WorksheetsND-CLF-C02(P2)
Total questions: 65
Worksheet time: 38mins
Under the A WS shared responsibility model, what are the customer's
responsibilities? (Select TWO)
Physical and environmental security
Physical network devices including firewalls
Storage device decommissioning
Security of data in transit
Data integrity authentication
Which of the following is a principle of good A WS Cloud architecture
design?
Implement single points of failure
Implement loose coupling
Implement monolithic design
Implement vertical scaling
A company stores copies of backups on Amazon S3 and requires rapid
access but low resiliency. Which storage class is optimized for these
requirements?
Amazon S3 Standard
Amazon S3 Glacier Deep Archive
Amazon S3 One Zone-Infrequent Access
Amazon S3 Glacier
Which A WS service can be used to generate encryption keys that can be
used to encrypt data? (Select TWO)
Amazon Macie
AWS Certificate Manager
AWS Key Management Service (AWS KMS)
AWS Secrets Manager
AWS CIoudHSM
Which of the following are accurate descriptions of A WS IAM users and
groups? (Select TWO)
Groups can be nested and can contain other groups
A user can be a member of multiple groups
Groups can contain users only and cannot be nested
A user can only be a member of a single group at one a time
All new users are automatically added to a default group
Which benefit of the A WS Cloud eliminates the need for users to try
estimating future infrastructure usage?
Easy global deployments
Security of the AWS Cloud
Elasticity of the AWS Cloud
Economies of scale
A company plans to deploy a global commercial application on Amazon
EC2 instances. The deployment solution be designed with the highest
redundancy and fault tolerance.
Based on this situation, how should the EC2 instances be deployed?
In a single Availability Zone in one AWS Region
In a single Availability Zone in two AWS Regions
Across multiple Availability Zones in one AWS Region
Across multiple Availability Zones in two AWS Regions
Which A WS services can be used to connect the A WS Cloud and on-
premises resources? (Select TWO)
AWS Managed VPN
Amazon Connect
Amazon CloudHSM
AWS Direct Connect
AWS Managed Services
Which A WS service can you use to install a third-party database?
Amazon RDS
Amazon DynamoDB
Amazon EC2
Amazon EMR
Which service can you use to provision a preconfigured server with little to
no AWS experience?
Amazon Elastic Beanstalk
AWS Lambda
Amazon EC2
Amazon LightSail
Which service allows you to automatically expand and shrink your
application in response to demand?
AWS ElastiCache
Amazon Elastic Load Balancing
Amazon EC2 Auto Scaling
Amazon DynamoDB
What method can you use to take a backup of an Amazon EC2 instance
using A WS tools?
Take full and incremental file-level backups using the backup console
Take application-consistent backups using the EC2 API
Use Cross Region Replication (CRR) to copy the instance to another region
Take a snapshot to capture the point-in-time state of the instance
Which feature of A WS allows you to deploy a new application for which the
requirements may change over time?
Elasticity
Fault tolerance
Disposable resources
High availability
Which feature of Amazon Rekognition can assist with saving time?
Identification of objects in images and videos
Identification of the language of text in a document
Adds automatic speech recognitions (ASR) to applications
Provides on-demand access to compliance-related information
Which A WS service can be used to process a large amount of data using the
Hadoop framework?
Amazon Athena
Amazon Kinesis
AWS Glue
Amazon EMR
A company would like to maximize their potential volume and Reserved
Instance discounts across multiple accounts and also apply service control
policies on member accounts. Which service or tool can they use to gain
these benefits?
AWS Budgets
AWS Cost Explorer
AWS IAM
AWS Organizations
What are two ways that moving to an A WS cloud can benefit an
organization? (Select TWO)
Switch to a CAPEX model
Increase speed and agility
Stop guessing about capacity
Depreciate assets over a longer timeframe
Gain greater control of data center security
Which A WS service can an organization use to automate operational tasks
on EC2 instances using existing Chef cookbooks?
AWS OpsWorks
AWS Service Catalog
AWS Config
AWS CodeDeploy
Which of the following statements is correct in relation to consolidated
billing? (Select TWO)
Paying accounts are independent and cannot access resources of other
accounts
Used to consolidate billing across organizations
One bill is provided per AWS organization
V olume pricing discounts cannot be applied to resources
Only available to Enterprise customers
Which pricing model should you use for EC2 instances that will be used in a
lab environment for several hours on a weekend and must run
uninterrupted?
