DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

AWS CLF-C02 Exam Questions for Effective Preparation | AWS Certified Cloud Practitioner

Gear up to conquer the AWS Certified Advanced Networking - Specialty (ANS-C01) exam with SPOTO's comprehensive exam questions and answers, test questions, and exam preparation resources. Our meticulously crafted study materials cover the entire exam scope, equipping you with the knowledge to confidently tackle any exam question. Elevate your preparation with our mock exams, designed to simulate the real testing environment, allowing you to identify areas for improvement and ensure you pass successfully. Don't leave your certification aspirations to chance – leverage SPOTO's proven exam resources and embark on your journey to becoming an AWS Networking expert today. With our study materials at your disposal, you'll be well-prepared to excel in this challenging exam.
Take other online exams
Question #1
Which Amazon EC2 instance pricing model can provide discounts of up to 90%?
A. Reserved Instances
B. On-Demand
C. Dedicated Hosts
D. Spot Instances
View answer
Correct Answer: D

View The Updated CLF-C02 Exam Questions

SPOTO Provides 100% Real CLF-C02 Exam Questions for You to Pass Your CLF-C02 Exam!

Get CLF-C02 Practice Test
Question #2
A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data.Which combination of AWS services should the company use to meet these requirements? (Choose two.)
A. AWS Support
B. AWS Professional Services
C. AWS Launch Wizard
D. AWS Managed Services (AMS)
View answer
Correct Answer: AD
Question #3
A company has teams that have different job roles and responsibilities. The company’s employees often change teams. The company needs to manage permissions for the employees so that the permissions are appropriate for the job responsibilities.Which IAM resource should the company use to meet this requirement with the LEAST operational overhead?
A. IAM user groups
B. IAM roles
C. IAM instance profiles
D. IAM policies for individual users
View answer
Correct Answer: B
Question #4
Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?
A. AWS CLI
B. AWS Developer Center
C. AWS Cloud Development Kit (AWS CDK)
D. AWS CodeStar
View answer
Correct Answer: C
Question #5
A company wants to run its workload on Amazon EC2 instances for more than 1 year. This workload will run continuously. Which option offers a discounted hourly rate compared to the hourly rate of On-Demand Instances?
A. Agility
B. Elasticity
C. Reliability
D. Durability
View answer
Correct Answer: C
Question #6
A company wants to store and retrieve files in Amazon S3 for its existing on-premises applications by using industry-standard file system protocols.Which AWS service will meet these requirements?
A. AWS DataSync
B. AWS Snowball Edge
C. Amazon S3 File Gateway
D. AWS Transfer Family
View answer
Correct Answer: C
Question #7
A company wants to query its server logs to gain insights about its customers’ experiences.Which AWS service will store this data MOST cost-effectively?
A. Amazon Aurora
B. Amazon Elastic File System (Amazon EFS)
C. Amazon Elastic Block Store (Amazon EBS)
D. Amazon S3
View answer
Correct Answer: D
Question #8
A company wants to receive a notification when a specific AWS cost threshold is reached.Which AWS services or tools can the company use to meet this requirement? (Select TWO.)
A. mazon Simple Queue Service (Amazon SQS)
B. WS Budgets
C. ost Explorer
D. mazon CloudWatch
E. WS Cost and Usage Report
View answer
Correct Answer: BD
Question #9
Which AWS service or resource can be used to identify services that have been used by a user within a specified date range?
A. Amazon S3 access control lists (ACLs)
B. AWS Certificate Manager (ACM)
C. Network Access Analyzer
D. AWS Identity and Access Management Access Analyzer
View answer
Correct Answer: D
Question #10
Which AWS service or feature allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to groups of accounts?
A. AWS Identity and Access Management (IAM)
B. AWS Trusted Advisor
C. AWS CloudFormation
D. AWS Organizations
View answer
Correct Answer: D
Question #11
A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in an Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to grow for years.What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?
A. Spot Instances
B. On-Demand Instances
C. Savings Plans
D. Dedicated Hosts
View answer
Correct Answer: C
Question #12
How does AWS Cloud computing help businesses reduce costs? (Choose two.)
A. IAM group
B. IAM role
C. IAM tag
D. IAM Access Analyzer
View answer
Correct Answer: BE
Question #13
Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?
A. Amazon DynamoDB
B. Amazon Athena
C. Amazon RDS
D. Amazon EMR
View answer
Correct Answer: C
Question #14
A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.What is the MOST operationally efficient AWS solution for this scenario?
