AWS Certified Cloud Practitioner CLF-C02 ExamTopics
AWS Certified Cloud Practitioner CLF-C02 ExamTopics
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 1/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Topic 1 - Exam A
Question #1 Topic 1
A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.
Which activities related to a Snowball Edge device are available to the company at no cost?
B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance
C. The transfer of data from the Snowball Edge appliance into Amazon S3
Correct Answer: C
C looks correct
upvoted 78 times
Selected Answer: C
https://aws.amazon.com/snowball/pricing/
C is Correct
upvoted 6 times
Selected Answer: C
C looks correct
upvoted 1 times
Data transfer IN to Amazon S3 is $0.00 per GB (except for small files as explained below).
Data transfer OUT of Amazon S3 is priced by region.
https://aws.amazon.com/snowball/pricing/
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 3/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #2 Topic 1
A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify
Which AWS service can the company use to meet these requirements?
B. Amazon Inspector
C. AWS Config
D. Amazon GuardDuty
Correct Answer: B
Selected Answer: B
https://aws.amazon.com/inspector/
Software Vulnerability / Application Vulnerability
upvoted 6 times
Selected Answer: B
Itexamstest.com
No Disscusion: B
upvoted 2 times
Amazon Inspector is a cloud-based service that automatically detects security vulnerabilities in applications and infrastructures. It can identify
vulnerabilities in applications running on Amazon EC2 instances, as well as infrastructure deployments that do not adhere to best practices.
upvoted 1 times
Selected Answer: B
Amazon Inspector is an automated vulnerability management service that continually scans AWS workloads for software vulnerabilities and
unintended network exposure.
The key word here is "vulnerabilities".
upvoted 2 times
Selected Answer: A
AWS Inspector is designed to assess the security of your AWS resources only. Here you want to improve deployments with best practices. So,
the answer is Trusted Advisor
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 4/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Amazon Inspector is a Vulnerability Management Service which helps you to scan, assess risk score, identify high impact findings with
dashboards.
upvoted 1 times
Amazon Inspector
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 5/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #3 Topic 1
A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The
company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.
What is the MOST operationally efficient AWS solution for this scenario?
A. Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility.
B. Configure and deploy an AWS Storage Gateway file gateway. Connect each user’s workstation to the file gateway.
C. Move each user’s working environment to Amazon WorkSpaces. Set up an Amazon WorkDocs account for each user.
D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume
Correct Answer: B
Selected Answer: B
Itexamstest.com
No Disscusion: B
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 6/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #4 Topic 1
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file.
B. Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file.
C. Have the EC2 instance assume a role to obtain the privileges to upload the file.
D. Modify the S3 bucket policy so that any service can upload to it at any time.
Correct Answer: C
Selected Answer: C
Itexamstest.com
No Disscusion: C
upvoted 2 times
Selected Answer: C
Answer is C.
upvoted 1 times
Selected Answer: C
C obviously
upvoted 1 times
Selected Answer: D
https://repost.aws/knowledge-center/ec2-instance-access-s3-bucket#
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 7/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #5 Topic 1
Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?
B. Patching of DynamoDB
Correct Answer: C
Selected Answer: C
Within the AWS Shared Responsibility Model, Amazon is responsible for the physical security of DynamoDB, patching DynamoDB, and
encrypting non-active data in DynamoDB. Customers are responsible for accessing DynamoDB tables.
upvoted 1 times
Under the AWS Shared Responsibility Model, customers are responsible for managing access to their resources, including controlling who has
access to their Amazon DynamoDB tables. This involves setting up and configuring AWS Identity and Access Management (IAM) policies to
control authentication and authorization for DynamoDB.
upvoted 1 times
Data at rest
Data in transit
upvoted 1 times
Selected Answer: C
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 8/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: C
Under the AWS Shared Responsibility Model, controlling and managing access to AWS services, including Amazon DynamoDB tables, is a
customer responsibility. While AWS takes care of the physical infrastructure, patching, and encryption of data at rest in DynamoDB, customers
are responsible for setting up proper access controls, authentication, and authorization to protect their data and resources
upvoted 2 times
if people say it is D, so this mean aws responsible for access the table !? no sense + data is encrypted at rest by default
upvoted 4 times
It's C as you get to set your own IAM policy to allow access to a specific DynamoDB table, while encryption of data at rest (D) is a built-in feature
in DynamoDB
upvoted 2 times
The customer is responsible for managing and controlling access to their DynamoDB tables. This includes defining appropriate permissions, user
access control, and authentication mechanisms to ensure that only authorized users or services can access the tables.
D. Encryption of data at rest in DynamoDB: AWS provides encryption of data at rest as a built-in feature for DynamoDB. The customer can
enable encryption for their tables, but AWS handles the actual implementation and management of the encryption process.
Selected Answer: D
Selected Answer: D
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 9/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #6 Topic 1
Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?
A. Sustainability
B. Performance efficiency
C. Governance
D. Reliability
Correct Answer: C
Selected Answer: C
Selected Answer: C
The 6 AWS CAF perspectives are: Business, People, Governance, Platform, Security and Operations.
https://abhi0751.medium.com/aws-cloud-adoption-framework-aws-caf-a512b89dbcba
upvoted 3 times
https://docs.aws.amazon.com/whitepapers/latest/aws-caf-governance-perspective/appendix-aws-caf-perspectives-and-foundational-
capabilities.html
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 10/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #7 Topic 1
A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage
A. AWS Lambda
B. Amazon RDS
C. AWS Fargate
D. Amazon Athena
Correct Answer: C
Selected Answer: C
Selected Answer: C
AWS Fargate is a serverless, pay-as-you-go compute engine that lets you focus on building applications without managing servers. AWS Fargate
is compatible with both Amazon Elastic Container Service (Amazon ECS) and Amazon Elastic Kubernetes Service (Amazon EKS).
https://aws.amazon.com/fargate/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 11/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #8 Topic 1
Correct Answer: C
Selected Answer: C
Selected Answer: C
A is incorrect because when we set up an instance of ec2 we choose the operating system.
B is incorrect because we are configuring and running the database on the ec2 instances so that would be our responsibility.
D is incorrect because the firewall rules are our job.
C is correct because the physical infrastructure where the ec2 instances run is amazon's responsibility
upvoted 4 times
Selected Answer: C
Selected Answer: C
https://pupuweb.com/answer-explained-which-task-responsibility-aws-run-nosql-database-amazon-ec2-instances/
upvoted 1 times
Selected Answer: C
The answer is C. Patch the physical infrastructure that hosts the EC2 instances.
Guest operating system is always responsibility of customer and host of AWS.
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
Selected Answer: B
Since you running the NoSQL AWS is only responsible for maintaining high availability ..
upvoted 1 times
upvoted 3 times
Question #9 Topic 1
Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.)
C. Amazon CodeGuru
D. Amazon SageMaker
Correct Answer: AE
The answer is AE
upvoted 1 times
Selected Answer: AE
Selected Answer: AE
https://docs.aws.amazon.com/cost-management/latest/userguide/ce-rightsizing.html
https://aws.amazon.com/compute-optimizer/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 13/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)
Correct Answer: CD
Reference: https://aws.amazon.com/premiumsupport/technology/trusted-advisor/
upvoted 6 times
for sure
upvoted 1 times
Selected Answer: CD
Selected Answer: CD
Answer is CD.
