CLF-C02 Exam Topic 1 Past Paper PDF

## AWS Certified Cloud Practitioner CLF-C02 Exam - **Topic 1 - Exam A** **Question:** A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud. **Correct Answer:** The transfer of data from the Snowball Edge appliance into Amazon S3. **Question:** A company has de...

## AWS Certified Cloud Practitioner CLF-C02 Exam - **Topic 1 - Exam A** **Question:** A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud. **Correct Answer:** The transfer of data from the Snowball Edge appliance into Amazon S3. **Question:** A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices. **Correct Answer:** Amazon Inspector. **Question:** A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing. **Correct Answer:** Configure and deploy an AWS Storage Gateway file gateway. Connect each user's workstation to the file gateway. **Question:** According to security best practices, how should an Amazon EC2 instance be given access to an AWS resource? *(You see this example on page 2)* **Correct Answer:** Have the EC2 instance assume a role to obtain the privileges to upload the file. **Question:** Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model? **Correct Answer:** Access to DynamoDB tables. **Question:** Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework? **Correct Answer:** Governance. **Question:** A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment. **Correct Answer:** AWS. **Question:** A company wants to run a NoSQL database on Amazon EC2 instances. **Correct Answer:** Patch the physical infrastructure that hosts the EC2 instances. **Question:** Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? **Correct Answer:** Amazon CodeGuru. **Question:** Which of the following are benefits of using AWS Trusted Advisor? **Correct Answer:** - Detecting underutilized resources to save costs - Improving security by proactively monitoring the AWS environment **Question:** Which of the following is an advantage that users experience when they move on-premises workloads to AWS? **Correct Answer:** Elimination of expenses for running and maintaining data centers. **Question:** A company wants to manage deployed IT services and govern its infrastructure as code (IaC) templates. **Correct Answer:** AWS Service Catalog. **Question:** Which AWS service or tool helps users visualize, understand, and manage spending and organizations? **Correct Answer:** AWS Cost **Question:** A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data. **Correct Answer:** - AWS Glue - Amazon QuickSight **Question:** A global company wants to migrate its third-party applications to the AWS Cloud. The company wants help from a global team of experts to complete the migration faster and more reliably in accordance with AWS internal best practices. **Correct Answer:** AWS Professional Services. **Question:** An e-learning platform needs to run an application for 2 months each year. The application will be deployed on Amazon EC2 instances. Any application downtime during those 2 months must be avoided. **Correct Answer:** Spot Instances. **Question:** A developer wants to deploy an application quickly on AWS without manually creating the required resources. **Correct Answer:** AWS Elastic Beanstalk. **Question:** A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting. **Correct Answer:** S3 Versioning. **Question:** Which AWS service provides the ability to manage infrastructure as code? **Correct Answer:** AWS CodeDeploy. **Question:** An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and any increases in traffic are predictable. The EC2 instances must be online and available without any downtime. **Correct Answer:** Reserved Instances. **Question:** Which AWS service or feature allows a user to establish a dedicated network connection between a company's on-premises data center and the AWS Cloud? **Correct Answer:** AWS Direct Connect. **Question:** Which option is a physical location of the AWS Global Infrastructure? **Correct Answer:** AWS Region. **Question:** A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks. **Correct Answer:** Security. **Question** What is the purpose having an internet gateway? **Correct Answer:** To allow communication between the VPC and the internet. **Question:** A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices. **Correct Answer:** Deploy the application to multiple locations. **Question:** A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes. **Correct Answer:** IAM credential report. **Question:** A company wants to receive a notification when a specific AWS cost threshold is reached. **Correct Answer:** - AWS Budgets - Amazon CloudWatch **Question:** Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS customers may have? **Correct Answer:** AWS Chatbot. **Question:** Which tasks are customer responsibilities, according to the AWS shared responsibility model? **Correct Answer:** - Configure the AWS provided security group firewall - Classify company assets in the AWS Cloud **Question:** Which of the following are pillars of the AWS Well-Architected Framework? **Correct Answer:** - Availability - Reliability - Scalability - Responsive Design. **Question:** Which AWS service or feature is used to send both text and email messages from distributed applications? **Correct Answer:** Amazon Simple Notification Service (Amazon SNS). **Question:** A user needs programmatic access to AWS resources through the AWS CLI or the AWS API. **Correct Answer:** Access keys. **Question:** A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours. **Correct Answer:** Spot Instances. **Question:** What does the concept of agility mean in AWS Cloud computing? **Correct Answer:** - The speed at which AWS resources are implemented. - The ability to experiment quickly. **Question:** A company needs to block SQL injection attacks. Which AWS service or feature can meet this requirement? **Correct Answer:** AWS WAF. **Question:** Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity? **Correct Answer:** AWS IAM Access. **Question:** A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud. **Correct Answer:** Download the reports from AWS Artifact. **Question:** An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. **Correct Answer:** Cost of application software licenses. **Question:** A company is setting up AWS Identity and Access Management (IAM) on an AWS account. **Correct Answer:** Turn on multi-factor authentication (MFA) for added security during the login process. **Question:** Elasticity in the AWS Cloud refers to which of the following? **Correct Answer:** - How quickly an Amazon EC2 instance can be restarted. - The ability to rightsize resources as demand shifts. **Question:** Which service enables customers to audit API calls in their AWS environment? **Correct Answer:** AWS CloudTrail. **Question:** What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model? **Correct Answer:** Managing the code within the Lambda function. **Question:** A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis. **Correct Answer:** Amazon Athena. **Question:** Which AWS service can be used at no cost? **Correct Answer:** AWS Organizations. **Question:** Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people pillar? **Correct Answer:** Cloud. **Question:** A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost. <start_of_image> Correct Answer: - Spot Instances. - Reserved Instances. **Question:** A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its current geographical location as possible. **Correct Answer:** AWS. **Question:** A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned. **Correct Answer:** AWS Pricing Calculator. **Question:** A company is building an application that needs to deliver images and videos globally with minimal latency. **Correct Answer:** Deliver the content through Amazon CloudFront. **Question:** Which option is a benefit of the economies of scale based on the advantages of cloud computing? **Correct Answer:** Lower variable costs over fixed costs. **Question:** Which of the following is a software development framework that a company can use to define cloud resources as code and provision the infrastructure? **Correct Answer:** AWS Cloud Development Kit (AWS CDK). **Question:** A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs. **Correct Answer:** AWS Security Token Service (AWS STS). **Question:** Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner services? **Correct Answer:** AWS Security Hub **Question:** Which AWS service is always provided at no cost? **Correct Answer:** AWS Identity and Access Management (IAM). **Question:** To reduce costs, a company is planning to migrate a NoSQL database to AWS. Which AWS service is fully managed and can automatically scale throughput capacity to meet database requirements? **Correct Answer:** Amazon DynamoDB. **Question:** A company is using Amazon DynamoDB. Which task is the company's responsibility, according to the AWS shared responsibility model? **Correct Answer:** Manage database access permissions. **Question:** A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted and does not need to run continuously. **Correct Answer:** Spot Instances. **Question:** Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3, Amazon Redshift, and Amazon RDS data stores? **Correct Answer:** Amazon Macie **Question:** Which of the following services can be used to block network traffic to an instance? **Correct Answer:** - Security groups - Network ACLs