A. Create an Amazon S3 bucket for each user
B. Configure and deploy an AWS Storage Gateway file gateway
C. Move each user’s working environment to Amazon WorkSpaces
D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume
View answer
Correct Answer: B
Question #15
A company wants to run a NoSQL database on Amazon EC2 instances.Which task is the responsibility of AWS in this scenario?
A. Update the guest operating system of the EC2 instances
B. Maintain high availability at the database layer
C. Patch the physical infrastructure that hosts the EC2 instances
D. Configure the security group firewall
View answer
Correct Answer: C
Question #16
A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.Which pricing model enables the company to optimize costs and meet these requirements?
A. Reserved Instances
B. Spot Instances
C. On-Demand Instances
D. Dedicated Instances
View answer
Correct Answer: B
Question #17
To reduce costs, a company is planning to migrate a NoSQL database to AWS.Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?
A. Amazon Redshift
B. Amazon Aurora
C. Amazon DynamoDB
D. Amazon RDS
View answer
Correct Answer: C
Question #18
A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later.Which AWS service should the company use to meet these requirements?
A. AWS Certificate Manager (ACM)
B. IAM roles
C. AWS Security Hub
D. Amazon GuardDuty
View answer
Correct Answer: D
Question #19
A company wants to modernize and convert a monolithic application into microservices. The company wants to move the application to AWS.Which migration strategy should the company use?
A. Rehost
B. Replatform
C. Repurchase
D. Refactor
View answer
Correct Answer: D
Question #20
A company is setting up AWS Identity and Access Management (IAM) on an AWS account.Which recommendation complies with IAM security best practices?
A. Use the account root user access keys for administrative tasks
B. Grant broad permissions so that all company employees can access the resources they need
C. Turn on multi-factor authentication (MFA) for added security during the login process
D. Avoid rotating credentials to prevent issues in production applications
View answer
Correct Answer: C
Question #21
Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?
A. Amazon Route 53
B. Amazon Macie
C. AWS Direct Connect
D. AWS PrivateLink
View answer
Correct Answer: C
Question #22
Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?
A. Route table
B. AWS Transit Gateway
C. AWS Global Accelerator
D. Amazon VPC
View answer
Correct Answer: C
Question #23
Which AWS service should users use to learn about AWS service availability and operations?
A. Amazon EventBridge
B. AWS Service Catalog
C. AWS Control Tower
D. AWS Health Dashboard
View answer
Correct Answer: D
Question #24
Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?
A. VPC Flow Logs
B. Amazon Inspector
C. VPC endpoint services
D. NAT gateway
View answer
Correct Answer: A
Question #25
Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?
A. Amazon DynamoDB
B. Amazon Aurora
C. Amazon DocumentDB (with MongoDB compatibility)
D. Amazon Neptune
View answer
Correct Answer: A
Question #26
Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?
A. Data architecture
B. Event management
C. Cloud fluency
D. Strategic partnership
View answer
Correct Answer: C
Question #27
Which action will help increase security in the AWS Cloud?
A. Enable programmatic access for all IAM users
B. Use IAM users instead of IAM roles to delegate permissions
C. Rotate access keys on a reoccurring basis
D. Use inline policies instead of customer managed policies
View answer
Correct Answer: C
Question #28
A company needs to transfer data between an Amazon S3 bucket and an on-premises application.Who is responsible for the security of this data, according to the AWS shared responsibility model?
A. The company
B. AWS
C. Firewall vendor
D. AWS Marketplace partner
View answer
Correct Answer: A
Question #29
Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:
A. restricted access
B. as-needed access
C. least privilege access
D. token access
View answer
Correct Answer: C
Question #30
A company needs to use third-party software for its workload on AWS.Which AWS service or feature can the company use to purchase the software?
A. AWS Resource Access Manager
B. AWS Managed Services
C. AWS License Manager
D. AWS Marketplace
View answer
Correct Answer: D
Question #31
Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?
A. AWS CloudFormation
B. AWS CodePipeline
C. AWS Cloud Development Kit (AWS CDK)
D. AWS Systems Manager
View answer
Correct Answer: D
Question #32
A company that uses AWS needs to transfer 2 TB of data.Which type of transfer of that data would result in no cost for the company?
A. AWS Marketplace
B. Amazon Machine Image (AMI)
C. AWS CloudFormation
D. AWS OpsWorks
View answer
Correct Answer: A
Question #33
Which abilities are benefits of the AWS Cloud? (Choose two.)
