WorksheetsAws CLF-C02 JB
Total questions: 65
Worksheet time: 35mins
A customer wants to further secure his network beyond security groups and network access control lists. Which of the services below can be used to provide the additional security features? (Select TWO.)
AWS WAF
AWS Key Management Service
AWS Single Sign-On
Amazon GuardDuty
Amazon SQS
In implementing continuous integration and continuous delivery (CI/CD) in your cloud architecture, which service will make it easy for you to set up your entire development and continuous delivery toolchain for coding, building, testing, and deploying your application code?
AWS CodeStar
AWS CodeBuild
AWS CodePipeline
AWS CodeCommit
Availability Zones are physically separated by a meaningful distance from any other AZ, although all are within 100 km or 60 miles of each other. What is the primary reason why Availability Zones are set up the way they are now?
To maximize area coverage in a Region
To keep them as far apart from each other in case of a disaster
Price of the land is cheaper in those locations
To achieve better network connectivity to users in the location
What is the lowest support plan that allows an unlimited number of technical support cases to be opened?
Basic
Developer
Business
Enterprise
A customer has recently experienced an SQL injection attack on their web application’s database hosted in EC2. They submitted a complaint ticket to AWS. What should be the response from AWS?
AWS should not be liable for the damages since the customer should have properly patched the EC2 instance.
AWS and the customer should contact a third party auditor to verify the incident.
AWS should secure their infrastructure better to reduce these kinds of incidents.
AWS should reiterate that the customer is responsible for the security of their applications in the Cloud.
Which compliance requirement has AWS achieved that allows handling of medical information?
SOC 1
HIPAA
PCI DSS
SOC 2
You have a customized EC2 instance running your latest web application. How can you create an exact copy of this instance in another region?
There is no way to do this in AWS. You will have to perform the transfer manually.
Create a load balancer with an auto scaling group that is linked between your two regions. Scale up to have another instance running in the other region.
Create backups of all your EBS volumes and copy them to another region.
Create a golden AMI of the instance and copy it to the other region.
What is the right arrangement of the AWS Global Infrastructure components according to their geographical coverage area size, in descending order?
Edge Locations, Availability Zones, Regions
Regions, Edge Locations, Availability Zones
Regions, Availability Zones, Edge Locations
Availability Zones, Edge Locations, Regions
You have an Amazon Linux EC2 instance running for an hour and thirty minutes. How will AWS bill you in terms of usage?
You will only be billed for an hour according to the hourly billing rule
You will be billed for one hour and thirty minutes according to the hourly billing rule
You will be billed for an hour and twenty-nine minutes according to the per second billing rule
You will be billed for an hour and thirty minutes according to the per-second billing rule
Which of the following services combine 5G networks with AWS compute and storage services for the benefit of high-performance mobile applications?
AWS Control Tower
AWS Cloud9
AWS Amplify
AWS Wavelength
What AWS service can monitor the compliance status of your AWS resources against a set of compliance guidelines?
AWS Artifact
AWS Config
AWS IAM
Amazon CloudWatch
Which AWS service allows me to patch my Windows EC2 instances without having to RDP into them?
Amazon Simple Workflow
AWS Systems Manager
AWS CloudFormation
AWS CodeDeploy
Which of the following options helps cloud architects build secure, high-performing, resilient, and efficient infrastructure for their applications based on the six pillars?
AWS Cloud Adoption Framework
AWS Serverless Application Model
AWS Security Hub
AWS Well-Architected Framework
In the event of a disaster or an outage, AWS recommends that you spread your servers and databases at least in different _____?
Regions
AWS Accounts
VPCs
Availability Zones
Auto-Scaling based on demand is an implementation of which AWS cloud best practice?
Drive architectures using data.
Design for failure.
Design for perfection.
Implement elasticity.
Which AWS service will allow you to serve your dynamic web content to users globally?
Amazon S3
AWS Elastic Load Balancer
Amazon Route 53
Amazon CloudFront
Which of the following instances is it better to use IAM roles rather than IAM users? (Select TWO.)
