from the AWS Management Console?

a)

Software development kits (SDKs).

b)

Systems Manager.

c)

Control Tower.

d)

Identity and Access Management (IAM).

11.

You need to implement a virtual firewall for your EC2 instances. What is the EASIEST way to do this?

a)

Implement NACLs.

b)

Use GuardDuty.

c)

Implement security groups.

d)

Use Shield.

12.

You are selecting the support level you need in AWS. You only need service quotas, basic security Trusted Advisor checks. You do not need chat or phone support. What level of support meets these requirements?

(Choose2)

a)

Enterprise On-Ramp.

b)

Enterprise.

c)

Business.

d)

Developer.

13.

Benefits of using the Cloud Adoption Framework include which of the following?

(Choose2)

a)

It increases operational efficiency.

b)


It reduces business risk.

c)

It increases high availability.

d)

It adds elasticity.

14.

Your company needs to launch instances at random times for unknown lengths of time. They do not have to be up the whole time, and losing data would not cause any problems. What is the most cost-effective EC2 pricing option they can use?

a)

On-Demand.

b)

Reserved Instances.

c)

Spot Instances.

d)

A Savings Plan.

15.

In regards to the Cloud Adoption Framework, what perspective do incident response and identity and access management fall under?

a)

Operations

b)

Security

c)

Governance

d)

People

16.

You need to ensure that the passwords for your IAM users are updated every 30 days. Is this AWS's responsibility or yours?

a)

User password enforcement is the customer's responsibility.

b)

User passwords are AWS's responsibility.

c)

User passwords are a default configuration, making it AWS's responsibility.

d)

Passwords cannot be configured for IAM users.

17.

You have infrequently accessed data in S3 buckets that you want to transfer to Glacier automatically after 90 days. What can you use in AWS to do this?

a)

An IAM role

b)

A bucket policy

c)

A lifecycle policy

d)

An IAM policy

18.

You have been tasked with implementing encryption on your existing MySQL databases hosted in RDS. Can you do this?

a)

Yes. All RDS databases are encrypted by default.

b)

No. RDS encryption cannot be done once a database has been created.

c)

Yes, but the databases must be copied to enable encryption when the database is created.

d)

No. RDS has no encryption abilities.

19.

You need a series of web-based tools for your developer team and do not want to worry about the underlying infrastructure. Which cloud computing model does this describe?

a)

Infrastructure-as-a-Service (IaaS)

b)

Software-as-a-Service (SaaS)

c)

Platform-as-a-Service (PaaS)

d)

Developer-as-a-Service (DaaS)

20.

Your company has existing Windows licenses that are tied to CPU cores and specific servers. What pricing model can be used to allow them to migrate into AWS?

a)

Dedicated hosts and dedicated instances

b)

On-demand instances

c)

Elastic Block Storage

d)

Spot instances

21.

Which of the following statements describes one of AWS's responsibilities?

a)

AWS manages the lifecycle of resources in the cloud.

b)

AWS manages and secures the hardware that provides the services they offer.

c)

AWS manages and secures customer users.

d)

AWS manages and secures customer applications and deployments.

22.

You need to send notifications in response to some CloudWatch alarms. Which AWS service can help meet these requirements?

a)

Simple Notification Service (SNS).

b)

CloudTrail.

c)

Simple Email Service (SES).

d)

Simple Queue Service (SQS).

23.

Your company needs to implement a workflow for a series of Lambda functions in a specific order. Which service can accomplish this?

a)

CodePipeline

b)

Lambda

c)

Step Functions

d)

EC2

24.

You need S3 to access EC2 instances. Which service can you use to gain this access?

a)

CloudWatch

b)

CloudFormation

c)

EC2

d)

Identity and Access Management (IAM)

25.

You are tasked with creating reliable virtual desktops that have browser access ability. Which AWS service should you use?

a)

FSx

b)

Workspaces Web

c)

Workspaces Core

d)

Elastic Block Storage (EBS)

26.

You have received a report that several EC2 instances and S3 buckets have been deleted, causing an outage of your application. How can you find out who deleted those resources?

a)

Trusted Advisor

b)

CloudFront

c)

CloudTrail

d)

Inspector

27.

Your company is migrating into the cloud, but they cannot share hardware with other companies. Which of the following options meets their needs?

a)

They will use a hybrid cloud deployment model.

b)

They will use a public cloud deployment model.

c)

They will need to use a Virtual Private Network (VPN) connection.

d)

They will use a private cloud deployment model.

28.

