AWS Cloud Practitioner CLF-C01

The customer is responsible for security in the cloud. true. false.

A company has an existing web application running on AWS Cloud within North America. The company has observed an increase of users from Asia however due to the distance between the customer and the North American these users are experiencing severe latency. The company decides to launch an identical server within an Asia Region to reduce the latency. Which benefit of AWS Cloud does this best describe?. Economy of scale. Agility. Global Reach. High Availability.

Which AWS security services allow you to apply a set of security controls?. AWS Config. AWS Security Hub. AWS Mananged Rules. AWS GuardRails.

An organization wants to build their next web application on AWS. They have decided they should begin the project by purchasing a domain name and then pointing the domain to a static website hosted on S3. Which AWS Service can be used to purchase and manage their domain name records?. AWS DNS. You cannot purchase domain names on AWS. Use a third-party service like GoDaddy Let AWS manage the domain. Amazon Route53. Amazon CloudFront.

An organization has many departments that manage its own AWS accounts. The Chief Information Officer(CIO) has a concern about the departments operating their own ShadowIT due to a lack of security controls. Which AWS Service can be implemented to allow AWS Account owners to access a list of technology stacks built by the company that is pre-approved and self-serve?. AWS Systems Manager. AWS Organizations. AWS Stack List. AWS Service Catalog.

An enterprise is evaluating whether to adopt AWS to offload most of their on-premise Virtual Machines to Ec2. The enterprise does not have much domain expertise and they need a point of contact that will help proactivity manage their account and connect them with AWS experts. Which Enterprise offering does this best describe?. Concierge Support Team. Werner Hans Peter Vogels. AWS Technical Support. TAM.

A company is building out a proof-of-concept on AWS to kick start their migration to the cloud. Previously the developers would need to submit a request to their centralized IT department to set up a physical machine with a hypervisor installed to utilize Virtualisation. However, with AWS they can self-provision resources within minutes. What best describes this cloud benefit?. Reliability. Global Reach. Elasticity. Agility.

Which AWS Support Plans provide access to the 7 core Trusted Advisor checks?. Business. Developer. Basic. Enterprise.

A company has an existing on-premise relational database. They want to migrate this database to the cloud and are willing to adopt a NoSQL database in order to gain managed sharding and provisioned throughput with a guarantee of performance at any scale. Which NoSQL offering on AWS would be suited for this workload?. Amazon Relational Database Service. Amazon Aurora. DocumentDB. DynamoDB. Amazon Neptune.

Which AWS Managed Job Function provides full access to AWS services and resources, but does not allow management of Users and groups?. SystemAdministrator. ViewOnlyAccess. AdministratorAccess. PowerUserAccess.

What is the advantage of decoupling services vs having a large monolithic application?. Reduce inter-dependencies so failures do not impact critical services. Better data flow between IP socks. Improved Performance. Create a tightly integrated application.

An organization has a workload that needs to remain available in case of datacenter wide network failure. Which AWS service will allow them to distribute their workload across multiple instances in different Availability Zones in the same region?. Elastic Load Balancer. EC2 Auto Scaling.

A company is evaluating whether to move its workloads to AWS Cloud from on-premise. The Chief Executive Officer wants to understand how moving to AWS will impact their IT team that currently manages their on-premise infrastructure. What will happen to the IT team?. A) AWS does not manage the underlying infrastructure, your IT Team will work with AWS IT teams directly to provide the physical infrastructure needed to run your cloud workloads. B) The company's IT team will need to be let go. AWS will take care of the underlying infrastructure and the underlying infrastructure in most cases is not accessible or is abstracted away from the AWS customers. C) The IT team can be shifted away from managing infrastructure to revenue-generating activities.

An AWS customer benefits from built-in security provided by AWS data centers and networks which are architected to protect your information, identities, applications, and devices. C) Security is an essential benefit of AWS Cloud. B) Security is not an essential benefit of AWS Cloud. A) Security is not an offering of AWS, you need to use third-party tools security tools.

Which AWS billing services are capable of forecasting cost and usage?. AWS Budgets. Amazon forecast. AWS Cost Explorer. AWS Cost and Usage Report.

