Question 1

A company wants to route its traffic directly and privately to a VPC without going over the public internet. Which connectivity option provides this capability?

Accepted Answer

The answer of A company wants to route its traffic...

Question 2

Which benefit is available for Convertible Reserved Instances but NOT Standard Reserved Instances?

Accepted Answer

The answer of Which benefit is available for Convertible Reserved...

Question 3

A company is building a mobile app to provide shopping recommendations to its customers. The company wants to use a graph database as part of the shopping recommendation engine. Which AWS database service should the company choose?

Accepted Answer

Amazon Neptune is a fully managed graph database service that is optimized for storing and querying highly connected data, making it suitable for building recommendation engines.

Question 4

A company is based in the us-east-1 Region and has a satellite office in the eu-west-2 Region. The company wants to use Amazon WorkSpaces to host its internal web portal and virtual desktops for employees. What should the company do to minimize latency and ensure the best possible performance for employees?

Accepted Answer

The answer of A company is based in the us-east-1...

Question 5

An IT department provisions more servers than are needed to run a workload. Which cloud architecture design principle supports changing this approach?

Accepted Answer

Stop guessing capacity is a cloud architecture design principle that supports changing the approach of provisioning more servers than are needed to run a workload. This principle encourages the use of data-driven methods to determine the appropriate capacity for a workload, rather than relying on guesswork or overprovisioning.

Question 6

A company uses a database that has a simple sign-up page to create users, and a basic login form to authenticate users so they can access the database. The company wants to give users the ability to store personal information, but the user access must be controlled in a more secure and reliable way. Which AWS service or feature will meet these requirements?

Accepted Answer

The answer of A company uses a database that has...

Question 7

Which network security features are supported by Amazon VPC? (Choose two.)

Accepted Answer

Network ACLs and security groups are network security features supported by Amazon VPC.

Question 8

Which AWS service provides a simple and scalable shared file storage solution for use with Linux-based AWS and on-premises servers?

Accepted Answer

Amazon Elastic File System (Amazon EFS) provides a simple, scalable, and fully managed shared file storage solution for use with Linux-based AWS and on-premises servers.

Question 9

A company has infrastructure in one AWS Region and is expanding operations to a second AWS Region. The company is using the same AWS CloudFormation template in the second Region that the company uses in the original Region. The company attempts to launch Amazon EC2 On-Demand Instances in the second Region and receives error messages. What could cause these error messages?

Accepted Answer

The answer of A company has infrastructure in one AWS...

Question 10

A company uses Amazon EC2 infrastructure to host steady-state workloads and needs to achieve significant cost savings. Which EC2 instance pricing model should the company select?

Accepted Answer

Reserved Instances offer significant cost savings for steady-state workloads by allowing the company to commit to using EC2 instances for a one or three-year term.

Question 11

A company wants to store data with high availability, encrypt the data at rest, and have direct access to the data over the internet. Which AWS service will meet these requirements MOST cost-effectively?

Accepted Answer

Amazon S3 provides high availability, data encryption at rest, and direct access over the internet, making it the most cost-effective choice for these requirements.

Question 12

Which of the following is a managed AWS service that is used specifically for extract, transform, and load (ETL) data?

Accepted Answer

AWS Glue is a managed AWS service that is used specifically for extract, transform, and load (ETL) data.

Question 13

A company is running a Microsoft SQL Server instance on premises and is migrating its application to AWS. The company lacks the resources need to refactor the application, but management wants to reduce operational overhead as part of the migration. Which database service would MOST effectively support these requirements?

Accepted Answer

Amazon RDS for SQL Server is a managed service that reduces operational overhead by automating tasks such as backups, patching, and scaling, while allowing the company to continue using SQL Server without refactoring the application.

Question 14

A company is using Amazon EC2 Auto Scaling to scale its Amazon EC2 instances. Which benefit of the AWS Cloud does this example illustrate?

Accepted Answer

Elasticity is the ability of a system to adapt to changing demand. In this case, the company is using Amazon EC2 Auto Scaling to scale its Amazon EC2 instances up or down based on demand, which is an example of elasticity.

Question 15

A company needs to improve the response rate of high-volume queries to its relational database. Which AWS service should the company use to offload requests to the database and improve overall response times?

Accepted Answer

Amazon DynamoDB Accelerator (DAX) is a fully managed, in-memory cache for Amazon DynamoDB that improves the performance of high-volume queries by caching frequently accessed data in memory.

Question 16

Which of the following are customer responsibilities under the AWS shared responsibility model? (Choose two.)

Accepted Answer

The answer of Which of the following are customer responsibilities...

Question 17

Which of the following are AWS Trusted Advisor support categories? (Choose two.)

Accepted Answer

The answer of Which of the following are AWS Trusted...

Question 18

Which of the following are AWS security best practices for using AWS Identity and Access Management (IAM) to manage an AWS account root user? (Choose two.)

Accepted Answer

The answer of Which of the following are AWS security...

Question 19

Under the AWS shared responsibility model, which task is the customer's responsibility when managing AWS Lambda functions?

Accepted Answer

Scaling Lambda resources according to demand is the customer's responsibility under the AWS shared responsibility model.

Question 20

Which AWS service or feature provides an online, managed software catalog that helps users purchase and deploy third-party software?

Accepted Answer

AWS Marketplace is an online, managed software catalog that helps users purchase and deploy third-party software.

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)