DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Free AWS CLF-C02 Practice Questions & Answers 2026 Part1

Are you preparing for the AWS CLF-C02 certification exam? SPOTO offers the AWS CLF-C02 Premium File; all questions are aligned with the latest exam content and come with expert-provided answers. Our question banks cover the latest question types, core concepts, and detailed explanations, helping you familiarize yourself with the exam format and difficulty level. Whether you are reviewing core concepts or simulating a real exam environment, these resources will rapidly boost your confidence and readiness.
For over two decades, SPOTO has successfully helped numerous IT professionals secure their ideal positions at Fortune 500 companies. Download now to start practicing efficiently and ensure a high score on the actual exam. Don't miss this opportunity to pass your certification exam with ease!
Take other online exams
Question #1
Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?
A. AWS Snowmobile
B. AWS Local Zones
C. AWS Outposts
D. AWS Fargate
View answer
Correct Answer: C

View The Updated CLF-C02 Exam Questions

SPOTO Provides 100% Real CLF-C02 Exam Questions for You to Pass Your CLF-C02 Exam!

Contact Us Get CLF-C02 Practice Test
Question #2
Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the AWS Cloud?
A. AWS Direct Connect
B. VPC peering
C. AWS VPN
D. Amazon Route 53
View answer
Correct Answer: A
Question #3
A company needs to block SOL injection attacks.Which AWS service or feature provides this functionality?
A. AWS WAF
B. Network ACLs
C. Security groups
D. AWS Trusted Advisor
View answer
Correct Answer: A
Question #4
Which AWS service is always provided at no charge?
A. Amazon S3
B. AWS Identity and Access Management (IAM)
C. Elastic Load Balancers
D. AWS WAF
View answer
Correct Answer: B
Question #5
Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?
A. Physical security of DynamoDB
B. Patching of DynamoDB
C. Access to DynamoDB tables
D. Encryption of data at rest in DynamoDB
View answer
Correct Answer: C
Question #6
To reduce costs, a company is planning to migrate a NoSQL database to AWS.Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?
A. Amazon Redshift
B. Amazon Aurora
C. Amazon DynamoDB
D. Amazon RDS
View answer
Correct Answer: C
Question #7
Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?
A. AWS CLI
B. AWS Developer Center
C. AWS Cloud Development Kit (AWS CDK)
D. AWS CodeStar
View answer
Correct Answer: C
Question #8
A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion.Which AWS service should the developer use to meet these requirements?
A. AWS Ground Station
B. AWS Shield
C. AWS IoT Device Defender
D. AWS CloudFormation
View answer
Correct Answer: D
Question #9
A company must archive Amazon S3 data that the company's business units no longer need to access.Which S3 storage class will meet this requirement MOST cost-effectively?
A. 3 Glacier Instant Retrieval
B. 3 Glacier Deep Archive
C. 3 Glacier Flexible Retrieval
D. 3 One Zone-Infrequent Access (S3 One Zone-IA)
View answer
Correct Answer: B
Question #10
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
A. How quickly an Amazon EC2 instance can be restarted
B. The ability to rightsize resources as demand shifts
C. The maximum amount of RAM an Amazon EC2 instance can use
D. The pay-as-you-go billing model
E. How easily resources can be procured when they are needed
View answer
Correct Answer: BE
Question #11
Which AWS service provides highly durable object storage?
A. Amazon S3
B. Amazon Elastic File System (Amazon EFS)
C. Amazon Elastic Block Store (Amazon EBS)
D. Amazon FSx
View answer
Correct Answer: A
Question #12
A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.Which pricing model enables the company to optimize costs and meet these requirements?
A. Reserved Instances
B. Spot Instances
C. On-Demand Instances
D. Dedicated Instances
View answer
Correct Answer: B
Question #13
Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?
A. Physical security of DynamoDB
B. Patching of DynamoDB
C. Access to DynamoDB tables
D. Encryption of data at rest in DynamoDB
View answer
Correct Answer: C
Question #14
A company needs to block SQL injection attacks.Which AWS service or feature can meet this requirement?