An organization has many departments that run their own AWS accounts. There is a concern that some S3 buckets might be publically visible which could result in a data leak. Which AWS security service can detect for publicly facing S3 buckets?. Amazon Dectector. Amazon GuardDuty. Amazon Maice. AWS IAM Access Analyzer. S3 Bucket Scanner.

An AWS customer believes that one of their accounts has been comprised and it has resources running compute workloads performing illegal activities. What action should the AWS customer take?. A) AWS Technical Support. B) AWS Account Support. C) AWS Access Analyzer. D) AWS Abuse.

An organization wants to download a compliance report to attest that AWS meets regulatory compliance before they decide to adopt AWS as their primary cloud service provider. Which AWS service will meet this requirement?. AWS Incorrect Answer Service. AWS Artifact. Amazon Inspector. AWS Customer Compliance Center.

What best describes the Principle of Least Privilege (PoLP)?. Users should be granted permission to access only specific resource actions to accomplish their tasks. Users should always have a little more access granted to them then they need, just in case they end up needed it in the future. Users should submit all access requests in written form so that there is a paper trail of who needs access to different AWS resources. All users should have the same baseline permissions granted to them to use basic AWS services.

Which AWS service is used to calculate the Total Cost of Ownership?. TCO Calculator. AWS Budgets. AWS Cost Explorer. AWS Pricing Calculator.

A developer has a web application that is behind an Application Load Balancer. They want to protect their web app against common attack patterns, such as SQL injection or cross-site scripting. Which AWS Service will meet this requirement?. AWS WAF. AWS Security Hub. AWS GuardDuty. AWS Shield.

In order to use CloudWatch Alarms to monitor Billing information, what two things must you do?. Create a Billing Alarm. Create an AWS Budget. Enable Cost and Usage Reports. Enable Billing Alerts. Create an AWS Cost and Usage Report.

What actions within an AWS Account can only be performed by an AWS Account root user?. A) Create an Account. b) Turn on Mult-Factor Authentication. C) Create an AWS Organization. D) Updating BIlling Information. E) Rotate AWS Access Keys.

A company wants to ensure that Termination Protection is turned on for all their EC2 instance. Which AWS service can ensure this configuration remains set and could possibly remediate the issue automatically?. AWS GuardDuty. AWS CloudFormation. AWS IAM Role. AWS Config.

Which of the following is a significant financial benefit of shifting on-premises data center systems to AWS?. a CAPEX upfront costs are lower, adding increased privacy and security as well as computing power. b Replaces variable operational expenses (OPEX) with low upfront capital expenses (CAPEX). c Replaces upfront operational expenses (OPEX) with low variable operational expenses (OPEX). d Replaces upfront capital expenses (CAPEX) with low variable costs.

What is the AWS Personal Health Dashboard?. alerts and guidance for AWS events that might affect your environment. a service that integrates with the AWS smart bracelet to monitor your health. detects Protected health information (PHI) within AWS storage and database accounts. provides real-time updates about COVID-19 vaccination status.

Which of the following benefits would be attractive to a company moving from on-premise to AWS?. Flexible. Control of Physical Servers. Pay Up Front. Cost-Effective.

An organization is migrating their Microsoft SQL Server to AWS Cloud however they have already purchased a software licence from Microsoft for their SQL Server. The license does not include Software Assurances. Is it possible for an organization to Bring-Your-Own-License (BYOL) to AWS and how would they achieve this?. a- Amazon Relational Database Service (RDS) via AWS License Manager. b- Dedicated EC2 Server integrated with AWS License Manager. c- Import your licence via AWS License Manager, Use any compute you like.

What best describes Right-Sizing EC2 instances?. a- Matching workload performance and capacity requirements at the lowest possible cost. b- Identifying opportunities to eliminate or downsize without compromising capacity or other requirements,. c- Matching workload performance and capacity requirements based on quarterly or annual timelines. d- Continually analyzing instance performance and usage needs and patterns. e- Prioritize speed and performance over cost.