Reference: https://aws.amazon.com/premiumsupport/technology/trusted-advisor/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 14/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
A looks correct
upvoted 1 times
Selected Answer: A
Answer A is correct.
upvoted 1 times
Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 15/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to manage deployed IT services and govern its infrastructure as code (IaC) templates.
C. AWS Organizations
Correct Answer: B
Selected Answer: B
The answer is B.
AWS Service Catalog lets you centrally manage your cloud resources to achieve governance at scale of your infrastructure as code (IaC)
templates, written in CloudFormation or Terraform configurations. With AWS Service Catalog, you can meet your compliance requirements while
making sure your customers can quickly deploy the cloud resources they need.
https://aws.amazon.com/servicecatalog/
upvoted 7 times
Selected Answer: B
Si el código abierto de Terraform o Terraform Cloud es su herramienta de IaC preferida, puede utilizar Service Catalog para ofrecer a sus equipos
el aprovisionamiento automático de las configuraciones de Terraform. Si utiliza una combinación de configuraciones de CloudFormation y
Terraform en diferentes equipos o casos de uso, ahora puede utilizar AWS Service Catalog como la única herramienta para catalogar y compartir
ambas. Para sus usuarios finales, AWS Service Catalog proporciona una interfaz común y fácil de usar para ver y aprovisionar recursos
independientemente de la tecnología de IaC.
upvoted 1 times
Selected Answer: D
AWS Service Catalog is a good service for managing provisioned IT services, but it does not offer support for IaC. AWS Systems Manager, on the
other hand, offers a range of features that make it easy to manage provisioned IT services and manage infrastructure as code templates.
upvoted 1 times
AWS Service Catalog is the service that enables a company to manage deployed IT services and govern its infrastructure as code (IaC)
templates. AWS Service Catalog allows organizations to create and manage catalogs of IT services that are approved for use on AWS. It helps
centralize and manage the provisioning of resources and applications based on predefined templates.
upvoted 2 times
Answer B is correct.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 16/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
AWS Service Catalog lets you centrally manage your cloud resources to achieve governance at scale of your infrastructure as code (IaC)
templates, written in CloudFormation or Terraform configurations.
Reference: https://aws.amazon.com/servicecatalog/
upvoted 2 times
Selected Answer: D
Service Catalog: Create, organize, and govern a curated catalog of AWS resources that can be shared at the permissions level so you can quickly
provision approved cloud resources without needing direct access to the underlying AWS services.
System Manager: AWS Systems Manager is the operations hub for your AWS applications and resources.
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 17/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or tool helps users visualize, understand, and manage spending and usage over time?
A. AWS Organizations
Correct Answer: C
Selected Answer: C
Answer C is correct.
upvoted 1 times
Selected Answer: C
The answer is C.
AWS Cost Explorer has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time. Get
started quickly by creating custom reports that analyze cost and usage data. Analyze your data at a high level (for example, total costs and usage
across all accounts), or dive deeper into your cost and usage data to identify trends, pinpoint cost drivers, and detect anomalies.
https://aws.amazon.com/aws-cost-management/aws-cost-explorer/
upvoted 2 times
"AWS Cost Explorer has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time."
Reference: https://aws.amazon.com/aws-cost-management/aws-cost-explorer/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 18/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to
Which combination of AWS services should the company use to meet these requirements? (Choose two.)
A. AWS Glue
C. Amazon Redshift
D. Amazon QuickSight
Correct Answer: AD
Selected Answer: AD
AWS Glue is a serverless data integration service that makes it easier to discover, prepare, move, and integrate data from multiple sources for
analytics, machine learning (ML), and application development.
https://aws.amazon.com/glue/
Amazon QuickSight powers data-driven organizations with unified business intelligence (BI) at hyperscale. With QuickSight, all users can meet
varying analytic needs from the same source of truth through modern interactive dashboards, paginated reports, embedded analytics, and
natural language queries.
https://aws.amazon.com/quicksight/
upvoted 11 times
Selected Answer: AD
A. AWS Glue - AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy for users to prepare and load their data
for analysis. It can discover, catalog, and transform data from various sources.
D. Amazon QuickSight - Amazon QuickSight is a business intelligence (BI) service that enables users to create and visualize interactive
dashboards. It can connect to various data sources, including AWS Glue, to visualize and analyze the transformed data.
upvoted 2 times
AD looks correct
upvoted 2 times
Selected Answer: AD
AD - Analytics
https://aws.amazon.com/big-data/datalakes-and-analytics/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 19/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A global company wants to migrate its third-party applications to the AWS Cloud. The company wants help from a global team of experts to
complete the migration faster and more reliably in accordance with AWS internal best practices.
A. AWS Support
Correct Answer: B
Selected Answer: B
The AWS Professional Services organization is a global team of experts that can help you realize your desired business outcomes when using the
AWS Cloud. We work together with your team and your chosen member of the AWS Partner Network (APN) to execute your enterprise cloud
computing initiatives.
https://aws.amazon.com/professional-services/
upvoted 5 times
Selected Answer: B
AWS Professional Services is the AWS consulting arm that provides expert guidance and assistance to help organizations plan, migrate, and
optimize their workloads on AWS. AWS Professional Services consists of a global team of experts who have deep experience with AWS services
and can help ensure a faster and more reliable migration in accordance with AWS best practices.
upvoted 1 times
Selected Answer: B
AWS Partner Network (APN) Consulting Partners help customers design, architect, build,
migrate, and manage workloads and applications on Amazon Web Services.
https://d1.awsstatic.com/partner-network/APN_Consulting-Benefits_Brochure-Digital.pdf
upvoted 1 times
Selected Answer: B
Answer B is correct.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 20/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
An e-learning platform needs to run an application for 2 months each year. The application will be deployed on Amazon EC2 instances. Any
Which EC2 purchasing option will meet these requirements MOST cost-effectively?
A. Reserved Instances
B. Dedicated Hosts
C. Spot Instances
D. On-Demand Instances
Correct Answer: D
Reference: https://aws.amazon.com/ec2/pricing/
upvoted 6 times
Answer D is correct.
upvoted 1 times
It can´t be A because AWS offer terms of 1 or 3 years and only need 2 month at year. So it has to be D
upvoted 1 times
Selected Answer: D
On-Demand is the correct answer since this service cannot be interrupted. This is why we need On-Demand.
upvoted 3 times
Selected Answer: A
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 21/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
upvoted 1 times
Selected Answer: D
Reference: https://aws.amazon.com/ec2/pricing/
upvoted 1 times
A developer wants to deploy an application quickly on AWS without manually creating the required resources.
A. Amazon EC2
C. AWS CodeBuild
D. Amazon Personalize
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
With Elastic Beanstalk, you can quickly deploy and manage applications in the AWS Cloud without having to learn about the infrastructure that
runs those applications. Elastic Beanstalk reduces management complexity without restricting choice or control. You simply upload your
application, and Elastic Beanstalk automatically handles the details of capacity provisioning, load balancing, scaling, and application health
monitoring.
upvoted 4 times
Answer B is Correct.
