CLF-C01 : AWS Certified Cloud Practitioner : Part 12

Which of the following AWS services provide compute resources? (Choose two.)
- AWS Lambda
- Amazon Elastic Container Service (Amazon ECS)
- AWS CodeDeploy
- Amazon Glacier
- AWS Organizations
Which AWS service enables users to deploy infrastructure as code by automating the process of provisioning resources?
- Amazon GameLift
- AWS CloudFormation
- AWS Data Pipeline
- AWS Glue
Explanation:
AWS CloudFormation provides a common language for you to model and provision AWS and third party application resources in your cloud environment. AWS CloudFormation allows you to use programming languages or a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts. This gives you a single source of truth for your AWS and third party resources.
Which AWS services provide a way to extend an on-premises architecture to the AWS Cloud? (Choose two.)
- Amazon EBS
- AWS Direct Connect
- Amazon CloudFront
- AWS Storage Gateway
- Amazon Connect
Which of the following allows users to provision a dedicated network connection from their internal network to AWS?
- AWS CloudHSM
- AWS Direct Connect
- AWS VPN
- Amazon Connect
Explanation:
AWS Direct Connect lets you establish a dedicated network connection between your network and one of the AWS Direct Connect locations. Using industry standard 802.1q VLANs, this dedicated connection can be partitioned into multiple virtual interfaces. This allows you to use the same connection to access public resources such as objects stored in Amazon S3 using public IP address space, and private resources such as Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC) using private IP space, while maintaining network separation between the public and private environments. Virtual interfaces can be reconfigured at any time to meet your changing needs.
Which services use AWS edge locations? (Choose two.)
- Amazon CloudFront
- AWS Shield
- Amazon EC2
- Amazon RDS
- Amazon ElastiCache
Which service would provide network connectivity in a hybrid architecture that includes the AWS Cloud?
- Amazon VPC
- AWS Direct Connect
- AWS Directory Service
- Amazon API Gateway
Explanation:
Amazon Virtual Private Cloud (Amazon VPC) is a logically isolated, private section of the AWS Cloud to launch resources in a virtual data center in the cloud. Amazon VPC allows you to leverage multiple Availability Zones (AZ) within a region so that you can build greater fault tolerance within your workloads. You have complete control.
Which tool can be used to compare the costs of running a web application in a traditional hosting environment to running it on AWS?
- AWS Cost Explorer
- AWS Budgets
- AWS Cost and Usage report
- AWS Total Cost of Ownership (TCO) Calculator
What is the value of using third-party software from AWS Marketplace instead of installing third-party software on Amazon EC2? (Choose two.)
- Users pay for software by the hour or month depending on licensing.
- AWS Marketplace enables the user to launch applications with 1-Click.
- AWS Marketplace data encryption is managed by a third-party vendor.
- AWS Marketplace eliminates the need to upgrade to newer software versions.
- Users can deploy third-party software without testing.
Which of the following is a cloud architectural design principle?
- Scale up, not out.
- Loosely couple components.
- Build monolithic systems.
- Use commercial database software.
Explanation:
Loosely coupled architectures reduce interdependencies, so that a change or failure in a component does not cascade to other components.
Under the shared responsibility model; which of the following areas are the customer’s responsibility? (Choose two.)
- Firmware upgrades of network infrastructure
- Patching of operating systems
- Patching of the underlying hypervisor
- Physical security of data centers
- Configuration of the security group
Which service enables customers to audit and monitor changes in AWS resources?
- AWS Trusted Advisor
- Amazon GuardDuty
- Amazon Inspector
- AWS Config
Explanation:
AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. With Config, you can review changes in configurations and relationships between AWS resources, dive into detailed resource configuration histories, and determine your overall compliance against the configurations specified in your internal guidelines. This enables you to simplify compliance auditing, security analysis, change management, and operational troubleshooting.
Which AWS service identifies security groups that allow unrestricted access to a user’s AWS resources?
- AWS CloudTrail
- AWS Trusted Advisor
- Amazon CloudWatch
- Amazon Inspector
According to the AWS shared responsibility model, who is responsible for configuration management?
- It is solely the responsibility of the customer.
- It is solely the responsibility of AWS.
- It is shared between AWS and the customer.
- It is not part of the AWS shared responsibility model.
Explanation:
AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications.
Which AWS service is a content delivery network that securely delivers data, video, and applications to users globally with low latency and high speeds?
- AWS CloudFormation
- AWS Direct Connect
- Amazon CloudFront
- Amazon Pinpoint
Explanation:
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment. CloudFront is integrated with AWS – both physical locations that are directly connected to the AWS global infrastructure, as well as other AWS services.
Which benefit of the AWS Cloud supports matching the supply of resources with changing workload demands?
- Security
- Reliability
- Elasticity
- High availability
A user is running an application on AWS and notices that one or more AWS-owned IP addresses is involved in a distributed denial-of-service (DDoS) attack.