A. AWS WAF
B. AWS Shield
C. Network ACLs
D. Security groups
View answer
Correct Answer: A
Question #15
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
A. How quickly an Amazon EC2 instance can be restarted
B. The ability to rightsize resources as demand shifts
C. The maximum amount of RAM an Amazon EC2 instance can use
D. The pay-as-you-go billing model
E. How easily resources can be procured when they are needed
View answer
Correct Answer: BE
Question #16
A company needs a database that can quickly read and write large amounts of unstructured data.
A. Amazon RDS
B. Amazon Elastic Block Store (Amazon EBS)
C. Amazon DynamoDB
D. Amazon Lightsail
View answer
Correct Answer: C
Question #17
Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the AWS Cloud?
A. AWS Direct Connect
B. VPC peering
C. AWS VPN
D. Amazon Route 53
View answer
Correct Answer: A
Question #18
What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?
A. Managing the code within the Lambda function
B. Confirming that the hardware is working in the data center
C. Patching the operating system
D. Shutting down Lambda functions when they are no longer in use
View answer
Correct Answer: A
Question #19
Which AWS service is used to provide encryption for Amazon EBS?
A. WS Systems Manager
B. WS Config
C. WS KMS
D. WS Certificate Manager
View answer
Correct Answer: C
Question #20
Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?
A. Elimination of expenses for running and maintaining data centers
B. Price discounts that are identical to discounts from hardware providers
C. Distribution of all operational controls to AWS
D. Elimination of operational expenses
View answer
Correct Answer: A
Question #21
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file
B. Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file
C. Have the EC2 instance assume a role to obtain the privileges to upload the file
D. Modify the S3 bucket policy so that any service can upload to it at any time
View answer
Correct Answer: C
Question #22
Which AWS service provides the ability to manage infrastructure as code?
A. AWS CodePipeline
B. AWS CodeDeploy
C. AWS Direct Connect
D. AWS CloudFormation
View answer
Correct Answer: D
Question #23
A company wants to visualize and manage AWS Cloud costs and usage for a specific period of time.Which AWS service or feature will meet these requirements?
A. Cost Explorer
B. Consolidated billing
C. AWS Organizations
D. AWS Budgets
View answer
Correct Answer: A
Question #24
Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)
A. Configure the AWS provided security group firewall
B. Classify company assets in the AWS Cloud
C. Determine which Availability Zones to use for Amazon S3 buckets
D. Patch or upgrade Amazon DynamoDB
E. Select Amazon EC2 instances to run AWS Lambda on
View answer
Correct Answer: AB
Question #25
Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?
A. Physical security of DynamoDB
B. Patching of DynamoDB
C. Access to DynamoDB tables
D. Encryption of data at rest in DynamoDB
View answer
Correct Answer: C
Question #26
A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console.Which AWS service or resource will meet this requirement?
A. S3 Multi-Region Access Points
B. S3 Storage Lens
C. AWS IAM Identity Center (AWS Single Sign-On)
D. Access Analyzer for S3
View answer
Correct Answer: D
Question #27
Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?
A. Agility
B. Elasticity
C. Scalability
D. High availability
View answer
Correct Answer: D
Question #28
Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?
A. Sustainability
B. Performance efficiency
C. Governance
D. Reliability
View answer
Correct Answer: C
Question #29
Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?
A. Database backups
B. Database software patches
C. Operating system patches
D. Operating system installations
View answer
Correct Answer: D
Question #30
A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices.Which best practice of the AWS Well-Architected Framework is the company following with this plan?
A. Integrate functional testing as part of AWS deployment
B. Use automation to deploy changes
C. Deploy the application to multiple locations
D. Implement loosely coupled dependencies
View answer
Correct Answer: D
Question #31
A company is setting up AWS Identity and Access Management (IAM) on an AWS account.Which recommendation complies with IAM security best practices?
A. Use the account root user access keys for administrative tasks
B. Grant broad permissions so that all company employees can access the resources they need
C. Turn on multi-factor authentication (MFA) for added security during the login process
D. Avoid rotating credentials to prevent issues in production applications
View answer
Correct Answer: C
Question #32
Which option is a benefit of the economies of scale based on the advantages of cloud computing?
A. The ability to trade variable expense for fixed expense
B. Increased speed and agility
C. Lower variable costs over fixed costs
D. Increased operational costs across data centers
View answer
Correct Answer: C
Question #33
A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned.Which AWS service or feature can be used to estimate costs before deployment?