Key: "deploy an application quickly on AWS without manually creating the required resources"
upvoted 1 times
Selected Answer: B
https://aws.amazon.com/elasticbeanstalk/
upvoted 1 times
"Deploy scalable web applications in minutes without the complexity of provisioning and managing underlying infrastructure."
Reference: https://aws.amazon.com/elasticbeanstalk/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 22/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or
overwriting.
A. S3 Lifecycle rules
B. S3 Versioning
C. S3 bucket policies
D. S3 server-side encryption
Correct Answer: B
Selected Answer: B
Versioning in Amazon S3 is a means of keeping multiple variants of an object in the same bucket. You can use the S3 Versioning feature to
preserve, retrieve, and restore every version of every object stored in your buckets.
Versioning-enabled buckets can help you recover objects from accidental deletion or overwrite. For example, if you delete an object, Amazon S3
inserts a delete marker instead of removing the object permanently.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/Versioning.html
upvoted 9 times
Selected Answer: B
B looks correct
upvoted 1 times
Answer B is Correct.
"Versioning-enabled buckets can help you recover objects from accidental deletion or overwrite."
Reference: https://docs.aws.amazon.com/AmazonS3/latest/userguide/Versioning.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 23/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. AWS CodePipeline
B. AWS CodeDeploy
D. AWS CloudFormation
Correct Answer: D
Selected Answer: D
D looks correct
upvoted 1 times
Selected Answer: D
Answer D is Correct.
Selected Answer: D
AWS CloudFormation lets you model, provision, and manage AWS and third-party resources by treating infrastructure as code.
https://aws.amazon.com/cloudformation/
upvoted 3 times
"AWS CloudFormation lets you model, provision, and manage AWS and third-party resources by treating infrastructure as code."
Reference: https://aws.amazon.com/cloudformation/
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 24/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and any
increases in traffic are predictable. The EC2 instances must be online and available without any disruption.
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Spot Fleet
Correct Answer: B
Selected Answer: B
B looks correct
upvoted 1 times
Selected Answer: B
Selected Answer: B
Answer B is Correct.
Key: "instance for 1 year" "traffic is predictable" "available without any disruption"
upvoted 1 times
Selected Answer: B
Amazon EC2 Reserved Instances (RI) provide a significant discount (up to 72%) compared to On-Demand pricing and provide a capacity
reservation when used in a specific Availability Zone.
Terms (avg. discount off On-Demand) - 1yr (40%), 3yr (60%)
https://aws.amazon.com/ec2/pricing/reserved-instances/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 25/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the
AWS Cloud?
B. VPC peering
C. AWS VPN
D. Amazon Route 53
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
Answer A is Correct.
Key: "dedicated network connection between a company’s on-premises data center and the AWS Cloud"
upvoted 2 times
Selected Answer: A
https://aws.amazon.com/directconnect/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 26/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. AWS DataSync
B. AWS Region
C. Amazon Connect
D. AWS Organizations
Correct Answer: B
"AWS has the concept of a Region, which is a physical location around the world where we cluster data centers"
https://aws.amazon.com/about-aws/global-infrastructure/regions_az/
upvoted 1 times
B is correct
upvoted 1 times
Selected Answer: B
Answer B is Correct
Selected Answer: B
Selected Answer: B
AWS has the concept of a Region, which is a physical location around the world where we cluster data centers. We call each group of logical
data centers an Availability Zone. Each AWS Region consists of a minimum of three, isolated, and physically separate AZs within a geographic
area.
https://aws.amazon.com/about-aws/global-infrastructure/regions_az/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 27/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.
A. Reliability
B. Security
C. Operational excellence
D. Performance efficiency
Correct Answer: B
This is conclusion of security pillar "help you build and operate architectures that protect information, systems, and assets while delivering
business value"
https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/conclusion.html
upvoted 2 times
Selected Answer: B
B looks correct
upvoted 1 times
Selected Answer: B
Answer B is Correct
Key: "protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks"
upvoted 1 times
Selected Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 28/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
D. To load balance traffic from the internet across Amazon EC2 instances
Correct Answer: B
Selected Answer: B
B is correct answer
B looks correct
upvoted 1 times
Answer B is Correct.
upvoted 1 times
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html
upvoted 1 times
"An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and
the internet."
Reference: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 29/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the
Which best practice of the AWS Well-Architected Framework is the company following with this plan?
Correct Answer: D
Selected Answer: D
Dependencies such as queuing systems, streaming systems, workflows, and load balancers are loosely coupled. Loose coupling helps isolate
behavior of a component from other components that depend on it, increasing resiliency and agility.
https://docs.aws.amazon.com/wellarchitected/latest/framework/rel_prevent_interaction_failure_loosely_coupled_system.html
upvoted 6 times
Selected Answer: D
Selected Answer: D
D is correct answer
upvoted 2 times
Selected Answer: D
D looks correct
upvoted 1 times
Selected Answer: D
Answer D is Correct.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 30/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes.
B. AWS Artifact
Correct Answer: C
Selected Answer: C
You can use credential reports to assist in your auditing and compliance efforts. You can use the report to audit the effects of credential lifecycle
requirements, such as password and access key updates.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html
upvoted 5 times
Selected Answer: C
Answer C is Correct.
Key: "audit its password and access key rotation details for compliance purposes"
upvoted 1 times
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 31/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to receive a notification when a specific AWS cost threshold is reached.
Which AWS services or tools can the company use to meet this requirement? (Choose two.)
B. AWS Budgets
C. Cost Explorer
D. Amazon CloudWatch
Correct Answer: BD
Selected Answer: BD
BD look correct
upvoted 1 times
Selected Answer: BD
AWS Cost Explorer itself does not have built-in capabilities to send cost alerts or notifications directly.
upvoted 2 times
Selected Answer: BD
B. AWS Budgets: AWS Budgets is a service that allows you to set custom cost and usage budgets for your AWS resources. You can configure a
budget with a specific threshold and define actions, such as sending notifications, when that threshold is reached.
D. Amazon CloudWatch: Amazon CloudWatch is a monitoring service that can be used to collect and track metrics, logs, and events from
various AWS resources. It supports setting up alarms based on cost metrics, so you can create an alarm for a specific cost threshold and
configure it to send notifications when the threshold is breached.
upvoted 4 times
Selected Answer: BD
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html
https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-controls.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 32/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: BD
Using AWS Budgets, you can set a budget that alerts you when you exceed (or are forecasted to exceed) your budgeted cost or usage amount.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 33/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?
A. AWS Artifact
B. Amazon Connect
C. AWS Chatbot
Selected Answer: D
For me correct is D. Exploring both portals seems clear that AWS Knowledge Center provides answer to the most frequently asked security-
related questions that AWS receives from its users.
https://repost.aws/knowledge-center/all?
view=all&search=security&sort=recent&page=eyJ2IjoyLCJuIjoic3d4czNIWmVNdkM2SDcyaHF5d3dKQT09IiwidCI6IlNrbEpvdy91TTJlSGFCZ0JFZ
2M1RXc9PSJ9&pageSize=60
You can use AWS Artifact Reports to download AWS security and compliance documents, such as AWS ISO certifications, Payment Card
Industry (PCI), and System and Organization Control (SOC) reports.
