Question 1

What will help a company perform a cost benefit analysis of migrating to the AWS Cloud?

Accepted Answer

The AWS Total Cost of Ownership (TCO) Calculator helps companies perform a cost benefit analysis of migrating to the AWS Cloud. It provides a detailed breakdown of the costs associated with running applications on AWS, including compute, storage, networking, and other services. This information can be used to compare the costs of running applications on AWS to the costs of running them on-premises.

Question 2

Which disaster recovery scenario offers the lowest probability of down time?

Accepted Answer

Multi-site active-active offers the lowest probability of downtime as it involves running multiple active sites simultaneously, ensuring continuous availability even if one site fails.

Question 3

A director has been tasked with investigating hybrid cloud architecture. The company currently accesses AWS over the public internet. Which service will facilitate private hybrid connectivity?

Accepted Answer

AWS Direct Connect provides a dedicated network connection from your premises to AWS, facilitating private hybrid connectivity without using the public internet.

Question 4

A startup is working on a new application that needs to go to market quickly. The application requirements may need to be adjusted in the near future. Which of the following is a characteristic of the AWS Cloud that would meet this specific need?

Accepted Answer

Agility in the AWS Cloud allows for quick adjustments and deployments, which is ideal for startups needing to rapidly adapt to changing requirements.

Question 5

Which AWS IAM feature is used to associate a set of permissions with multiple users?

Accepted Answer

Groups are used to associate a set of permissions with multiple users in AWS IAM.

Question 6

Which of the following deployment models enables customers to fully trade their capital IT expenses for operational expenses?

Accepted Answer

The cloud deployment model allows customers to shift from capital expenses (buying and maintaining hardware) to operational expenses (paying for services as needed).

Question 7

Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?

Accepted Answer

AWS Shield is a managed DDoS protection service that safeguards applications running on AWS with always-on detection and automatic inline mitigations.

Question 8

Which of the following are benefits of the AWS Cloud? (Choose two.)

Accepted Answer

Elasticity allows resources to be scaled up or down as needed, and agility enables quick deployment and iteration of applications.

Question 9

Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users?

Accepted Answer

AWS Identity and Access Management (IAM) policies can be used to define permissions and control access to Amazon S3 buckets for specific users.

Question 10

What is the MINIMUM AWS Support plan that provides designated Technical Account Managers?

Accepted Answer

The Enterprise support plan is the minimum AWS Support plan that provides designated Technical Account Managers.

Question 11

Which AWS service can be used to generate alerts based on an estimated monthly bill?

Accepted Answer

Amazon CloudWatch can be used to create billing alarms that alert you when your estimated monthly charges exceed a certain threshold.

Question 12

A user wants guidance on possible savings when migrating from on-premises to AWS. Which tool is suitable for this scenario?

Accepted Answer

The AWS Total Cost of Ownership (TCO) Calculator is designed to help users estimate the cost savings of migrating to AWS from on-premises infrastructure.

Question 13

Which AWS service can a customer use to set up an alert notification when the account is approaching a particular dollar amount?

Accepted Answer

AWS Budgets allows customers to set up alerts when the account is approaching a particular dollar amount.

Question 14

Which service provides a hybrid storage service that enables on-premises applications to seamlessly use cloud storage?

Accepted Answer

AWS Storage Gateway is a hybrid cloud storage service that allows on-premises applications to seamlessly use cloud storage by providing a connection between on-premises environments and AWS cloud storage.

Question 15

Which AWS support plan includes a dedicated Technical Account Manager?

Accepted Answer

The Enterprise support plan includes a dedicated Technical Account Manager (TAM) to provide proactive guidance and support.

Question 16

What can users access from AWS Artifact?

Accepted Answer

AWS Artifact provides users with access to AWS security and compliance documents, such as SOC reports and certifications.

Question 17

Which feature adds elasticity to Amazon EC2 instances to handle the changing demand for workloads?

Accepted Answer

Amazon EC2 Auto Scaling automatically adjusts the number of EC2 instances in response to the changing demand, providing elasticity to handle workload fluctuations.

Question 18

A user is running an application on AWS and notices that one or more AWS-owned IP addresses is involved in a distributed denial-of-service (DDoS) attack. Who should the user contact FIRST about this situation?

Accepted Answer

The AWS Abuse team is responsible for handling reports of abuse originating from AWS resources, including DDoS attacks.

Question 19

Which AWS services can be used to gather information about AWS account activity? (Choose two.)

Accepted Answer

AWS CloudTrail is used to log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. Amazon CloudWatch is used to monitor AWS cloud resources and applications, providing data and actionable insights.

Question 20

Under the shared responsibility model; which of the following areas are the customer's responsibility? (Choose two.)

Accepted Answer

In the shared responsibility model, customers are responsible for managing and patching their operating systems and configuring security settings like security groups. The cloud provider typically handles the underlying infrastructure, including hypervisors and physical security.

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)