Worksheets(CLF-C02) AWS Certified Cloud Practitioner Practice Exam 3
Total questions: 65
Worksheet time: 34mins
Which AWS service acts as a stateful virtual firewall?
Virtual Private Clouds (VPCs)
Network Access Control Lists (NACLs)
Route53
Security groups
Which of the following is an action that can be taken by a root user?
(Choose3)
Deleting underlying AWS infrastructure
Adjusting password requirements
Deleting your AWS account
Creating a MySQL database
The benefits of cloud computing include which of the following?
(Choose2)
Stop guessing capacity.
No data center spend.
Focus on operational excellence.
Migrate without disruption.
You need to monitor your EC2 instances and receive notifications when their CPU usage is above 80%. What service can do this for you?
S3 Storage Lens
Cost Explorer
Athena
CloudWatch
Your company needs you to discover, prepare, and integrate data from multiple sources for analytics. Which service can do this for you using crawlers?
Elastic Map Reduce (EMR)
Athena
Kinesis
Glue
Your company want to ensure that all of the accounts billing is consolidated in one place. What service can be used to accomplish this?
Organizations
Billing Conductor
Pricing Calculator
Cost Explorer
Your company is ready to expand transformations across the environment. Which of the phases of the cloud journey transformation is this?
Align.
Envision.
Scale.
Launch.
You need an infrastructure offering that you can use like building blocks. Which cloud computing model does this describe?
Platform as a Service (PaaS).
Developer as a Service (DaaS).
Software as a Service (SaaS).
Infrastructure as a Service (IaaS).
You want to ensure that all EC2 instances are patched overnight every week. Which AWS service can help you achieve this?
Config
Systems Manager
CloudTrail
CloudWatch
Which security service provides a way to discover and help protect sensitive data?
Macie
Shield Advanced
Trusted Advisor
Shield Standard
In regards to the Cloud Adoption Framework, what perspective do Workforce Transformation and Organization Alignment fall under?
Security.
Governance.
Operations.
People.
According to the AWS shared responsibility model, who is responsible for patching and updating the underlying infrastructure of the Aurora service?
Customers
Neither customers nor AWS
AWS
Both customers and AWS
Your company needs to migrate into AWS. They are preparing to create a contact center for users to call if they have issues with the website. What service can be implemented to accomplish this?
Simple Email Service (SES)
Connect
Direct Connect
Elastic Beanstalk
You have to audit your environment to see if the way it is architected meets best practices according to the Well-Architected Framework. What can you use in AWS to do this?
The AWS Well-Architected Tool
The Cloud Adoption Tool
The Health Dashboard
The Control Tower
Your company has a group of EC2 instances that have random spikes in traffic. What is the most effective way to optimize these instances with the lowest operational overhead?
Add those instances to an Auto Scaling group to scale out and in based on demand.
Write a script to stop instances when demand is low.
Use Reserved Instances instead of On-Demand Instances.
Implement an elastic load balancer to scale out and in based on demand.
Your leader has requested detailed information about actual AWS costs of running your application. Which AWS service can help you with this?
Cost and Usage Reports
Budgets
Cost Explorer
Pricing Calculator
Your company is interested in joining the Partner Network. Which of the following are benefits to joining?
(Choose3)
Leverage training that is only available through the network.
Take part in Partner events like virtual workshops.
Take advantage of additional funding, credits, and discounts.
Enjoy free access to AWS events like re:Invent.
Your company is interested in migrating to the cloud and wants to ensure that they can protect their data long term. Which cloud benefit does this describe?
Agility.
High availability.
Elasticity.
Durability.
Your company wants to build more Internet of Things devices, but they need to do it fast. Which service can achieve this?
IoT Core
IoT Greengrass
IoT Device Management
IoT Analytics
The following are key pillars of the Well-Architected Framework:
Launch.
Performance Efficiency.
Operational Excellence.
Durability.
You are setting up new policies in IAM and need to include very specific permissions on several services that do not belong to an Organization. Which of the following can accomplish this?
A managed policy
An ultra policy
A service control policy
A custom policy
You need to implement a data warehouse that can handle structured and semi-structured data. Which AWS service would you use?
