Summer Special - 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: c4sdisc65

CLF-C02 PDF

$38.5

$109.99

3 Months Free Update

  • Printable Format
  • Value of Money
  • 100% Pass Assurance
  • Verified Answers
  • Researched by Industry Experts
  • Based on Real Exams Scenarios
  • 100% Real Questions

CLF-C02 PDF + Testing Engine

$61.6

$175.99

3 Months Free Update

  • Exam Name: AWS Certified Cloud Practitioner
  • Last Update: Jun 15, 2024
  • Questions and Answers: 625
  • Free Real Questions Demo
  • Recommended by Industry Experts
  • Best Economical Package
  • Immediate Access

CLF-C02 Engine

$46.2

$131.99

3 Months Free Update

  • Best Testing Engine
  • One Click installation
  • Recommended by Teachers
  • Easy to use
  • 3 Modes of Learning
  • State of Art Technology
  • 100% Real Questions included

CLF-C02 Practice Exam Questions with Answers AWS Certified Cloud Practitioner Certification

Question # 6

Which AWS service or tool offers consolidated billing?

A.

AWS Artifact

B.

AWS Budgets

C.

AWS Organizations

D.

AWS Trusted Advisor

A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources.

Full Access
Question # 7

Which statements explain the business value of migration to the AWS Cloud? (Select TWO.)

A.

The migration of enterprise applications to the AWS Cloud makes these applications automatically available on mobile devices.

S B. AWS availability and security provide the ability to improve service level agreements (SLAs) while reducing risk and unplanned downtime.

B.

Companies that migrate to the AWS Cloud eliminate the need to plan for high availability and disaster recovery.

C.

Companies that migrate to the AWS Cloud reduce IT costs related to infrastructure, freeing budget for reinvestment in other

areas.

D.

Applications are modernized because migration to the AWS Cloud requires companies to rearchitect and rewrite all

enterprise applications.

Full Access
Question # 8

A company is hosting a web application on Amazon EC2 instances. The company wants to implement custom conditions to filter and control inbound web traffic.

Which AWS service will meet these requirements?

A.

Amazon GuardDuty

B.

AWSWAF

C.

Amazon Macie

D.

AWS Shield

Full Access
Question # 9

A company migrated its core application onto multiple workloads in the AWS Cloud. The company wants to improve the application's reliability.

Which cloud design principle should the company implement to achieve this goal?

A.

Maximize utilization.

B.

Decouple the components.

C.

Rightsize the resources.

D.

Adopt a consumption model.

Full Access
Question # 10

A company must store call recordings for 6 years. The storage system should be highly durable and cost-effective.

Which AWS service meets these requirements?

A.

AWS Snowball

B.

Amazon S3

C.

AWS Storage Gateway

D.

Amazon Kinesis

Full Access
Question # 11

A company wants to move its iOS application development and build activities to AWS.

Which AWS service or resource should the company use for these activities?

A.

AWS CodeCommit

B.

Amazon EC2 M1 Mac instances

C.

AWS Amplify

D.

AWS App Runner

Full Access
Question # 12

Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

A.

Security awareness and training

B.

Development of an IAM password policy

C.

Patching of the guest operating system

D.

Physical and environmental controls

Full Access
Question # 13

A company needs to launch an Amazon EC2 instance.

Which of the following can the company use during the launch process to configure the root volume of the EC2 instance?

A.

Amazon EC2 Auto Scaling

B.

Amazon Data Lifecycle Manager (Amazon DLM)

C.

Amazon Machine Image (AMI)

D.

Amazon Elastic Block Store (Amazon EBS) volume

Full Access
Question # 14

Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

A.

Sustainability

B.

Operations

C.

Performance efficiency

D.

Reliability

Full Access
Question # 15

Which options are perspectives that include foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)? (Select TWO.)

A.

Sustainability

B.

Security

C.

Operations

D.

Performance efficiency

E.

Reliability

Full Access
Question # 16

Which aspect of security is the customer's responsibility, according to the AWS shared responsibility model?

A.

Patch and configuration management

B.

Service and communications protection or zone security

C.

Physical and environmental controls

D.

Awareness and training

Full Access
Question # 17

Which AWS services allow users to monitor and retain records of account activities that include governance, compliance, and auditing?

(Select TWO.)

A.

Amazon CloudWatch

B.

AWS CloudTrail

C.

Amazon GuardDuty

D.

AWS Shield

E.

AWS WAF

Full Access
Question # 18

A user is moving a workload from a local data center to an architecture that is distributed between the local data center and the AWS Cloud.

Which type of migration is this?

A.

On-premises to cloud native

B.

Hybrid to cloud native

C.

On-premises to hybrid

D.

Cloud native to hybrid

Full Access
Question # 19

Which AWS services can a company use to host and run a MySQL database? (Select TWO.)

A.

Amazon RDS

B.

Amazon DynamoDB

C.

Amazon S3

D.

Amazon EC2

E.

Amazon MQ

Full Access
Question # 20

Which design principle is included in the operational excellence pillar of the AWS Well-Architected Framework?

A.

Create annotated documentation.

B.

Anticipate failure.

C.

Ensure performance efficiency.

D.

Optimize costs.

Full Access
Question # 21

A company wants to push VPC Flow Logs to an Amazon S3 bucket.

A company wants to optimize long-term compute costs of AWS Lambda functions and Amazon EC2 instances.

Which AWS purchasing option should the company choose to meet these requirements?

A.

Dedicated Hosts

B.

Compute Savings Plans

C.

Reserved Instances

D.

Spot Instances

Full Access
Question # 22

A company wants to securely store Amazon RDS database credentials and automatically rotate user passwords periodically.

Which AWS service or capability will meet these requirements?

A.

Amazon S3

B.

AWS Systems Manager Parameter Store

C.

AWS Secrets Manager

D.

AWS CloudTrail

Full Access
Question # 23

A company needs to host a web server on Amazon EC2 instances for at least 1 year. The web server cannot tolerate interruption.

Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

A.

On-Demand Instances

B.

Partial Upfront Reserved Instances

C.

Spot Instances

D.

No Upfront Reserved Instances

Full Access
Question # 24

A company has a single Amazon EC2 instance. The company wants to adopt a highly available architecture.

What can the company do to meet this requirement?

A.

Scale vertically to a larger EC2 instance size.

B.

Scale horizontally across multiple Availability Zones.

C.

Purchase an EC2 Dedicated Instance.

D.

Change the EC2 instance family to a compute optimized instance.

Full Access
Question # 25

Which AWS solution should the company use to meet this requirement?

A.

AWS Config

B.

AWS software development kits (SDKs)

C.

AWS Service Catalog

D.