When you need an administrator to handle the AWS account for you
When you need a GUI to interact with your AWS environment
When you have outside entities that need to perform specific actions in your AWS account
If you have employees who will constantly need access to your AWS resources
When you want to provide AWS services permissions to do certain actions
Which of the following services should you provision if your local data center requires additional storage space without having to migrate data?
AWS Snowball Edge
AWS Storage Gateway
AWS Backup
AWS Direct Connect
Which of the following purchase options offers the most significant discount compared to On-Demand instance pricing to process steady-state workloads that will continuously be running for a year and also provide capacity reservation?
Dedicated Instance
Standard Reserved Instance
Savings Plans
Convertible Reserved Instance
How is expense shifted when moving from traditional servers to the Cloud?
Capital expense is traded for operational expense
Variable expense is traded for capital expense
Operational expense is traded for variable expense
Capital expense is traded for variable expense
Where can the customer view his Reserved Instance usage for the past month?
Amazon S3
AWS Billing Console
Amazon EC2
AWS Organizations
Which payment plan will give you the largest discount when purchasing EC2 reserved instances?
All upfront payment for a 3-year term purchase
Partial upfront payment for a 1-year term purchase
Partial upfront payment for a 3-year term purchase
All upfront payment for a 1-year term purchase
Which cloud computing advantage describes how you can easily deploy your application in multiple AWS regions with just a few clicks?
Stop guessing capacity
Go global in minutes
Benefit from massive economies of scale
Stop spending money running and maintaining data centers
What is the primary benefit of creating a scalable system?
Applications are able to handle varying loads of work
Application resources will cost less than usual
Applications are not easily targeted by malicious attacks
Applications are able to failover gracefully
What are the benefits of using Amazon DynamoDB as your database? (Select TWO.)
Database size scales automatically so you won’t have to worry about capacity
DynamoDB is self-healing, which means your data is scanned for errors and is repaired continuously
DynamoDB offers 11 9’s in terms of durability, according to the SLA
You can store different kinds of unstructured data that would normally not be suitable for relational databases
You can perform very complex queries and joins without deterioration in performance
Where is the best place to archive logs and other infrequently accessed files for a long period of time?
Amazon EBS
Amazon Storage Gateway
Amazon S3 Glacier Flexible Retrieval
Amazon S3 Standard-IA
Due to a high number of visitors, many customers are timing out from your website which is running in an Auto Scaling group of EC2 instances behind an ELB. Upon checking, the Auto Scaling group has stopped adding new instances to your group. Which of the following Trusted Advisor categories will give you more insight on this issue? (Select TWO.)
Fault Tolerance
Performance
Security
Cost Optimization
Service Limits
Which AWS storage service offers faster disk read and write performance and provides temporary block-level storage for your instance?
EBS Throughput Optimized HDD
EBS Provisioned IOPS SSD
Instance Store
EFS
An employee is asking for access to your S3 buckets. What should be the level of access that you should provide to him?
Give him administrator access levels
Give him S3 full access
Give him read-only access
Ask what type of access he requires and only provide him those permissions
Which of the following is true regarding the AWS Cost and Usage report? (Select TWO.)
Provides you with granular data about your AWS costs and usage
Provides you a dashboard that lets you view the status of your month-to-date AWS expenditure and provides access to a number of other cost management products that can help you dig deeper into your AWS costs and usage
Lets you set custom cost and usage budgets that alert you when those thresholds are exceeded
Helps you visualize, understand, and manage your AWS costs and usage over time via an intuitive interface that enables you to quickly create custom reports
Allows you to load your cost and usage information into Amazon Athena, Amazon Redshift, and AWS QuickSight
Which of the following is an example of having a highly available application in AWS?
Running spot instances for your EC2 workloads
Running CloudFront for the static website in your S3 bucket
Using SQS to decouple messages between a sender and a receiver
Running your RDS instance with multi-AZ enabled
When is using Amazon RDS a better choice than using a local database?
When you need a free Enterprise license for your Enterprise databases
When you need full control of your SQL database
When you want to offload administration responsibilities from yourself
When you need a fast network connection to your local web servers
Which of the following is not a standard design principle when designing systems in AWS?
