Question 1

Which AWS service provides a simple way to set up a new multi-account AWS environment and govern it at scale?

Accepted Answer

AWS Control Tower provides a simple way to set up and govern a new multi-account AWS environment at scale.

Question 2

Which AWS service can be used to encrypt data at rest?

Accepted Answer

AWS Key Management Service (AWS KMS) is used to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications, enabling encryption of data at rest.

Question 3

A company is moving its office and must establish an encrypted connection to AWS. Which AWS service will help meet this requirement?

Accepted Answer

AWS VPN (Virtual Private Network) provides a secure and encrypted connection between the company's office and AWS, meeting the requirement for an encrypted connection.

Question 4

Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

Accepted Answer

AWS is responsible for the physical and environmental controls of the infrastructure that runs all of the services offered in the AWS Cloud.

Question 5

An Amazon EC2 instance previously used for development is inaccessible and no longer appears in the AWS Management Console. Which AWS service should be used to determine what action made this EC2 instance inaccessible?

Accepted Answer

AWS CloudTrail is used to log and monitor account activity across your AWS infrastructure, providing a history of AWS API calls for your account, which can help determine what actions were taken on the EC2 instance.

Question 6

A company wants to distribute its incoming traffic across multiple Amazon EC2 instances. Which AWS service or feature should be used to meet this requirement?

Accepted Answer

AWS Application Load Balancer is designed to distribute incoming application traffic across multiple targets, such as Amazon EC2 instances, in multiple Availability Zones.

Question 7

Which AWS service or feature allows a user to establish a dedicated network connection between a company's on-premises data center and the AWS Cloud?

Accepted Answer

AWS Direct Connect allows users to establish a dedicated network connection between their on-premises data center and the AWS Cloud.

Question 8

A retail company wants to provision only the necessary amount of resources to handle the current demand. Which cloud benefit is the company trying to achieve with this goal?

Accepted Answer

Scalability refers to the ability to adjust resources based on demand, ensuring that the company provisions only what is necessary.

Question 9

A company has defined the AWS resources that it needs for a new application. The company needs to estimate the costs of running the application on AWS. What should the company do to meet this requirement?

Accepted Answer

The AWS Pricing Calculator is a tool that allows users to estimate the costs of running their applications on AWS. It takes into account the type of resources that will be used, the amount of time that they will be used, and the region in which they will be used.

Question 10

What is an IAM best practice for AWS account root user access keys?

Accepted Answer

Root user access keys should be deleted to enhance security, as the root user has unrestricted access to the AWS account. It's a best practice to use IAM roles and users with specific permissions instead.

Question 11

A company is launching a new application in the AWS Cloud. The application will run on an Amazon EC2 instance. More EC2 instances will be needed when the workload increases. Which AWS service or tool can the company use to launch the number of EC2 instances that will be needed to handle the workload?

Accepted Answer

The answer of A company is launching a new application...

Question 12

A company has performance and regulatory requirements that call for it to run its workload only in its on-premises data center. Which AWS services or resources should the company use? (Choose two.)

Accepted Answer

The answer of A company has performance and regulatory requirements...

Question 13

A company wants to deploy some of its resources in the AWS Cloud. To meet regulatory requirements, the data must remain local and on premises. There must be low latency between AWS and the company resources. Which AWS service or feature can be used to meet these requirements?

Accepted Answer

AWS Outposts allow you to run AWS infrastructure and services on-premises, ensuring data remains local while maintaining low latency with AWS resources.

Question 14

Which AWS services make use of global edge locations? (Choose two.)

Accepted Answer

Amazon CloudFront and AWS Global Accelerator both utilize global edge locations to deliver content and improve application performance by routing traffic to the nearest edge location.

Question 15

A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access. What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?

Accepted Answer

AWS Systems Manager Session Manager allows secure and auditable access to EC2 instances without the need to open inbound SSH ports or manage SSH keys, enhancing security and audit capabilities.

Question 16

Which pillar of the AWS Well-Architected Framework specifies that resources be provisioned in a timely manner and scale as needed to maintain effectiveness as demand changes?

Accepted Answer

Performance efficiency focuses on using computing resources efficiently to meet system requirements, and it includes the ability to provision resources in a timely manner and scale as needed.

Question 17

Which AWS service is a relational database compatible with MySQL and PostgreSQL?

Accepted Answer

Amazon Aurora is a relational database service compatible with MySQL and PostgreSQL.

Question 18

A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal communication latency between the data centers. How can the company meet this requirement?

Accepted Answer

The answer of A company wants to ensure that two...

Question 19

A user should contact the AWS Abuse team to report which situations? (Choose two.)

Accepted Answer

The AWS Abuse team should be contacted for issues like DDoS attacks on AWS resources and when AWS resources are used to host objectionable or illegal content.

Question 20

A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each application. What can the company do to meet this requirement?

Accepted Answer

Cost allocation tags allow the company to categorize and track AWS costs by assigning tags to resources, which can then be used to monitor costs for each application.

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)