You can use AWS Artifact Agreements to review, accept, and track the status of AWS agreements such as the Business Associate Addendum
(BAA).
https://aws.amazon.com/artifact/faq/
upvoted 1 times
AWS Artifact is the correct option. AWS Artifact provides access to compliance reports and other documents related to the security and
compliance of AWS services. It includes various types of documents, such as the AWS ISO certification, AWS SOC reports, and more. Users can
find answers to security-related questions and obtain information about how AWS manages security and compliance in the Artifact documents.
The other options (Amazon Connect, AWS Chatbot, and AWS Knowledge Center) are not specifically designed for providing security-related
documentation and answers.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 34/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: D
D
The correct answer is D. AWS Knowledge Center.
The AWS Knowledge Center is a comprehensive resource that provides answers to the most frequently asked security-related questions that
AWS receives from its users. It is a central repository of security information and guidance, covering a wide range of topics
upvoted 2 times
Correct answer is D
upvoted 2 times
Selected Answer: D
Selected Answer: D
Answer D is Correct.
Key: "service or resource provides answers to the most frequently asked security-related questions"
upvoted 1 times
Selected Answer: D
AWS Official Knowledge Center articles and videos covering the most frequent questions and requests that we receive from AWS customers.
https://repost.aws/knowledge-center
upvoted 3 times
Selected Answer: D
"AWS re:Post includes AWS Official Knowledge Center articles and videos covering the most frequent questions and requests that we receive
from AWS customers."
Reference: https://repost.aws/knowledge-center
upvoted 1 times
Answer should be Knowledge centre, because right in the official exam guide; section 2.4: Identifying where security information is available,
Knowledge centre is listed among AWS security centre and AWS security blog. Artifact is majorly for compliance reports and is unfortunately the
answer chatGPT will give you if you ask it
upvoted 2 times
AWS Artifact portal contains AWS’ compliance documentation and AWS agreements
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 35/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)
Correct Answer: AB
Selected Answer: AB
Selected Answer: BC
Classifying and identifying company assets, including sensitive data, is a customer responsibility. This involves understanding the nature of the
data and applying appropriate security controls.
C. Determine which Availability Zones to use for Amazon S3 buckets.
Customers are responsible for deciding the geographical regions and specific Availability Zones where their resources (such as Amazon S3
buckets) will be deployed.
upvoted 1 times
B. Classify company assets in the AWS Cloud: Customers are responsible for classifying their data and determining the appropriate level of
protection based on sensitivity, regulatory requirements, etc.
E. Select Amazon EC2 instances to run AWS Lambda on: Customers are responsible for configuring and managing their own resources,
including selecting the appropriate instances to run AWS Lambda functions on.
upvoted 1 times
AB look correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 36/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
upvoted 2 times
Selected Answer: AB
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 37/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)
A. Availability
B. Reliability
C. Scalability
D. Responsive design
E. Operational excellence
Correct Answer: BE
Selected Answer: BE
BE are correct
upvoted 1 times
Selected Answer: BE
1. Operational Excellence
2. Security
3. Reliability
4. Performance Efficiency
5. Cost Optimization
upvoted 4 times
Selected Answer: BE
Selected Answer: BE
AWS Well-Architected helps cloud architects build secure, high-performing, resilient, and efficient infrastructure for a variety of applications and
workloads. Built around six pillars—operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability.
upvoted 4 times
operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 38/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature is used to send both text and email messages from distributed applications?
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
Answer A is Correct.
Key: "send both text and email messages from distributed applications"
upvoted 1 times
Selected Answer: A
The answer is A.
Amazon Simple Notification Service (Amazon SNS) sends notifications two ways, A2A and A2P. A2A provides high-throughput, push-based,
many-to-many messaging between distributed systems, microservices, and event-driven serverless applications. These applications include
Amazon Simple Queue Service (SQS), Amazon Kinesis Data Firehose, AWS Lambda, and other HTTPS endpoints. A2P functionality lets you send
messages to your customers with SMS texts, push notifications, and email.
https://aws.amazon.com/sns/
upvoted 3 times
"Amazon Simple Notification Service (Amazon SNS) sends notifications two ways, A2A and A2P. A2A provides high-throughput, push-based,
many-to-many messaging between distributed systems, microservices, and event-driven serverless applications."
Reference: https://aws.amazon.com/sns/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 39/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A user needs programmatic access to AWS resources through the AWS CLI or the AWS API.
Which option will provide the user with the appropriate access?
A. Amazon Inspector
B. Access keys
Correct Answer: B
Selected Answer: B
The answer is B.
"Access keys are long-term credentials for an IAM user or the AWS account root user. You can use access keys to sign programmatic requests to
the AWS CLI or AWS API (directly or using the AWS SDK)."
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html
upvoted 6 times
Selected Answer: B
Answer B is Correct.
Key: "programmatic access to AWS resources through the AWS CLI or the AWS API"
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 40/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3
hours.
Which pricing model enables the company to optimize costs and meet these requirements?
A. Reserved Instances
B. Spot Instances
C. On-Demand Instances
D. Dedicated Instances
Correct Answer: B
Selected Answer: B
B. Spot Instances
For stateless, fault-tolerant workloads that can handle interruptions and have short durations, using Spot Instances is a cost-effective option.
Spot Instances allow you to bid for unused EC2 capacity at a potentially lower price than On-Demand Instances. However, Spot Instances can
be terminated if the capacity is needed by On-Demand or Reserved Instances customers.
Given the nature of the company's workload, where thousands of simulations are run simultaneously and each simulation is stateless, fault-
tolerant, and runs for up to 3 hours, Spot Instances would be a suitable choice. This can help optimize costs by taking advantage of the lower
pricing for unused capacity.
upvoted 3 times
Selected Answer: B
Answer B is Correct.
Selected Answer: B
Spot Instances are a good fit for stateless, fault-tolerant workloads that can be interrupted without any impact on the overall job.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 41/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
What does the concept of agility mean in AWS Cloud computing? (Choose two.)
Correct Answer: AC
Selected Answer: AC
In the context of AWS Cloud computing, the concept of agility refers to the ability to respond quickly to changing business requirements and to
innovate rapidly. Two aspects of agility in AWS Cloud computing are:
A. The speed at which AWS resources are implemented: Agility involves the rapid provisioning and deployment of AWS resources to meet the
dynamic needs of applications and workloads.
C. The ability to experiment quickly: Agility allows users to experiment and iterate quickly, enabling them to test ideas, features, and
configurations with minimal barriers.
upvoted 2 times
Selected Answer: AC
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 42/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. AWS WAF
B. AWS Shield
C. Network ACLs
D. Security groups
Correct Answer: A
SQLi Filter: Choose the rule type to look for SQLi patterns. AWS WAF has built-in SQLi filters.
Attach Resources: Attach the WebACL to a resource, such as an Application Load Balancer, Amazon CloudFront distribution, or an API Gateway.
Selected Answer: A
AWS WAF is a web application firewall service that helps protect web applications from common web exploits, such as SQL injection attacks. It
allows you to create rules to filter and monitor HTTP and HTTPS traffic to your web applications. With AWS WAF, you can block requests that
match known attack patterns and prevent SQL injection attacks, cross-site scripting (XSS), and other malicious activities.
upvoted 1 times
Answer A is Correct.
upvoted 1 times
Answer A is Correct.
upvoted 1 times
The answer is A.
