Wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

(CLF-C02) AWS Certified Cloud Practitioner Practice Exam 3

Total questions: 65

Worksheet time: 34mins

Name
Class
Date
1.

Which AWS service acts as a stateful virtual firewall?

a)

Virtual Private Clouds (VPCs)

b)

Network Access Control Lists (NACLs)

c)

Route53

d)

Security groups

2.

Which of the following is an action that can be taken by a root user?

(Choose3)

a)

Deleting underlying AWS infrastructure

b)

Adjusting password requirements

c)

Deleting your AWS account

d)

Creating a MySQL database

3.

The benefits of cloud computing include which of the following?

(Choose2)

a)

Stop guessing capacity.

b)

No data center spend.

c)

Focus on operational excellence.

d)

Migrate without disruption.

4.

You need to monitor your EC2 instances and receive notifications when their CPU usage is above 80%. What service can do this for you?

a)

S3 Storage Lens

b)

Cost Explorer

c)

Athena

d)

CloudWatch

5.

Your company needs you to discover, prepare, and integrate data from multiple sources for analytics. Which service can do this for you using crawlers?

a)

Elastic Map Reduce (EMR)

b)

Athena

c)

Kinesis

d)

Glue

6.

Your company want to ensure that all of the accounts billing is consolidated in one place. What service can be used to accomplish this?

a)

Organizations

b)

Billing Conductor

c)

Pricing Calculator

d)

Cost Explorer

7.

Your company is ready to expand transformations across the environment. Which of the phases of the cloud journey transformation is this?

a)

Align.

b)

Envision.

c)

Scale.

d)

Launch.

8.

You need an infrastructure offering that you can use like building blocks. Which cloud computing model does this describe?

a)

Platform as a Service (PaaS).

b)

Developer as a Service (DaaS).

c)

Software as a Service (SaaS).

d)

Infrastructure as a Service (IaaS).

9.

You want to ensure that all EC2 instances are patched overnight every week. Which AWS service can help you achieve this?

a)

Config

b)

Systems Manager

c)

CloudTrail

d)

CloudWatch

10.

Which security service provides a way to discover and help protect sensitive data?

a)

Macie

b)

Shield Advanced

c)

Trusted Advisor

d)

Shield Standard

11.

In regards to the Cloud Adoption Framework, what perspective do Workforce Transformation and Organization Alignment fall under?

a)

Security.

b)

Governance.

c)

Operations.

d)

People.

12.

According to the AWS shared responsibility model, who is responsible for patching and updating the underlying infrastructure of the Aurora service?

a)

Customers

b)

Neither customers nor AWS

c)

AWS

d)

Both customers and AWS

13.

Your company needs to migrate into AWS. They are preparing to create a contact center for users to call if they have issues with the website. What service can be implemented to accomplish this?

a)

Simple Email Service (SES)

b)

Connect

c)

Direct Connect

d)

Elastic Beanstalk

14.

You have to audit your environment to see if the way it is architected meets best practices according to the Well-Architected Framework. What can you use in AWS to do this?

a)

The AWS Well-Architected Tool

b)

The Cloud Adoption Tool

c)

The Health Dashboard

d)

The Control Tower

15.

Your company has a group of EC2 instances that have random spikes in traffic. What is the most effective way to optimize these instances with the lowest operational overhead?

a)

Add those instances to an Auto Scaling group to scale out and in based on demand.

b)

Write a script to stop instances when demand is low.

c)

Use Reserved Instances instead of On-Demand Instances.

d)

Implement an elastic load balancer to scale out and in based on demand.

16.

Your leader has requested detailed information about actual AWS costs of running your application. Which AWS service can help you with this?

a)

Cost and Usage Reports

b)

Budgets

c)

Cost Explorer

d)

Pricing Calculator

17.

Your company is interested in joining the Partner Network. Which of the following are benefits to joining?

(Choose3)

a)

Leverage training that is only available through the network.

b)

Take part in Partner events like virtual workshops.

c)

Take advantage of additional funding, credits, and discounts.

d)

Enjoy free access to AWS events like re:Invent.

18.

Your company is interested in migrating to the cloud and wants to ensure that they can protect their data long term. Which cloud benefit does this describe?

a)

Agility.

b)

High availability.

c)

Elasticity.

d)

Durability.

19.

Your company wants to build more Internet of Things devices, but they need to do it fast. Which service can achieve this?

a)

IoT Core

b)

IoT Greengrass

c)

IoT Device Management

d)

IoT Analytics

20.

The following are key pillars of the Well-Architected Framework:

a)

Launch.

b)

Performance Efficiency.

c)

Operational Excellence.

d)

Durability.

21.

You are setting up new policies in IAM and need to include very specific permissions on several services that do not belong to an Organization. Which of the following can accomplish this?

a)

A managed policy

b)

An ultra policy

c)

A service control policy

d)

A custom policy

22.

You need to implement a data warehouse that can handle structured and semi-structured data. Which AWS service would you use?

a)

DynamoDB

b)

Neptune

c)

Aurora

d)

Redshift

23.

