CLF-C01 : AWS Certified Cloud Practitioner : Part 25

CLF-C01 : AWS Certified Cloud Practitioner : Part 25

1. Which AWS service can be used to track resource changes and establish compliance?

   • Amazon CloudWatch
   • AWS Config
   • AWS CloudTrail
   • AWS Trusted Advisor

2. A user has underutilized on-premises resources.

   Which AWS Cloud concept can BEST address this issue?

   • High availability
   • Elasticity
   • Security
   • Loose coupling

3. A user has a stateful workload that will run on Amazon EC2 for the next 3 years.

   What is the MOST cost-effective pricing model for this workload?

   • On-Demand Instances
   • Reserved Instances
   • Dedicated Instances
   • Spot Instances
   Explanation:
   On-demand instances are useful for running stateful workloads without making a long-term commitment, but if your workloads are stateless or can tolerate shorter run cycles, there’s a more cost-effective instance type called a Spot Instance.

4. A cloud practitioner needs an Amazon EC2 instance to launch and run for 7 hours without interruptions.

   What is the most suitable and cost-effective option for this task?

   • On-Demand Instance
   • Reserved Instance
   • Dedicated Host
   • Spot Instance

5. Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)

   • Providing high-performance container orchestration
   • Creating and rotating encryption keys
   • Detecting underutilized resources to save costs
   • Improving security by proactively monitoring the AWS environment
   • Implementing enforced tagging across AWS resources

6. A developer has been hired by a large company and needs AWS credentials.

   Which are security best practices that should be followed? (Choose two.)

   • Grant the developer access to only the AWS resources needed to perform the job.
   • Share the AWS account root user credentials with the developer.
   • Add the developer to the administrator’s group in AWS IAM.
   • Configure a password policy that ensures the developer’s password cannot be changed.
   • Ensure the account password policy requires a minimum length.

7. Which AWS storage service is designed to transfer petabytes of data in and out of the cloud?

   • AWS Storage Gateway
   • Amazon S3 Glacier Deep Archive
   • Amazon Lightsail
   • AWS Snowball

8. Which service provides a user the ability to warehouse data in the AWS Cloud?

   • Amazon EFS
   • Amazon Redshift
   • Amazon RDS
   • Amazon VPC

9. A user is planning to migrate an application workload to the AWS Cloud.

   Which control becomes the responsibility of AWS once the migration is complete?

   • Patching the guest operating system
   • Maintaining physical and environmental controls
   • Protecting communications and maintaining zone security
   • Patching specific applications

10. Which services can be used to deploy applications on AWS? (Choose two.)

    • AWS Elastic Beanstalk
    • AWS Config
    • AWS OpsWorks
    • AWS Application Discovery Service
    • Amazon Kinesis

11. Which AWS service can be used to provide an on-demand, cloud-based contact center?

    • AWS Direct Connect
    • Amazon Connect
    • AWS Support Center
    • AWS Managed Services

12. What tool enables customers without an AWS account to estimate costs for almost all AWS services?

    • Cost Explorer
    • TCO Calculator
    • AWS Budgets
    • Simple Monthly Calculator

13. Which component must be attached to a VPC to enable inbound Internet access?

    • NAT gateway
    • VPC endpoint
    • VPN connection
    • Internet gateway

14. Which pricing model would result in maximum Amazon Elastic Compute Cloud (Amazon EC2) savings for a database server that must be online for one year?

    • Spot Instance
    • On-Demand Instance
    • Partial Upfront Reserved Instance
    • No Upfront Reserved Instance

15. A company has a MySQL database running on a single Amazon EC2 instance. The company now requires higher availability in the event of an outage.

    Which set of tasks would meet this requirement?

    • Add an Application Load Balancer in front of the EC2 instance
    • Configure EC2 Auto Recovery to move the instance to another Availability Zone
    • Migrate to Amazon RDS and enable Multi-AZ
    • Enable termination protection for the EC2 instance to avoid outages

16. A company wants to ensure that AWS Management Console users are meeting password complexity requirements.

    How can the company configure password complexity?

    • Using an AWS IAM user policy
    • Using an AWS Organizations service control policy (SCP)
    • Using an AWS IAM account password policy
    • Using an AWS Security Hub managed insight

17. Under the AWS shared responsibility model, which of the following is the customer’s responsibility?

    • Patching guest OS and applications
    • Patching and fixing flaws in the infrastructure
    • Physical and environmental controls
    • Configuration of AWS infrastructure devices

18. Which of the following tasks is required to deploy a PCI-compliant workload on AWS?

    • Use any AWS service and implement PCI controls at the application layer
    • Use an AWS service that is in-scope for PCI compliance and raise an AWS support ticket to enable PCI compliance at the application layer
    • Use any AWS service and raise an AWS support ticket to enable PCI compliance on that service
    • Use an AWS service that is in scope for PCI compliance and apply PCI controls at the application layer

19. A company is building an application that requires the ability to send, store, and receive messages between application components. The company has another requirement to process messages in first-in, first-out (FIFO) order.

    Which AWS service should the company use?

    • AWS Step Functions
    • Amazon Simple Notification Service (Amazon SNS)
    • Amazon Kinesis Data Streams
    • Amazon Simple Queue Service (Amazon SQS)

20. AnyCompany recently purchased Example Corp. Both companies use AWS resources, and AnyCompany wants a single aggregated bill.

    Which option allows AnyCompany to receive a single bill?

    • Example Corp. must submit a request to its AWS solutions architect or AWS technical account manager to link the accounts and consolidate billing.
    • AnyCompany must create a new support case in the AWS Support Center requesting that both bills be combined.
    • Send an invitation to join the organization from AnyCompany’s AWS Organizations master account to Example Corp.
    • Migrate the Example Corp. VPCs, Amazon EC2 instances, and other resources into the AnyCompany AWS account.