A. Amazon Inspector
B. AWS Web Application Firewall (AWS WAF)
C. Elastic Load Balancing (ELB)
D. AWS Shield
View answer
Correct Answer: BD
Question #34
Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?
A. Scale the number of EC2 instances in or out automatically, based on demand
B. Use serverless EC2 instances
C. Scale the size of EC2 instances up or down automatically, based on demand
D. Transfer unused CPU resources between EC2 instances
View answer
Correct Answer: A
Question #35
Which option is a customer responsibility under the AWS shared responsibility model?
A. Maintenance of underlying hardware of Amazon EC2 instances
B. Application data security
C. Physical security of data centers
D. Maintenance of VPC components
View answer
Correct Answer: B
Question #36
A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.Which AWS service meets these requirements?
A. WS Lambda
B. mazon RDS
C. WS Fargate
D. mazon Athena
View answer
Correct Answer: C
Question #37
Which AWS service helps users audit API activity across their AWS account?
A. AWS CloudTrail
B. Amazon Inspector
C. AWS WAF
D. AWS Config
View answer
Correct Answer: A
Question #38
Which of the following services can be used to block network traffic to an instance? (Choose two.)
A. AWS Identity and Access Management (IAM)
B. AWS CloudTrail
C. AWS Compute Optimizer
D. Amazon EventBridge
View answer
Correct Answer: AC
Question #39
A company wants to create Amazon QuickSight dashboards every week by using its billing data.Which AWS feature or tool can the company use to meet these requirements?
A. AWS Budgets
B. AWS Cost Explorer
C. AWS Cost and Usage Report
D. AWS Cost Anomaly Detection
View answer
Correct Answer: C
Question #40
Which pricing model will interrupt a running Amazon EC2 instance if capacity becomes temporarily unavailable?
A. On-Demand Instances
B. Standard Reserved Instances
C. Spot Instances
D. Convertible Reserved Instances
View answer
Correct Answer: C
Question #41
A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes. Which AWS service or tool will meet this requirement?
A. IAM Access Analyzer
B. AWS Artifact
C. IAM credential report
D. AWS Audit Manager
View answer
Correct Answer: C
Question #42
A company wants to establish a schedule for rotating database user credentials.Which AWS service will support this requirement with the LEAST amount of operational overhead?
A. AWS Systems Manager
B. AWS Secrets Manager
C. AWS License Manager
D. AWS Managed Services
View answer
Correct Answer: B
Question #43
A systems administrator created a new IAM user for a developer and assigned the user an access key instead of a user name and password. What is the access key used for?
A. To access the AWS account as the AWS account root user
B. To access the AWS account through the AWS Management Console
C. To access the AWS account through a CLI
D. To access all of a company’s AWS accounts
View answer
Correct Answer: C
Question #44
Which AWS service can be used at no additional cost?
A. Amazon SageMaker
B. AWS Config
C. AWS Organizations
D. Amazon CloudWatch
View answer
Correct Answer: C
Question #45
A company wants to manage its AWS Cloud resources through a web interface.Which AWS service will meet this requirement?
A. AWS Management Console
B. AWS CLI
C. AWS SDK
D. AWS Cloud9
View answer
Correct Answer: A
Question #46
Which AWS service or tool can be used to set up a firewall to control traffic going into and coming out of an Amazon VPC subnet?
A. Security group
B. AWS WAF
C. AWS Firewall Manager
D. Network ACL
View answer
Correct Answer: D
Question #47
Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?
A. Physical security of DynamoDB
B. Patching of DynamoDB
C. Access to DynamoDB tables
D. Encryption of data at rest in DynamoDB
View answer
Correct Answer: C
Question #48
Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?
A. Amazon GuardDuty
B. Amazon Macie
C. Amazon Inspector
D. AWS Shield
View answer
Correct Answer: B
Question #49
Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?
A. Amazon Macie
B. Amazon Detective
C. Amazon GuardDuty
D. AWS IAM Access Analyzer
View answer
Correct Answer: A
Question #50
Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom alerts when their costs or usage exceed established thresholds?
A. Cost Explorer
B. AWS Budgets
C. AWS Cost and Usage Report
D. Reserved Instance reporting
View answer
Correct Answer: B
Question #51
A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its current geographical location as possible.Which AWS service or resource should the company use to select its Amazon RDS deployment area?
A. AWS Free Tier
B. AWS Pricing Calculator
C. AWS Billing and Cost Management
D. AWS Cost and Usage Report
View answer
Correct Answer: C
Question #52
Which option is a customer responsibility under the AWS shared responsibility model?