Several EC2 instances in a private subnet need internet access. What can you implement to provide them with internet access?

a)

Internet gateway

b)

API Gateway

c)

VPC peering

d)

NAT gateway

29.

Your company is migrating into the cloud and needs to provide users with a way to federate into AWS. What service can help with this?

a)

Multi-factor authentication (MFA).

b)

Cognito.

c)

Security Token Service (STS).

d)

Organizations.

30.

You need to deploy an environment using a code template. What service allows you to do this?

a)

CloudTrail

b)

CloudFormation

c)

CloudWatch

d)

Elastic Beanstalk

31.

A developer has created an application that will allow viewers of a popular TV show to vote for their favorite contestants. They expect to have 50 million viewers all voting at the same time at the end of each performance. When designing the system, they want to keep the voting and tallying functionality as separate standalone components. Which service will promote loose coupling between the two components using asynchronous integration?

a)

Simple Queue Service (SQS)

b)

Simple Notification Service (SNS)

c)

Simple Email Service (SES)

d)

Identity and Access Management (IAM)

32.

You need an AWS service that can turn text into speech for an audiobook you are working on. Which service would you choose?

a)

Polly

b)

SageMaker

c)

Rekognition

d)

Lex

33.

Which of the following is a design principle of the AWS Well-Architected Framework?

a)

Only build in one Availability Zone.

b)

Never experiment.

c)

Disregard the business requirements.

d)

Architect for failure.

34.

Broadly speaking, AWS is responsible for:

a)

No security — security is up to the customer to manage.

b)

Security both in and of the cloud.

c)

Security of the cloud.

d)

Security in the cloud.

35.

Your company needs to migrate 5 TB of data to AWS. Which AWS service can perform this type of migration MOST cost-effectively?

a)

Snowmaster

b)

Snowmobile

c)

Snowcone

d)

Snowball Edge

36.

You are storing large datasets in S3, and you want to run SQL queries against those files. What service can do this for you?

a)

CloudWatch

b)

Athena

c)

Cost Explorer

d)

S3 Storage Lens

37.

Your team requires the use of a ledger database and are migrating into the cloud. What service meets this requirement?

a)

DynamoDB

b)

Neptune

c)

Relational Database Service (RDS)

d)

Relational Database Service (RDS)

38.

You need to access your AWS resources. How can you do this?

a)

Sessions Interface

b)


The AWS Management Console

c)

The Command Line Interface (CLI)

d)

Software Development Kits (SDKs)

e)

Systems Manager

39.

A customer has created a Developers group in IAM containing 10 users. What does the customer need to attach to the group to ensure all the users have the correct permissions?

a)

An access control list

b)

An IAM service role

c)

An IAM policy

d)

An IAM role

40.

Which security service provides enhanced protections and 24/7 access to AWS experts for a fee when issues arise?

a)

Trusted Advisor.

b)

Macie.

c)

Shield Standard.

d)

Shield Advanced.

41.

Your company has multiple AWS accounts and wants you to provide a centralized view of security alerts and compliance status. Which service can do this for you?

a)

Security Hub.

b)

Inspector.

c)

Organizations.

d)

WAF.

42.

A company is considering migrating to the cloud. How does moving to the cloud reduce upfront costs?

a)

By replacing large variable expenditures with lower capital investments

b)

By replacing large capital expenditures with lower variable costs spread over time

c)

By allowing you to pay upfront for software to lock in savings

d)

By allowing the provisioning of resources at a fixed price even during high peak times

43.

According to the AWS shared responsibility model, who is responsible for patching and updating the underlying infrastructure of the Lambda service?

a)

Customers.

b)

AWS.

c)

Neither customers nor AWS.

d)

Both customers and AWS.

44.

Your company needs to discover and protect sensitive data. Which AWS service does this?

a)

Rekognition

b)

Inspector

c)

SageMaker

d)

Macie

45.

Your company has a set of five EC2 instances that periodically have spikes of traffic. What is the most effective way to optimize these instances with the lowest operational overhead?

a)

Write a script to stop instances when demand is low.

b)

Use an elastic load balancer to scale out and in based on demand.

c)

Use an auto scaling group to scale out and in based on demand.

d)

Use Reserved Instances instead of On-Demand Instances.

46.

Which of the following is utilized by CloudFront?

a)

Regions

b)

Edge locations

c)

Availability Zones

d)

Data centers

47.

Your company is interested in migrating to the cloud and wants to ensure that they can innovate fast with a high speed to market. Which cloud benefit does this describe?

a)

Elasticity

b)

Agility

c)

Durability

d)

High availability

48.

