DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Excel in the AWS Exam with Reliable CLF-C02 Study Materials

Mastering the AWS Certified Advanced Networking - Specialty (ANS-C01) exam requires a strategic approach, and SPOTO is here to guide you every step of the way. Our comprehensive exam questions and answers, test questions, and exam preparation materials are meticulously crafted to cover the entire exam scope, ensuring you're well-equipped to tackle any challenge. Enhance your preparation with our mock exams, simulating the real testing environment to identify areas for improvement and build confidence. With SPOTO's study materials and exam resources at your disposal, you'll be poised to pass successfully on your first attempt. Don't leave your certification aspirations to chance – leverage our proven solutions and embark on your journey to becoming an AWS Networking expert today. Invest in SPOTO's resources for a seamless path to ANS-C01 success.
Take other online exams
Question #1
Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?
A. Amazon CloudWatch Logs
B. AWS CloudTrail
C. VPC Flow Logs
D. AWS Identity and Access Management (IAM)
View answer
Correct Answer: C

View The Updated CLF-C02 Exam Questions

SPOTO Provides 100% Real CLF-C02 Exam Questions for You to Pass Your CLF-C02 Exam!

Get CLF-C02 Practice Test
Question #2
A company is using Amazon DynamoDB.Which task is the company’s responsibility, according to the AWS shared responsibility model?
A. Patch the operating system
B. Provision hosts
C. Manage database access permissions
D. Secure the operating system
View answer
Correct Answer: C
Question #3
A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-cost laptops.Which AWS service will help the company deploy the application without investing in backend infrastructure or high-end client hardware?
A. Amazon AppStream 2
B. AWS AppSync
C. Amazon WorkLink
D. AWS Elastic Beanstalk
View answer
Correct Answer: A
Question #4
A company needs to block SQL injection attacks.Which AWS service or feature can meet this requirement?
A. AWS Service Catalog
B. AWS Systems Manager
C. AWS IAM Access Analyzer
D. AWS Organizations
View answer
Correct Answer: A
Question #5
What are the benefits of consolidated billing for AWS Cloud services? (Choose two.)
A. S3 Multi-Region Access Points
B. S3 Storage Lens
C. AWS IAM Identity Center (AWS Single Sign-On)
D. Access Analyzer for S3
View answer
Correct Answer: AC
Question #6
A developer has been hired by a large company and needs AWS credentials.Which are security best practices that should be followed? (Choose two.)
A. Security groups
B. AWS Firewall Manager
C. IAM roles
D. IAM user SSH keys
View answer
Correct Answer: AE
Question #7
A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices.Which AWS service can the company use to meet these requirements?
A. WS Trusted Advisor
B. mazon Inspector
C. WS Config
D. mazon GuardDuty
View answer
Correct Answer: B
Question #8
Which tasks are the customer’s responsibility, according to the AWS shared responsibility model? (Choose two.)
A. Resource tagging
B. Consolidated billing
C. Pay-as-you-go pricing
D. Spot Instances
View answer
Correct Answer: BC
Question #9
A company is planning its migration to the AWS Cloud. The company is identifying its capability gaps by using the AWS Cloud Adoption Framework (AWS CAF) perspectives.Which phase of the cloud transformation journey includes these identification activities?
A. Envision
B. Align
C. Scale
D. Launch
View answer
Correct Answer: B
Question #10
A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting.Which S3 feature should the company use to meet these requirements?
A. S3 Lifecycle rules
B. S3 Versioning
C. S3 bucket policies
D. S3 server-side encryption
View answer
Correct Answer: B
Question #11
A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service limits, fault tolerance and security.Which AWS service can the company use to meet these requirements?
A. AWS Shield
B. AWS WAF
C. AWS Trusted Advisor
D. AWS Service Catalog
View answer
Correct Answer: C
Question #12
A company needs to continuously run an experimental workload on an Amazon EC2 instance and stop the instance after 12 hours.Which instance purchasing option will meet this requirement MOST cost-effectively?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Instances
View answer
Correct Answer: A
Question #13
A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data.Which combination of AWS services should the company use to meet these requirements? (Choose two.)