A. AWS Free Tier
B. AWS Pricing Calculator
C. AWS Billing and Cost Management
D. AWS Cost and Usage Report
View answer
Correct Answer: B
Question #34
A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.Which AWS service meets these requirements?
A. AWS Lambda
B. Amazon RDS
C. AWS Fargate
D. Amazon Athena
View answer
Correct Answer: C
Question #35
A user needs programmatic access to AWS resources through the AWS CLI or the AWS API.Which option will provide the user with the appropriate access?
A. Amazon Inspector
B. Access keys
C. SSH public keys
D. AWS Key Management Service (AWS KMS) keys
View answer
Correct Answer: B
Question #36
A company plans to launch an ecommerce website that contains many images for a product catalog. The company wants to keep the cost of running the website within a specific budget.
A. AWS Cost Explorer
B. AWS SDKs
C. EC2 Image Builder
D. AWS CloudFormation
View answer
Correct Answer: A
Question #37
A company wants to receive a notification when a specific AWS cost threshold is reached.Which AWS services or tools can the company use to meet this requirement? (Choose two.)
A. Amazon Simple Queue Service (Amazon SQS)
B. AWS Budgets
C. Cost Explorer
D. Amazon CloudWatch
E. AWS Cost and Usage Report
View answer
Correct Answer: BD
Question #38
A company is connecting multiple VPCs and on-premises networks. The company needs to use an AWS service as a cloud router to simplify peering relationships.Which AWS service can the company use to meet this requirement?
A. WS Direct Connect
B. mazon Route 53
C. WS Transit Gateway
D. mazon Connect
View answer
Correct Answer: C
Question #39
A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.What is the MOST operationally efficient AWS solution for this scenario?
A. Create an Amazon S3 bucket for each user
B. Configure and deploy an AWS Storage Gateway file gateway
C. Move each user’s working environment to Amazon WorkSpaces
D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume
View answer
Correct Answer: B
Question #40
What are the benefits of consolidated billing for AWS Cloud services? (Choose two.)
A. Volume discounts
B. A minimal additional fee for use
C. One bill for multiple accounts
D. Installment payment options
E. Custom cost and usage budget creation
View answer
Correct Answer: AC
Question #41
A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The company has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time.Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?
A. VPC endpoints
B. AWS Transit Gateway
C. Amazon Route 53
D. AWS Secrets Manager
View answer
Correct Answer: B
Question #42
A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections.Which AWS services can the company use to meet these requirements? (Choose two.)
A. Amazon Connect
B. Amazon AppStream 2
C. Amazon WorkSpaces
D. AWS Site-to-Site VPN
E. Amazon Elastic Container Service (Amazon ECS)
View answer
Correct Answer: BC
Question #43
Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?
A. AWS Artifact
B. Amazon Connect
C. AWS Chatbot
D. AWS Knowledge Center
View answer
Correct Answer: D
Question #44
Which AWS service provides command line access to AWS tools and resources directly from a web browser?
A. AWS CloudHSM
B. AWS CloudShell
C. Amazon WorkSpaces
D. AWS Cloud Map
View answer
Correct Answer: B
Question #45
Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?
A. Data architecture
B. Event management
C. Cloud fluency
D. Strategic partnership
View answer
Correct Answer: C
Question #46
A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost.Which pricing options meet these requirements with the LOWEST cost? (Choose two.)
A. Spot Instances
B. On-Demand Instances
C. Reserved Instances
D. Savings Plans
E. Dedicated Hosts
View answer
Correct Answer: CD
Question #47
Which option is a physical location of the AWS global infrastructure?
A. AWS DataSync
B. AWS Region
C. Amazon Connect
D. AWS Organizations
View answer
Correct Answer: B
Question #48
A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted and does not need to run continuously.Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?
A. On-Demand Instances
B. Dedicated Instances
C. Spot Instances
D. Reserved Instances
View answer
Correct Answer: C
Question #49
Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?
A. Amazon DynamoDB
B. Amazon Athena
C. Amazon RDS
D. Amazon EMR
View answer
Correct Answer: C
Question #50
Which task is the customer’s responsibility, according to the AWS shared responsibility model?
A. Maintain the security of the AWS Cloud
B. Configure firewalls and networks
C. Patch the operating system of Amazon RDS instances
D. Implement physical and environmental controls
View answer
Correct Answer: B
Question #51
A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted and does not need to run continuously.Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?