AWS AppSync

Full Access
Question # 26

Which AWS service is always free of charge for users?

A.

Amazon S3

B.

Amazon Aurora

C.

Amazon EC2

D.

AWS Identity and Access Management (IAM)

Full Access
Question # 27

A large company has multiple departments. Each department has its own AWS account. Each department has purchased Amazon EC2 Reserved Instances. Some departments do not use all the Reserved Instances that they purchased, and other departments need more Reserved Instances than they purchased.

The company needs to manage the AWS accounts for all the departments so that the departments can share the Reserved Instances.

Which AWS service or tool should the company use to meet these requirements?

A.

AWS Systems Manager

B.

Cost Explorer

C.

AWS Trusted Advisor

D.

AWS Organizations

Full Access
Question # 28

A company is planning a migration to the AWS Cloud and wants to examine the costs that are associated with different workloads.

Which AWS tool will meet these requirements?

A.

AWS Budgets

B.

AWS Cost Explorer

C.

AWS Pricing Calculator

D.

AWS Cost and Usage Report

Full Access
Question # 29

A company has developed a distributed application that recovers gracefully from interruptions. The application periodically processes large volumes of data by using multiple Amazon EC2 instances. The application is sometimes idle for months.

Which EC2 instance purchasing option is MOST cost-effective for this use case?

A.

Reserved Instances

B.

Spot Instances

C.

Dedicated Instances

D.

On-Demand Instances

Full Access
Question # 30

Which design principles should a company apply to AWS Cloud workloads to maximize sustainability and minimize environmental impact? (Select TWO.)

A.

Maximize utilization of Amazon EC2 instances.

B.

Minimize utilization of Amazon EC2 instances.

C.

Minimize usage of managed services.

D.

Force frequent application reinstallations by users.

E.

Reduce the need for users to reinstall applications.

Full Access
Question # 31

A company wants to migrate its Microsoft SQL Server database management system from on premises to the AWS Cloud.

Which AWS service should the company use to reduce management overhead for this environment?

A.

Amazon Elastic Container Service (Amazon ECS)

B.

Amazon SageMaker

C.

Amazon RDS

D.

Amazon Athena

Full Access
Question # 32

Which AWS service or tool provides recommendations to help users get rightsized Amazon EC2 instances based on historical workload usage data?

A.

AWS Pricing Calculator

B.

AWS Compute Optimizer

C.

AWS App Runner

D.

AWS Systems Manager

Full Access
Question # 33

A company has an application workload that is stateless by design and can sustain occasional downtime. The application performs massively parallel computations.

Which Amazon EC2 pricing model should the company choose for its application to reduce cost?

A.

On-Demand Instances

B.

Spot Instances

C.

Reserved Instances

D.

Dedicated Instances

Full Access
Question # 34

A company wants to use Amazon EC2 instances to run a stateless and restartable process after business hours.

Which AWS service provides DNS resolution?

A.

Amazon CloudFront

B.

Amazon VPC

C.

Amazon Route 53

D.

AWS Direct Connect

Full Access
Question # 35

A company wants to migrate its on-premises application to the AWS Cloud. The company is legally obligated to retain certain data in its onpremises data center.

Which AWS service or feature will support this requirement?

A.

AWS Wavelength

B.

AWS Local Zones

C.

VMware Cloud on AWS

D.

AWS Outposts

Full Access
Question # 36

A company needs Amazon EC2 instances for a workload that can tolerate interruptions.

Which EC2 instance purchasing option meets this requirement with the LARGEST discount compared to On-Demand prices?

A.

Spot Instances

B.

Convertible Reserved Instances

C.

Standard Reserved Instances

D.

Dedicated Hosts

Full Access
Question # 37

A company needs to host a highly available application in the AWS Cloud. The application runs infrequently for short periods of time.

Which AWS service will meet these requirements with the LEAST amount of operational overhead?

A.

Amazon EC2

B.

AWS Fargate

C.

AWS Lambda

D.

Amazon Aurora

Full Access
Question # 38

A company is preparing to launch a redesigned website on AWS. Users from around the world will download digital handbooks from the website.

Which AWS solution should the company use to provide these static files securely?

A.

Amazon Kinesis Data Streams

B.

Amazon CloudFront with Amazon S3

C.

Amazon EC2 instances with an Application Load Balancer

D.

Amazon Elastic File System (Amazon EFS)

Full Access
Question # 39

Which AWS service is designed to help users orchestrate a workflow process for a set of AWS Lambda functions?

A.

Amazon DynamoDB

B.

AWS CodePipeline

C.

AWS Batch

D.

AWS Step Functions

Full Access
Question # 40

A company wants its Amazon EC2 instances to share the same geographic area but use redundant underlying power sources.

Which solution will meet these requirements?

A.

Use EC2 instances across multiple Availability Zones in the same AWS Region.

B.

Use Amazon CloudFront as the database for the EC2 instances.

C.

Use EC2 instances in the same edge location and the same Availability Zone.

D.

Use EC2 instances in AWS OpsWorks stacks in different AWS Regions.

Full Access
Question # 41

Which AWS solution provides the ability for a company to run AWS services in the company's on-premises data center?

A.

AWS Direct Connect

B.

AWS Outposts

C.

AWS Systems Manager hybrid activations

D.

AWS Storage Gateway

Full Access
Question # 42

Which options are common stakeholders for the AWS Cloud Adoption Framework (AWS CAF) platform perspective? (Select TWO.)

A.

Chief financial officers (CFOs)

B.

IT architects

C.

Chief information officers (CIOs)

D.

Chief data officers (CDOs)

E.

Engineers

Full Access
Question # 43

Which AWS Cloud design principle does a company follow by using AWS CloudTrail?

A.

Recover automatically.

B.

Perform operations as code.

C.

Measure efficiency.

D.

Ensure traceability.

Full Access
Question # 44

A company is using Amazon RDS.

A company is launching a critical business application in an AWS Region.

How can the company increase resilience for this application?

A.

Deploy a copy of the application in another AWS account.

B.

Deploy the application by using multiple VPCs.

C.

Deploy the application by using multiple subnets.

D.

Deploy the application by using multiple Availability Zones.

Full Access
Question # 45

Which AWS service is always available free of charge to users?

A.

Amazon Athena

B.

AWS Identity and Access Management (IAM)

C.

AWS Secrets Manager

D.

Amazon ElastiCache

A company has only basic knowledge of AWS technologies.

Full Access
Question # 46

Which AWS service or tool should a company use to forecast AWS spending?

A.

Amazon DevPay

B.

AWS Organizations

C.

AWS Trusted Advisor

D.

