AWS Cloud Practitioner Certification (CLF-C02)

#01 ~ #40

#01 Which AWS service provides infrastructure security optimization recommendations?

A. AWS Trusted Advisor

 

#02 Files are accessed with random frequency.

What is the most cost-effective Amazon S3 object storage class to implement?

A. Amazon S3 Intelligent-Tiering

 

#03 Which AWS service can be deployed to enhance read performance for applications while reading data from NoSQL database? A. Amazon DynamoDB Accelerator

 

#04 The application is frequently giving runtime errors.

Which service will help in the troubleshooting process?

A. AWS X-Ray

 

#05 According to the AWS, what is the benefit of Elasticity?

A. Create systems that scale to the required capacity based on changes in demand

 

#06 Which tool can you use to forecast your AWS spending?

A. AWS Cost Explorer

 

#07 Which of the following is an optional Security layer attached to a subnet within a VPC

for controlling traffic in & out of the VPC?

A. Network ACL

 

#08 Which of the following is a customer responsibility under AWS Shared Responsibility Model?

A. Patching of guest OS deployed on Amazon EC2 instance

 

#09 What is the AWS feature that enables fast, easy and secure transfers of files over long distances

between your client and your Amazon S3 bucket?

A. Amazon S3 Transfer Acceleration

 

#10 Which of the following services can be used to optimize performance for global users

to transfer large-sized data objects to a centralized Amazon S3 bucket in us-west-1 region?

A. Enable S3 Transfer Acceleration on Amazon S3 bucket

 

#11 The objects must be downloadable via a URL. Which storage option would you choose?

A. Amazon S3

 

#12 There is a requirement to host a database server for a minimum period of one year.

Which of the following would result in the least cost?

A. Partial Upfront costs Reserved

 

#13 During an organization's information systems audit, the administrator is requested

to provide a dossier of security and compliance reports and online service agreements

between the organization and AWS. Which service can they utilize to acquire this information?

A. AWS Artifact

 

#14 A new department has recently joined the organization and the administrator needs

to compose access permissions for the group of users.

Given that they have various roles and access needs,

what is the best-practice approach when granting access?

A. The administrator should grant all users the least privilege and add more privileges to only to those who need it.

 

#15 There is an external audit being carried out on your company.

The IT auditor needs to have a log of 'who made the requests' to the AWS resources in the company's account.

Which of the below services can assist in providing these details?

A. AWS CloudTrail

 

#16 Which of the following features can be used to preview changes to be made to an AWS resource

which will be deployed using the AWS CloudFormation template?

A. AWS CloudFormation Change Sets

 

#17 Which of the following is the responsibility of the customer to ensure the availability

and backup of the EBS volumes?

A. Create EBS snapshots.

 

#18 When designing a highly available architecture, what is the difference

between vertical scaling (scaling-up) and horizontal scaling (scaling-out)?

A. Scaling up adds more resources to an instance, scaling out adds more instances.

 

#19 Your company is planning to move to the AWS Cloud.

You need to give a presentation on the cost perspective when moving existing resources to the AWS Cloud.

Considering Amazon EC2, which of the following is an advantage from the cost perspective?

A. The ability to only pay for what you use

 

#20 When designing a system, you use the principle of “design for failure and nothing will fail”

Which of the following services/features of AWS can assist in supporting this design principle?

A. Availability Zones / Regions / Elastic Load Balancer

 

#21 Your design team is planning to design an application that will be hosted on the AWS Cloud.

One of their main non-functional requirements is given below:

Reduce inter-dependencies so failures do not impact other components.

Which of the following concepts does this requirement relate to?

A. Decoupling

 

#22 Which of the following security requirements are managed by AWS?

A. Physical security / Disk disposal / Hardware patching

 

#23  You are planning on deploying a video-based application onto the AWS Cloud.

Users across the world will access these videos.

Which of the below services can help efficiently stream the content to the users across the globe?