On-Demand
Reserved
Spot
Dedicated Instance
Which A WS service can be used to convert video and audio files from their
source format into versions that will playback on devices like smartphones,
tablets and PC?
Elastic Transcoder
Elastic Beanstalk
Elastic Load Balancer
Auto Scaling
Which service can be used to help you to migrate databases to A WS quickly
and securely?
AWS Key Management Service (KMS)
AWS Server Management Service (SMS)
AWS Database Migration Service (DMS)
AWS DataSync
Which A WS service is used to enable multi-factor authentication?
Amazon STS
AWS IAM
Amazon EC2
AWS KMS
What benefits are provided by Amazon CloudFront? (Select TWO)
Allows you to register domain names
Built-in Distributed Denial of Service (DDoS) attack protection
Used to enable private subnet instances to access the Internet
Content is cached at Edge Locations for fast distribution to customers
Provides a worldwide distributed DNS service
Which A WS support plan should you use if you need a response time of < 15
minutes for a business-critical system failure?
Basic
Developer
Business
Enterprise
Which feature can you use to grant read/write access to an Amazon S3 bucket?
IAM Role
IAM Policy
IAM Group
IAM User
How can an organization compare the cost of running applications in an on-
premise or colocation environment against the A WS cloud?
AWS Budgets
AWS Simple Monthly Calculator
TCO Calculator
AWS Cost Explorer
Which statement below is incorrect in relation to Network ACLs?
They operate at the Availability Zone level
They support allow and deny rules
They are stateless
They process rules in order
Which statement below is incorrect in relation to Security Groups?
They operate at the instance level
They support allow rules only
They are stateless
They evaluate all rules before making a decision
Which service allows you to run code as functions without needing to
provision or manage servers?
Amazon EC2
AWS CodeDeploy
AWS Lambda
Amazon EKS
What benefits does Amazon EC2 provide over using non-cloud servers?
(Select TWO)
Complete control of the hypervisor layer
Elastic web-scale computing
Inexpensive
Fault tolerance
High-availability with an SLA of 99.999%
What is the most cost-effective EC2 pricing option to use for a non-critical
overnight workload?
On-Demand
Spot
Reserved Instance
Dedicated Host
What is the most cost-effective support plan that should be selected to
provide at least a 1-hour response time for a production system failure?
Basic
Developer
Business
Enterprise
Under the shared responsibility model, what are examples of shared
controls? (Select TWO)
Patch management
Storage system patching
Physical and environmental
Configuration management
Service and Communications Protection
For which services does Amazon not charge customers? (Select TWO)
Amazon VPC
Amazon EBS
Amazon CloudFormation
Amazon S3
Amazon SNS
Which service can be used for building and integrating loosely-coupled,
distributed applications?
Amazon EBS
Amazon SNS
Amazon EFS
Amazon RDS
What can you use to quickly connect your office securely to your Amazon VPC?
Route Table
Internet Gateway
Direct Connect
AWS managed VPN
Which storage service allows you to connect multiple EC2 instances
concurrently using file-level protocols?
Amazon S3
Amazon EBS
Amazon EBS
Amazon Glacier
Which service records API activity on your account and delivers log files to
an Amazon S3 bucket?
Amazon CloudWatch
Amazon S3 Event Notifications
AWS CloudTrail
Amazon CloudWatch Logs
Which A WS storage technology can be considered a “virtual hard disk in
the cloud”?
Amazon Elastic File Storage (EFS) filesystem
Amazon Elastic Block Storage (EBS) volume
Amazon S3 object
Amazon Glacier archive
A company plans to create a hybrid cloud architecture. What technology
will allow them to create a hybrid cloud?
VPC Peering
Internet Gateway
AWS Direct Connect
Elastic Network Interface
What is the scope of a VPC within a region?
Spans all Availability Zones within the region
Spans all Availability Zones globally
At least 2 subnets per region
At least 2 data centers per region
What advantages do you get from using the A WS cloud? (Select TWO)
Trade capital expense for variable expense
Stop guessing about capacity
Increased capital expenditure
Gain greater control of the infrastructure layer
Comply with all local security compliance programs
Which tool enables you to visualize your usage patterns over time and to
identify your underlying cost drivers?