A. AWS Support
B. AWS Professional Services
C. AWS Launch Wizard
D. AWS Managed Services (AMS)
View answer
Correct Answer: AD
Question #14
Which option is a benefit of the economies of scale based on the advantages of cloud computing?
A. The ability to trade variable expense for fixed expense
B. Increased speed and agility
C. Lower variable costs over fixed costs
D. Increased operational costs across data centers
View answer
Correct Answer: C
Question #15
Which AWS service provides the ability to manage infrastructure as code?
A. AWS CodePipeline
B. AWS CodeDeploy
C. AWS Direct Connect
D. AWS CloudFormation
View answer
Correct Answer: D
Question #16
A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.Which activities related to a Snowball Edge device are available to the company at no cost?
A. se of the Snowball Edge appliance for a 10-day period
B. he transfer of data out of Amazon S3 and to the Snowball Edge appliance
C. he transfer of data from the Snowball Edge appliance into Amazon S3
D. aily use of the Snowball Edge appliance after 10 days
View answer
Correct Answer: C
Question #17
A company is storing data that will not be frequently accessed in the AWS Cloud. If the company needs to access the data, the data needs to be retrieved within 12 hours. The company wants a solution that is cost-effective for storage costs for each gigabyte.Which Amazon S3 storage class will meet these requirements?
A. S3 Standard
B. S3 Glacier Flexible Retrieval
C. S3 One Zone-Infrequent Access (S3 One Zone-IA)
D. S3 Standard-Infrequent Access (S3 Standard-IA)
View answer
Correct Answer: B
Question #18
Which AWS service or tool can be used to set up a firewall to control traffic going into and coming out of an Amazon VPC subnet?
A. Security group
B. AWS WAF
C. AWS Firewall Manager
D. Network ACL
View answer
Correct Answer: D
Question #19
Which options are AWS Cloud Adoption Framework (AWS CAF) security perspective capabilities? (Choose two.)
A. AWS Graviton processor
B. Dedicated Hosts
C. EC2 Instance Savings Plans
D. Amazon EC2 Auto Scaling instances
View answer
Correct Answer: CD
Question #20
A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud. Which service should be used to deploy the application?
A. AWS CloudFormation
B. AWS Elastic Beanstalk
C. Amazon EC2
D. AWS OpsWorks
View answer
Correct Answer: B
Question #21
A company is building an application that needs to deliver images and videos globally with minimal latency. Which approach can the company use to accomplish this in a cost effective manner?
A. Deliver the content through Amazon CloudFront
B. Store the content on Amazon S3 and enable S3 cross-region replication
C. Implement a VPN across multiple AWS Regions
D. Deliver the content through AWS PrivateLink
View answer
Correct Answer: A
Question #22
Which action is a security best practice for access to sensitive data that is stored in an Amazon S3 bucket?
A. Enable S3 Cross-Region Replication (CRR) on the S3 bucket
B. Use IAM roles for applications that require access to the S3 bucket
C. Configure AWS WAF to prevent unauthorized access to the S3 bucket
D. Configure Amazon GuardDuty to prevent unauthorized access to the S3 bucket
View answer
Correct Answer: B
Question #23
A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.Which pricing model enables the company to optimize costs and meet these requirements?
A. Reserved Instances
B. Spot Instances
C. On-Demand Instances
D. Dedicated Instances
View answer
Correct Answer: B
Question #24
Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?
A. Amazon Route 53
B. Amazon Macie
C. AWS Direct Connect
D. AWS PrivateLink
View answer
Correct Answer: C
Question #25
A company is deploying a machine learning (ML) research project that will require a lot of compute power over several months. The ML processing jobs do not need to run at specific times.Which Amazon EC2 instance purchasing option will meet these requirements at the lowest cost?
A. On-Demand Instances
B. Spot Instances
C. Reserved Instances
D. Dedicated Instances
View answer
Correct Answer: B
Question #26
A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup Language (SAML) 2.0.Which AWS service will meet this requirement?
A. AWS Identity and Access Management (IAM)
B. Amazon Cognito
C. AWS IAM Identity Center (AWS Single Sign-On)
D. AWS CLI
View answer
Correct Answer: C
Question #27
Which option is a shared responsibility between AWS and its customers under the AWS shared responsibility model?