Cost Explorer

Full Access
Question # 47

A company has an environment that includes Amazon EC2 instances, Amazon Lightsail, and on-premises servers. The company wants to automate the security updates for its operating systems and applications.

Which solution will meet these requirements with the LEAST operational effort?

A.

Use AWS Shield to identify and manage security events.

B.

Connect to each server by using a remote desktop connection. Run an update script.

C.

Use the AWS Systems Manager Patch Manager capability.

D.

Schedule Amazon GuardDuty to run on a nightly basis.

Full Access
Question # 48

A company needs help managing multiple AWS linked accounts that are reported on a consolidated bill.

Which AWS Support plan includes an AWS concierge whom the company can ask for assistance?

A.

AWS Developer Support

B.

AWS Enterprise Support

C.

AWS Business Support

D.

AWS Basic Support

Full Access
Question # 49

A company is running an application that is hosted on Amazon EC2 instances. The usage of the EC2 instances is higher during daytime hours than nighttime hours. The company wants to optimize the number of EC2 instances based on this usage pattern.

Which AWS service or instance purchasing option should the company use to meet these requirements?

A.

Spot Instances

B.

Reserved Instances

C.

AWS CloudFormation

D.

AWS Auto Scaling

Full Access
Question # 50

Which perspective of the AWS Cloud Adoption Framework (AWS CAF) connects technology and business?

A.

Operations

B.

People

C.

Security

D.

Governance

Full Access
Question # 51

A company has an Amazon S3 bucket containing images of scanned financial invoices. The company is building an artificial intelligence (Al)-based application on AWS. The company wants the application to identify and read total balance amounts on the invoices.

Which AWS service will meet these requirements?

A.

Amazon Forecast

B.

Amazon Textract

C.

Amazon Rekognition

D.

Amazon Lex

Full Access
Question # 52

Which AWS service is designed to help users build conversational interfaces into applications using voice and text?

A.

Amazon Lex

B.

Amazon Transcribe

C.

Amazon Comprehend

D.

Amazon Timestream

Full Access
Question # 53

Which AWS service or feature can be used to control inbound and outbound traffic on an Amazon EC2 instance?

A.

Internet gateways

B.

AWS Identity and Access Management (IAM)

C.

Network ACLs

D.

Security groups

Full Access
Question # 54

How should the company deploy the application to meet these requirements?

A.

Ina single Availability Zone

B.

On AWS Direct Connect

C.

On Reserved Instances

D.

In multiple Availability Zones

Full Access
Question # 55

Which of the following is the customer's responsibility, according to the AWS shared responsibility model?

A.

Identity and access management

B.

Hard drive initialization

C.

Protection of data center hardware

D.

Security of Availability Zones

Full Access
Question # 56

A company is setting up AWS Identity and Access Management (IAM) on an AWS account.

Which recommendation complies with IAM security best practices?

A.

Use the account root user access keys for administrative tasks.

B.

Grant broad permissions so that all company employees can access the resources they need.

C.

Turn on multi-factor authentication (MFA) for added security during the login process.

D.

Avoid rotating credentials to prevent issues in production applications.

Full Access
Question # 57

A company manages factory machines in real time. The company wants to use AWS technology to deploy its monitoring applications as close to the factory machines as possible.

Which AWS solution will meet these requirements with the LEAST latency?

A.

AWS Outposts

B.

Amazon EC2

C.

AWS App Runner

D.

AWS Batch

Full Access
Question # 58

An ecommerce company wants to design a highly available application that will be hosted on multiple Amazon EC2 instances.

How should the company deploy the EC2 instances to meet these requirements?

A.

Across multiple edge locations

B.

Across multiple VPCs

C.

Across multiple Availability Zones

D.

Across multiple AWS accounts

Full Access
Question # 59

A company is reviewing the design of an application that will be migrated from on premises to a single Amazon EC2 instance.

What should the company do to make the application highly available?

A.

Provision additional EC2 instances in other Availability Zones.

B.

Configure an Application Load Balancer (ALB). Assign the EC2 instance as the ALB's target.

C.

Use an Amazon Machine Image (AMI) to create the EC2 instance.

D.

Provision the application by using an EC2 Spot Instance.

Full Access
Question # 60

A new AWS user who has little cloud experience wants to build an application by using AWS services. The user wants to learn how to implement specific AWS services from other customer examples. The user also wants to ask questions to AWS experts.

Which AWS service or resource will meet these requirements?

A.

AWS Online Tech Talks

B.

AWS documentation

C.

AWS Marketplace

D.

AWS Health Dashboard

Full Access
Question # 61

Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Select TWO.)

A.

Control access to AWS service APIs and to other specific resources.

B.

Provide intelligent threat detection and continuous monitoring.

C.

Protect the AWS environment using multi-factor authentication (MFA).

D.

Grant users access to AWS data centers.

E.

Provide firewall protection for applications from common web attacks.

Full Access
Question # 62

A company wants to use Amazon EC2 instances for a stable production workload that will run for 1 year.

Which instance purchasing option meets these requirements MOST cost-effectively?

A.

Dedicated Hosts

B.

Reserved Instances

C.

On-Demand Instances

D.

Spot Instances

Full Access
Question # 63

A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud.

Which AWS service will meet this requirement?

A.

Amazon Cognito

B.

AWS Security Hub

C.

AWS Shield

D.

AWS WAF

Full Access
Question # 64

Which AWS service or feature is associated with a subnet in a VPC and is used to control inbound and outbound traffic?

A.

Amazon Inspector

B.

Network ACLs

C.

AWS Shield

D.

VPC Flow Logs

Full Access
Question # 65

Which tasks are the responsibility of the customer, according to the AWS shared responsibility model? (Select TWO.)

A.

Patch the Amazon RDS operating system.

B.

Upgrade the firmware of the network infrastructure.

C.

Manage data encryption.

D.

Maintain physical access control in an AWS Region.

E.

Grant least privilege access to IAM users.

Full Access
Question # 66

A company has all of its servers in the us-east-1 Region. The company is considering the deployment of additional servers different Region.

Which AWS tool should the company use to find pricing information for other Regions?

A.

Cost Explorer

B.

AWS Budgets

C.

AWS Purchase Order Management

D.

AWS Pricing Calculator

Full Access
Question # 67

A company needs to block SQL injection attacks.

Which AWS service or feature can meet this requirement?

A.

AWS WAF

B.

AWS Shield

C.

Network ACLs

D.

Security groups

Full Access
Question # 68

A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.

What is the MOST operationally efficient AWS solution for this scenario?

A.

Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility.

B.

Configure and deploy an AWS Storage Gateway file gateway. Connect each user's workstation to the file gateway.

C.