A. On-Demand Instances
B. Dedicated Instances
C. Spot Instances
D. Reserved Instances
View answer
Correct Answer: C
Question #52
Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the AWS Cloud?
A. AWS Direct Connect
B. VPC peering
C. AWS VPN
D. Amazon Route 53
View answer
Correct Answer: A
Question #53
Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?
A. Physical security of DynamoDB
B. Patching of DynamoDB
C. Access to DynamoDB tables
D. Encryption of data at rest in DynamoDB
View answer
Correct Answer: C
Question #54
A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting.Which S3 feature should the company use to meet these requirements?
A. S3 Lifecycle rules
B. S3 Versioning
C. S3 bucket policies
D. S3 server-side encryption
View answer
Correct Answer: B
Question #55
Which of the following are advantages of moving to the AWS Cloud? (Choose two.)
A. The ability to turn over the responsibility for all security to AWS
B. The ability to use the pay-as-you-go model
C. The ability to have full control over the physical infrastructure
D. No longer having to guess what capacity will be required
E. No longer worrying about users access controls
View answer
Correct Answer: BD
Question #56
A company wants to assess its operational readiness. It also wants to identify and mitigate any operational risks ahead of a new product launch.Which AWS Support plan offers guidance and support for this kind of event at no additional charge?
A. AWS Business Support
B. AWS Basic Support
C. AWS Developer Support
D. AWS Enterprise Support
View answer
Correct Answer: D
Question #57
A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.What is the MOST operationally efficient AWS solution for this scenario?
A. Create an Amazon S3 bucket for each user
B. Configure and deploy an AWS Storage Gateway file gateway
C. Move each user's working environment to Amazon Workspaces
D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume
View answer
Correct Answer: B
Question #58
A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.Which pillar of the AWS Well-Architected Framework is supported by these goals?
A. Reliability
B. Security
C. Operational excellence
D. Performance efficiency
View answer
Correct Answer: B
Question #59
Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.)
A. AWS Cost Explorer
B. AWS Billing Conductor
C. Amazon CodeGuru
D. Amazon SageMaker
E. AWS Compute Optimizer
View answer
Correct Answer: AE
Question #60
A company wants to receive a notification when a specific AWS cost threshold is reached.Which AWS services or tools can the company use to meet this requirement? (Choose two.)
A. Amazon Simple Queue Service (Amazon SQS)
B. AWS Budgets
C. Cost Explorer
D. Amazon CloudWatch
E. AWS Cost and Usage Report
View answer
Correct Answer: BD
Question #61
A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices.Which best practice of the AWS Well-Architected Framework is the company following with this plan?
A. Integrate functional testing as part of AWS deployment
B. Use automation to deploy changes
C. Deploy the application to multiple locations
D. Implement loosely coupled dependencies
View answer
Correct Answer: D
Question #62
What is the purpose of having an internet gateway within a VPC?
A. To create a VPN connection to the VPC
B. To allow communication between the VPC and the internet
C. To impose bandwidth constraints on internet traffic
D. To load balance traffic from the internet across Amazon EC2 instances
View answer
Correct Answer: B
Question #63
Which AWS service can identify when an Amazon EC2 instance was terminated?
A. AWS Identity and Access Management (IAM)
B. AWS CloudTrail
C. AWS Compute Optimizer
D. Amazon EventBridge
View answer
Correct Answer: B
Question #64
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file
B. Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file
C. Have the EC2 instance assume a role to obtain the privileges to upload the file
D. Modify the S3 bucket policy so that any service can upload to it at any time
View answer
Correct Answer: C
Question #65
Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?
A. Amazon DynamoDB
B. Amazon Aurora
C. Amazon DocumentDB (with MongoDB compatibility)
D. Amazon Neptune
View answer
Correct Answer: A
Question #66
Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)
A. Availability
B. Reliability
C. Scalability
D. Responsive design
E. Operational excellence
View answer
Correct Answer: BE
Question #67
A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its current geographical location as possible.Which AWS service or resource should the company use to select its Amazon RDS deployment area?
A. Amazon Connect
B. AWS Wavelength
C. AWS Regions
D. AWS Direct Connect
View answer
Correct Answer: C
Question #68
Which task is the customer’s responsibility, according to the AWS shared responsibility model?