AWS WAF helps you protect against common web exploits and bots that can affect availability, compromise security, or consume excessive
resources.
https://aws.amazon.com/waf/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 43/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?
D. AWS Organizations
Correct Answer: C
Selected Answer: C
The answer is C.
IAM Access Analyzer helps identify resources in your organization and accounts that are shared with an external entity.
https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
upvoted 6 times
Selected Answer: C
AWS IAM Access Analyzer is the service that identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity. IAM
Access Analyzer reviews resource policies to analyze permissions granted to principals outside your AWS account and alerts you to any
unintended or risky access.
upvoted 1 times
Selected Answer: C
Answer C is Correct.
Key: "feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity"
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 44/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud.
Correct Answer: B
Selected Answer: B
Answer B is correct.
Selected Answer: B
AWS Artifact is a portal that provides access to various compliance reports, including certifications, attestations, and other relevant documents.
You can download these reports directly from AWS Artifact.
upvoted 3 times
The answer is B.
https://docs.aws.amazon.com/artifact/latest/ug/downloading-documents.html
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 45/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.
Correct Answer: A
Selected Answer: A
Selected Answer: A
Answer A is Correct.
upvoted 1 times
Selected Answer: A
The answer is A.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 46/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is setting up AWS Identity and Access Management (IAM) on an AWS account.
A. Use the account root user access keys for administrative tasks.
B. Grant broad permissions so that all company employees can access the resources they need.
C. Turn on multi-factor authentication (MFA) for added security during the login process.
Correct Answer: C
Selected Answer: C
https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html
upvoted 1 times
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
Answer C is Correct.
upvoted 1 times
Enabling multi-factor authentication (MFA) for user accounts, especially for users with administrative or high-privilege access, is a crucial security
best practice. MFA adds an additional layer of security by requiring users to provide two or more verification factors (typically something they
know, like a password, and something they have, like a temporary MFA code from a hardware token or mobile app) before gaining access. This
significantly reduces the risk of unauthorized access, even if login credentials are compromised.
upvoted 1 times
The answer is C.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 47/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
Correct Answer: BE
Selected Answer: BE
Elasticity is the ability to add and release resources as business needs change. It has nothing to do with pricing.
upvoted 9 times
Selected Answer: BE
https://wa.aws.amazon.com/wellarchitected/2020-07-02T19-33-23/wat.concept.elasticity.en.html
upvoted 1 times
Selected Answer: BE
BE are correct
upvoted 1 times
Selected Answer: BD
Pay-as-you-go Pricing: Cloud elasticity lets organizations connect their IT spending to current demand. This means they only pay for the
resources they use at any given time.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 48/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which service enables customers to audit API calls in their AWS accounts?
A. AWS CloudTrail
C. Amazon Inspector
D. AWS X-Ray
Correct Answer: A
Selected Answer: A
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html
upvoted 1 times
Selected Answer: A
A is correct
"CloudTrail: Track API calls made by users within account."
upvoted 1 times
Answer A is Correct.
Selected Answer: A
CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. It records and logs all
API calls made within your account, including who made them, when they were made, and which resources were affected.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 49/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?
Correct Answer: A
Selected Answer: A
https://docs.aws.amazon.com/whitepapers/latest/security-overview-aws-lambda/the-shared-responsibility-model.html
upvoted 2 times
Selected Answer: A
A Looks correct
upvoted 1 times
Selected Answer: A
Answer A is Correct.
upvoted 1 times
Selected Answer: A
The answer is A.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 50/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis.
Which AWS service should the company use to run these queries in the MOST cost-effective manner?
A. Amazon Redshift
B. Amazon Athena
C. Amazon Kinesis
D. Amazon RDS
Correct Answer: B
Selected Answer: B
The answer is B.
Amazon Athena is a serverless, interactive analytics service built on open-source frameworks, supporting open-table and file formats. Athena
provides a simplified, flexible way to analyze petabytes of data where it lives. Analyze data or build applications from an Amazon Simple Storage
Service (S3) data lake and 30 data sources, including on-premises data sources or other cloud systems using SQL or Python. Athena is built on
open-source Trino and Presto engines and Apache Spark frameworks, with no provisioning or configuration effort required.
https://aws.amazon.com/athena/
upvoted 7 times
Selected Answer: B
B. Amazon Athena
Amazon Athena is a serverless query service that allows you to analyze data directly in Amazon S3 using standard SQL queries. You don't need
to set up or manage any infrastructure; you only pay for the queries you run. It is well-suited for ad-hoc and exploratory analysis on data stored in
S3 without the need for maintaining a separate database.
Option A (Amazon Redshift) is a fully-managed data warehouse service and is more suitable for complex analytics and large-scale data
warehousing scenarios. It might be more cost-effective for frequent and complex analytical workloads.
Option C (Amazon Kinesis) is a service for real-time processing of streaming data and is not designed for running ad-hoc queries on stored data.
Option D (Amazon RDS) is a managed relational database service and is not the most cost-effective choice for running queries directly on data
stored in S3.
upvoted 2 times
Selected Answer: B
Answer B is Correct.
Key: "Amazon S3. The company plans to occasionally run queries on the data for analysis"
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 51/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. Amazon SageMaker
B. AWS Config
C. AWS Organizations
D. Amazon CloudWatch
Correct Answer: C
Selected Answer: C
C. AWS Organizations
AWS Organizations is a service that helps you consolidate multiple AWS accounts into an organization that you create and centrally manage.
While there may be costs associated with individual AWS services and resources used within the organization's accounts, the use of AWS
Organizations itself is at no additional cost.
upvoted 1 times
All of the above services offer a Free Tier that allows you to use them at no additional cost.
Here is a summary of the Free Tier for each service:
Service
Free Tier
Amazon SageMaker
1 TB of storage and 100 hours of Amazon SageMaker Studio notebook usage per month
AWS Config
1 million AWS Config rule evaluations and 100,000 managed rules per month
AWS Organizations
100 AWS accounts, 10 organizational units, and 200 policies per month
Amazon CloudWatch
750 million metric samples, 7 million alarm data points, 5 million events, and 500 dashboards per month
upvoted 1 times
Selected Answer: C
Answer C is Correct.
upvoted 1 times
Selected Answer: C
The answer is C.
AWS Organizations is an account management service that enables you to consolidate multiple AWS accounts into an organization that you
create and centrally manage. AWS Organizations is offered at no additional charge. You are charged only for AWS resources that users and roles
in your member accounts use. For example, you are charged the standard fees for Amazon EC2 instances that are used by users or roles in your
member accounts.
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 52/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?
A. Data architecture
B. Event management
C. Cloud fluency
D. Strategic partnership
Correct Answer: C
Selected Answer: C
The answer is C.
Selected Answer: C
C. Cloud fluency
Cloud fluency belongs to the people perspective within the AWS Cloud Adoption Framework (AWS CAF). The people perspective focuses on the
skills and roles necessary for successful cloud adoption within an organization. Cloud fluency specifically relates to the level of understanding
and proficiency that individuals within the organization have in working with cloud technologies and services. It involves training, education, and
skill development to ensure that the workforce is well-equipped to leverage the cloud effectively.
upvoted 1 times
C looks correct
upvoted 2 times
Selected Answer: C
Answer C is Correct.
upvoted 1 times
Selected Answer: C
https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/people-perspective.html
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 53/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall
cost.