A. Maintenance of underlying hardware of Amazon EC2 instances
B. Application data security
C. Physical security of data centers
D. Maintenance of VPC components
View answer
Correct Answer: B
Question #53
A company needs to plan, schedule, and run hundreds of thousands of computing jobs on AWS.Which AWS service can the company use to meet this requirement?
A. AWS Step Functions
B. AWS Service Catalog
C. Amazon Simple Queue Service (Amazon SQS)
D. AWS Batch
View answer
Correct Answer: D
Question #54
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file
B. Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file
C. Have the EC2 instance assume a role to obtain the privileges to upload the file
D. Modify the S3 bucket policy so that any service can upload to it at any time
View answer
Correct Answer: C
Question #55
Which of the following is a fully managed MySQL-compatible database?
A. Amazon S3
B. Amazon DynamoDB
C. Amazon Redshift
D. Amazon Aurora
View answer
Correct Answer: D
Question #56
Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?
A. Sustainability
B. Performance efficiency
C. Governance
D. Reliability
View answer
Correct Answer: C
Question #57
How does AWS Cloud computing help businesses reduce costs? (Choose two.)
A. IAM group
B. IAM role
C. IAM tag
D. IAM Access Analyzer
View answer
Correct Answer: BE
Question #58
A company wants to migrate its NFS on-premises workload to AWS.Which AWS Storage Gateway type should the company use to meet this requirement?
A. Tape Gateway
B. Volume Gateway
C. Amazon FSx File Gateway
D. Amazon S3 File Gateway
View answer
Correct Answer: D
Question #59
Which AWS services or features enable users to connect on-premises networks to a VPC? (Choose two.)
A. Amazon RDS
B. Amazon DynamoDB
C. Amazon Aurora
D. Amazon Redshift
View answer
Correct Answer: AC
Question #60
A company wants to establish a schedule for rotating database user credentials.Which AWS service will support this requirement with the LEAST amount of operational overhead?
A. AWS Systems Manager
B. AWS Secrets Manager
C. AWS License Manager
D. AWS Managed Services
View answer
Correct Answer: B
Question #61
A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices.Which AWS service can the company use to meet these requirements?
A. AWS Trusted Advisor
B. Amazon Inspector
C. AWS Config
D. Amazon GuardDuty
View answer
Correct Answer: B
Question #62
A company needs to perform data processing once a week that typically takes about 5 hours to complete. Which AWS service should the company use for this workload?
A. AWS Lambda
B. Amazon EC2
C. AWS CodeDeploy
D. AWS Wavelength
View answer
Correct Answer: B
Question #63
A user needs to quickly deploy a nonrelational database on AWS. The user does not want to manage the underlying hardware or the database software.Which AWS service can be used to accomplish this?
A. Network ACLs
B. Security groups
C. AWS Trusted Advisor
D. AWS WAF
View answer
Correct Answer: B
Question #64
A company is moving an on-premises data center to the AWS Cloud. The company must migrate 50 petabytes of file storage data to AWS with the least possible operational overhead.Which AWS service or resource should the company use to meet these requirements?
A. AWS Snowmobile
B. AWS Snowball Edge
C. AWS Data Exchange
D. AWS Database Migration Service (AWS DMS)
View answer
Correct Answer: A
Question #65
Which encryption types can be used to protect objects at rest in Amazon S3? (Choose two.)
A. AWS Directory Service
B. AWS Identity and Access Management (IAM)
C. Amazon Cognito
D. AWS IAM Identity Center (AWS Single Sign-On)
View answer
Correct Answer: AB
Question #66
Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?
A. Physical security of DynamoDB
B. Patching of DynamoDB
C. Access to DynamoDB tables
D. Encryption of data at rest in DynamoDB
View answer
Correct Answer: C
Question #67
A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. The company wants to use AWS services for the backups without changing its existing backup workflows.Which AWS service should the company use to meet these requirements?
A. Amazon Elastic Block Store (Amazon EBS)
B. AWS Storage Gateway
C. Amazon Elastic Container Service (Amazon ECS)
D. AWS Lambda
View answer
Correct Answer: B
Question #68
A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources.Which AWS tool or service can be used to meet these requirements?
A. Amazon CloudWatch
B. Amazon Inspector
C. AWS CloudTrail
D. AWS IAM
View answer
Correct Answer: C
Question #69
A company wants to block SQL injection attacks.Which AWS service or feature should the company use to meet this requirement?