A. Maintain the security of the AWS Cloud
B. Configure firewalls and networks
C. Patch the operating system of Amazon RDS instances
D. Implement physical and environmental controls
View answer
Correct Answer: B
Question #69
Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)
A. Providing high-performance container orchestration
B. Creating and rotating encryption keys
C. Detecting underutilized resources to save costs
D. Improving security by proactively monitoring the AWS environment
E. Implementing enforced tagging across AWS resources
View answer
Correct Answer: CD
Question #70
Your on-premises applications require access to a centrally managed cloud storage service. The application running on your servers need to be able to store and retrieve files as durable objects on Amazon S3 over standard NFS-based access with local caching.Which AWS service can help you deliver a solution to meet the aforementioned requirements?
A. EBS volumes
B. Amazon Redshift
C. AWS Storage Gateway— Amazon S3File Gateway
D. AWS EFS
View answer
Correct Answer: c
Question #71
Which AWS service is a hybrid cloud storage service that provides on-premises users access to virtually unlimited cloud storage?
A. AWS DataSync
B. Amazon S3 Glacier
C. AWS Storage Gateway
D. Amazon Elastic Block Store (Amazon EBS)
View answer
Correct Answer: C
Question #72
Which AWS service can identify when an Amazon EC2 instance was terminated?
A. AWS Identity and Access Management (IAM)
B. AWS CloudTrail
C. AWS Compute Optimizer
D. Amazon EventBridge
View answer
Correct Answer: B
Question #73
Which AWS service can identify when an Amazon EC2 instance was terminated?
A. AWS Identity and Access Management (IAM)
B. AWS CloudTrail
C. AWS Compute Optimizer
D. Amazon EventBridge
View answer
Correct Answer: B
Question #74
A company runs thousands of simultaneous simul-ations using AWS Batch. Each simul-ation is stateless, is fault tolerant, and runs for up to 3 hours.Which pricing model enables the company to optimize costs and meet these requirements?
A. eserved Instances
B. edicated Instances
C. n-Demand Instances
D. pot Instances
View answer
Correct Answer: D
Question #75
A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted and does not need to run continuously.Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?
A. On-Demand Instances
B. Dedicated Instances
C. Spot Instances
D. Reserved Instances
View answer
Correct Answer: C
Question #76
A company is using Amazon DynamoDB.Which task is the company’s responsibility, according to the AWS shared responsibility model?
A. Patch the operating system
B. Provision hosts
C. Manage database access permissions
D. Secure the operating system
View answer
Correct Answer: C
Question #77
What does the concept of agility mean in AWS Cloud computing? (Choose two.)
A. The speed at which AWS resources are implemented
B. The speed at which AWS creates new AWS Regions
C. The ability to experiment quickly
D. The elimination of wasted capacity
E. The low cost of entry into cloud computing
View answer
Correct Answer: AC
Question #78
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file
B. Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file
C. Have the EC2 instance assume a role to obtain the privileges to upload the file
D. Modify the S3 bucket policy so that any service can upload to it at any time
View answer
Correct Answer: C
Question #79
Which AWS service is used to provide encryption for Amazon EBS?
A. AWS Certificate Manager
B. AWS Systems Manager
C. AWS KMS
D. AWS Config
View answer
Correct Answer: C
Question #80
Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?
A. Sustainability
B. Performance efficiency
C. Governance
D. Reliability
View answer
Correct Answer: C
Question #81
A company wants to run a NoSQL database on Amazon EC2 instances.Which task is the responsibility of AWS in this scenario?
A. Update the guest operating system of the EC2 instances
B. Maintain high availability at the database layer
C. Patch the physical infrastructure that hosts the EC2 instances
D. Configure the security group firewall
View answer
Correct Answer: C
Question #82
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
A. How quickly an Amazon EC2 instance can be restarted
B. The ability to rightsize resources as demand shifts
C. The maximum amount of RAM an Amazon EC2 instance can use
D. The pay-as-you-go billing model
E. How easily resources can be procured when they are needed
View answer
Correct Answer: BE
Question #83
Which AWS service provides machine learning capability to detect and analyze content in images and videos?