Which pricing options meet these requirements with the LOWEST cost? (Choose two.)
A. Spot Instances
B. On-Demand Instances
C. Reserved Instances
D. Savings Plans
E. Dedicated Hosts
Correct Answer: CD
Selected Answer: CD
D. Savings Plans: Savings Plans offer flexible pricing and savings on your AWS usage, with discounts of up to 72% compared to On-Demand
pricing. With Savings Plans, you commit to a certain amount of usage (measured in dollars per hour) for a one- or three-year term, and receive a
lower rate for that usage.
upvoted 6 times
Selected Answer: CD
Selected Answer: CD
Selected Answer: AC
The answer is AC
upvoted 1 times
Selected Answer: AB
Try AB
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 54/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its
Which AWS service or resource should the company use to select its Amazon RDS deployment area?
A. Amazon Connect
B. AWS Wavelength
C. AWS Regions
Correct Answer: C
Selected Answer: C
C. AWS Regions
To select the deployment area or geographical location for Amazon RDS, the company should use AWS Regions. AWS Regions are physical
locations around the world where AWS clusters data centers. Each AWS Region is entirely independent and isolated from other AWS Regions to
achieve the greatest possible fault tolerance and stability.
upvoted 1 times
Answer C is Correct.
upvoted 2 times
Selected Answer: C
try c!
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 55/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned.
Which AWS service or feature can be used to estimate costs before deployment?
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
Answer B is Correct.
Key: " create a cost estimate for a project before the infrastructure is provisioned"
upvoted 1 times
Selected Answer: B
The answer is B.
AWS Pricing Calculator is a web-based planning tool that you can use to create estimates for your AWS use cases. You can use it to model your
solutions before building them, explore the AWS service price points, and review the calculations behind your estimates.
https://docs.aws.amazon.com/pricing-calculator/latest/userguide/what-is-pricing-calculator.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 56/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is building an application that needs to deliver images and videos globally with minimal latency.
Which approach can the company use to accomplish this in a cost effective manner?
Correct Answer: A
Selected Answer: A
https://aws.amazon.com/cloudfront/
Securely deliver content with low latency and high transfer speeds
upvoted 3 times
A is correct
upvoted 1 times
Answer A is Correct.
the answer is A
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 57/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which option is a benefit of the economies of scale based on the advantages of cloud computing?
Correct Answer: C
Selected Answer: B
C is not correct because it says "over fixed costs". That can't be right as the first benefit is Trade fixed expense for variable expense. So B should
be the right answer: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 1 times
Selected Answer: C
Selected Answer: C
Correct answer is C
Benefit from massive economies of scale – By using cloud computing, you can achieve a lower variable cost than you can get on your own.
Because usage from hundreds of thousands of customers is aggregated in the cloud, providers such as AWS can achieve higher economies of
scale, which translates into lower pay as-you-go prices.
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 2 times
Selected Answer: C
Answer C is Correct.
upvoted 2 times
C seems to be correct. it is the only one that reflects cost benefits which are asked in the question. While A also mentioned cost it is
contradicting the value of cloud which is trade capital expense for variable cost.
upvoted 1 times
Selected Answer: C
Read the paragraph that starts with: Benefit from massive economies of scale.
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 2 times
answer is C
1 - is reversed benefit "Trade fixed expense for variable expense" thus invalid
2 - speed and agility has nothing to do with economies of scale
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 58/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: B
Beside B, all other answers are reversed answers of advantages of cloud computing.
upvoted 1 times
Selected Answer: B
Increase speed and agility – In a cloud computing environment, new IT resources are only a click away, which means that you reduce the time to
make those resources available to your developers from weeks to just minutes. This results in a dramatic increase in agility for the organization,
since the cost and time it takes to experiment and develop is significantly lower.
upvoted 1 times
Selected Answer: A
A. One of the benefits of the economies of scale in cloud computing is the ability to trade variable expenses for fixed expenses. Cloud services
allow organizations to pay for the resources they use on a variable and scalable basis, rather than incurring the fixed costs associated with
maintaining physical data centers and infrastructure. This flexibility helps businesses better manage their costs, as they can scale up or down as
needed, reducing the need for large upfront investments in infrastructure.
In summary, both options A and C are relevant to the benefits of cloud computing, but option A specifically addresses the idea of trading variable
expenses for fixed expenses, which aligns with the concept of economies of scale.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 59/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following is a software development framework that a company can use to define cloud resources as code and provision the
A. AWS CLI
D. AWS CodeStar
Correct Answer: C
Selected Answer: C
Answer C is Correct.
upvoted 2 times
AWS CDK is a software development framework that enables developers to define infrastructure as code (IaC) using familiar programming
languages like TypeScript, Python, Java, C#, and more. With AWS CDK, you can define cloud resources, their relationships, and provisioning
logic in your preferred programming language. AWS CDK also generates CloudFormation templates based on your code, making it easier to
manage and deploy infrastructure resources in AWS.
upvoted 4 times
Selected Answer: C
https://aws.amazon.com/cdk/faqs/#:~:text=The%20AWS%20Cloud%20Development%20Kit,deploying%20it%20through%20AWS%20CloudFo
rmation.
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 60/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for
Which AWS service or feature should the company use to meet these authentication requirements?
B. IAM users
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
Answer C is Correct.
Key: "application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs"
upvoted 1 times
AWS STS provides a way to grant temporary, limited-privilege credentials to users, applications, or services. These temporary credentials can be
used to access AWS resources securely without having to use long-term access keys or IAM user credentials.
upvoted 1 times
The answer is C.
AWS provides AWS Security Token Service (AWS STS) as a web service that enables you to request temporary, limited-privilege credentials for
users.
https://docs.aws.amazon.com/STS/latest/APIReference/welcome.html
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 61/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner
C. Amazon EventBridge
D. Amazon GuardDuty
Correct Answer: A
Selected Answer: A
"AWS Security Hub is a cloud security posture management (CSPM) service that performs automated, continuous security best practice checks
against your AWS resources to help you identify misconfigurations, and aggregates your security alerts (i.e. findings) in a standardized format so
that you can more easily enrich, investigate, and remediate them."
Reference: https://aws.amazon.com/security-hub/features/?nc=sn&loc=2
upvoted 5 times
Selected Answer: A
A looks correct
upvoted 1 times
Selected Answer: A
Answer A is Correct.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 62/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. Amazon S3
D. AWS WAF
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
Answer B is Correct.
upvoted 1 times
Selected Answer: B
Reference: https://aws.amazon.com/iam/getting-started/?nc=sn&loc=3
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 63/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?
A. Amazon Redshift
B. Amazon Aurora
C. Amazon DynamoDB
D. Amazon RDS
Correct Answer: C
Selected Answer: C
DynamoDB = NoSQL
upvoted 1 times
Selected Answer: C
X is correct
upvoted 1 times
Selected Answer: 다
C is correct.
upvoted 1 times
C is correct
upvoted 1 times
Correct answer is C
"Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability."
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Introduction.html
upvoted 2 times
Aurora and RDS are relational, as for Redshift that is for exabytes of data and complex queries.
upvoted 4 times
Selected Answer: B
Answer B is Correct.