Servers, not services
Loose coupling
Design for failure
Disposable resources instead of fixed servers
Which of the following does the Enterprise support plan provide to customers in AWS? (Select TWO.)
Proactive Technical Account Management
5-minute response time support if your business-critical system goes down
Limited access to the 7 Core Trusted Advisor checks
Access to online self-paced labs
15-minute response time support if your production system goes down
A customer has a popular website that has millions of viewers from all over the world and has read-heavy database workloads. Which of the following is the best option to use to increase the read throughput on their database?
Enable Amazon RDS Standby Replicas
Use SQS to queue up the requests
Enable Amazon RDS Read Replicas
Enable Multi-AZ deployments
Which of the following actions does not affect costs when using Amazon S3?
Choosing S3 Standard IA rather than One Zone IA
Moving objects out of your S3 bucket to another bucket
Making GET requests to your S3 objects
Data transfer costs for uploading objects into your S3 bucket.
Which among the following is the most cost-effective and scalable choice for object storage?
Amazon EBS
AWS Storage Gateway
Amazon EFS
Amazon S3
A leading mobile game company has a mission-critical server that is currently down in AWS. The Systems Administrator needs to bring it back up within 15 minutes for service continuity. Which of the following support plans will allow the Administrator to contact technical support to immediately resolve the issue?
Business
Developer
Enterprise On-Ramp
Enterprise
What cloud computing model deals with services such as EC2 instances?
DaaS
PaaS
SaaS
IaaS
Which of the following do you need to programmatically interact with your AWS environment? (Select TWO.)
Account username and password
AWS SDK
Access keys
AWS Lambda
AWS Management Console
A company is planning to use AWS Cloud to augment the resources of their on-premises data center to better serve their customers around the world. How does a company benefit from using AWS?
Replace low variable costs with upfront capital infrastructure expenses
Benefit from massive discounts from the Amazon.com shopping website
Replace high variable costs with upfront capital infrastructure expenses
Benefit from massive economies of scale
What is a good disaster recovery precaution if you are launching a dynamic web application with mission-critical workloads that need to be available all the time?
Launch applications in two different AWS Regions to prevent downtime during regional outages.
Launch applications in two different AZs to prevent downtime during regional outages.
Run applications in the cloud but keep all data locally.
Always keep backup data stored in two different S3 buckets.
Which of the following does AWS automatically handle for you? (Select TWO.)
Introduce updates and patches to EC2 guest operating systems
Provide web application firewall protection to your public endpoints.
Secure AWS data centers from environmental hazards
Introduce updates and patches to EC2 hypervisors
Makes sure your data is safely kept and replicated between AZs
Which service offers volume discounts when you enable Consolidated Billing?
AWS CloudTrail
Amazon CloudFront
Amazon S3
Amazon SNS
A number of servers in your on-premises data center have been collecting dust over the past few years. What is the benefit of moving to the Cloud in this case?
The ability to provision resources only when you need them
The ability to pay for only what you use
Physical servers are managed and maintained by AWS for you
AWS has automated services for you
Which of the following RDS engines allows you to bring your own license (BYOL)?
Oracle
MS SQL
PostgreSQL
MySQL
What infrastructure does Amazon CloudFront utilize to speed up content delivery to customers?
Edge Locations
Local Zones
Availability Zones
Direct Connect
What is an advantage of cloud computing when it comes to equipment expenditures?
AWS introduces cost reductions each year in their services.
You can easily scale and manage the number of resources running in your cloud environment.
AWS makes sure that physical devices are continuously secured and monitored.
AWS uses the cheapest possible equipment for their data centers so that they do not charge expensive fees.
Which of the following is not a part of the AWS Global Infrastructure?
Placement Groups
Edge Locations
Regions
Availability Zones
Which of the following is an example of IaaS in AWS?
AWS Elastic Beanstalk
AWS CloudFormation
AWS IAM
Amazon EC2
Which of the following is part of the best practices in securing your AWS account?
Grant Most Privilege
Always manually define permissions to each and every individual IAM user
Create an IAM user with admin privileges instead of using root
Enable MFA only on the root account
What type of EBS volume is recommended for most workloads and is also usable as a boot volume?