A. Amazon Connect
B. Amazon Lightsail
C. Amazon Personalize
D. Amazon Rekognition
View answer
Correct Answer: D
Question #84
An e-learning platform needs to run an application for 2 months each year. The application will be deployed on Amazon EC2 instances. Any application downtime during those 2 months must be avoided.Which EC2 purchasing option will meet these requirements MOST cost-effectively?
A. Reserved Instances
B. Dedicated Hosts
C. Spot Instances
D. On-Demand Instances
View answer
Correct Answer: D
Question #85
Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?
A. Amazon DynamoDB
B. Amazon Aurora
C. Amazon DocumentDB (with MongoDB compatibility)
D. Amazon Neptune
View answer
Correct Answer: A
Question #86
An e-learning platform needs to run an application for 2 months each year. The application will be deployed on Amazon EC2 instances. Any application downtime during those 2 months must be avoided.Which EC2 purchasing option will meet these requirements MOST cost-effectively?
A. Reserved Instances
B. Dedicated Hosts
C. Spot Instances
D. On-Demand Instances
View answer
Correct Answer: D
Question #87
Which of the following are advantages of moving to the AWS Cloud? (Choose two.)
A. The ability to turn over the responsibility for all security to AWS
B. The ability to use the pay-as-you-go model
C. The ability to have full control over the physical infrastructure
D. No longer having to guess what capacity will be required
E. No longer worrying about users access controls
View answer
Correct Answer: BD
Question #88
Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?
A. Agility
B. Elasticity
C. Scalability
D. High availability
View answer
Correct Answer: D
Question #89
Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)
A. Configure the AWS provided security group firewall
B. Classify company assets in the AWS Cloud
C. Determine which Availability Zones to use for Amazon S3 buckets
D. Patch or upgrade Amazon DynamoDB
E. Select Amazon EC2 instances to run AWS Lambda on
View answer
Correct Answer: AB
Question #90
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.Which cost is the company’s direct responsibility?
A. ost of application software licenses
B. ost of the hardware infrastructure on AWS
C. ost of power for the AWS servers
D. ost of physical security for the AWS data center
View answer
Correct Answer: A
Question #91
A developer wants to deploy an application quickly on AWS without manually creating the required resources.Which AWS service will meet these requirements?
A. Amazon EC2
B. AWS Elastic Beanstalk
C. AWS CodeBuild
D. Amazon Personalize
View answer
Correct Answer: B
Question #92
A company needs to configure rules to identify threats and protect applications from malicious network access.
A. AWS Identity and Access Management (IAM)
B. Amazon QuickSight
C. AWS WAF
D. Amazon Detective
View answer
Correct Answer: C
Question #93
A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost.Which pricing options meet these requirements with the LOWEST cost? (Choose two.)
A. Spot Instances
B. On-Demand Instances
C. Reserved Instances
D. Savings Plans
E. Dedicated Hosts
View answer
Correct Answer: CD
Question #94
Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?
A. Data architecture
B. Event management
C. Cloud fluency
D. Strategic partnership
View answer
Correct Answer: C
Question #95
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file
B. Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file
C. Have the EC2 instance assume a role to obtain the privileges to upload the file
D. Modify the S3 bucket policy so that any service can upload to it at any time
View answer
Correct Answer: C
Question #96
Which AWS service provides command line access to AWS tools and resources directly from a web browser?
A. AWS CloudHSM
B. AWS CloudShell
C. Amazon WorkSpaces
D. AWS Cloud Map
View answer
Correct Answer: B
Question #97
According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Select TWO.)
A. Network infrastructure and virtualization of infrastructure
B. Security of application data
C. Guest operating systems
D. Physical security of hardware
E. Credentials and policies
View answer
Correct Answer: AD
Question #98
Which AWS service can be used at no additional cost?
A. mazon SageMaker
B. WS Config
C. WS Organizations
D. mazon CloudWatch
View answer
Correct Answer: C
Question #99
Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?
A. Route table
B. AWS Transit Gateway
C. AWS Global Accelerator
D. Amazon VPC
View answer
Correct Answer: C
Question #100
Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?
A. Amazon DynamoDB
B. Amazon Athena
C. Amazon RDS
D. Amazon EMR
View answer
Correct Answer: C

View The Updated AWS Exam Questions

SPOTO Provides 100% Real AWS Exam Questions for You to Pass Your AWS Exam!

Get AWS Practice Test

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:
Contact Us


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.