Move each user's working environment to Amazon Workspaces. Set up an Amazon WorkDocs account for each user.

D.

Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume directly with the users.

Full Access
Question # 69

A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion Which AWS service should the developer use to meet these requirements?

A.

AWS Ground Station

B.

AWS Shield

C.

AWS loT Device Defender

D.

AWS CloudFormation

Full Access
Question # 70

A team of researchers is going to collect data at remote locations around the world Many locations do not have internet connectivity. The team needs to capture the data in the field, and transfer it to the AWS Cloud later

Which AWS service will support these requirements?

A.

AWS Outposts

B.

AWS Transfer Family

C.

AWS Snow Family

D.

AWS Migration Hub

Full Access
Question # 71

A company wants a time-series database service that makes it easier to store and analyze trillions of events each day.

Which AWS service will meet this requirement?

A.

Amazon Neptune

B.

Amazon Timestream

C.

Amazon Forecast

D.

Amazon DocumentDB (with MongoDB compatibility)

Full Access
Question # 72

A company is operating several factories where it builds products. The company needs the ability to process data, store data, and run applications with local system interdependencies that require low latency.

Which AWS service should the company use to meet these requirements?

A.

AWS loT Greengrass

B.

AWS Lambda

C.

AWS Outposts

D.

AWS Snowball Edge

Full Access
Question # 73

A company needs to set up user authentication for a new application. Users must be able to sign in directly with a user name and password, or through a third-party provider.

Which AWS service should the company use to meet these requirements?

A.

AWS IAM Identity Center (AWS Single Sign-On)

B.

AWS Signer

C.

Amazon Cognito

D.

AWS Directory Service

Full Access
Question # 74

Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?

A.

Database backups

B.

Database software patches

C.

Operating system patches

D.

Operating system installations

Full Access
Question # 75

A company plans to use an Amazon Snowball Edge device la transfer files to the AWS Cloud.

Which activities related in a Snowball device are available to the company at no cost?

A.

Use of the Snowball Edge appliance for a 10-day period

B.

The transfer of data out of Amazon S3 and 10 the Snowball Edge appliance

C.

The transfer of data from the Snowball Edge appliance into Amazon S3

D.

Daily use of the Snowball Edge appliance after 10 days

Full Access
Question # 76

A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices.

Which best practice of the AWS Well-Architected Framework is the company following with this plan?

A.

Integrate functional testing as part of AWS deployment.

B.

Use automation to deploy changes.

C.

Deploy the application to multiple locations.

D.

Implement loosely coupled dependencies.

Full Access
Question # 77

Which AWS services are supported by Savings Plans? (Select TWO.)

A.

Amazon EC2

B.

Amazon RDS

C.

Amazon SageMaker

D.

Amazon Redshift

E.

Amazon DynamoDB

Full Access
Question # 78

Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours?

A.

On-Demand Instances

B.

Reserved Instances

C.

Spot Instances

D.

Dedicated Instances

Full Access
Question # 79

Which AWS service uses AWS Compute Optimizer to provide sizing recommendations based on workload metrics?

A.

Amazon EC2

B.

Amazon RDS

C.

Amazon Lightsail

D.

AWS Step Functions

Full Access
Question # 80

A company website is experiencing DDoS attacks.

Which AWS service can help protect the company website against these attacks?

A.

AWS Resource Access Manager

B.

AWS Amplify

C.

AWS Shield

D.

Amazon GuardDuty

Full Access
Question # 81

Which AWS service offers object storage?

A.

Amazon RDS

B.

Amazon Elastic File System (Amazon EFS)

C.

Amazon S3

D.

Amazon DynamoDB

Full Access
Question # 82

Which AWS Well-Architected Framework pillar focuses on structured and streamlined allocation of computing resources?

A.

Reliability

B.

Operational excellence

C.

Performance efficiency

D.

Sustainability

Full Access
Question # 83

A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud How can these reports be generated?

A.

Contact the AWS Compliance team

B.

Download the reports from AWS Artifact

C.

Open a case with AWS Support

D.

Generate the reports with Amazon Macie.

Full Access
Question # 84

Which task does AWS perform automatically?

A.

Encrypt data that is stored in Amazon DynamoDB.

B.

Patch Amazon EC2 instances.

C.

Encrypt user network traffic.

D.

Create TLS certificates for users' websites.

Full Access
Question # 85

A company has created an AWS Cost and Usage Report and wants to visualize the report.

Which AWS service should the company use to ingest and display this information?

A.

Amazon QuickSight

B.

Amazon Pinpoint

C.

Amazon Neptune

D.

Amazon Kinesis

Full Access
Question # 86

A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials.

Which of the following is an AWS best practice for using the AWS account root user credentials?

A.

Allow only the manager to use the account root user credentials for normal activities.

B.

Use the account root user credentials only for Amazon EC2 instances from the AWS Free Tier.

C.

Use the account root user credentials only when they alone must be used to perform a required

function.

D.

Use the account root user credentials only for the creation of private VPC subnets.

Full Access
Question # 87

A company is hosting a web application in a Docker container on Amazon EC2.

AWS is responsible for which of the following tasks?

A.

Scaling the web application and services developed with Docker

B.

Provisioning or scheduling containers to run on clusters and maintain their availability

C.

Performing hardware maintenance in the AWS facilities that run the AWS Cloud

D.

Managing the guest operating system, including updates and security patches

Full Access
Question # 88

A company wants to integrate its online shopping website with social media login credentials.

Which AWS service can the company use to make this integration?

A.

AWS Directory Service

B.

AWS Identity and Access Management (IAM)

C.

Amazon Cognito

D.

AWS IAM Identity Center (AWS Single Sign-On)

Full Access
Question # 89

Which AWS services or features can control VPC traffic? (Select TWO.)

A.

Security groups

B.

AWS Direct Connect

C.

Amazon GuardDuty

D.

Network ACLs

E.

Amazon Connect

Full Access
Question # 90

A company needs to store data across multiple Availability Zones in an AWS Region. The data will not be

accessed regularly but must be immediately retrievable.

Which Amazon Elastic File System (Amazon EFS) storage class meets these requirements MOST cost effectively?

A.

EFS Standard

B.

EFS Standard-Infrequent Access(EFS Standard-IA)

C.

EFS One Zone

D.

EFS One Zone-Infrequent Access (EFS One Zone-IA)

Full Access
Question # 91

A company recently migrated to the AWS Cloud. The company needs to determine whether its newly imported Amazon EC2 instances are the appropriate size and type.

Which AWS services can provide this information to the company? {Select TWO.)

A.

AWS Auto Scaling

B.

AWS Control Tower

C.

AWS Trusted Advisor

D.