A. Configuration of Amazon EC2 instance operating systems
B. Application file system server-side encryption
C. Patch management
D. Security of the physical infrastructure
View answer
Correct Answer: C
Question #28
Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Instances
View answer
Correct Answer: A
Question #29
Which task is the customer’s responsibility, according to the AWS shared responsibility model?
A. Maintain the security of the AWS Cloud
B. Configure firewalls and networks
C. Patch the operating system of Amazon RDS instances
D. Implement physical and environmental controls
View answer
Correct Answer: B
Question #30
Which of the following describes some of the core functionality of Amazon S3?
A. Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2
B. Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability
C. Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol
D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources
View answer
Correct Answer: B
Question #31
Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?
A. VPC Flow Logs
B. Amazon Inspector
C. VPC endpoint services
D. NAT gateway
View answer
Correct Answer: A
Question #32
Which task is a responsibility of AWS, according to the AWS shared responsibility model?
A. Configure identity and access management for applications
B. Manage encryption options for data that is stored on AWS
C. Configure security groups for Amazon EC2 instances
D. Maintain the physical hardware of the infrastructure
View answer
Correct Answer: D
Question #33
A company needs to block SQL injection attacks.Which AWS service or feature can meet this requirement?
A. AWS Service Catalog
B. AWS Systems Manager
C. AWS IAM Access Analyzer
D. AWS Organizations
View answer
Correct Answer: A
Question #34
A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources.Which AWS tool or service can be used to meet these requirements?
A. Amazon CloudWatch
B. Amazon Inspector
C. AWS CloudTrail
D. AWS IAM
View answer
Correct Answer: C
Question #35
A company wants to design a centralized storage system to manage the configuration data and passwords for its critical business applications.Which AWS service or capability will meet these requirements MOST cost-effectively?
A. AWS Systems Manager Parameter Store
B. AWS Secrets Manager
C. AWS Config
D. Amazon S3
View answer
Correct Answer: A
Question #36
A company wants to manage its AWS Cloud resources through a web interface.Which AWS service will meet this requirement?
A. AWS Management Console
B. AWS CLI
C. AWS SDK
D. AWS Cloud9
View answer
Correct Answer: A
Question #37
A company is running a critical workload on an Amazon RDS DB instance. The company needs the DB instance to be highly available with a recovery time of less than 5 minutes.Which solution will meet these requirements?
A. Create a read replica of the DB instance
B. Create a template of the DB instance by using AWS CloudFormation
C. Take frequent snapshots of the DB instance
D. Modify the DB instance to be a Multi-AZ deployment
View answer
Correct Answer: D
Question #38
A company needs to centrally configure and manage Amazon VPC security groups across multiple AWS accounts within an organization in AWS Organizations.Which AWS service should the company use to meet these requirements?
A. AWS Firewall Manager
B. Amazon GuardDuty
C. Amazon Detective
D. AWS WAF
View answer
Correct Answer: A
Question #39
A company plans to migrate to the AWS Cloud. The company is gathering information about its on-premises infrastructure and requires information such as the hostname, IP address, and MAC address.Which AWS service will meet these requirements?
A. AWS DataSync
B. AWS Application Migration Service
C. AWS Application Discovery Service
D. AWS Database Migration Service (AWS DMS)
View answer
Correct Answer: C
Question #40
A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later.Which AWS service should the company use to meet these requirements?
A. AWS Certificate Manager (ACM)
B. IAM roles
C. AWS Security Hub
D. Amazon GuardDuty
View answer
Correct Answer: D
Question #41
Which pricing model will interrupt a running Amazon EC2 instance if capacity becomes temporarily unavailable?
A. On-Demand Instances
B. Standard Reserved Instances
C. Spot Instances
D. Convertible Reserved Instances
View answer
Correct Answer: C
Question #42
A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The company has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time.Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?
A. VPC endpoints
B. AWS Transit Gateway
C. Amazon Route 53
D. AWS Secrets Manager
View answer
Correct Answer: B
Question #43
A company wants to identify Amazon S3 buckets that are shared with another AWS account.Which AWS service or feature will meet these requirements?