Key: "NoSQL database" "fully managed and can automatically scale throughput capacity"
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 64/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: C
"Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability."
Reference: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Introduction.html
upvoted 2 times
Which task is the company’s responsibility, according to the AWS shared responsibility model?
B. Provision hosts.
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
Answer C is Correct.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 65/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted
Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?
A. On-Demand Instances
B. Dedicated Instances
C. Spot Instances
D. Reserved Instances
Correct Answer: C
Selected Answer: C
https://aws.amazon.com/ec2/spot/details/
upvoted 1 times
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
Answer C is Correct.
Key: "testing can be interrupted and does not need to run continuously"
upvoted 1 times
Selected Answer: C
Spot Instances are a good fit for stateless, fault-tolerant workloads that can be interrupted without any impact on the overall job.
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 66/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?
A. Amazon Macie
B. Amazon Detective
C. Amazon GuardDuty
Correct Answer: A
Selected Answer: A
Amazon Macie - Amazon Macie is a fully managed data security and data privacy service that
uses machine learning and pattern matching to discover and protect your sensitive data in
AWS.
upvoted 1 times
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
Answer A is Correct.
Key: "ability to discover and protect sensitive data that is stored in Amazon S3 buckets"
upvoted 1 times
Selected Answer: A
A : Amazon Macie is a data security service that discovers sensitive data using machine learning and pattern matching, provides visibility into
data security risks, and enables you to automate protection against those risks.
https://aws.amazon.com/macie/features/#:~:text=Amazon%20Macie%20is%20a%20data,automate%20protection%20against%20those%20ris
ks.
upvoted 2 times
Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data in Amazon S3. It
helps you identify and protect data such as personally identifiable information (PII), financial information, intellectual property, and more by
monitoring data access and alerting you to potential security risks
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 67/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following services can be used to block network traffic to an instance? (Choose two.)
A. Security groups
C. Network ACLs
D. Amazon CloudWatch
E. AWS CloudTrail
Correct Answer: AC
Selected Answer: AC
Selected Answer: AC
Selected Answer: AC
Security groups are stateful firewalls that control inbound and outbound traffic at the instance level. You can configure security groups to allow or
deny specific types of network traffic to and from your instances.
Network ACLs (Access Control Lists) are stateless firewalls that control traffic at the subnet level. Network ACLs define rules to allow or deny
traffic based on source and destination IP addresses, ports, and protocols.
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 68/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service can identify when an Amazon EC2 instance was terminated?
B. AWS CloudTrail
D. Amazon EventBridge
Correct Answer: B
AWS CloudTrail is a service that records all API activity in your AWS account, including the termination of EC2 instances. It creates log entries for
various events, providing an audit trail of actions taken on resources. By reviewing CloudTrail logs, you can identify when an EC2 instance was
terminated, who initiated the termination, and other relevant details about the event.
upvoted 7 times
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
Answer B is Correct.
upvoted 1 times
Selected Answer: B
B: AWS CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 69/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. Amazon S3
B. Amazon DynamoDB
C. Amazon Redshift
D. Amazon Aurora
Correct Answer: D
Selected Answer: D
https://aws.amazon.com/rds/aurora/
Unparalleled high performance and availability at global scale with full MySQL and PostgreSQL compatibility
upvoted 2 times
D is correct
upvoted 1 times
Answer D is Correct.
Amazon Aurora is a relational database service that is compatible with MySQL and PostgreSQL. It is fully managed by AWS and is designed for
high availability, performance, and scalability while maintaining MySQL compatibility. Aurora offers features like automated backups, read
replicas, and seamless failover to ensure data durability and availability. It's a popular choice for applications that require a MySQL-compatible
database with the benefits of a fully managed service.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 70/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data
A. AWS Snowmobile
C. AWS Outposts
D. AWS Fargate
Correct Answer: C
AWS Outposts enables you to run AWS infrastructure and services on premises while seamlessly connecting to the AWS cloud. This service
extends the AWS ecosystem to your on-premises locations, allowing you to take advantage of cloud benefits while addressing the requirements
of data residency, low-latency applications, and specific regulatory needs in hybrid environments.
upvoted 6 times
Selected Answer: C
C is correct answer
upvoted 1 times
Selected Answer: C
C is correct
"Hybrid Cloud: businesses that keep an onpremises
infrastructure alongside a cloud
infrastructure"
upvoted 1 times
Selected Answer: C
Answer C is Correct.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 71/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?
A. Amazon DynamoDB
B. Amazon Athena
C. Amazon RDS
D. Amazon EMR
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
C is correct
upvoted 1 times
Amazon RDS supports various database engines, including PostgreSQL, and offers a managed database service suitable for OLTP workloads.
With Amazon RDS for PostgreSQL, you can easily set up, operate, and scale a PostgreSQL database without the administrative overhead of
managing the infrastructure.
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 72/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections.
Which AWS services can the company use to meet these requirements? (Choose two.)
A. Amazon Connect
C. Amazon WorkSpaces
Correct Answer: BC
Selected Answer: BC
BC
in the context that:
- workspaces satisfies the virtual desktops
- appstream satisfies the virtual applications
upvoted 6 times
D. AWS Site-to-Site VPN: Creates a secure connection between on-premises network and AWS resources.
upvoted 2 times
C. Amazon WorkSpaces: Amazon WorkSpaces is a fully managed desktop-as-a-service (DaaS) solution that provides Windows desktops to
users. You can configure and manage virtual desktops for remote employees using WorkSpaces.
upvoted 6 times
Selected Answer: CD
C. Amazon WorkSpaces:
Amazon WorkSpaces is a managed desktop computing service that allows the company to provision Windows desktops for its remote
employees. WorkSpaces provides a secure and scalable solution for delivering Windows desktops to users, and it supports applications running
on Windows.
D. AWS Site-to-Site VPN:
AWS Site-to-Site VPN allows the company to establish secure network connections between its on-premises network and the AWS cloud. This is
crucial for ensuring a secure and private connection for remote employees to access Amazon WorkSpaces over the internet.
upvoted 1 times
Selected Answer: BC
BC is correct...
upvoted 1 times
Amazon WorkSpaces provides managed virtual Windows desktops that are provisioned over a Remote Desktop Protocol (RDP) connection. RDP
is a secure protocol that is widely used for providing remote desktops over the internet.
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 73/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
AWS Site-to-Site VPN establishes a secure connection between the company's network and the AWS cloud. This connection can be used to
enable secure access for remote employees to the virtual desktops and applications.
upvoted 1 times
Selected Answer: CD
While the two AWS services are somewhat similar, it’s important to remember that Amazon AppStream 2.0 is focused on hosting individual
applications on AWS, while Amazon WorkSpaces creates virtual desktops that can be used to create entire working environments for you and
your team.
upvoted 1 times
Correct
upvoted 1 times
Selected Answer: BC
YOU CANNOT USE SITE TO SITE VPN FOR REMOTE CONNECTIONS.THINK AND UPVOTE SO OTHERS UNDERSTAND.
upvoted 1 times
Selected Answer: CD
D. AWS Site-to-Site VPN: Creates a secure connection between on-premises network and AWS resources.
upvoted 1 times
Selected Answer: BC
GPT:
To provide managed Windows virtual desktops and applications to remote employees over secure network connections, the company can use
the following AWS services:
B. Amazon AppStream 2.0: Amazon AppStream 2.0 is a fully managed application streaming service that allows you to stream desktop
applications from AWS to any device with a web browser. It's suitable for providing access to applications without the need to manage full
desktop environments.