Which two AWS services utilize Edge Locations?. AWS Global Accelerator. Amazon CloudFront. Amazon Relational Database Service (RDS). Amazon SageMaker.

An AWS Availability Zone (AZ) is a single point of failure. To avoid a single point of failure a company needs to deploy their workload across multiple AZs in the same AWS Region. true. false.

A company has a web application that they determined requires at least 2 running servers to meet their operational performance service level agreements (SLAs) with their customers. Elasticity. Hight Availability. Global Reach. Reliability.

A company needs to securely and quickly transfer 6 terabytes to AWS from their on-premise environment. Which AWS transfer storage should best meet this requirement?. AWS Snowcone. AWS Storage Gateway. AWS S3. AWS Snowball. AWS Glue.

What is the recommended measure for protecting your root account?. MFA. Rotate secret keys. Principle of Least Privilege. Delete all access keys. Write down your password on paper and store it in a vault.

A new company has decided they will exclusively run all of their infrastructure on AWS. What is the name of this cloud deployment model? (one answer). Cloud-First. Cloud-Native. Hybrid. On-Premise.

A company needs to run batch jobs a few times throughout the year. These jobs can be interrupted and resumed with no impact on the business. Which instance EC2 Pricing Model is the most cost-effective option?. Dedicated Hosts. Reserved. Spot. On-Demand.

A company has multiple EC2 instances managed by an Auto Scaling Group and behind an Application Load Banancer. The instances are used to run internal company services and there foreseen change in traffic or usage for the next few years. Which of the following would EC2 Pricing model would be ideal to reduce to cost of these servers?. Spot. Dedicated. Reserved Instances. On-Remand.

A company has been outputting AWS Cost and Usage Reports to an S3 Bucket. The Chief Financial Officer(CFO) of the company wants to use an AWS service to visualize this cost. Which AWS service would be ideal for this use case?. AWS Tableau. Amazon Quicksight.

A developer needs to block specific IP addresses from reaching an EC2 instance. Which AWS Networking component can meet this requirements?. IAM Policy. NACLs. AWS IP Block. ACLs. Security Groups.

Which AWS service can be used to perform application integration via pushing and polling message events?. SES. Kinesis. SQS. SNS.

A Site Reliability Engineer has been tasked with implementing a Disaster Recovery (DR) strategy at the lowest cost possible. Which DR strategy will meet this requirement?. Backup and Restore. Warn Standby. Multi-site active. Pilot Light.

A company has a web application built in Ruby on Rails and they want to deploy their web application to AWS without needing to fully understand how to configure and manage the underlying infrastructure so they can just focus on their code. Which AWS service would meet this requirement?. AWS CloudFormation. AWS Elastic Beanstalk. AWS Heroku. Amazon EC2.

A large accounting firm wants to utilize AWS to store customer accounting information in archive storage and must store this information for seven years due to regulatory compliance. Which AWS service will meet this requirement?. Snowball. Glacier. S3 Infrequent access. Amazon Elastic Block Store. AWS Backup.

A developer wants to gain remote access to an EC2 Instance running Linux without the need of managing a key pair. What EC2 feature will meet this requirement?. A- EC2 Key Pairs. B- Sessions Manager. C- AWS IAM Role. D- AWS Key Management Service (KMS).

A company wants to run a development environment for their web application which is backed by the relational database Postgres. Which AWS service would best meet their requirements?. Amazon Aurora. DynamoDB. RDS.

A company has three different versions of their web application running in a single AWS account. Each version has wildly different architectures and must remain running due to legacy multi-year licensing agreements. The company wants to isolate the combined cost of each version of their web application's infrastructure. Which AWS billing feature or service would meet this requirement?. AWS Cost Explorer. Cost Allocation Tags. AWS Cost and Usage Reports. AWS Budgets.

For Basic Support, what Trusted Advisor checks are available to the AWS customer?. a- Low Utilization Amazon EC2 Instances. b- Amazon EBS Snapshots. c- Service Limits. d- MFA on Root Account.

What are three key factors from the twelve-factor app pattern methodology that play a role in designing for failure?. a-Events Streams. b-Logs. c-Brekability. d-Disposability. e-Dev/prod parity.