DynamoDB
Neptune
Aurora
Redshift
Your company needs to create and share paginated reports that include business intelligence data. What service can accomplish this?
QuickSight
OpenStore
ElastiCache
Simple Storage Service (S3)
You need to deploy your applications in the cloud and on-premises. Which AWS service below can be used to accomplish this?
X-Ray
Cloud9
CodeDeploy
CodePipeline
Your company needs to convert an existing database schema from Azure SQL to Aurora MySQL. Which service can accomplish this?
Aurora
DynamoDB
Schema Conversion Tool (SCT)
Database Conversions
A customer has created a group of seven users. What does the customer need to attach to the group to ensure all the users have the correct permissions?
An IAM policy
An IAM role
An access control list
An IAM service role
Your company needs to lower costs and has asked you to implement long polling. Which AWS service does this?
Simple Notification Service (SNS)
Inspector
Simple Queue Service (SQS)
Macie
Your application can never be down. How can you ensure this requirement can be met?
Use multiple Regions.
Use edge locations.
Use mutiple local zones.
Use multiple Availability Zones.
You are utilizing several security services like GuardDuty, Inspector, and WAF. Which service collects data from all of these in one place?
Detective
Security Hub
VPC Flow Logs
Shield
Which of the following best describes an AWS Availability Zone?
A collection of databases that can only be accessed from a specific geographic region
A collection of data centers that are spread evenly around a specific location
A console that gives you a quick, global picture of your cloud computing environment
A specific geographic location designed to provide high availability to a certain area
Which of the following aspects of security is the customer responsibility?
Physical security of AWS data centers
Security of AWS infrastructure
Access control
Security of Regions
You need to limit permissions across an Organization. What feature can provide this for you?
GuardDuty IAM findings
IAM user policy
Shield
Service control policies (SCPs)
You are auditing configurations and changes made to resource configurations. Which service can help you view them and correct anything that does not meet requirements?
Config
Trusted Advisor
Systems Manager
Control Tower
You need to access your AWS resources using Python. How can you do this?
The command-line interface (CLI).
Software development kits (SDKs).
Session interface.
Systems Manager.
Your company wants to move several applications into the cloud with as little downtime as possible. What service can accomplish this?
Database Migration Service (DMS)
Migration Hub
Service Migration Service (SMS)
Application Migration Service (AMS)
Your company is migrating into the cloud and needs to apply access control policies across multiple accounts. What service can help with this?
Cognito
Security Token Service (STS)
Organizations
Multi-Factor Authentication (MFA)
Your company needs to set a threshold on forecasted charges and receive notifications by email if there is a breach of that threshold. What service will let you do this?
CloudWatch
Pricing Calculator
QuickSight
Budgets
A company is considering migrating to the public cloud, but they need to keep some data on-premises. What cloud deployment model fits their needs?
Private.
Public.
Ultra.
Hybrid.
Your company requires that all services used in AWS are managed. Which of the following are managed services?
Identity and Access Management (IAM).
Elastic Compute Cloud (EC2).
Route 53.
Fargate.
Which of the concepts listed determine what an identity can access within AWS after authentication?
Principle of least privilege
Authorization
Root user
Authentication
You have been tasked with implementing a solution that can protect resources against Distributed Denial of Service (DDoS) attacks. Which service can do this?
Detective.
Inspector.
GuardDuty.
Shield.
You need to patch several EC2 instances in a private subnet. What can you implement to provide them with internet access outside the subnet?
VPC peering
NAT gateway
Internet gateway
API Gateway
You need to store file in S3, but you need to be able to access them like a file system from your EC2 instances. Which AWS service would you use?
S3 Storage Lens
Redshift
S3 File Gateway (Mountpoint)
CloudWatch
Your company wants to store files in S3, but they are not sure how to use the different tiers. Which of the following can implement a solution that is cost-effective?
S3 Glacier Instant Retrieval
S3 Glacier Flexible Retrieval.
S3 Intelligent-Tiering
S3 Storage Lens
Your company needs to authenticate users in addition to sign-in credentials. What does this describe?
IAM passwords
Multi-Factor Authentication
Cognito
Service control policies
Your RDS instances need to be patched after the latest vulnerability fix was released. Is this your responsibility?