AWS Compute Optimizer

E.

Amazon Forecast

Full Access
Question # 92

Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?

A.

Elimination of expenses for running and maintaining data centers

B.

Price discounts that are identical to discounts from hardware providers

C.

Distribution of all operational controls to AWS

D.

Elimination of operational expenses

Full Access
Question # 93

A company wants to migrate its on-premises data warehouse to AWS. The information in the data warehouse is

used to populate analytics dashboards.

Which AWS service should the company use for the data warehouse?

A.

Amazon ElastiCache

B.

Amazon Aurora

C.

Amazon RDS

D.

Amazon Redshift

Full Access
Question # 94

A company runs thousands of simultaneous simul-ations using AWS Batch. Each simul-ation is stateless, is fault tolerant, and runs for up to 3 hours.

Which pricing model enables the company to optimize costs and meet these requirements?

A.

Reserved Instances

B.

Spot Instances

C.

On-Demand Instances

D.

Dedicated Instances

Full Access
Question # 95

Which activity can companies complete by using AWS Organizations?

A.

Troubleshoot the performance of applications.

B.

Manage service control policies (SCPs).

C.

Migrate applications to microservices.

D.

Monitor the performance of applications.

Full Access
Question # 96

Which AWS network services or features allow Cl DR block notation when providing an IP address range?

(Select TWO.)

A.

Security groups

B.

Amazon Machine Image (AMI)

C.

Network access control list (network ACL)

D.

AWS Budgets

E.

Amazon Elastic Block Store (Amazon EBS)

Full Access
Question # 97

A company's user base needs to remotely access virtual desktop computers from the internet Which AWS service provides this functionality?

A.

Amazon Connect

B.

Amazon Cognito

C.

Amazon Workspaces

D.

Amazon Upstream 2.0

Full Access
Question # 98

Which feature of the AWS Cloud gives users the ability to pay based on current needs rather than forecasted needs?

A.

AWS Budgets

B.

Pay-as-you-go pricing

C.

Volume discounts

D.

Savings Plans

Full Access
Question # 99

Which AWS service can report how AWS resource configurations have changed over time?

A.

AWS CloudTrail

B.

Amazon CloudWatch

C.

AWS Config

D.

Amazon Inspector

Full Access
Question # 100

A company is migrating a relational database server to the AWS Cloud. The company wants to minimize

administrative overhead of database maintenance tasks.

Which AWS service will meet these requirements?

A.

Amazon DynamoDB

B.

Amazon EC2

C.

Amazon Redshift

D.

Amazon RDS

Full Access
Question # 101

A retail company is building a new mobile app. The company is evaluating whether to build the app at an on-premises data center or in the AWS Cloud.

responsibility model?

A.

Amazon FSx for Windows File Server

B.

Amazon Workspaces virtual Windows desktop

C.

AWS Directory Service for Microsoft Active Directory

D.

Amazon RDS for Microsoft SQL Server

Full Access
Question # 102

A cloud practitioner is analyzing Amazon EC2 instance performance and usage to provide recommendations for potential cost savings.

Which cloud concept does this analysis demonstrate?

A.

Auto scaling

B.

Rightsizing

C.

Load balancing

D.

High availability

Full Access
Question # 103

Which AWS service meets this requirement?

A.

AWS CloudFormation

B.

AWS Elastic Beanstalk

C.

AWS Cloud9

D.

AWS CloudShell

Full Access
Question # 104

Which AWS Support plan assigns an AWS concierge agent to a company's account?

A.

AWS Basic Support

B.

AWS Developer Support

C.

AWS Business Support

D.

AWS Enterprise Support

Full Access
Question # 105

Which AWS service or tool provides users with the ability to monitor AWS service quotas?

A.

AWS CloudTrail

B.

AWS Cost and Usage Reports

C.

AWS Trusted Advisor

D.

AWS Budgets

Full Access
Question # 106

Which of the following are benefits that a company receives when it moves an on-premises production workload to AWS? (Select TWO.)

A.

AWS trains the company's staff on the use of all the AWS services.

B.

AWS manages all security in the cloud.

C.

AWS offers free support from technical account managers (TAMs).

D.

AWS offers high availability.

E.

AWS provides economies of scale.

Full Access
Question # 107

Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?

A.

AWS Support

B.

AWS customers

C.

AWS Key Management Service (AWS KMS)

D.

AWS Trusted Advisor

Full Access
Question # 108

Which AWS service provides highly durable object storage?

A.

Amazon S3

B.

Amazon Elastic File System (Amazon EFS)

C.

Amazon Elastic Block Store (Amazon EBS)

D.

Amazon FSx

Full Access
Question # 109

Which task is a customer's responsibility, according to the AWS shared responsibility model?

A.

Management of the guest operating systems

B.

Maintenance of the configuration of infrastructure devices

C.

Management of the host operating systems and virtualization

D.

Maintenance of the software that powers Availability Zones

A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.

Full Access
Question # 110

Which AWS database service provides in-memory data storage?

A.

Amazon DynamoDB

B.

Amazon ElastiCache

C.

Amazon RDS

D.

Amazon Timestream

Full Access
Question # 111

A company needs to run its existing custom, nonproduction workloads in the AWS Cloud quickly and cost-effectively.

The workloads can recover from interruptions easily.

Which pricing model should the company use?

A.

Reserved Instances

B.

On-Demand Instances

C.

Spot Instances

D.

Dedicated Hosts

Full Access
Question # 112

company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.

Which pillar of the AWS Well-Architected Framework is supported by these goals?

A.

Reliability

B.

Security

C.

Operational excellence

D.

Performance efficiency

Full Access
Question # 113

A company wants to track its AWS account's service costs. The company also wants to receive notifications when costs are forecasted to reach a specific level.

Which AWS service or tool provides this functionality?

A.

AWS Budgets

B.

AWS Cost Explorer

C.

Savings Plans

D.

AWS Billing Conductor

Full Access
Question # 114

Which of the following are user authentication services managed by AWS? (Select TWO.)

A.

Amazon Cognito

B.

AWS Lambda

C.

AWS License Manager

D.

AWS Identity and Access Management (IAM)

E.

AWS CodeStar

Full Access
Question # 115

Which of the following is available to a company that has an AWS Business Support plan?

A.

AWS Support concierge

B.

AWS DDoS Response Team (DRT)

C.

AWS technical account manager (TAM)

D.

AWS Health API

Full Access
Question # 116

A company has two AWS accounts in an organization in AWS Organizations for consolidated billing. All of the company's AWS resources are hosted in one AWS Region.

Account A has purchased five Amazon EC2 Standard Reserved Instances (RIs) and has four EC2 instances

running. Account B has not purchased any RIs and also has four EC2 instances running.