A. AWS Lake Formation
B. IAM credential report
C. Amazon CloudWatch
D. IAM Access Analyzer
View answer
Correct Answer: D
Question #44
What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?
A. AWS Certificate Manager
B. AWS Systems Manager
C. AWS Artifact
D. Amazon Inspector
View answer
Correct Answer: C
Question #45
Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?
A. AWS WAF
B. AWS Global Accelerator
C. AWS Shield
D. AWS Direct Connect
View answer
Correct Answer: B
Question #46
Which AWS service can a company use to securely store and encrypt passwords for a database?
A. AWS Shield
B. AWS Secrets Manager
C. AWS Identity and Access Management (IAM)
D. Amazon Cognito
View answer
Correct Answer: B
Question #47
A company has a set of ecommerce applications. The applications need to be able to send messages to each other. Which AWS service meets this requirement?
A. AWS Auto Scaling
B. Elastic Load Balancing
C. Amazon Simple Queue Service (Amazon SQS)
D. Amazon Kinesis Data Streams
View answer
Correct Answer: C
Question #48
Which AWS service provides the ability to manage infrastructure as code?
A. AWS CodePipeline
B. AWS CodeDeploy
C. AWS Direct Connect
D. AWS CloudFormation
View answer
Correct Answer: D
Question #49
Which option is an AWS Cloud Adoption Framework (AWS CAF) platform perspective capability?
A. Data architecture
B. Data protection
C. Data governance
D. Data science
View answer
Correct Answer: A
Question #50
A company plans to migrate its application to AWS and run the application on Amazon EC2 instances. The application will have continuous usage for 1 year.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. Reserved Instances
B. Spot Instances
C. On-Demand Instances
D. Dedicated Hosts
View answer
Correct Answer: A
Question #51
Which AWS service gives users the ability to build interactive business intelligence dashboards that include machine learning insights?
A. Amazon Athena
B. Amazon Kendra
C. Amazon QuickSight
D. Amazon Redshift
View answer
Correct Answer: C
Question #52
A social media company wants to protect its web application from common web exploits such as SQL injections and cross-site scripting.Which AWS service will meet these requirements?
A. Amazon Inspector
B. AWS WAF
C. Amazon GuardDuty
D. Amazon CloudWatch
View answer
Correct Answer: B
Question #53
What does the concept of agility mean in AWS Cloud computing? (Choose two.)
A. AWS WAF
B. AWS Shield
C. Network ACLs
D. Security groups
View answer
Correct Answer: AC
Question #54
Which task is a customer’s responsibility, according to the AWS shared responsibility model?
A. Management of the guest operating systems
B. Maintenance of the configuration of infrastructure devices
C. Management of the host operating systems and virtualization
D. Maintenance of the software that powers Availability Zones
View answer
Correct Answer: A
Question #55
Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?
A. AWS WAF
B. AWS Global Accelerator
C. AWS Shield
D. AWS Direct Connect
View answer
Correct Answer: B
Question #56
A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports.Which AWS service will meet this requirement?
A. AWS Trusted Advisor
B. Amazon CloudWatch
C. Amazon GuardDuty
D. AWS Health Dashboard
View answer
Correct Answer: A
Question #57
What is the purpose of having an internet gateway within a VPC?
A. To create a VPN connection to the VPC
B. To allow communication between the VPC and the internet
C. To impose bandwidth constraints on internet traffic
D. To load balance traffic from the internet across Amazon EC2 instances
View answer
Correct Answer: B
Question #58
A company needs to centrally configure and manage Amazon VPC security groups across multiple AWS accounts within an organization in AWS Organizations.Which AWS service should the company use to meet these requirements?
A. AWS Firewall Manager
B. Amazon GuardDuty
C. Amazon Detective
D. AWS WAF
View answer
Correct Answer: A
Question #59
Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images?
A. EC2 Image Builder
B. Amazon Machine Image (AMI)
C. AWS Launch Wizard
D. AWS Elastic Beanstalk
View answer
Correct Answer: A
Question #60
Which AWS service or feature is a browser-based, pre-authenticated service that can be launched directly from the AWS Management Console?