Your company needs to create and share paginated reports that include business intelligence data. What service can accomplish this?

a)

QuickSight

b)

OpenStore

c)

ElastiCache

d)

Simple Storage Service (S3)

24.

You need to deploy your applications in the cloud and on-premises. Which AWS service below can be used to accomplish this?

a)

X-Ray

b)

Cloud9

c)

CodeDeploy

d)

CodePipeline

25.

Your company needs to convert an existing database schema from Azure SQL to Aurora MySQL. Which service can accomplish this?

a)

Aurora

b)

DynamoDB

c)

Schema Conversion Tool (SCT)

d)

Database Conversions

26.

A customer has created a group of seven users. What does the customer need to attach to the group to ensure all the users have the correct permissions?

a)

An IAM policy

b)

An IAM role

c)

An access control list

d)

An IAM service role

27.

Your company needs to lower costs and has asked you to implement long polling. Which AWS service does this?

a)

Simple Notification Service (SNS)

b)

Inspector

c)

Simple Queue Service (SQS)

d)

Macie

28.

Your application can never be down. How can you ensure this requirement can be met?

a)

Use multiple Regions.

b)

Use edge locations.

c)

Use mutiple local zones.

d)

Use multiple Availability Zones.

29.

You are utilizing several security services like GuardDuty, Inspector, and WAF. Which service collects data from all of these in one place?

a)

Detective

b)

Security Hub

c)

VPC Flow Logs

d)

Shield

30.

Which of the following best describes an AWS Availability Zone?

a)

A collection of databases that can only be accessed from a specific geographic region

b)

A collection of data centers that are spread evenly around a specific location

c)

A console that gives you a quick, global picture of your cloud computing environment

d)

A specific geographic location designed to provide high availability to a certain area

31.

Which of the following aspects of security is the customer responsibility?

a)

Physical security of AWS data centers

b)


Security of AWS infrastructure

c)

Access control

d)

Security of Regions

32.

You need to limit permissions across an Organization. What feature can provide this for you?

a)

GuardDuty IAM findings

b)

IAM user policy

c)

Shield

d)

Service control policies (SCPs)

33.

You are auditing configurations and changes made to resource configurations. Which service can help you view them and correct anything that does not meet requirements?

a)

Config

b)

Trusted Advisor

c)

Systems Manager

d)

Control Tower

34.

You need to access your AWS resources using Python. How can you do this?

a)

The command-line interface (CLI).

b)

Software development kits (SDKs).

c)

Session interface.

d)

Systems Manager.

35.

Your company wants to move several applications into the cloud with as little downtime as possible. What service can accomplish this?

a)

Database Migration Service (DMS)

b)

Migration Hub

c)

Service Migration Service (SMS)

d)

Application Migration Service (AMS)

36.

Your company is migrating into the cloud and needs to apply access control policies across multiple accounts. What service can help with this?

a)

Cognito

b)

Security Token Service (STS)

c)

Organizations

d)

Multi-Factor Authentication (MFA)

37.

Your company needs to set a threshold on forecasted charges and receive notifications by email if there is a breach of that threshold. What service will let you do this?

a)

CloudWatch

b)

Pricing Calculator

c)

QuickSight

d)

Budgets

38.

A company is considering migrating to the public cloud, but they need to keep some data on-premises. What cloud deployment model fits their needs?

a)

Private.

b)

Public.

c)

Ultra.

d)

Hybrid.

39.

Your company requires that all services used in AWS are managed. Which of the following are managed services?

a)

Identity and Access Management (IAM).

b)

Elastic Compute Cloud (EC2).

c)

Route 53.

d)

Fargate.

40.

Which of the concepts listed determine what an identity can access within AWS after authentication?

a)

Principle of least privilege

b)

Authorization

c)

Root user

d)

Authentication

41.

You have been tasked with implementing a solution that can protect resources against Distributed Denial of Service (DDoS) attacks. Which service can do this?

a)

Detective.

b)

Inspector.

c)

GuardDuty.

d)

Shield.

42.

You need to patch several EC2 instances in a private subnet. What can you implement to provide them with internet access outside the subnet?

a)

VPC peering

b)

NAT gateway

c)

Internet gateway

d)

API Gateway

43.

You need to store file in S3, but you need to be able to access them like a file system from your EC2 instances. Which AWS service would you use?

a)

S3 Storage Lens

b)

Redshift

c)

S3 File Gateway (Mountpoint)

d)

CloudWatch

44.

Your company wants to store files in S3, but they are not sure how to use the different tiers. Which of the following can implement a solution that is cost-effective?

a)

S3 Glacier Instant Retrieval

b)

S3 Glacier Flexible Retrieval.

c)

S3 Intelligent-Tiering

d)

S3 Storage Lens

45.

Your company needs to authenticate users in addition to sign-in credentials. What does this describe?

a)

IAM passwords

b)

Multi-Factor Authentication

c)

Cognito

d)

Service control policies

46.