A. AWS WAF
B. Network ACLs
C. Security groups
D. AWS Certificate Manager (ACM)
View answer
Correct Answer: A
Question #70
A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities. Which AWS service will meet these requirements?
A. Amazon GuardDuty
B. Amazon Inspector
C. Amazon Detective
D. Amazon Cognito
View answer
Correct Answer: B
Question #71
What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?
A. AWS Certificate Manager
B. AWS Systems Manager
C. AWS Artifact
D. Amazon Inspector
View answer
Correct Answer: C
Question #72
A company must be able to develop, test, and launch an application in the AWS Cloud quickly.Which advantage of cloud computing will meet these requirements?
A. Stop guessing capacity
B. Trade fixed expense for variable expense
C. Achieve economies of scale
D. Increase speed and agility
View answer
Correct Answer: D
Question #73
Which AWS service or tool helps users visualize, understand, and manage spending and usage over time?
A. AWS Organizations
B. AWS Pricing Calculator
C. AWS Cost Explorer
D. AWS Service Catalog
View answer
Correct Answer: C
Question #74
Which of the following is a recommended design principle of the AWS Well-Architected Framework?
A. Reduce downtime by making infrastructure changes infrequently and in large increments
B. Invest the time to configure infrastructure manually
C. Learn to improve from operational failures
D. Use monolithic application design for centralization
View answer
Correct Answer: C
Question #75
Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.)
A. WS Cost Explorer
B. WS Billing Conductor
C. mazon CodeGuru
D. mazon SageMaker
E. WS Compute Optimizer
View answer
Correct Answer: AE
Question #76
A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-cost laptops.Which AWS service will help the company deploy the application without investing in backend infrastructure or high-end client hardware?
A. Amazon AppStream 2
B. AWS AppSync
C. Amazon WorkLink
D. AWS Elastic Beanstalk
View answer
Correct Answer: A
Question #77
A company wants to create templates that the company can reuse to deploy multiple AWS resources.Which AWS service or feature can the company use to meet this requirement?
A. AWS Step Functions
B. Amazon Simple Notification Service (Amazon SNS)
C. Amazon Kinesis Data Streams
D. Amazon Simple Queue Service (Amazon SQS)
View answer
Correct Answer: C
Question #78
What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?
A. Software licenses
B. Networking
C. Customer data
D. Encryption keys
View answer
Correct Answer: C
Question #79
A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.Which AWS service meets these requirements?
A. AWS Lambda
B. Amazon RDS
C. AWS Fargate
D. Amazon Athena
View answer
Correct Answer: C
Question #80
Which perspective in the AWS Cloud Adoption Framework (AWS CAF) includes capabilities for configuration management and patch management?
A. Platform
B. Operations
C. Security
D. Governance
View answer
Correct Answer: B
Question #81
Which AWS service provides command line access to AWS tools and resources directly from a web browser?
A. AWS CloudHSM
B. AWS CloudShell
C. Amazon WorkSpaces
D. AWS Cloud Map
View answer
Correct Answer: B
Question #82
A company wants to create templates that the company can reuse to deploy multiple AWS resources.Which AWS service or feature can the company use to meet this requirement?
A. AWS Step Functions
B. Amazon Simple Notification Service (Amazon SNS)
C. Amazon Kinesis Data Streams
D. Amazon Simple Queue Service (Amazon SQS)
View answer
Correct Answer: C
Question #83
A company is planning to move data backups to the AWS Cloud. The company needs to replace on-premises storage with storage that is cloud-based but locally cached.Which AWS service meets these requirements?
A. AWS Storage Gateway
B. AWS Snowcone
C. AWS Backup
D. Amazon Elastic File System (Amazon EFS)
View answer
Correct Answer: A
Question #84
A company needs to use third-party software for its workload on AWS.Which AWS service or feature can the company use to purchase the software?
A. AWS Resource Access Manager
B. AWS Managed Services
C. AWS License Manager
D. AWS Marketplace
View answer
Correct Answer: D
Question #85
Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses?
A. High availability
B. Economies of scale
C. Pay-as-you-go pricing
D. Global reach
View answer
Correct Answer: C
Question #86
Which AWS service can a company use to securely store and encrypt passwords for a database?
A. AWS Shield
B. AWS Secrets Manager
C. AWS Identity and Access Management (IAM)
D. Amazon Cognito
View answer
Correct Answer: B
Question #87
Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?
A. Amazon CloudWatch Logs
B. AWS CloudTrail
C. VPC Flow Logs
D. AWS Identity and Access Management (IAM)
View answer
Correct Answer: C
Question #88
A company plans to deploy containers on AWS. The company wants full control of the compute resources that host the containers. Which AWS service will meet these requirements?