A. AWS API
B. AWS Lightsail
C. AWS Cloud9
D. AWS CloudShell
View answer
Correct Answer: D
Question #61
A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console.Which AWS service or resource will meet this requirement?
A. AWS Artifact
B. AWS Marketplace
C. Amazon Inspector
D. AWS Support
View answer
Correct Answer: D
Question #62
Which option is an AWS Cloud Adoption Framework (AWS CAF) business perspective capability?
A. Culture evolution
B. Event management
C. Data monetization
D. Platform architecture
View answer
Correct Answer: C
Question #63
To reduce costs, a company is planning to migrate a NoSQL database to AWS.Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?
A. mazon Redshift
B. mazon Aurora
C. mazon DynamoDB
D. mazon RDS
View answer
Correct Answer: C
Question #64
A company plans to migrate to AWS and wants to create cost estimates for its AWS use cases.Which AWS service or tool can the company use to meet these requirements?
A. AWS Software Development Kit
B. AWS CodeDeploy
C. AWS Lambda
D. AWS Batch
View answer
Correct Answer: A
Question #65
A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of agility. How does AWS provide agility for users?
A. The ability the ensure high availability by deploying workloads to multiple regions
B. A pay-as-you-go model for many services and resources
C. The ability to transfer infrastructure management to the AWS Cloud
D. The ability to provision and deprovision resources quickly with minimal effort
View answer
Correct Answer: D
Question #66
Which option is a physical location of the AWS global infrastructure?
A. AWS DataSync
B. AWS Region
C. Amazon Connect
D. AWS Organizations
View answer
Correct Answer: B
Question #67
Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)
A. Amazon Simple Notification Service (Amazon SNS)
B. Amazon Simple Email Service (Amazon SES)
C. Amazon CloudWatch alerts
D. Amazon Simple Queue Service (Amazon SQS)
View answer
Correct Answer: AB
Question #68
Which encryption types can be used to protect objects at rest in Amazon S3? (Choose two.)
A. AWS Directory Service
B. AWS Identity and Access Management (IAM)
C. Amazon Cognito
D. AWS IAM Identity Center (AWS Single Sign-On)
View answer
Correct Answer: AB
Question #69
What is the purpose of having an internet gateway within a VPC?
A. To create a VPN connection to the VPC
B. To allow communication between the VPC and the internet
C. To impose bandwidth constraints on internet traffic
D. To load balance traffic from the internet across Amazon EC2 instances
View answer
Correct Answer: B
Question #70
A company wants to modernize and convert a monolithic application into microservices. The company wants to move the application to AWS.Which migration strategy should the company use?
A. Rehost
B. Replatform
C. Repurchase
D. Refactor
View answer
Correct Answer: D
Question #71
An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and any increases in traffic are predictable. The EC2 instances must be online and available without any disruption.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Spot Fleet
View answer
Correct Answer: B
Question #72
Which AWS service enables users to check for vulnerabilities on Amazon EC2 instances by using predefined assessment templates?
A. AWS WAF
B. AWS Trusted Advisor
C. Amazon Inspector
D. AWS Shield
View answer
Correct Answer: C
Question #73
A company wants to automatically add and remove Amazon EC2 instances. The company wants the EC2 instances to adjust to varying workloads dynamically.Which service or feature will meet these requirements?
A. Amazon DynamoDB
B. Amazon EC2 Spot Instances
C. AWS Snow Family
D. Amazon EC2 Auto Scaling
View answer
Correct Answer: D
Question #74
Which AWS service provides command line access to AWS tools and resources directly from a web browser?
A. AWS CloudHSM
B. AWS CloudShell
C. Amazon WorkSpaces
D. AWS Cloud Map
View answer
Correct Answer: B
Question #75
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file
B. Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file
C. Have the EC2 instance assume a role to obtain the privileges to upload the file
D. Modify the S3 bucket policy so that any service can upload to it at any time
View answer
Correct Answer: C
Question #76
Which AWS service gives users the ability to build interactive business intelligence dashboards that include machine learning insights?
A. Amazon Athena
B. Amazon Kendra
C. Amazon QuickSight
D. Amazon Redshift
View answer
Correct Answer: C
Question #77
Which AWS service is used to provide encryption for Amazon EBS?