No, AWS will patch the underlying infrastructure that hosts the RDS service.
Yes, patching the underlying instances must be done using the CLI.
Partially, as AWS updates all large EC2 instance types.
Yes, this is the customer's responsibility.
Which of the following is a design principle of the AWS Well-Architected Framework?
Disregard the business requirements.
Never experiment.
Improve through game days.
Only build in one Availability Zone.
Your company wants you to encrypt data stored in EBS volumes. What best describes the data?
Data stored in EBS volumes is data in transit.
Data stored in EBS volumes is data in encryption.
Data stored in EBS volumes is data in pursuit.
Data stored in EBS volumes is data at rest.
Which of the following is a high-performance relational database service?
Neptune
DynamoDB
Aurora
Lambda
You are launching an application and need to use containers, but you do not want to manage the instances themselves. Which container service do you need to use?
Elastic Kubernetes Service
Elastic Container Registry
Elastic Container Service
Fargate
How would you run a command on several EC2 instances at the same time from the AWS Management Console?
Software development kits (SDKs)
Systems Manager
Control Tower
Identity and Access Management (IAM)
You want to implement multiple languages for your audio book. Which AWS services can help you accomplish this?
(Choose2)
Translate
Transcribe
Polly
Textract
Which types of deployments offer high availability?
Single-AZ deployments.
Single-Region deployments.
Edge location deployments.
Multi-Region deployments.
You are working in a new test environment and need to determine if there are any improvements to the architecture that can be made to meet best practices. How can you retrieve recommendations that include that information?
Inspector
AWS CloudTrail
Use CloudFront
Trusted Advisor
Your company is migrating several projects into the cloud. Which of the following services can help them manage them all?
Migration Hub
Application Migration Service (AMS)
Database Migration Service (DMS)
Smooth Migration Service (SMS)
Benefits of using the Cloud Adoption Framework include the following:
(Choose2)
It increases high availability.
It can grow revenue.
It adds elasticity.
It can reduce business risks.
You are managing a group of tasks that use EC2 instances overnight twice a week to pull reports on general file uploads. The reports are not business critical and the time the reports run fluctuate. What is the CHEAPEST pricing option that still meets these requirements?
Spot instances
Lambda
On-Demand instances
A Savings Plan
You have been tasked with creating an environment and you have to use a JSON template to adhere to the company rules. What service allows you to do this?
CloudFormation
Elastic Beanstalk
CloudWatch
CloudTrail
A financial company needs to migrate large amounts of data, at a terabyte scale, to AWS. Which of the following is the MOST cost-effective option?
Snowcone
Snowball
Snowmobile
Snowmonster
Your company needs to stream data using Apache Kafka. Which AWS service can provide this ability?
Managed Streaming for All Apache (MSA)
Elastic Kafka Service (EKS)
Elastic Apache Service (EAS)
Managed Streaming for Apache Kafka (MSK)
You have been tasked with implementing encryption on any new S3 buckets that are created. Can this be done?
No - S3 encryption cannot be done once a bucket has been created.
Yes - but the bucket must be copied to enable encryption when the bucket is recreated.
No - S3 applies server-side encryption with managed keys automatically.
Yes - all S3 buckets require encryption at creation.
Your company needs to ensure that instances and containers are running nonstop for three years. They do have to be up the whole time and losing data would cause many problems. What is the CHEAPEST EC2 pricing option they can use?On-Demand
On-Demand
Reserved Instances
A Savings Plan
Spot Instances
What is an example of the principle of least privilege?
Give a user maximum access to everything in the account.
Give a group maximum access to minimum resources.
Give a user the minimum access required to get their job done.
Use the root user for every action
You need to update files in S3 every time there is a change made to a CloudFormation template. Which service can accomplish this?
Elastic Beanstalk
EC2
Wavelength
Lambda
Which of the following statements is true of the default network access control list (NACL) with their default rules?
New NACLs block outbound traffic and allow all incoming traffic.
New NACLs allow only outbound traffic and block all incoming traffic.
New NACLs allow both incoming and outbound traffic.
New NACLs block both incoming and outbound traffic.