Which statement is true regarding pricing for these eight instances?

A.

The eight instances will be charged as regular instances.

B.

Four instances will be charged as RIs, and four will be charged as regular instances.

C.

Five instances will be charged as RIs, and three will be charged as regular instances.

D.

The eight instances will be charged as RIs.

Full Access
Question # 117

What is the total amount of storage offered by Amazon S3?

A.

WOMB

B.

5 GB

C.

5 TB

D.

Unlimited

Full Access
Question # 118

When designing AWS workloads to be operational even when there are component failures, what is an AWS best practice?

A.

Perform quarterly disaster recovery tests.

B.

Place the main component on the us-east-1 Region.

C.

Design for automatic failover to healthy resources.

D.

Design workloads to fit on a single Amazon EC2 instance.

Full Access
Question # 119

What are the characteristics of Availability Zones? (Select TWO.)

A.

All Availability Zones in an AWS Region are interconnected with high-bandwidth, low-latency networking

B.

Availability Zones are physically separated by a minimum of distance of 150 km (100 miles).

C.

All traffic between Availability Zones is encrypted.

D.

Availability Zones within an AWS Region share redundant power, networking, and connectivity.

E.

Every Availability Zone contains a single data center.

Full Access
Question # 120

A company is migrating an application that includes an Oracle database to AWS. The company cannot rewrite the application.

To which AWS service could the company migrate the database?

A.

Amazon Athena

B.

Amazon DynamoDB

®C. Amazon RDS

C.

Amazon DocumentDB (with MongoDB compatibility)

Full Access
Question # 121

Which pillar of the AWS Well-Architected Framework focuses on the return on investment of moving into the AWS Cloud?

A.

Sustainability

B.

Cost optimization

C.

Operational excellence

D.

Reliability

Full Access
Question # 122

A developer needs to build an application for a retail company. The application must provide real-time product recommendations that are based on machine learning.

Which AWS service should the developer use to meet this requirement?

A.

AWS Health Dashboard

B.

Amazon Personalize

C.

Amazon Forecast

D.

Amazon Transcribe

Full Access
Question # 123

Which benefit is included with an AWS Enterprise Support plan?

A.

AWS Partner Network (APN) support at no cost

B.

Designated support from an AWS technical account manager (TAM)

C.

On-site support from AWS engineers

D.

AWS managed compliance as code with AWS Config

Full Access
Question # 124

An Availability Zone consists of:

A.

one or more data centers in a single location.

B.

two or more data centers in multiple locations.

C.

one or more physical hosts in a single data center.

D.

two or more physical hosts in multiple data centers.

Full Access
Question # 125

A large company wants to track the combined AWS usage costs of all of its linked accounts.

How can this be accomplished?

A.

Use AWS Trusted Advisor to generate customized summary reports.

B.

Use AWS Organizations to generate consolidated billing reports.

C.

Use AWS Budgets to set utilization targets and receive summary reports.

D.

Use the AWS Control Tower dashboard to get a summary report of all linked account costs.

Full Access
Question # 126

A company plans to migrate to AWS and wants to create cost estimates for its AWS use cases.

Which AWS service or tool can the company use to meet these requirements?

A.

AWS Pricing Calculator

B.

Amazon CloudWatch

C.

AWS Cost Explorer

D.

AWS Budgets

Full Access
Question # 127

A newly created IAM user has no IAM policy attached.

What will happen when the user logs in and attempts to view the AWS resources in the account?

A.

All AWS services will be read-only access by default.

B.

Access to all AWS resources will be denied.

C.

Access to the AWS billing services will be allowed.

D.

Access to AWS resources will be allowed through the AWS CLL

Full Access
Question # 128

Which of the following is a recommended design principle of the AWS Well-Architected Framework?

A.

Reduce downtime by making infrastructure changes infrequently and in large increments.

B.

Invest the time to configure infrastructure manually.

C.

Learn to improve from operational failures.

D.

Use monolithic application design for centralization.

Full Access
Question # 129

A company is using AWS Lambda functions to build an application.

Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Select TWO.)

A.

Patch the servers where the Lambda functions are deployed.

B.

Establish the IAM permissions that define who can run the Lambda functions.

C.

Write the code for the Lambda functions to define the application logic.

D.

Deploy Amazon EC2 instances to support the Lambda functions.

E.

Scale out the Lambda functions when the load increases.

Full Access
Question # 130

Amazon Elastic File System (Amazon EFS) and Amazon FSx offer which type of storage?

A.

File storage

B.

Object storage

C.

Block storage

D.

Instance store

Full Access
Question # 131

What does the Amazon S3 Intelligent-Tiering storage class offer?

A.

Payment flexibility by reserving storage capacity

B.

Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon

EBS) volume

C.

Automatic cost savings by moving objects between tiers based on access pattern changes

D.

Secure, durable, and lowest cost storage for data archival

Full Access
Question # 132

Which AWS service or feature can be used to estimate costs before deployment?

A.

AWS Free Tier

B.

AWS Pricing Calculator

C.

AWS Billing and Cost Management

D.

AWS Cost and Usage Report

Full Access
Question # 133

A company moves its infrastructure from on premises to the AWS Cloud. The company can now provision additional Amazon EC2 instances whenever the instances are required. With this ability, the company can launch new marketing campaigns in 3 days instead of 3 weeks.

Which benefit of the AWS Cloud does this scenario demonstrate?

A.

Cost savings

B.

Improved operational resilience

C.

Increased business agility

D.

Enhanced security

Full Access
Question # 134

Which AWS service requires the customer to be fully responsible for applying operating system patches?

A.

Amazon DynamoDB

B.

AWS Lambda

C.

AWS Fargate

D.

Amazon EC2

Full Access
Question # 135

Which AWS service or tool can be used to consolidate payments for a company with multiple AWS accounts?

A.

AWS Cost and Usage Report

B.

AWS Organizations

C.

Cost Explorer

D.

AWS Budgets

Full Access
Question # 136

A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-cost laptops.

Which AWS service will help the company deploy the application without investing in backend infrastructure or high end client hardware?

A.

Amazon AppStream 2.0

B.

AWS AppSync

C.

Amazon WorkLink

D.

AWS Elastic Beanstalk

Full Access
Question # 137

Which option is an advantage of AWS Cloud computing that minimizes variable costs?

A.

High availability

B.

Economies of scale

C.

Global reach

D.

Agility

Full Access
Question # 138

Which best practice for cost governance does this example show?

A.

Resource controls

B.

Cost allocation

C.

Architecture optimization

D.

Tagging enforcement

Full Access
Question # 139

A company needs to categorize and track AWS usage cost based on business categories.