A. AWS Certificate Manager
B. AWS Systems Manager
C. AWS KMS
D. AWS Config
View answer
Correct Answer: C
Question #78
Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and dynamically acquire computing resources to meet demand?
A. Security
B. Reliability
C. Performance efficiency
D. Cost optimization
View answer
Correct Answer: B
Question #79
A systems administrator created a new IAM user for a developer and assigned the user an access key instead of a user name and password. What is the access key used for?
A. To access the AWS account as the AWS account root user
B. To access the AWS account through the AWS Management Console
C. To access the AWS account through a CLI
D. To access all of a company’s AWS accounts
View answer
Correct Answer: C
Question #80
A company wants to assess its operational readiness. It also wants to identify and mitigate any operational risks ahead of a new product launch.Which AWS Support plan offers guidance and support for this kind of event at no additional charge?
A. AWS Business Support
B. AWS Basic Support
C. AWS Developer Support
D. AWS Enterprise Support
View answer
Correct Answer: D
Question #81
Which service enables customers to audit API calls in their AWS accounts?
A. AWS CloudTrail
B. AWS Trusted Advisor
C. Amazon Inspector
D. AWS X-Ray
View answer
Correct Answer: A
Question #82
Which of the following is a fully managed MySQL-compatible database?
A. Amazon S3
B. Amazon DynamoDB
C. Amazon Redshift
D. Amazon Aurora
View answer
Correct Answer: D
Question #83
Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the AWS Cloud?
A. AWS Direct Connect
B. VPC peering
C. AWS VPN
D. Amazon Route 53
View answer
Correct Answer: A
Question #84
A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.Which AWS service meets these requirements?
A. AWS Lambda
B. Amazon RDS
C. AWS Fargate
D. Amazon Athena
View answer
Correct Answer: C
Question #85
A company wants a fully managed Windows file server for its Windows-based applications.Which AWS service will meet this requirement?
A. Amazon FSx
B. Amazon Elastic Kubernetes Service (Amazon EKS)
C. Amazon Elastic Container Service (Amazon ECS)
D. Amazon EMR
View answer
Correct Answer: A
Question #86
What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?
A. Managing the code within the Lambda function
B. Confirming that the hardware is working in the data center
C. Patching the operating system
D. Shutting down Lambda functions when they are no longer in use
View answer
Correct Answer: A
Question #87
Which action is a security best practice for access to sensitive data that is stored in an Amazon S3 bucket?
A. Enable S3 Cross-Region Replication (CRR) on the S3 bucket
B. Use IAM roles for applications that require access to the S3 bucket
C. Configure AWS WAF to prevent unauthorized access to the S3 bucket
D. Configure Amazon GuardDuty to prevent unauthorized access to the S3 bucket
View answer
Correct Answer: B
Question #88
A company wants to grant users in one AWS account access to resources in another AWS account. The users do not currently have permission to access the resources.Which AWS service will meet this requirement?
A. Management of IAM user permissions
B. Creation of security group rules for outbound access
C. Maintenance of physical and environmental controls
D. Application of Amazon EC2 operating system patches
View answer
Correct Answer: B
Question #89
Which AWS service is a hybrid cloud storage service that provides on-premises users access to virtually unlimited cloud storage?
A. AWS Pricing Calculator
B. Amazon CloudWatch
C. AWS Cost Explorer
D. AWS Budgets
View answer
Correct Answer: C
Question #90
A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud. How can these reports be generated?
A. Contact the AWS Compliance team
B. Download the reports from AWS Artifact
C. Open a case with AWS Support
D. Generate the reports with Amazon Macie
View answer
Correct Answer: B
Question #91
Which of the following are advantages of moving to the AWS Cloud? (Choose two.)
A. AWS DataSync
B. Amazon S3 Glacier
C. AWS Storage Gateway
D. Amazon Elastic Block Store (Amazon EBS)
View answer
Correct Answer: BD
Question #92
Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?
A. Data architecture
B. Event management
C. Cloud fluency
D. Strategic partnership
View answer
Correct Answer: C
Question #93
A social media company wants to protect its web application from common web exploits such as SQL injections and cross-site scripting.Which AWS service will meet these requirements?