AWS Simple Monthly Calculator
Total Cost of Ownership (TCO) Calculator
AWS Cost Explorer
AWS Budgets
Which service supports the resolution of public domain names to IP
addresses or A WS resources?
Amazon Route 53
Amazon CloudFront
Amazon SNS
Hosted Zones
Which types of pricing policies does A WS offer? (Select TWO)
Pay-as-you-go
Enterprise license agreement (ELA)
Non-peak hour discounts
Global usage discounts
Save when you reserve
The A WS Identity and Access Management (IAM) service can be used to
manage which objects? (Select TWO)
Security groups
Access policies
Roles
Network ACLs
Key pairs
Under the A WS shared responsibility model what is the customer
responsible for? (Select TWO)
Physical security of the data center
Replacement and disposal of disk drives
Configuration of security groups
Patch management of infrastructure
Encryption of customer data
Which of the statements below is accurate regarding Amazon S3 buckets?
(Select TWO)Bucket names must be unique regionally
Bucket names must be unique regionally
Buckets are replicated globally
Bucket names must be unique globally
Buckets are region-specific
Buckets can contain other buckets
Which service can be used to track the CPU usage of an EC2 instance?
Amazon CloudTrail
Amazon CloudFront
Amazon CloudFormation
Amazon CloudWatch
Which A WS service allows you to connect to storage from on-premise
servers using standard file protocols?
Amazon S3
Amazon EBS
Amazon Glacier
Amazon EFS
The A WS global infrastructure is composed of? (Select TWO)
Regions
Clusters
Fault Zones
Availability Zones
IP subnets
Which items can be configured from within the VPC management console?
(Select TWO)
Subnets
Regions
Load Balancing
Auto Scaling
Security Groups
What advantages does deploying Amazon CloudFront provide? (Select
TWO)
A private network link to the AWS cloud
Reduced latency
Automated deployment of resources
Improved performance for end users
Provides serverless compute services
What is an availability zone composed of?
One or more regions
One or more data centers in a location
A collection of edge locations
A collection of VPCs
Which A WS service is primarily used for software version control?
AWS CodeCommit
AWS CodeStar
AWS Cloud9
AWS CodeDeploy
Which services can be used for asynchronous integration between
application components? (Select TWO)
Amazon SQS
AWS Step Functions
Amazon EC2 Auto Scaling
AWS CloudFormation
AWS Route 53
Which of the following is a method of backup available in the A WS cloud?
Amazon EBS Snapshots
Availability Zones
Amazon EFS File Systems
Amazon Route 53 Alias Record
Which A WS service should a Cloud Practitioner use to automate
configuration management using Puppet?
AWS Config
AWS OpsWorks
AWS CloudFormation
AWS Systems Manager
Which A WS service is used to send both text and email messages from
distributed applications?
Amazon Simple Notification Service (Amazon SNS)
Amazon Simple Email Service (Amazon SES)
Amazon Simple Workflow Service (Amazon SWF)
Amazon Simple Queue Service (Amazon SQS)
Which A WS service or feature allows a company to receive a single monthly
A WS bill when using multiple A WS accounts?
Consolidated billing
Amazon Cloud Directory
AWS Cost Explorer
AWS Cost and Usage report
A user needs an automated security assessment report that will identify
unintended network access to Amazon EC2 instances and vulnerabilities on
those instances.
Which A WS service will provide this assessment report?
EC2 security groups
AWS Config
Amazon Macie
Amazon Inspector
A company needs a consistent and dedicated connection between AWS
resources and an on-premise system.Which A WS service can fulfil this requirement?
AWS Direct Connect
AWS Managed VPN
Amazon Connect
AWS DataSync
Which of the following should be used to improve the security of access to
the A WS Management Console? (Select TWO)
AWS Secrets Manager
AWS Certificate Manager
AWS Multi-Factor Authentication (AWS MFA)
Security group rules
Strong password policies
An application has highly dynamic usage patterns. Which characteristics of
the A WS Cloud make it cost-effective for this type of workload? (Select
TWO)
High availability
Strict security
Elasticity
Pay-as-you-go pricing
Reliability
