Question 1

Which of the following is a best practice for creating policies for IAM users?

Accepted Answer

Starting with a minimum set of permissions and granting additional permissions as necessary follows the principle of least privilege, ensuring users have only the access they need.

Question 2

Which AWS service should a company use to continuously monitor the compliance of AWS resource configurations?

Accepted Answer

AWS Config is the service designed to continuously monitor and assess the compliance of AWS resource configurations.

Question 3

A company needs to migrate its on-premises data to the AWS Cloud. The company requires elastic, highly optimized connectivity. Which AWS service meets these requirements?

Accepted Answer

The answer of A company needs to migrate its on-premises...

Question 4

Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?

Accepted Answer

AWS Outposts is a fully managed service that extends AWS infrastructure, services, APIs, and tools to customer premises, supporting hybrid cloud architectures.

Question 5

An Elastic Load Balancer allows the distribution of web traffic across multiple:

Accepted Answer

Elastic Load Balancers distribute incoming application or network traffic across multiple targets, such as Amazon EC2 instances, in multiple Availability Zones to ensure high availability and fault tolerance.

Question 6

Who is responsible for managing IAM user access and secret keys according to the AWS shared responsibility model?

Accepted Answer

In the AWS shared responsibility model, the customer is responsible for managing their IAM user access and secret keys, including rotating them regularly to maintain security.

Question 7

How does the AWS global infrastructure offer high availability and fault tolerance to its users?

Accepted Answer

The answer of How does the AWS global infrastructure offer...

Question 8

A company has an application workload that is stateless be design and can sustain occasional downtime. The application performs massively parallel computations. Which Amazon EC2 pricing model should the company choose for its application to reduce cost?

Accepted Answer

Spot Instances are ideal for stateless applications that can tolerate occasional downtime and require massively parallel computations. They offer significant cost savings compared to On-Demand Instances.

Question 9

How do AWS users trade infrastructure expenses for operational expenses?

Accepted Answer

AWS Auto Scaling dynamically increases and decreases compute resources as needed, reducing infrastructure expenses and converting them into operational expenses.

Question 10

Which AWS service allows users to provision resources using a consistent and repeatable process?

Accepted Answer

AWS CloudFormation allows users to provision resources using a consistent and repeatable process by defining infrastructure as code through templates.

Question 11

A company runs its workloads on premises. The company wants to forecast the cost of running a large application on AWS. Which AWS service or tool can the company use to obtain this information?

Accepted Answer

The answer of A company runs its workloads on premises....

Question 12

Which design principles are enabled by the AWS Cloud to improve the operation of workloads? (Choose two.)

Accepted Answer

Loose coupling allows systems to be more flexible and scalable, while disposable resources enable efficient resource management and cost optimization in the cloud.

Question 13

Which tasks require use of the AWS account root user? (Choose two.)

Accepted Answer

The AWS account root user is required for tasks that involve account-level changes, such as changing the AWS Support plan and closing an AWS account.

Question 14

A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon DynamoDB. What is the MOST operationally efficient solution to delegate permissions?

Accepted Answer

Attaching an IAM role to the EC2 instance is the most operationally efficient solution as it allows the instance to assume the role and access AWS resources securely without managing access keys.

Question 15

Which AWS service enables risk auditing of an AWS account by tracking and recording user actions and source IP addresses?

Accepted Answer

AWS CloudTrail enables risk auditing by tracking and recording user actions and source IP addresses in an AWS account.

Question 16

A user wants to move legacy applications to the AWS Cloud to reduce the total cost. Which option is the MOST cost-effective according to best practices?

Accepted Answer

Right-sizing Amazon EC2 instances ensures that resources are not over-provisioned, which helps in reducing costs while maintaining performance.

Question 17

Which pillar of the AWS Well-Architected Framework includes the AWS shared responsibility model?

Accepted Answer

The Security pillar of the AWS Well-Architected Framework includes the AWS shared responsibility model, which outlines the division of security responsibilities between AWS and the customer.

Question 18

A company recently migrated to AWS and wants to enable intelligent threat protection and continuous monitoring across all of its AWS accounts. Which AWS service should the company use to achieve this goal?

Accepted Answer

Amazon GuardDuty is an AWS service that provides intelligent threat detection and continuous monitoring to protect AWS accounts and workloads.

Question 19

Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)

Accepted Answer

The answer of Which of the following are benefits of...

Question 20

Which AWS service or feature enables users to encrypt data at rest in Amazon S3?

Accepted Answer

The answer of Which AWS service or feature enables users...

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)