Question 1

A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud. How can these reports be generated?

Accepted Answer

The answer of A cloud practitioner needs to obtain AWS...

Question 2

Which controls are shared under the AWS shared responsibility model? (Choose two.)

Accepted Answer

Awareness and training, and configuration management are shared responsibilities between AWS and the customer. AWS manages the infrastructure, while customers are responsible for managing their data and applications, including training and configuration.

Question 3

Which AWS service will track user activity on AWS?

Accepted Answer

AWS CloudTrail is the service that tracks user activity and API usage across your AWS infrastructure.

Question 4

A user has an AWS account with a Business-level AWS Support plan and needs assistance with handling a production service disruption. Which action should the user take?

Accepted Answer

A Business-level AWS Support plan includes the ability to open a "production system down" support case, which is appropriate for handling production service disruptions.

Question 5

Which cloud computing advantage is a company applying when it uses AWS Regions to increase application availability to users in different countries?

Accepted Answer

The answer of Which cloud computing advantage is a company...

Question 6

Which databases are available on Amazon RDS? (Choose two.)

Accepted Answer

The answer of Which databases are available on Amazon RDS?...

Question 7

A company needs to transfer a large volume of data from an on-premises data center to the AWS Cloud. The company's internet connectivity is slow and unreliable. Which AWS service can facilitate this data transfer?

Accepted Answer

AWS Snowball is a data transport solution that uses secure physical devices to transfer large amounts of data into and out of the AWS Cloud, ideal for environments with slow or unreliable internet connectivity.

Question 8

Which type of AWS infrastructure deployment puts AWS compute, storage, database, and other select services closer to end users to run latency-sensitive applications?

Accepted Answer

Local Zones are a type of AWS infrastructure deployment that places AWS services closer to end users, specifically designed to run latency-sensitive applications.

Question 9

According to best practices, how should an application be designed to run in the AWS Cloud?

Accepted Answer

Loosely coupled components allow for better scalability, flexibility, and fault tolerance, which are key advantages of cloud-based applications.

Question 10

To avoid malicious compute activities, a user needs a quick way to determine if any Amazon EC2 instances have ports that allow unrestricted access. Which AWS service will support this requirement?

Accepted Answer

AWS Trusted Advisor provides best practice checks and recommendations, including checks for security groups with unrestricted access to certain ports.

Question 11

An application deployed in the AWS Cloud has unpredictable usage patterns and is running workloads that cannot be interrupted. What is the MOST cost-effective Amazon EC2 pricing option for this application?

Accepted Answer

On-Demand Instances are the most cost-effective option for applications with unpredictable usage patterns that cannot be interrupted, as they allow you to pay for compute capacity by the hour or second with no long-term commitments.

Question 12

A company must process a large amount of data from social media accounts by making graphical queries with high throughput. Which AWS service will help the company design a cloud architecture that will meet these requirements?

Accepted Answer

Amazon Neptune is a graph database service designed for handling complex queries with high throughput, making it suitable for processing large amounts of data from social media accounts.

Question 13

Which AWS service or component allows inbound traffic from the internet to access a VPC?

Accepted Answer

An Internet Gateway is a component that allows inbound and outbound traffic between the internet and resources in a VPC.

Question 14

Which AWS service would identify if unrestricted access to a resource has been allowed by a security group?

Accepted Answer

AWS Trusted Advisor checks for best practices, including security group settings, and can identify if unrestricted access is allowed.

Question 15

A company is migrating its on-premises data center to AWS and wants to provide NFS access to its Linux clients. Which AWS service should the company use?

Accepted Answer

Amazon Elastic File System (Amazon EFS) provides scalable file storage for use with Amazon EC2 and is designed to provide NFS access to Linux clients.

Question 16

Which of the following are advantages of using Amazon EC2 instances over traditional on-premises servers? (Choose two.)

Accepted Answer

The answer of Which of the following are advantages of...

Question 17

According to the AWS shared responsibility model, when using Amazon RDS, who is responsible for scheduling and performing backups?

Accepted Answer

In the AWS shared responsibility model, the customer is responsible for managing the data, including scheduling and performing backups for Amazon RDS. AWS manages the infrastructure and the underlying database service.

Question 18

Which Amazon S3 storage class allows users to store data backups for long periods of time at the LOWEST cost?

Accepted Answer

S3 Glacier is designed for long-term data archiving at the lowest cost, making it ideal for storing data backups for extended periods.

Question 19

Which guideline is a well-architected design principle for building cloud applications?

Accepted Answer

The answer of Which guideline is a well-architected design principle...

Question 20

Which architecture concept describes the ability to deploy resources on demand and release resources when they are no longer needed?

Accepted Answer

Elasticity refers to the ability to automatically increase or decrease resources as needed, allowing for efficient use of resources based on demand.

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)