Which AWS service or feature should the company use to meet these requirements?

A.

Cost allocation tags

B.

AWS Organizations

C.

AWS Security Hub

D.

AWS Cost and Usage Report

Full Access
Question # 140

Which AWS service will help protect applications running on AWS from DDoS attacks?

A.

Amazon GuardDuty

B.

AWS WAF

C.

AWS Shield

D.

Amazon Inspector

Full Access
Question # 141

Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable expenses?

A.

High availability

B.

Economies of scale

C.

Pay-as-you-go pricing

D.

Global reach

Full Access
Question # 142

A company operates a petabyte-scale data warehouse to analyze its data. The company wants a solution that will not require manual hardware and software management. Which AWS service will meet these requirements?

A.

Amazon DocumentDB (with MongoDB compatibility)

B.

Amazon Redshift

C.

Amazon Neptune

D.

Amazon ElastiCache

Full Access
Question # 143

A company deploys its application on Amazon EC2 instances. The application occasionally experiences sudden increases in demand. The company wants to ensure that its application can respond to changes in demand at the lowest possible cost.

Which AWS service or tool will meet these requirements?

A.

AWS Auto Scaling

B.

AWS Compute Optimizer

C.

AWS Cost Explorer

D.

AWS Well-Architected Framework

Full Access
Question # 144

A company wants to deploy and manage a Docker-based application on AWS.

Which solution meets these requirements with the LEAST amount of operational overhead?

A.

An open-source Docker orchestrator on Amazon EC2 instances

B.

AWS AppSync

C.

Amazon Elastic Container Registry (Amazon ECR)

D.

Amazon Elastic Container Service (Amazon ECS)

Full Access
Question # 145

Which AWS service or feature offers security for a VPC by acting as a firewall to control traffic in and out of subnets?

A.

AWS Security Hub

B.

Security groups

C.

Network ACL

D.

AWSWAF

Full Access
Question # 146

Which AWS service gives users the ability to provision a dedicated and private network connection from their internal

network to AWS?

A.

AWS CloudHSM

B.

AWS Direct Connect

C.

AWS VPN

D.

Amazon Connect

Full Access
Question # 147

Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?

A.

Vertical scaling

B.

Manual failure recovery

C.

Testing recovery procedures

D.

Changing infrastructure manually

Full Access
Question # 148

What can a user accomplish using AWS CloudTrail?

A.

Generate an IAM user credentials report.

B.

Record API calls made to AWS services.

C.

Assess the compliance of AWS resource configurations with policies and guidelines.

D.

Ensure that Amazon EC2 instances are patched with the latest security updates.

A company uses Amazon Workspaces.

Full Access
Question # 149

Which AWS service aggregates, organizes, and prioritizes security alerts and findings from multiple AWS services?

A.

Amazon Detective

B.

Amazon Inspector

C.

Amazon Macie

D.

AWS Security Hub

Full Access
Question # 150

A company needs to configure rules to identify threats and protect applications from malicious network access.

Which AWS service should the company use to meet these requirements?

A.

AWS Identity and Access Management (IAM)

B.

Amazon QuickSight

C.

AWS WAF

D.

Amazon Detective

Full Access
Question # 151

A company needs to migrate all of its development teams to a cloud-based integrated development environment (IDE).

Which AWS service should the company use?

A.

AWS CodeBuild

B.

AWS Cloud9

C.

AWS OpsWorks

D.

AWS Cloud Development Kit (AWS CDK)

Full Access
Question # 152

A company wants to provision and manage its AWS infrastructure by using the common programming languages TypeScript, Python, Java, and .NET. Which h AWS service will meet this requirement?

A.

AWS CodeBuild

B.

AWS CloudFormation

C.

AWSCLI

D.

AWS Cloud Development Kit (AWS CDK)

Full Access
Question # 153

Which actions are best practices for an AWS account root user? (Select TWO.)

A.

Share root user credentials with team members.

B.

Create multiple root users for the account, separated by environment.

C.

Enable multi-factor authentication (MFA) on the root user.

D.

Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user.

E.

Use programmatic access instead of the root user and password.

Full Access
Question # 154

Which option is a customer responsibility under the AWS shared responsibility model?

A.

Maintenance of underlying hardware of Amazon EC2 instances

B.

Application data security

C.

Physical security of data centers

D.

Maintenance of VPC components

Full Access
Question # 155

Which AWS service will allow a user to set custom cost and usage limits, and will alert when the thresholds are exceeded?

A.

AWS Organizations

B.

AWS Budgets

C.

Cost Explorer

D.

AWS Trusted Advisor

Full Access
Question # 156

A company's application has high customer usage during certain times of the day. The company wants to reduce the number of Amazon EC2 instances that run when application usage is low.

Which AWS service or instance purchasing option should the company use to meet this requirement?

A.

EC2 Instance Savings Plans

B.

Spot Instances

C.

Reserved Instances

D.

Amazon EC2 Auto Scaling

Full Access
Question # 157

Which AWS service or storage class provides low-cost, long-term data storage?

A.

Amazon S3 Glacier Deep Archive

B.

AWS Snowball

C.

Amazon MQ

D.

AWS Storage Gateway

Full Access
Question # 158

A company wants to launch multiple workloads on AWS. Each workload is related to a different business unit. The company wants to separate and track costs for each business unit.

Which solution will meet these requirements with the LEAST operational overhead?

A.

Use AWS Organizations and create one account for each business unit.

B.

Use a spreadsheet to control the owners and cost of each resource.

C.

Use an Amazon DynamoDB table to record costs for each business unit.

D.

Use the AWS Billing console to assign owners to resources and track costs.

Full Access
Question # 159

Which options are AWS Cloud Adoption Framework (AWS CAF) cloud transformation journey

recommendations? (Select TWO.)

A.

Envision phase

B.

Align phase

C.

Assess phase

D.

Mobilize phase

E.

Migrate and modernize phase

Full Access
Question # 160

How does the AWS Enterprise Support Concierge team help users?

A.

Supporting application development

B.

Providing architecture guidance

C.

Answering billing and account inquiries

D.

Answering questions regarding technical support cases

Full Access
Question # 161

Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:

A.

restricted access.

B.

as-needed access.

C.

least privilege access.

D.

token access.

Full Access
Question # 162

A customer runs an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds.

For how much time will the customer be billed?

A.

3 hours, 5 minutes

B.

3 hours, 5 minutes, and 6 seconds

C.

3 hours, 6 minutes

D.

4 hours

Full Access
Question # 163

A company is building an application on AWS. The application needs to comply with credit card regulatory requirements. The company needs proof that the AWS services and deployment are in compliance.