A. Amazon Inspector
B. AWS WAF
C. Amazon GuardDuty
D. Amazon CloudWatch
View answer
Correct Answer: B
Question #94
Which action will help increase security in the AWS Cloud?
A. Enable programmatic access for all IAM users
B. Use IAM users instead of IAM roles to delegate permissions
C. Rotate access keys on a reoccurring basis
D. Use inline policies instead of customer managed policies
View answer
Correct Answer: C
Question #95
A company wants to run a NoSQL database on Amazon EC2 instances.Which task is the responsibility of AWS in this scenario?
A. pdate the guest operating system of the EC2 instances
B. aintain high availability at the database layer
C. atch the physical infrastructure that hosts the EC2 instances
D. onfigure the security group firewall
View answer
Correct Answer: C
Question #96
A company has teams that have different job roles and responsibilities. The company’s employees often change teams. The company needs to manage permissions for the employees so that the permissions are appropriate for the job responsibilities.Which IAM resource should the company use to meet this requirement with the LEAST operational overhead?
A. IAM user groups
B. IAM roles
C. IAM instance profiles
D. IAM policies for individual users
View answer
Correct Answer: B
Question #97
A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service limits, fault tolerance and security.Which AWS service can the company use to meet these requirements?
A. AWS Shield
B. AWS WAF
C. AWS Trusted Advisor
D. AWS Service Catalog
View answer
Correct Answer: C
Question #98
A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion.Which AWS service should the developer use to meet these requirements?
A. AWS Ground Station
B. AWS Shield
C. AWS IoT Device Defender
D. AWS CloudFormation
View answer
Correct Answer: D
Question #99
A company needs a content delivery network that provides secure delivery of data, videos, applications, and APIs to users globally with low latency and high transfer speeds.Which AWS service meets these requirements?
A. Amazon CloudFront
B. Elastic Load Balancing
C. Amazon S3
D. Amazon Elastic Transcoder
View answer
Correct Answer: A
Question #100
Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?
A. AWS Snowmobile
B. AWS Local Zones
C. AWS Outposts
D. AWS Fargate
View answer
Correct Answer: C
Question #101
A company plans to migrate its application to AWS and run the application on Amazon EC2 instances. The application will have continuous usage for 1 year.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. Reserved Instances
B. Spot Instances
C. On-Demand Instances
D. Dedicated Hosts
View answer
Correct Answer: A
Question #102
A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.What is the MOST operationally efficient AWS solution for this scenario?
A. Create an Amazon S3 bucket for each user
B. Configure and deploy an AWS Storage Gateway file gateway
C. Move each user’s working environment to Amazon WorkSpaces
D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume
View answer
Correct Answer: B
Question #103
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company’s direct responsibility?
A. Cost of application software licenses
B. Cost of the hardware infrastructure on AWS
C. Cost of power for the AWS servers
D. Cost of physical security for the AWS data center
View answer
Correct Answer: A
Question #104
Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?
A. AWS CloudFormation
B. AWS CodePipeline
C. AWS Cloud Development Kit (AWS CDK)
D. AWS Systems Manager
View answer
Correct Answer: D
Question #105
A company is assessing its AWS Business Support plan to determine if the plan still meets the company’s needs. The company is considering switching to AWS Enterprise Support.Which additional benefit will the company receive with AWS Enterprise Support?
A. A full set of AWS Trusted Advisor checks
B. Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week
C. A designated technical account manager (TAM) to assist in monitoring and optimization
D. A consultative review and architecture guidance for the company’s applications
View answer
Correct Answer: C
Question #106
A global company wants to migrate its third-party applications to the AWS Cloud. The company wants help from a global team of experts to complete the migration faster and more reliably in accordance with AWS internal best practices.Which AWS service or resource will meet these requirements?
A. Reserved Instances
B. Dedicated Hosts
C. Spot Instances
D. On-Demand Instances
View answer
Correct Answer: B
Question #107
A company is using Amazon DynamoDB.Which task is the company’s responsibility, according to the AWS shared responsibility model?
A. Patch the operating system
B. Provision hosts
C. Manage database access permissions
D. Secure the operating system
View answer
Correct Answer: C
Question #108
Which abilities are benefits of the AWS Cloud? (Choose two.)