A. Amazon Elastic Kubernetes Service (Amazon EKS)
B. AWS Fargate
C. Amazon EC2
D. Amazon Elastic Container Service (Amazon ECS)
View answer
Correct Answer: C
Question #89
Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?
A. ustainability
B. erformance efficiency
C. overnance
D. eliability
View answer
Correct Answer: C
Question #90
Which AWS service or feature allows a user to establish a dedicated network connection between a company's on-premises data center and the AWS Cloud?
A. WS Direct Connect
B. PC peering
C. WS VPN
D. mazon Route 53
View answer
Correct Answer: A
Question #91
A company is planning its migration to the AWS Cloud. The company is identifying its capability gaps by using the AWS Cloud Adoption Framework (AWS CAF) perspectives.Which phase of the cloud transformation journey includes these identification activities?
A. Envision
B. Align
C. Scale
D. Launch
View answer
Correct Answer: B
Question #92
A company plans to migrate to AWS and wants to create cost estimates for its AWS use cases.Which AWS service or tool can the company use to meet these requirements?
A. AWS Software Development Kit
B. AWS CodeDeploy
C. AWS Lambda
D. AWS Batch
View answer
Correct Answer: A
Question #93
A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost.Which pricing options meet these requirements with the LOWEST cost? (Choose two.)
A. Amazon Connect
B. AWS Wavelength
C. AWS Regions
D. AWS Direct Connect
View answer
Correct Answer: CD
Question #94
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company’s direct responsibility?
A. Cost of application software licenses
B. Cost of the hardware infrastructure on AWS
C. Cost of power for the AWS servers
D. Cost of physical security for the AWS data center
View answer
Correct Answer: A
Question #95
Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?
A. AWS Snowmobile
B. AWS Local Zones
C. AWS Outposts
D. AWS Fargate
View answer
Correct Answer: C
Question #96
A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted and does not need to run continuously.Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?
A. On-Demand Instances
B. Dedicated Instances
C. Spot Instances
D. Reserved Instances
View answer
Correct Answer: C
Question #97
A company is planning to migrate its application to the AWS Cloud.Which AWS tool or set of resources should the company use to analyze and assess its readiness for migration?
A. AWS Cloud Adoption Framework (AWS CAF)
B. AWS Pricing Calculator
C. AWS Well-Architected Framework
D. AWS Budgets
View answer
Correct Answer: A
Question #98
Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?
A. Amazon DynamoDB
B. Amazon Athena
C. Amazon RDS
D. Amazon EMR
View answer
Correct Answer: C
Question #99
Which AWS service is always provided at no charge?
A. Amazon S3
B. AWS Identity and Access Management (IAM)
C. Elastic Load Balancers
D. AWS WAF
View answer
Correct Answer: B
Question #100
Which AWS service enables users to check for vulnerabilities on Amazon EC2 instances by using predefined assessment templates?
A. AWS WAF
B. AWS Trusted Advisor
C. Amazon Inspector
D. AWS Shield
View answer
Correct Answer: C
Question #101
Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)
A. AWS Resource Explorer
B. AWS Service Catalog
C. AWS Organizations
D. AWS Systems Manager
View answer
Correct Answer: CD
Question #102
A company plans to migrate to the AWS Cloud. The company is gathering information about its on-premises infrastructure and requires information such as the hostname, IP address, and MAC address.Which AWS service will meet these requirements?
A. AWS DataSync
B. AWS Application Migration Service
C. AWS Application Discovery Service
D. AWS Database Migration Service (AWS DMS)
View answer
Correct Answer: C
Question #103
Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?
A. hysical security of DynamoDB
B. atching of DynamoDB
C. ccess to DynamoDB tables
D. ncryption of data at rest in DynamoDB
View answer
Correct Answer: C
Question #104
A company wants to grant users in one AWS account access to resources in another AWS account. The users do not currently have permission to access the resources.Which AWS service will meet this requirement?
A. Management of IAM user permissions
B. Creation of security group rules for outbound access
C. Maintenance of physical and environmental controls
D. Application of Amazon EC2 operating system patches
View answer
Correct Answer: B
Question #105
A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports.Which AWS service will meet this requirement?
A. AWS Trusted Advisor
B. Amazon CloudWatch
C. Amazon GuardDuty
D. AWS Health Dashboard
View answer
Correct Answer: A
Question #106
A developer wants to deploy an application quickly on AWS without manually creating the required resources. Which AWS service will meet these requirements?