Which actions should the company take to meet these requirements? (Select TWO.)

A.

Use Amazon Inspector to submit the application for certification.

B.

Ensure that the application's underlying hardware components comply with requirements.

C.

Use AWS Artifact to access AWS documents about the compliance of the services.

D.

Get the compliance of the application certified by a company assessor.

E.

Use AWS Security Hub to certify the compliance of the application.

Full Access
Question # 164

Which AWS Cloud benefit gives a company the ability to quickly deploy cloud resources to access compute, storage, and database infrastructures in a matter of minutes?

A.

Elasticity

B.

Cost savings

C.

Agility

D.

Reliability

Full Access
Question # 165

Which of the following are pillars of the AWS Well-Architected Framework? (Select TWO)

A.

High availability

B.

Performance efficiency

C.

Cost optimization

D.

Going global in minutes

E.

Continuous development

Full Access
Question # 166

A company is moving an on-premises data center to the AWS Cloud. The company must migrate 50 petabytes of file storage data to AWS with the least possible operational overhead.

Which AWS service or resource should the company use to meet these requirements?

A.

AWS Snowmobile

B.

AWS Snowball Edge

C.

AWS Data Exchange

D.

AWS Database Migration Service (AWS DMS)

Full Access
Question # 167

Which scenarios represent the concept of elasticity on AWS? (Select TWO.)

A.

Scaling the number of Amazon EC2 instances based on traffic

B.

Resizing Amazon RDS instances as business needs change

C.

Automatically directing traffic to less-utilized Amazon EC2 instances

D.

Using AWS compliance documents to accelerate the compliance process

E.

Having the ability to create and govern environments using code

Full Access
Question # 168

A systems administrator created a new 1AM user for a developer and assigned the user an access key instead of a user name and password. What is the access key used for?

A.

To access the AWS account as the AWS account root user

B.

To access the AWS account through the AWS Management Console

C.

To access the AWS account through a CLI

D.

To access all of a company's AWS accounts

Full Access
Question # 169

A company needs to store infrequently used data for data archives and long-term backups.

A company needs a history report about how its Amazon EC2 instances were modified last month.

Which AWS service can be used to meet this requirement?

A.

AWS Service Catalog

B.

AWS Config

C.

Amazon CloudWatch

D.

AWS Artifact

Full Access
Question # 170

A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting.

Which S3 feature should the company use to meet these requirements?

A.

S3 Lifecycle rules

B.

S3 Versioning

C.

S3 bucket policies

D.

S3 server-side encryption

Full Access
Question # 171

Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC? images?

A.

EC2 Image Builder

B.

Amazon Machine Image (AMI)

C.

AWS Launch Wizard

D.

AWS Elastic Beanstalk

Full Access
Question # 172

To reduce costs, a company is planning to migrate a NoSQL database to AWS.

Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?

A.

Amazon Redshift

B.

Amazon Aurora

C.

Amazon DynamoDB

D.

Amazon RDS

Full Access
Question # 173

Which AWS service provides the ability to manage infrastructure as code?

A.

AWS CodePipeline

B.

AWS CodeDeploy

C.

AWS Direct Connect

D.

AWS CloudFormation

Full Access
Question # 174

Which perspective in the AWS Cloud Adoption Framework (AWS CAF) includes a capability for well-designed data and analytics architecture?

A.

Security

B.

Governance

C.

Operations

D.

Platform

Full Access
Question # 175

A company wants to allow users to authenticate and authorize multiple AWS accounts by using a single set of credentials.

Which AWS service or resource will meet this requirement?

A.

AWS Organizations

B.

IAM user

C.

AWS IAM Identity Center (AWS Single Sign-On)

D.

AWS Control Tower

Full Access
Question # 176

A company wants to establish a schedule for rotating database user credentials.

Which AWS service will support this requirement with the LEAST amount of operational overhead?

A.

AWS Systems Manager

B.

AWS Secrets Manager

C.

AWS License Manager

D.

AWS Managed Services

Full Access
Question # 177

Which pillar of the AWS Well-Architected Framework includes the AWS shared responsibility model?

A.

Operational excellence

B.

Performance efficiency

C.

Reliability

D.

Security

Full Access
Question # 178

A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.

Which AWS service meets these requirements?

A.

AWS Lambda

B.

Amazon RDS

C.

AWS Fargate

D.

Amazon Athena

Full Access
Question # 179

A company has a physical tape library to store data backups. The tape library is running out of space. The company needs to extend the tape library's capacity to the AWS Cloud.

Which AWS service should the company use to meet this requirement?

A.

Amazon Elastic File System (Amazon EFS)

B.

Amazon Elastic Block Store (Amazon EBS)

C.

Amazon S3

D.

AWS Storage Gateway

Full Access
Question # 180

A company wants to store data with high availability, encrypt the data at rest, and have direct access to the data over the internet.

Which AWS service will meet these requirements MOST cost-effectively?

A.

Amazon Elastic Block Store (AmazonEBS)

B.

Amazon S3

C.

Amazon Elastic File System (Amazon EFS)

D.

AWS Storage Gateway

Full Access
Question # 181

Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data?

A.

Amazon Athena

B.

AWS Glue

C.

Amazon S3

D.

AWS Snowball Edge

Full Access
Question # 182

A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data.

Which combination of AWS services should the company use to meet these requirements? (Select TWO.)

A.

AWS Glue

B.

Amazon Elastic File System (Amazon EFS)

C.

Amazon Redshift

D.

Amazon QuickSight

E.

Amazon Quantum Ledger Database (Amazon QLDB)

Full Access
Question # 183

A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports. Which AWS service will meet this requirement?

A.

AWS Trusted Advisor

B.

Amazon CloudWatch

C.

Amazon GuardDuty

D.

AWS Health Dashboard

Full Access
Question # 184

A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure. Which AWS service or feature should be used?

A.

Security groups

B.

AWS Firewall Manager

C.

IAM roles

D.

IAM user SSH keys

Full Access
Question # 185

Which mechanism allows developers to access AWS services from application code?

A.

AWS Software Development Kit

B.

AWS Management Console

C.

AWS CodePipeline

D.

AWS Config

Full Access
Question # 186

Which AWS service uses a combination of publishers and subscribers?

A.

AWS Lambda

B.

Amazon Simple Notification Service (Amazon SNS)

C.

Amazon CloudWatch

D.

AWS CloudFormation

Full Access
Question # 187

An auditor needs to find out whether a specific AWS service is compliant with specific compliance frameworks.

Which AWS service will provide this information?

A.

AWS Artifact

B.

AWS Trusted Advisor

C.

Amazon GuardDuty

D.

AWS Certificate Manager (ACM)

Full Access