Question 1

A company needs protection from expanded distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events. Which AWS managed service will meet these requirements?

Accepted Answer

AWS Shield Advanced provides expanded DDoS protection and access to AWS experts during DDoS events.

Question 2

A company must ensure that its endpoint for a database instance remains the same after a single Availability Zone service interruption. The application needs to resume database operations without the need for manual administrative intervention. How can these requirements be met?

Accepted Answer

Amazon RDS Multi-Availability Zone deployments provide high availability and automatic failover to a standby instance in case of an AZ failure, ensuring the endpoint remains the same and operations resume without manual intervention.

Question 3

Which of the following allows an application running on an Amazon EC2 instance to securely write data to an Amazon S3 bucket without using long term credentials?

Accepted Answer

AWS IAM roles can be used to grant temporary access to AWS resources, allowing an EC2 instance to securely write data to an S3 bucket without using long-term credentials.

Question 4

Which AWS managed service can be used to distribute traffic between one or more Amazon EC2 instances?

Accepted Answer

Elastic Load Balancing is a managed service that distributes traffic across multiple EC2 instances.

Question 5

A cloud practitioner has a data analysis workload that is infrequently executed and can be interrupted without harm. To optimize for cost, which Amazon EC2 purchasing option should be used?

Accepted Answer

Spot Instances are the most cost-effective option for workloads that can be interrupted, as they allow you to bid on spare Amazon EC2 capacity at reduced rates.

Question 6

AWS Trusted Advisor provides recommendations on which of the following? (Choose two.)

Accepted Answer

AWS Trusted Advisor provides recommendations on cost optimization and performance.

Question 7

Which of the following describes a security best practice that can be implemented using AWS IAM?

Accepted Answer

Granting permissions to users who are required to perform a given task only follows the principle of least privilege, which is a security best practice in AWS IAM.

Question 8

Which AWS service or feature helps restrict the AWS services, resources, and individual API actions the users and roles in each member account can access?

Accepted Answer

AWS Organizations helps manage and control access to AWS services, resources, and API actions across multiple AWS accounts by using Service Control Policies (SCPs).

Question 9

A company has distributed its workload on both the AWS Cloud and some on-premises servers. What type of architecture is this?

Accepted Answer

A hybrid cloud architecture involves a combination of on-premises servers and cloud services, such as those provided by AWS.

Question 10

What credential components are required to gain programmatic access to an AWS account? (Choose two.)

Accepted Answer

An access key ID and a secret access key are required components for programmatic access to an AWS account.

Question 11

What can be used to automate and manage secure, well-architected, multi-account AWS environments?

Accepted Answer

AWS Control Tower is designed to automate and manage secure, well-architected, multi-account AWS environments.

Question 12

Under the AWS shared responsibility model, what are the customer's responsibilities? (Choose two.)

Accepted Answer

Customers are responsible for securing data in transit and ensuring data integrity authentication, while AWS manages the physical infrastructure and network devices.

Question 13

Which AWS Cloud benefit eliminates the need for users to try estimating future infrastructure usage?

Accepted Answer

Elasticity of the AWS Cloud allows users to automatically scale resources up or down based on demand, eliminating the need to estimate future infrastructure usage.

Question 14

A company's application has flexible start and end times. Which Amazon EC2 pricing model will be the MOST cost-effective?

Accepted Answer

Spot Instances are the most cost-effective option for applications with flexible start and end times because they allow you to bid on unused EC2 capacity and pay only the spot price, which is typically much lower than the on-demand price.

Question 15

Which of the following tasks can only be performed after signing in with AWS account root user credentials? (Choose two.)

Accepted Answer

Closing an AWS account and changing AWS Support plans can only be performed after signing in with AWS account root user credentials.

Question 16

What is the most efficient way to establish network connectivity from on-premises to multiple VPCs in different AWS Regions?

Accepted Answer

AWS Transit Gateway allows you to connect multiple VPCs across different regions efficiently, providing a hub-and-spoke model for network connectivity.

Question 17

How can a company separate costs for network traffic, Amazon EC2, Amazon S3, and other AWS services by department?

Accepted Answer

The answer of How can a company separate costs for...

Question 18

Which AWS service provides the ability to detect inadvertent data leaks of personally identifiable information (PII) and user credential data?

Accepted Answer

Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data, such as personally identifiable information (PII) and user credential data, in AWS.

Question 19

A user would like to encrypt data that is received, stored, and managed by AWS CloudTrail. Which AWS service will provide this capability?

Accepted Answer

AWS Key Management Service (AWS KMS) is used to create and manage cryptographic keys and control their use across a wide range of AWS services, including encrypting data received, stored, and managed by AWS CloudTrail.

Question 20

Which AWS container service will help a user install, operate, and scale the cluster management infrastructure?

Accepted Answer

Amazon Elastic Container Service (Amazon ECS) is a fully managed container orchestration service that helps users install, operate, and scale the cluster management infrastructure.

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)