A. Amazon EC2
B. AWS Elastic Beanstalk
C. AWS CodeBuild
D. Amazon Personalize
View answer
Correct Answer: B
Question #107
A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in an Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to grow for years.What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?
A. Spot Instances
B. On-Demand Instances
C. Savings Plans
D. Dedicated Hosts
View answer
Correct Answer: C
Question #108
Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and dynamically acquire computing resources to meet demand?
A. Security
B. Reliability
C. Performance efficiency
D. Cost optimization
View answer
Correct Answer: B
Question #109
Which of the following are advantages of moving to the AWS Cloud? (Choose two.)
A. AWS DataSync
B. Amazon S3 Glacier
C. AWS Storage Gateway
D. Amazon Elastic Block Store (Amazon EBS)
View answer
Correct Answer: BD
Question #110
Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?
A. AWS Budgets
B. AWS Cost Explorer
C. AWS Cost Allocation Tags
D. AWS Organizations
View answer
Correct Answer: A
Question #111
A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of agility. How does AWS provide agility for users?
A. The ability the ensure high availability by deploying workloads to multiple regions
B. A pay-as-you-go model for many services and resources
C. The ability to transfer infrastructure management to the AWS Cloud
D. The ability to provision and deprovision resources quickly with minimal effort
View answer
Correct Answer: D
Question #112
A company is assessing its AWS Business Support plan to determine if the plan still meets the company’s needs. The company is considering switching to AWS Enterprise Support.Which additional benefit will the company receive with AWS Enterprise Support?
A. A full set of AWS Trusted Advisor checks
B. Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week
C. A designated technical account manager (TAM) to assist in monitoring and optimization
D. A consultative review and architecture guidance for the company’s applications
View answer
Correct Answer: C
Question #113
A company wants to identify Amazon S3 buckets that are shared with another AWS account.Which AWS service or feature will meet these requirements?
A. AWS Lake Formation
B. IAM credential report
C. Amazon CloudWatch
D. IAM Access Analyzer
View answer
Correct Answer: D
Question #114
A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. The company wants to use AWS services for the backups without changing its existing backup workflows.Which AWS service should the company use to meet these requirements?
A. Amazon Elastic Block Store (Amazon EBS)
B. AWS Storage Gateway
C. Amazon Elastic Container Service (Amazon ECS)
D. AWS Lambda
View answer
Correct Answer: B
Question #115
A company wants to block SQL injection attacks.Which AWS service or feature should the company use to meet this requirement?
A. AWS WAF
B. Network ACLs
C. Security groups
D. AWS Certificate Manager (ACM)
View answer
Correct Answer: A
Question #116
A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.Which pillar of the AWS Well-Architected Framework is supported by these goals?
A. Reliability
B. Security
C. Operational excellence
D. Performance efficiency
View answer
Correct Answer: B
Question #117
A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup Language (SAML) 2.0.Which AWS service will meet this requirement?
A. AWS Identity and Access Management (IAM)
B. Amazon Cognito
C. AWS IAM Identity Center (AWS Single Sign-On)
D. AWS CLI
View answer
Correct Answer: C
Question #118
A company needs fully managed, highly reliable, and scalable file storage that is accessible over the Server Message Block (SMB) protocol.Which AWS service will meet these requirements?
A. Amazon S3
B. Amazon Elastic File System (Amazon EFS)
C. Amazon FSx for Windows File Server
D. Amazon Elastic Block Store (Amazon EBS)
View answer
Correct Answer: C
Question #119
Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom alerts when their costs or usage exceed established thresholds?
A. Cost Explorer
B. AWS Budgets
C. AWS Cost and Usage Report
D. Reserved Instance reporting
View answer
Correct Answer: B
Question #120
A company wants to run its workload on Amazon EC2 instances for more than 1 year. This workload will run continuously. Which option offers a discounted hourly rate compared to the hourly rate of On-Demand Instances?
A. Agility
B. Elasticity
C. Reliability
D. Durability
View answer
Correct Answer: C
Question #121
A company wants to receive a notification when a specific AWS cost threshold is reached.Which AWS services or tools can the company use to meet this requirement? (Choose two.)
A. AWS Artifact
B. Amazon Connect
C. AWS Chatbot
D. AWS Knowledge Center
View answer
Correct Answer: BD
Question #122
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
A. ard code an IAM user’s secret key and access key directly in the application, and upload the file
B. tore the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file
C. ave the EC2 instance assume a role to obtain the privileges to upload the file
D. odify the S3 bucket policy so that any service can upload to it at any time
View answer
Correct Answer: C
Question #123
Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?