Cold HDD
Provisioned IOPS SSD
General Purpose SSD
Throughput Optimized HDD
A customer is using Amazon S3 to store sprites of game characters. When players retrieve these sprites, they are temporarily stored on the player’s computer. The sprites are currently stored in the S3 Standard storage class. Which of the following options would you recommend to optimize storage costs?
Have the customer directly upload the sprites to S3 Standard - Infrequent Access.
Add a lifecycle policy to move sprites to S3 Standard - Infrequent Access after the customer uploads them.
Add a lifecycle policy to move sprites to S3 Glacier Flexible Retrieval after the customer uploads them.
Have the customer compress the sprites to reduce storage consumption.
Which of the following AWS services are considered to be global services? (Select TWO.)
AWS Lambda
Amazon VPC
AWS WAF
AWS CloudTrail
Amazon Route 53
Which AWS well-architected pillar stresses the importance of selecting the most appropriate and right number of resource types for your requirements?
Cost optimization
Performance Efficiency
Operational Excellence
Reliability
A customer is choosing the best AWS support plan which includes a designated Technical Account Manager. Which of the following should they choose?
Enterprise
Developer
Business
Enterprise On-Ramp
A Software Engineer is having trouble migrating and configuring a licensed application on an EC2 instance. Which of the following options would you recommend to quickly get the applications up and running in AWS?
Create a Docker image of the application and launch Docker in the EC2 instances.
Setup a VPN connection from her local network to her AWS VPC, which essentially means that her work is now running in the Cloud.
Use AWS Application Discovery Service to create an exact copy of the application in EC2.
Try to look for an AMI in the AWS Marketplace that provides a similar setup to her application stack.
A startup is in need of a database that is capable of self-healing and has a high throughput. Which of the following services fits these criteria?
Amazon DynamoDB
Amazon Aurora
Amazon Redshift
Amazon RDS
A mobile game startup plans to upgrade its local servers to serve consumers better. However, locally stored data cannot be migrated due to compliance requirements. Which of the following options would you recommend to satisfy this requirement?
Slowly migrate your web servers and data into AWS while keeping your budget in check.
Do not perform any migration for now to save up some capital for a large scale migration in the future.
Dispose all of your servers and migrate your data to AWS since it will be cheaper and more durable to store data in the cloud.
Utilize AWS web servers but keep your data locally. Setup a hybrid model in which the web servers in AWS will communicate with your local data store.
A MariaDB RDS database is known to have high memory consumption during peak hours which deteriorates the overall performance of your application. What cost-effective change can you introduce to resolve this issue if the database is handling write-intensive operations?
Distribute the workload by running multiple instances
Add read replicas to lessen the burden of read operations
Switch to DynamoDB to enjoy millisecond latency
Scale the instance vertically to a higher memory capacity
If you are tasked to create a lightweight Wordpress site in AWS without having to install the package on your own, which PaaS solution in AWS will allow you to do this easily?
AWS Glue
Amazon GameLift
AWS Elastic Beanstalk
Amazon Lightsail
Which of the following controls does the customer fully inherit from AWS based on the Shared Responsibility Model?
Physical and Environmental Controls
Patch Management
Configuration Management
Awareness and Training
As an AWS customer, what offering do you naturally inherit from AWS after you sign up?
All the best practices of AWS policies, architecture, and operational processes built to satisfy your requirements
All the responsibilities in enforcing security and compliance policies of your organization
All the hardware and software that you provision in the AWS cloud
All the data you store in and retrieve from AWS
You believe that your AWS root account may have been used without you knowing. What can you do to tighten the security on the root account?
Enable Cloudtrail to monitor for suspicious logins
Change the root account password often
Configure MFA for your root account
Disable root account credentials and use an IAM user with admin privileges instead
What does AWS do when a storage device reaches the end of its lifespan?
AWS wipes the drives and sends it back to the manufacturer to procure a new one
AWS archives the device in case customers request their data again
AWS follows a strict decommissioning process as described in compliance procedures
AWS simply wipes the device and disposes it