Which of the following are included in the Cloud Adoption Framework's Governance perspective?

a)

Data architecture

b)

Cloud financial management

c)


Application portfolio ,anagement

d)

Data protection

49.

Which AWS service provides an additional layer of security at the subnet level?

a)

Virtual Private Clouds (VPCs).

b)

Route 53.

c)

Security groups.

d)

Network Access Control Lists (NACLs).

50.

Your EC2 instances need to be patched after the latest vulnerability fix was released. Is this your responsibility?

a)

No, AWS takes care of the security of all EC2 instances in the world.

b)

No, AWS automatically patches every EC2 instance daily.

c)

Yes, this is the customer's responsibility.

d)

Partially, as AWS updates all large EC2 instance types.

51.

Your company wants to store files in S3, but they want to make sure objects are moved to other storage classes automatically. Which of the following can implement a solution and be cost-effective?

a)

S3 Intelligent-Tiering

b)

S3 Storage Lens

c)

S3 Glacier Flexible Retrieval

d)

S3 Glacier Instant Retrieval

52.

Your company requires that all services used in AWS are managed. Which of the following are managed services?

a)

Elastic Container Service (ECS)

b)

Identity and Access Management (IAM)

c)

Elastic Compute Cloud (EC2)

d)

Route53

53.

You need to implement appropriate access levels based on the roles of users on your team. What service can you use to create and manage this access?

a)

Systems Manager.

b)

CloudTrail.

c)

Identity and Access Management (IAM).

d)

Access control lists.

54.

The benefits of cloud computing include which of the following?

a)

Focus on operational excellence.

b)

Go global in minutes.

c)

Migrate without disruption.

d)

Create economies of scale.

55.

Your company wants you to implement protection against Distributed Denial of Service (DDoS) attacks. Which service can do this?

a)

Inspector.

b)

Shield.

c)

GuardDuty.

d)

Detective.

56.

A company is planning for increased sales and traffic during an upcoming holiday sale. How can the company best prepare to meet the upcoming change in demand?

a)

Implement EC2 Auto Scaling.

b)

Develop a page to display when demand can't be met, asking the customer to try again later.

c)

Review traffic from the previous year's sale and add additional instances to match the capacity used.

d)

Cache content using Amazon ElastiCache.

57.

Which tool can be used to help estimate a potential cloud bill and calculate overall total cost of ownership (TCO) based on current workloads?

a)

You have to research the published prices of the AWS services and manually calculate the estimate.

b)

Use Cost Explorer to visualize estimated TCO.

c)

Use the AWS Pricing Calculator.

d)

Open an account and billing support case with AWS Support to get help with estimating the TCO.

58.

A project manager wants to identify, organize, search for, and filter all EC2 instances belonging to a specific project. What is the best strategy for the project manager to identify these resources?

a)

Talk with a Technical Account Manager (TAM).

b)

Open a case with AWS Support.

c)

Use Systems Manager.

d)

Use tags.

59.

Which of the following is not a database service?

a)

Lambda

b)

Aurora

c)

Neptune

d)

DynamoDB

60.

A company would like to call or chat with AWS support when issues arise and have billing support. What's the minimum support plan they need to subscribe to in order to have this access?

a)

Enterprise.

b)

Business.

c)

Basic.

d)

Developer.

61.

Which of the following is a way you can apply the AWS Well-Architected Framework?

a)

Launching your application in one availability zone.

b)

Manually scale EC2 instances in and out.

c)

Using Direct Connect to support a public deployment model.

d)

Use S3 Intelligent-Tiering to automatically move data.

62.

Your company needs to migrate into AWS and wants to have a contact center that can scale. What service can be implemented to accomplish this?

a)

Elastic Beanstalk

b)

Simple Email Service (SES)

c)

Connect

d)

Direct Connect

63.

You need to implement a high-performance MySQL database. Which AWS service would you use?

a)

Neptune

b)

Redshift

c)

Aurora

d)

DynamoDB

64.

You are launching an application that uses Fargate and EC2 instances for 1 year with very little to no downtime. What is the most cost-effective pricing option that still meets these requirements?

a)

On-Demand instances.

b)

A Savings Plan.

c)

Spot instances.

d)

Lambda.

65.

Which of the following aspects of security are the customer's responsibility?

a)

Physical security of AWS data centers

b)

Security of customer data and deployments

c)

Security of AWS infrastructure

d)

Security of users, groups, and roles