A company needs a dedicated connection from their on-premise data center to their AWS Cloud VPC. Which AWS service will meet this requirement?. AWS Direct Connect. Route53. Amazon Connect. VPC Peering.

A Canadian company needs to meet regulatory compliance where the data must reside within Canada. Their CIO has experience with maintaining and trusting on-premise infrastructure because it provides a guarantee of Data sovereignty. However, they would like to use an AWS service to take care of this for them. A-AWS Data Lake. B-AWS Outposts. C-AWS Artifact. D-AWS Security Hub.

A customer has data that resides within an Amazon S3 Bucket. Who is responsible for ensuring that the data has Server Side Encryption?. AWS is responsible. The customer is responsible.

An enterprise using AWS wants to provide to its billing department a detailed breakdown of the costs and usage of various services. They want the report in a CSV file for the month to the current date so they can analyze the data within Microsoft Excel. Which AWS Billing service would meet this requirement?. AWS Cost and Usage Reports. AWS Pricing Calculator. AWS Budgets. AWS Cost Explorer.

Which two AWS Networking services can be used to protect incoming traffic?. NACLs. Security Groups. VPC Logs. VPC.

An organization wants to ensure the files that it stores in S3 are secure at rest. What functionality would provide this security?. Server-Side Encryption. Client-Side Encryption. Presigned URLs. Infrequent Access.

A Billing Administrator has been asked to forecast the combined costs of RDS and EC2 instances running in the production AWS account for the next three months. The Billing Administrator may need to create an adjustment to the forecast multiple times throughout the month and compile it as a report for the CFO. Which AWS Billing service will meet these requirements?. AWS Cost Explorer. AWS Budgets. AWS Cost and Usage Reports. AWS Forecast.

A company is planning to migrate their virtual machines from on-premise to AWS. The company wants to take advantage of EC2 Auto Scaling, which will allow them to programmatically and automatically add or remove servers to meet the demand at any given time. Which benefit of cloud computing best describes this scenario?. Agility. Elasticity. Economy of scale. High Availability.

A video game company has their game server residing in US-EAST-1 (North Virginia). They want to expand their userbase to all of North America quickly. However, their DevOps team says it will take months to automate the infrastructure as code to deploy servers to other regions. Which AWS service would immediately improve the latency to other regions to begin expanding their userbase?. AWS Global Accelerator. Amazon CloudFront. AWS Direct Connect. AWS VPN.

A company has an EC2 instance running and suddenly the server was terminated. It's suspected that a junior developer may have terminated this instance by mistake. Which AWS service will help determining who was responsible?. AWS Inspector. Cloudtrail. CloudWatch Logs. Trusted Advisor.

A small business wants to deploy a Wordpress website with a custom domain on AWS but they have minimal knowledge of AWS. Which AWS service offering would be the easiest solution for this customer?. AWS Elastic Beanstalk. AWS CodeStar. Amazon LightSail. AWS Amplify.

Which of the following best describes the AWS Cloud benefit of Scalability?. a-A company can launch copies of its application anywhere in the world within minutes. b-A company offers an application or system that can adapt to the increase in demand over time. c-A company's application will have a guaranteed uptime anywhere in Noth America even in the chance of a single region failing. d-A company application can right-size automatically to meet the exact demand at anytime.

Which AWS security services are used in mitigating DDoS attacks?. AWS WAF. AWS Shield Advanced. NACLs. AWS Shield. Security Groups.

Which AWS service allows developers to write their Infrastructure as Code? (IaC). AWS Config. AWS DragonBall. AWS CloudFormation. Amazon CloudFront. AWS CodeStar.

A startup company is adopting a cloud-native approach by building their web application using AWS cloud services. Which of the following cloud benefits will help keep their operational costs low?. High Availability. Elasticity. Pay-as-you go pricing. Economy of scale.

Which of the following Compliance certifications attests to the security of the AWS platform regarding credit card transactions?. SOC 2. PCI DSS Level 1. FedRamp. ISO 27001.