Your RDS instances need to be patched after the latest vulnerability fix was released. Is this your responsibility?

a)

No, AWS will patch the underlying infrastructure that hosts the RDS service.

b)

Yes, patching the underlying instances must be done using the CLI.

c)

Partially, as AWS updates all large EC2 instance types.

d)

Yes, this is the customer's responsibility.

47.

Which of the following is a design principle of the AWS Well-Architected Framework?

a)

Disregard the business requirements.

b)

Never experiment.

c)

Improve through game days.

d)

Only build in one Availability Zone.

48.

Your company wants you to encrypt data stored in EBS volumes. What best describes the data?

a)

Data stored in EBS volumes is data in transit.

b)

Data stored in EBS volumes is data in encryption.

c)

Data stored in EBS volumes is data in pursuit.

d)

Data stored in EBS volumes is data at rest.

49.

Which of the following is a high-performance relational database service?

a)

Neptune

b)

DynamoDB

c)

Aurora

d)

Lambda

50.

You are launching an application and need to use containers, but you do not want to manage the instances themselves. Which container service do you need to use?

a)

Elastic Kubernetes Service

b)

Elastic Container Registry

c)

Elastic Container Service

d)

Fargate

51.

How would you run a command on several EC2 instances at the same time from the AWS Management Console?

a)

Software development kits (SDKs)

b)

Systems Manager

c)

Control Tower

d)


Identity and Access Management (IAM)

52.

You want to implement multiple languages for your audio book. Which AWS services can help you accomplish this?

(Choose2)

a)

Translate

b)

Transcribe

c)

Polly

d)

Textract

53.

Which types of deployments offer high availability?

a)

Single-AZ deployments.

b)

Single-Region deployments.

c)

Edge location deployments.

d)

Multi-Region deployments.

54.

You are working in a new test environment and need to determine if there are any improvements to the architecture that can be made to meet best practices. How can you retrieve recommendations that include that information?

a)

Inspector

b)

AWS CloudTrail

c)

Use CloudFront

d)

Trusted Advisor

55.

Your company is migrating several projects into the cloud. Which of the following services can help them manage them all?

a)

Migration Hub

b)

Application Migration Service (AMS)

c)

Database Migration Service (DMS)

d)

Smooth Migration Service (SMS)

56.

Benefits of using the Cloud Adoption Framework include the following:

(Choose2)

a)

It increases high availability.

b)

It can grow revenue.

c)

It adds elasticity.

d)


It can reduce business risks.

57.

You are managing a group of tasks that use EC2 instances overnight twice a week to pull reports on general file uploads. The reports are not business critical and the time the reports run fluctuate. What is the CHEAPEST pricing option that still meets these requirements?

a)

Spot instances

b)

Lambda

c)

On-Demand instances

d)

A Savings Plan

58.

You have been tasked with creating an environment and you have to use a JSON template to adhere to the company rules. What service allows you to do this?

a)

CloudFormation

b)

Elastic Beanstalk

c)

CloudWatch

d)


CloudTrail

59.

A financial company needs to migrate large amounts of data, at a terabyte scale, to AWS. Which of the following is the MOST cost-effective option?

a)

Snowcone

b)

Snowball

c)

Snowmobile

d)

Snowmonster

60.

Your company needs to stream data using Apache Kafka. Which AWS service can provide this ability?

a)

Managed Streaming for All Apache (MSA)

b)

Elastic Kafka Service (EKS)

c)

Elastic Apache Service (EAS)

d)

Managed Streaming for Apache Kafka (MSK)

61.

You have been tasked with implementing encryption on any new S3 buckets that are created. Can this be done?

a)

No - S3 encryption cannot be done once a bucket has been created.

b)

Yes - but the bucket must be copied to enable encryption when the bucket is recreated.

c)

No - S3 applies server-side encryption with managed keys automatically.

d)


Yes - all S3 buckets require encryption at creation.

62.

Your company needs to ensure that instances and containers are running nonstop for three years. They do have to be up the whole time and losing data would cause many problems. What is the CHEAPEST EC2 pricing option they can use?On-Demand

a)

On-Demand

b)

Reserved Instances

c)

A Savings Plan

d)

Spot Instances

63.

What is an example of the principle of least privilege?

a)

Give a user maximum access to everything in the account.

b)

Give a group maximum access to minimum resources.

c)

Give a user the minimum access required to get their job done.

d)

Use the root user for every action

64.

You need to update files in S3 every time there is a change made to a CloudFormation template. Which service can accomplish this?

a)

Elastic Beanstalk

b)

EC2

c)

Wavelength

d)

Lambda

65.

Which of the following statements is true of the default network access control list (NACL) with their default rules?

a)

New NACLs block outbound traffic and allow all incoming traffic.

b)

New NACLs allow only outbound traffic and block all incoming traffic.

c)

New NACLs allow both incoming and outbound traffic.

d)

New NACLs block both incoming and outbound traffic.