Who should the user contact FIRST about this situation?
- AWS Premium Support
- AWS Technical Account Manager
- AWS Solutions Architect
- AWS Abuse team
Which of the following are benefits of hosting infrastructure in the AWS Cloud? (Choose two.)
- There are no upfront commitments.
- AWS manages all security in the cloud.
- Users have the ability to provision resources on demand.
- Users have access to free and unlimited storage.
- Users have control over the physical infrastructure.
Access keys in AWS Identity and Access Management (IAM) are used to:
- log in to the AWS Management Console.
- make programmatic calls to AWS from AWS APIs.
- log in to Amazon EC2 instances.
- authenticate to AWS CodeCommit repositories.
What is AWS Trusted Advisor?
- It is an AWS staff member who provides recommendations and best practices on how to use AWS.
- It is a network of AWS partners who provide recommendations and best practices on how to use AWS.
- It is an online tool with a set of automated checks that provides recommendations on cost optimization, performance, and security.
- It is another name for AWS Technical Account Managers who provide recommendations on cost optimization, performance, and security.
Explanation:
AWS Trusted Advisor is an online tool that provides you real time guidance to help you provision your resources following AWS best practices. Whether establishing new workflows, developing applications, or as part of ongoing improvement, take advantage of the recommendations provided by Trusted Advisor on a regular basis to help keep your solutions provisioned optimally
Which AWS service or feature allows a company to visualize, understand, and manage AWS costs and usage over time?
- AWS Budgets
- AWS Cost Explorer
- AWS Organizations
- Consolidated billing
Explanation:
AWS Cost Explorer has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time.

CLF-C01 : AWS Certified Cloud Practitioner : Part 12

Which of the following AWS services provide compute resources? (Choose two.)

Which AWS service enables users to deploy infrastructure as code by automating the process of provisioning resources?

Which AWS services provide a way to extend an on-premises architecture to the AWS Cloud? (Choose two.)

Which of the following allows users to provision a dedicated network connection from their internal network to AWS?

Which services use AWS edge locations? (Choose two.)

Which service would provide network connectivity in a hybrid architecture that includes the AWS Cloud?

Which tool can be used to compare the costs of running a web application in a traditional hosting environment to running it on AWS?

What is the value of using third-party software from AWS Marketplace instead of installing third-party software on Amazon EC2? (Choose two.)

Which of the following is a cloud architectural design principle?

Under the shared responsibility model; which of the following areas are the customer’s responsibility? (Choose two.)

Which service enables customers to audit and monitor changes in AWS resources?

Which AWS service identifies security groups that allow unrestricted access to a user’s AWS resources?

According to the AWS shared responsibility model, who is responsible for configuration management?

Which AWS service is a content delivery network that securely delivers data, video, and applications to users globally with low latency and high speeds?

Which benefit of the AWS Cloud supports matching the supply of resources with changing workload demands?

A user is running an application on AWS and notices that one or more AWS-owned IP addresses is involved in a distributed denial-of-service (DDoS) attack.

Who should the user contact FIRST about this situation?

Which of the following are benefits of hosting infrastructure in the AWS Cloud? (Choose two.)

Access keys in AWS Identity and Access Management (IAM) are used to:

What is AWS Trusted Advisor?

Which AWS service or feature allows a company to visualize, understand, and manage AWS costs and usage over time?