AWS Certified Cloud Practitioner CLF-C02
Free trial
Verified
Question 1
A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.
Which activities related to a Snowball Edge device are available to the company at no cost?
- A: Use of the Snowball Edge appliance for a 10-day period
- B: The transfer of data out of Amazon S3 and to the Snowball Edge appliance
- C: The transfer of data from the Snowball Edge appliance into Amazon S3
- D: Daily use of the Snowball Edge appliance after 10 days
Question 2
Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)
- A: Providing high-performance container orchestration
- B: Creating and rotating encryption keys
- C: Detecting underutilized resources to save costs
- D: Improving security by proactively monitoring the AWS environment
- E: Implementing enforced tagging across AWS resources
Question 3
A company wants to automate infrastructure deployment by using infrastructure as code (IaC). The company wants to scale production stacks so the stacks can be deployed in multiple AWS Regions.
Which AWS service will meet these requirements?
- A: Amazon CloudWatch
- B: AWS Config
- C: AWS Trusted Advisor
- D: AWS CloudFormation
Question 4
Which option is an AWS Cloud Adoption Framework (AWS CAF) platform perspective capability?
- A: Data architecture
- B: Data protection
- C: Data governance
- D: Data science
Question 5
A company is running a workload in the AWS Cloud.
Which AWS best practice ensures the MOST cost-effective architecture for the workload?
- A: Loose coupling
- B: Rightsizing
- C: Caching
- D: Redundancy
Question 6
A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. The company wants to use AWS services for the backups without changing its existing backup workflows.
Which AWS service should the company use to meet these requirements?
- A: Amazon Elastic Block Store (Amazon EBS)
- B: AWS Storage Gateway
- C: Amazon Elastic Container Service (Amazon ECS)
- D: AWS Lambda
Question 7
Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom alerts when their costs or usage exceed established thresholds?
- A: Cost Explorer
- B: AWS Budgets
- C: AWS Cost and Usage Report
- D: Reserved Instance reporting
Question 8
Which tasks are the customer’s responsibility, according to the AWS shared responsibility model? (Choose two.)
- A: Establish the global infrastructure.
- B: Perform client-side data encryption.
- C: Configure IAM credentials.
- D: Secure edge locations.
- E: Patch Amazon RDS DB instances.
Question 9
A developer has been hired by a large company and needs AWS credentials.
Which are security best practices that should be followed? (Choose two.)
- A: Grant the developer access to only the AWS resources needed to perform the job.
- B: Share the AWS account root user credentials with the developer.
- C: Add the developer to the administrator’s group in AWS IAM.
- D: Configure a password policy that ensures the developer’s password cannot be changed.
- E: Ensure the account password policy requires a minimum length.
Question 10
A company has multiple AWS accounts that include compute workloads that cannot be interrupted. The company wants to obtain billing discounts that are based on the company’s use of AWS services.
Which AWS feature or purchasing option will meet these requirements?
- A: Resource tagging
- B: Consolidated billing
- C: Pay-as-you-go pricing
- D: Spot Instances
Question 11
A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure.
Which AWS service or feature should be used?
- A: Security groups
- B: AWS Firewall Manager
- C: IAM roles
- D: IAM user SSH keys
Question 12
A company wants a fully managed Windows file server for its Windows-based applications.
Which AWS service will meet this requirement?
- A: Amazon FSx
- B: Amazon Elastic Kubernetes Service (Amazon EKS)
- C: Amazon Elastic Container Service (Amazon ECS)
- D: Amazon EMR
Question 13
Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?
- A: Elimination of expenses for running and maintaining data centers
- B: Price discounts that are identical to discounts from hardware providers
- C: Distribution of all operational controls to AWS
- D: Elimination of operational expenses
Question 14
A company wants to migrate its NFS on-premises workload to AWS.
Which AWS Storage Gateway type should the company use to meet this requirement?
- A: Tape Gateway
- B: Volume Gateway
- C: Amazon FSx File Gateway
- D: Amazon S3 File Gateway
Question 15
A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources.
Which AWS tool or service can be used to meet these requirements?
- A: Amazon CloudWatch
- B: Amazon Inspector
- C: AWS CloudTrail
- D: AWS IAM
Question 16
A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in an Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to grow for years.
What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?
- A: Spot Instances
- B: On-Demand Instances
- C: Savings Plans
- D: Dedicated Hosts
Question 17
A company wants an AWS service to provide product recommendations based on its customer data.
Which AWS service will meet this requirement?
- A: Amazon Polly
- B: Amazon Personalize
- C: Amazon Comprehend
- D: Amazon Rekognition
Question 18
A company is planning its migration to the AWS Cloud. The company is identifying its capability gaps by using the AWS Cloud Adoption Framework (AWS CAF) perspectives.
Which phase of the cloud transformation journey includes these identification activities?
- A: Envision
- B: Align
- C: Scale
- D: Launch
Question 19
A social media company wants to protect its web application from common web exploits such as SQL injections and cross-site scripting.
Which AWS service will meet these requirements?
- A: Amazon Inspector
- B: AWS WAF
- C: Amazon GuardDuty
- D: Amazon CloudWatch
Question 20
Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images?
- A: EC2 Image Builder
- B: Amazon Machine Image (AMI)
- C: AWS Launch Wizard
- D: AWS Elastic Beanstalk
Question 21
A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities.
Which AWS service will meet these requirements?
- A: Amazon GuardDuty
- B: Amazon Inspector
- C: Amazon Detective
- D: Amazon Cognito
Question 22
A company needs to perform data processing once a week that typically takes about 5 hours to complete.
Which AWS service should the company use for this workload?
- A: AWS Lambda
- B: Amazon EC2
- C: AWS CodeDeploy
- D: AWS Wavelength
Question 23
Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?
- A: Amazon CloudWatch Logs
- B: AWS CloudTrail
- C: VPC Flow Logs
- D: AWS Identity and Access Management (IAM)
Question 24
A company wants to manage deployed IT services and govern its infrastructure as code (IaC) templates.
Which AWS service will meet this requirement?
- A: AWS Resource Explorer
- B: AWS Service Catalog
- C: AWS Organizations
- D: AWS Systems Manager
Question 25
A company wants to design a centralized storage system to manage the configuration data and passwords for its critical business applications.
Which AWS service or capability will meet these requirements MOST cost-effectively?
- A: AWS Systems Manager Parameter Store
- B: AWS Secrets Manager
- C: AWS Config
- D: Amazon S3
Free preview mode
Enjoy the free questions and consider upgrading to gain full access!