A. Amazon Inspector
B. AWS Web Application Firewall (AWS WAF)
C. Elastic Load Balancing (ELB)
D. AWS Shield
View answer
Correct Answer: BD
Question #109
Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?
A. Sustainability
B. Performance efficiency
C. Governance
D. Reliability
View answer
Correct Answer: C
Question #110
A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.Which pillar of the AWS Well-Architected Framework is supported by these goals?
A. Reliability
B. Security
C. Operational excellence
D. Performance efficiency
View answer
Correct Answer: B
Question #111
Which AWS service should users use to learn about AWS service availability and operations?
A. Amazon EventBridge
B. AWS Service Catalog
C. AWS Control Tower
D. AWS Health Dashboard
View answer
Correct Answer: D
Question #112
Which AWS service is used to provide encryption for Amazon EBS?
A. AWS Certificate Manager
B. AWS Systems Manager
C. AWS KMS
D. AWS Config
View answer
Correct Answer: C
Question #113
A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.Which activities related to a Snowball Edge device are available to the company at no cost?
A. Use of the Snowball Edge appliance for a 10-day period
B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance
C. The transfer of data from the Snowball Edge appliance into Amazon S3
D. Daily use of the Snowball Edge appliance after 10 days
View answer
Correct Answer: C
Question #114
Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?
A. Route table
B. AWS Transit Gateway
C. AWS Global Accelerator
D. Amazon VPC
View answer
Correct Answer: C
Question #115
A company has a set of ecommerce applications. The applications need to be able to send messages to each other. Which AWS service meets this requirement?
A. AWS Auto Scaling
B. Elastic Load Balancing
C. Amazon Simple Queue Service (Amazon SQS)
D. Amazon Kinesis Data Streams
View answer
Correct Answer: C
Question #116
Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?
A. Agility
B. Elasticity
C. Scalability
D. High availability
View answer
Correct Answer: D
Question #117
A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud. Which service should be used to deploy the application?
A. AWS CloudFormation
B. AWS Elastic Beanstalk
C. Amazon EC2
D. AWS OpsWorks
View answer
Correct Answer: B
Question #118
A company needs a content delivery network that provides secure delivery of data, videos, applications, and APIs to users globally with low latency and high transfer speeds.Which AWS service meets these requirements?
A. Amazon CloudFront
B. Elastic Load Balancing
C. Amazon S3
D. Amazon Elastic Transcoder
View answer
Correct Answer: A
Question #119
Which option is a benefit of the economies of scale based on the advantages of cloud computing?
A. The ability to trade variable expense for fixed expense
B. Increased speed and agility
C. Lower variable costs over fixed costs
D. Increased operational costs across data centers
View answer
Correct Answer: C
Question #120
A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its current geographical location as possible.Which AWS service or resource should the company use to select its Amazon RDS deployment area?
A. AWS Free Tier
B. AWS Pricing Calculator
C. AWS Billing and Cost Management
D. AWS Cost and Usage Report
View answer
Correct Answer: C
Question #121
A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion.Which AWS service should the developer use to meet these requirements?
A. AWS Ground Station
B. AWS Shield
C. AWS IoT Device Defender
D. AWS CloudFormation
View answer
Correct Answer: D
Question #122
A company plans to migrate to the AWS Cloud. The company wants to use the AWS Cloud Adoption Framework (AWS CAF) to define and track business outcomes as part of its cloud transformation journey.Which AWS CAF governance perspective capability will meet these requirements?
A. Benefits management
B. Risk management
C. Application portfolio management
D. Cloud financial management
View answer
Correct Answer: A
Question #123
Which of the following is a recommended design principle for AWS Cloud architecture?
A. Design tightly coupled components
B. Build a single application component that can handle all the application functionality
C. Make large changes on fewer iterations to reduce chances of failure
D. Avoid monolithic architecture by segmenting workloads
View answer
Correct Answer: D

View The Updated AWS Exam Questions

SPOTO Provides 100% Real AWS Exam Questions for You to Pass Your AWS Exam!

Get AWS Practice Test

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.