A. Database backups
B. Database software patches
C. Operating system patches
D. Operating system installations
View answer
Correct Answer: D
Question #124
A company needs to perform data processing once a week that typically takes about 5 hours to complete. Which AWS service should the company use for this workload?
A. AWS Lambda
B. Amazon EC2
C. AWS CodeDeploy
D. AWS Wavelength
View answer
Correct Answer: B
Question #125
A company that uses AWS needs to transfer 2 TB of data.Which type of transfer of that data would result in no cost for the company?
A. AWS Marketplace
B. Amazon Machine Image (AMI)
C. AWS CloudFormation
D. AWS OpsWorks
View answer
Correct Answer: A
Question #126
Which of the following is an AWS value proposition that describes a user’s ability to scale infrastructure based on demand?
A. Speed of innovation
B. Resource elasticity
C. Decoupled architecture
D. Global deployment
View answer
Correct Answer: B
Question #127
Which design principles support the reliability pillar of the AWS Well-Architected Framework? (Choose two.)
A. Inbound data transfer from the internet
B. Outbound data transfer to the internet
C. Data transfer between AWS Regions
D. Data transfer between Availability Zones
View answer
Correct Answer: CE
Question #128
Which option is an AWS Cloud Adoption Framework (AWS CAF) platform perspective capability?
A. Data architecture
B. Data protection
C. Data governance
D. Data science
View answer
Correct Answer: A
Question #129
A company plans to deploy containers on AWS. The company wants full control of the compute resources that host the containers. Which AWS service will meet these requirements?
A. Amazon Elastic Kubernetes Service (Amazon EKS)
B. AWS Fargate
C. Amazon EC2
D. Amazon Elastic Container Service (Amazon ECS)
View answer
Correct Answer: C
Question #130
Which AWS service can be used at no additional cost?
A. Amazon SageMaker
B. AWS Config
C. AWS Organizations
D. Amazon CloudWatch
View answer
Correct Answer: C
Question #131
Which option is a benefit of using AWS for cloud computing?
A. Trade variable expense for fixed expense
B. Pay-as-you-go pricing
C. Decreased speed and agility
D. Spending money running and maintaining data centers
View answer
Correct Answer: B
Question #132
Which AWS service can be used to retrieve compliance reports on demand?
A. AWS Secrets Manager
B. AWS Artifact
C. AWS Security Hub
D. AWS Certificate Manager
View answer
Correct Answer: B
Question #133
A company wants to run a NoSQL database on Amazon EC2 instances.Which task is the responsibility of AWS in this scenario?
A. Update the guest operating system of the EC2 instances
B. Maintain high availability at the database layer
C. Patch the physical infrastructure that hosts the EC2 instances
D. Configure the security group firewall
View answer
Correct Answer: C
Question #134
A company wants to operate a data warehouse to analyze data without managing the data warehouse infrastructure. Which AWS service will meet this requirement?
A. Amazon Aurora
B. Amazon Redshift Serverless
C. AWS Lambda
D. Amazon RDS
View answer
Correct Answer: B
Question #135
A company wants to design a centralized storage system to manage the configuration data and passwords for its critical business applications.Which AWS service or capability will meet these requirements MOST cost-effectively?
A. AWS Systems Manager Parameter Store
B. AWS Secrets Manager
C. AWS Config
D. Amazon S3
View answer
Correct Answer: A
Question #136
A company has an Amazon EC2 instance in a private subnet. The company wants to initiate a connection to the internet to pull operating system updates while preventing traffic from the internet from accessing the EC2 instance.Which AWS managed service allows this?
A. VPC endpoint
B. NAT gateway
C. Amazon PrivateLink
D. VPC peering
View answer
Correct Answer: B
Question #137
A company wants to migrate its on-premises workloads to the AWS Cloud. The company wants to separate workloads for chargeback to different departments.Which AWS services or features will meet these requirements? (Choose two.)
A. Enable client-side encryption for objects that are stored in Amazon S3
B. Configure IAM security policies to comply with the principle of least privilege
C. Patch the guest operating system on an Amazon EC2 instance
D. Apply updates to the Nitro Hypervisor
View answer
Correct Answer: BE

View The Updated AWS Exam Questions

SPOTO Provides 100% Real AWS Exam Questions for You to Pass Your AWS Exam!

Get AWS Practice Test

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.