Question 1

Which AWS service is designed to help users who want to use machine learning for natural language processing (NLP) but do not have experience in machine learning?

Accepted Answer

Amazon Comprehend is a natural language processing (NLP) service that uses machine learning to find insights and relationships in text, designed for users without machine learning expertise.

Question 2

A network engineer needs to establish a dedicated 10 Gbps network connection from an on-premises environment to AWS. Which AWS service or feature should the engineer use?

Accepted Answer

AWS Direct Connect is a dedicated network connection from an on-premises environment to AWS. It provides a private, high-bandwidth connection that is not shared with other customers.

Question 3

Which AWS service or feature for technical assistance is available to a user who has the AWS Basic Support plan?

Accepted Answer

The answer of Which AWS service or feature for technical...

Question 4

Which of the following can be used to describe infrastructure as code in the AWS Cloud?

Accepted Answer

AWS CloudFormation is a service that allows you to define and provision infrastructure as code, enabling you to use templates to describe and automate the setup of AWS resources.

Question 5

When an Amazon EC2 instance is terminated, which AWS service can identify the user that made the API call?

Accepted Answer

AWS CloudTrail is a service that records API calls made to AWS services. When an Amazon EC2 instance is terminated, CloudTrail logs the API call that was made to terminate the instance, including the user who made the call.

Question 6

Which AWS service or tool helps identify underutilized Amazon EC2 instances and idle Amazon RDS DB instances at no additional charge?

Accepted Answer

AWS Trusted Advisor provides recommendations to optimize AWS resources, including identifying underutilized EC2 instances and idle RDS DB instances.

Question 7

A company runs its business-critical web application on Amazon Elastic Container Service (Amazon ECS) and Amazon DynamoDB. The workload spikes up to 10 times the normal workload multiple times during the day. Which AWS Cloud feature enables the company to meet these changes in demand?

Accepted Answer

Scalability allows the company to automatically adjust resources to meet changes in demand, such as workload spikes, ensuring performance and cost-efficiency.

Question 8

Which AWS service gives users on-demand, self-service access to AWS compliance control reports?

Accepted Answer

AWS Artifact provides users with on-demand access to AWS compliance reports and agreements.

Question 9

A company is considering a move to the AWS Cloud. The company wants to be able to scale its compute resources as needed to accommodate changing loads. Which benefit of the AWS Cloud does this scenario describe?

Accepted Answer

Elasticity refers to the ability to automatically scale compute resources up or down to meet changing demand, which is what the company is seeking.

Question 10

What should a user do to deploy an application in geographically separate locations?

Accepted Answer

Deploying the application to multiple AWS Regions ensures that the application is available in geographically separate locations, providing redundancy and reducing latency for users in different regions.

Question 11

Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

Accepted Answer

AWS Cloud Development Kit (AWS CDK) is a software development framework that allows developers to define cloud resources using familiar programming languages and provision them through AWS CloudFormation.

Question 12

A company wants to increase its ability to recover its infrastructure in the case of a natural disaster. Which pillar of the AWS Well-Architected Framework does this ability represent?

Accepted Answer

The ability to recover infrastructure in the case of a natural disaster is part of the Reliability pillar, which focuses on ensuring a workload performs its intended function correctly and consistently.

Question 13

A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally. What is the MOST operationally efficient AWS solution for this scenario?

Accepted Answer

An AWS Storage Gateway file gateway allows on-premises applications to seamlessly connect to cloud storage while retaining local performance benefits.

Question 14

A company is moving its development and test environments to AWS to increase agility and reduce cost. Because these are not production workloads and the servers are not fully utilized, occasional unavailability is acceptable. What is the MOST cost-effective Amazon EC2 pricing model that will meet these requirements?

Accepted Answer

Spot Instances are the most cost-effective option for non-production workloads where occasional unavailability is acceptable, as they can be interrupted by AWS but are offered at a significantly lower price than On-Demand Instances.

Question 15

A large organization has a single AWS account. What are the advantages of reconfiguring the single account into multiple AWS accounts? (Choose two.)

Accepted Answer

The answer of A large organization has a single AWS...

Question 16

Which VPC component provides a layer of security at the subnet level?

Accepted Answer

The answer of Which VPC component provides a layer of...

Question 17

Which service enables customers to audit API calls in their AWS accounts?

Accepted Answer

AWS CloudTrail is a service that enables customers to audit API calls in their AWS accounts. It provides a record of all API calls made to AWS services, including the caller, the time of the call, the source IP address, and the action that was taken. This information can be used to track user activity, troubleshoot issues, and meet compliance requirements.

Question 18

An application is receiving SQL injection attacks from multiple external resources. Which AWS service or feature can help automate mitigation against these attacks?

Accepted Answer

AWS WAF (Web Application Firewall) can help protect web applications from SQL injection attacks by allowing you to create rules that block or allow web requests based on conditions that you define.

Question 19

A database administrator is trying to determine who deleted a critical Amazon Redshift cluster. Which AWS service helps with monitoring and retaining this type of account activity?

Accepted Answer

AWS CloudTrail is the service that helps with monitoring and retaining account activity related to actions across your AWS infrastructure, including who deleted resources like an Amazon Redshift cluster.

Question 20

According to the AWS shared responsibility model, which task is the responsibility of AWS for workloads running on Amazon EC2?

Accepted Answer

AWS is responsible for updating and maintaining the physical hardware that hosts Amazon EC2 instances.

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)