CLF-C01 : AWS Certified Cloud Practitioner : Part 23

CLF-C01 : AWS Certified Cloud Practitioner : Part 23

1. What can be used to reduce the cost of running Amazon EC2 instances? (Choose two.)

   • Spot Instances for stateless and flexible workloads
   • Memory optimized instances for high-compute workloads
   • On-Demand Instances for high-cost and sustained workloads
   • Reserved Instances for sustained workloads
   • Spend limits set using AWS Budgets

2. A company is launching an e-commerce site that will store and process credit card data. The company requires information about AWS compliance reports and AWS agreements.

   Which AWS service provides on-demand access to these items?

   • AWS Certificate Manager
   • AWS Config
   • AWS Artifact
   • AWS Artifact

3. Which AWS service or feature allows the user to manager cross-region application traffic?

   • Amazon AppStream 2.0
   • Amazon VPC
   • Elastic Load Balancer
   • Amazon Route 53

4. Which AWS service can be used to track unauthorized API calls?

   • AWS Config
   • AWS CloudTrail
   • AWS Trusted Advisor
   • Amazon Inspector

5. A user needs to regularly audit and evaluate the setup of all AWS resources, identify non-compliant accounts, and be notified when a resource changes.

   Which AWS service can be used to meet these requirements?

   • AWS Trusted Advisor
   • AWS Config
   • AWS Resource Access Manager
   • AWS Systems Manager

6. A user is planning to launch two additional Amazon EC2 instances to increase availability.

   Which action should the user take?

   • Launch the instances across multiple Availability Zones in a single AWS Region.
   • Launch the instances as EC2 Reserved Instances in the same AWS Region and the same Availability Zone.
   • Launch the instances in multiple AWS Regions, but in the same Availability Zone.
   • Launch the instances as EC2 Spot Instances in the same AWS Region, but in different Availability Zones.

7. A company must store critical business data in Amazon S3 with a backup to another AWS Region.

   How can this be achieved?

   • Use an Amazon CloudFront Content Delivery Network (CDN) to cache data globally
   • Set up Amazon S3 cross-region replication to another AWS Region
   • Configure the AWS Backup service to back up to the data to another AWS Region
   • Take Amazon S3 bucket snapshots and copy that data to another AWS Region

8. Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?

   • AWS Budgets
   • AWS Cost Explorer
   • AWS Cost Allocation Tags
   • AWS Organizations

9. What is the recommended method to request penetration testing on AWS resources?

   • Open a support case
   • Fill out the Penetration Testing Request Form
   • Request a penetration test from your technical account manager
   • Contact your AWS sales representative

10. A user needs to automatically discover, classify, and protect sensitive data stored in Amazon S3.

    Which AWS service can meet these requirements?

    • Amazon Inspector
    • Amazon Macie
    • Amazon GuardDuty
    • AWS Secrets Manager

11. Which components are required to build a successful site-to-site VPN connection on AWS? (Choose two.)

    • Internet gateway
    • NAT gateway
    • Customer gateway
    • Transit gateway
    • Virtual private gateway

12. Which Amazon EC2 pricing option is best suited for applications with short-term, spiky, or unpredictable workloads that cannot be interrupted?

    • Spot Instances
    • Dedicated Hosts
    • On-Demand Instances
    • Reserved Instances

13. Which AWS cloud architecture principle states that systems should reduce interdependencies?

    • Scalability
    • Services, not servers
    • Removing single points of failure
    • Loose coupling

14. What is the MOST effective resource for staying up to date on AWS security announcements?

    • AWS Personal Health Dashboard
    • AWS Secrets Manager
    • AWS Security Bulletins
    • Amazon Inspector

15. Which AWS service offers persistent storage for a file system?

    • Amazon S3
    • Amazon EC2 instance store
    • Amazon Elastic Block Store (Amazon EBS)
    • Amazon ElastiCache

16. Which of the following allows AWS users to manage cost allocations for billing?

    • Tagging resources
    • Limiting who can create resources
    • Adding a secondary payment method
    • Running all operations on a single AWS account

17. Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?

    • Amazon GuardDuty
    • AWS Security Hub
    • AWS Artifact
    • AWS Shield

18. Which of the following AWS services are serverless? (Choose two.)

    • AWS Lambda
    • Amazon Elasticsearch Service
    • AWS Elastic Beanstalk
    • Amazon DynamoDB
    • Amazon Redshift

19. Which AWS managed services can be used to extend an on-premises data center to the AWS network? (Choose two.)

    • AWS VPN
    • NAT gateway
    • AWS Direct Connect
    • Amazon Connect
    • Amazon Route 53

20. Which requirement must be met for a member account to be unlinked from an AWS Organizations account?

    • The linked account must be actively compliant with AWS System and Organization Controls (SOC).
    • The payer and the linked account must both create AWS Support cases to request that the member account be unlinked from the organization.
    • The member account must meet the requirements of a standalone account.
    • The payer account must be used to remove the linked account from the organization