A. Amazon CloudFront

 

#24 Which of the following AWS services can be used to retrieve configuration changes

made to AWS resources causing operational issues?  

A. AWS Config

 

#25 An organization runs several EC2 instances inside a VPC using three subnets, one for Development,

one for Test and one for Production. The Security team has some concerns about the VPC configuration.

It requires to restrict the communication across the EC2 instances using Security Groups.

Which of the following options is true for Security Groups?

A.  You can change a Security Group associated to an instance if the instance state is stopped or running.

 

#26 Your company is planning to pay for an AWS Support plan.

They have the following requirements as far as the support plan goes:

24x7 access to Cloud Support Engineers via email, chat & phone Response time of less than 15 minutes

for any business-critical system faults Which of the following plans will suffice to keep in mind the above requirement?

A. Enterprise

 

#27 Your company wants to move an existing Oracle database to the AWS Cloud.

Which of the following services can help facilitate this move?

A. AWS Database Migration Service

 

#28 On which of the following resources does Amazon Inspector perform network accessibility checks?

A. Amazon EC2 instance

 

#29 Which of the following services helps to achieve the computing elasticity in AWS?

A. AWS EC2 Auto Scaling Group 

 

#30 A live online game uses DynamoDB instances in the backend to store real-time scores of the participants

as they compete against each other from various parts of the world.

Which data consistency option is the most appropriate to implement?

A. Strongly consistent

 

#31 Which of the following services allows you to analyze EC2 Instances against pre-defined

security templates to check for vulnerabilities?

A.  AWS Inspector

 

#32 You are planning to serve a web application on the AWS Platform by using EC2 Instances.

Which of the below principles would you adopt to ensure that even if some of the EC2 Instances crash,

you still have a working application?

A. Using a fault tolerant system

 

#33 Which of the following are best practices when designing cloud-based systems?

A. Build loosely-coupled components / Assume everything will fail

 

#34 Which services allow the customer to retain full administrative privileges of the underlying virtual infrastructure?

A. Amazon EC2

 

#35 You have a mission-critical application that must be globally available at all times.

If this is the case, which of the below deployment mechanisms would you employ?

A. Deployment to multiple Regions.

 

#36 Which of the following can be used to protect against DDoS attacks?

A. AWS Shield / AWS Shield Advanced

 

#37 Which of the following is a serverless compute offering from AWS?

A. AWS Lambda

 

#38 Which of the following security services can be used to detect users' personal credit card numbers

from data stored in Amazon S3?

A. Amazon Macie

 

#39 An online streaming company is prohibited from broadcasting

its content in certain countries and regions in the world.

Which Amazon Route 53 routing policy would be the most suitable in guaranteeing their compliance?

A. Geolocation

 

#40 Which AWS service provides a fully managed NoSQL database service that 

provides fast and predictable performance with seamless scalability?

A. DynamoDB

---

#41 ~

#41 In the AWS Billing and Management service,

which tool can provide usage-based forecasts of estimated billing costs and usage for the coming months?

A. AWS Cost Explorer

 

#42 Which of the following AWS managed database service provides

processing power that is up to 5X faster than a traditional MySQL database?

A. Aurora

 

#43 In the AWS Well-Architected Framework, which of the following is NOT a Security design principle

to design solutions in AWS?  (The answer was 'Not', but I Choosed the 'Right ones.')

A. Protect Data at rest & in transit / Implement a strong Identity foundation / Enable Traceability

 

#44 Which of the following options is TRUE for AWS Database Migration Service (AWS DMS)?

A. All the above

    A. AWS DMS can migrate databases from on-premise to AWS.

    B. AWS DMS can migrate databases from AWS to on-premise.

    C. AWS DMS can migrate databases from EC2 to Amazon RDS.

 

    D. AWS DMS can have Amazon Redshift and Amazon DynamoDB as target databases.

 

#45 Which of the following services helps in governance, compliance, and risk auditing in AWS?

A. AWS CloudTrail

 

참고 : https://www.exam-answer.com/amazon/clf-c01