C. Amazon WorkSpaces: Amazon WorkSpaces is a managed, secure Desktop-as-a-Service (DaaS) solution that helps you provision Windows or
Linux desktops in just a few minutes. It's ideal for providing employees with a managed virtual desktop experience.
upvoted 2 times
Selected Answer: BC
Selected Answer: BC
CD is right
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 74/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
upvoted 2 times
Selected Answer: CD
CD is right.
Amazon AppStream 2.0 is a service for streaming desktop applications to a web browser, but it is different from full Windows virtual desktops
provided by Amazon WorkSpaces. - Is not right
upvoted 4 times
So AWS Site-to-Site VPN is required when you connect from AWS VPC into your local network. When using a virtual desktop you connect
from local network to AWS and not from AWS to your local network. D is not correct in my opinion
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 75/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports.
B. Amazon CloudWatch
C. Amazon GuardDuty
Correct Answer: A
C. Amazon GuardDuty
Amazon GuardDuty is an AWS service that is designed to monitor and detect potential security threats in your AWS environment. It helps to
identify unusual and unauthorized activities, including misconfigured security groups that may be allowing unrestricted access to specific ports.
GuardDuty uses machine learning and threat intelligence to analyze data and generate alerts, making it an effective tool for enhancing the
security of your AWS infrastructure.
While options like AWS Trusted Advisor and Amazon CloudWatch offer valuable monitoring capabilities, they do not specifically focus on
detecting security group misconfigurations. Therefore, in this scenario, Amazon GuardDuty is the most appropriate choice.
upvoted 8 times
Selected Answer: A
https://docs.aws.amazon.com/awssupport/latest/user/security-checks.html#security-groups-specific-ports-unrestricted
upvoted 1 times
Selected Answer: C
Amazon GuardDuty is more focused on other type of threats, threat intelligence + threat hunting to be specific.
Selected Answer: A
Checks security groups for rules that allow unrestricted access (0.0.0.0/0) to specific ports. Unrestricted access increases opportunities for
malicious activity (hacking, denial-of-service attacks, loss of data). The ports with highest risk are flagged red, and those with less risk are
flagged yellow. Ports flagged green are typically used by applications that require unrestricted access, such as HTTP and SMTP.
If you have intentionally configured your security groups in this manner, we recommend using additional security measures to secure your
infrastructure (such as IP tables).
upvoted 2 times
Selected Answer: A
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 76/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
GPT:
To monitor for misconfigured security groups that are allowing unrestricted access to specific ports, the most suitable AWS service is:
A. AWS Trusted Advisor: AWS Trusted Advisor is a service that analyzes your AWS environment and provides recommendations for saving
money, improving system performance, and closing security gaps. It includes checks for common misconfigurations in security groups, such as
open ports to the internet, which could pose a security risk. Trusted Advisor can alert you to these potential vulnerabilities, helping you ensure
that your security groups are configured properly.
upvoted 1 times
correct answer is A
upvoted 1 times
Selected Answer: A
I choose answer A
Trusted Advisor can help improve the security of your AWS environment by suggesting foundational security best practices curated by security
experts. Examples include identifying RDS security group access risk, exposed access keys, and unnecessary S3 bucket permissions.
C is not good IMO: GuardDuty is capable of analyzing tens of billions of events across multiple AWS data sources, such as AWS CloudTrail event
logs, Amazon Virtual Private Cloud (VPC) Flow Logs, Amazon Elastic Kubernetes Service (EKS) audit and system-level logs, and DNS query logs.
upvoted 1 times
Selected Answer: C
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 77/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: A
Trusted Advisor can help improve the security of your AWS environment by suggesting foundational security best practices curated by security
experts. Examples include identifying RDS security group access risk, exposed access keys, and unnecessary S3 bucket permissions.
https://aws.amazon.com/premiumsupport/technology/trusted-advisor/
upvoted 1 times
Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?
A. Amazon DynamoDB
B. Amazon Aurora
D. Amazon Neptune
Correct Answer: A
Selected Answer: A
A is correct
Fully Managed Highly available with replication across 3 AZ
• NoSQL database - not a relational database
• Scales to massive workloads, distributed “serverless” database
• Millions of requests per seconds, trillions of row, 100s of TB of storage
• Fast and consistent in performance
• Single-digit millisecond latency – low latency retrieval
• Integrated with IAM for security, authorization and administration
• Low cost and auto scaling capabilities
upvoted 2 times
the answer is A
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 78/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is deploying a machine learning (ML) research project that will require a lot of compute power over several months. The ML
Which Amazon EC2 instance purchasing option will meet these requirements at the lowest cost?
A. On-Demand Instances
B. Spot Instances
C. Reserved Instances
D. Dedicated Instances
Correct Answer: A
Selected Answer: B
The key is "do not need to run at specific times" so the answer is B
upvoted 1 times
Spot instances will be used as the workload runtime requirement are not time specific
upvoted 1 times
Considering
Running the ML jobs for "several months" without interruptions would demand it to run at specific times. For the two affirmatives to be valid at
the same time, the application must handle interruptions.
Selected Answer: B
https://aws.amazon.com/ec2/spot/
Selected Answer: B
GPT:
For a machine learning (ML) research project that requires a lot of compute power over several months, where the processing jobs do not need to
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 79/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
run at specific times, the most cost-effective Amazon EC2 instance purchasing option would be:
B. Spot Instances: Amazon EC2 Spot Instances offer the ability to purchase unused EC2 capacity at a significantly reduced rate compared to
On-Demand prices. Spot Instances are ideal for workloads that are flexible in terms of when they can run and can tolerate interruptions, such as
batch processing jobs in ML projects. Since your ML processing jobs do not need to run at specific times, Spot Instances can provide the
necessary compute power at a lower cost. However, it's important to note that Spot Instances can be terminated by AWS with a two-minute
warning if AWS needs the capacity back, so it's vital to design your applications to handle such interruptions.
upvoted 2 times
B. Spot Instances
Spot Instances are the most cost-effective option for workloads that can be flexible about when they run. They allow you to use spare Amazon
EC2 capacity at a significantly lower price compared to On-Demand Instances. Spot Instances are ideal for workloads like batch processing,
data analysis, and machine learning jobs that can be interrupted or scheduled flexibly
upvoted 1 times
Selected Answer: A
I choose answer B
Amazon EC2 Spot Instances let you take advantage of unused EC2 capacity in the AWS cloud and are available at up to a 90% discount
compared to On-Demand prices.
Use cases:
Run big data and machine learning workloads
Fast-track big data and machine learning workloads by using Spot Instances with Amazon EMR, Hadoop, Spark, or Amazon Sagemaker to
process massive amounts of data.
https://aws.amazon.com/ec2/spot/
upvoted 3 times
Selected Answer: A
EC2 On demand can be used when you do not want to interrupt your application. You are not sure about the time and unsure about workloads
then use OnDemand.
EC2 Spot instances when you are flexible enough that your application can be interrupted or your application is stateless. You need a cheaper
solution for compute resources.
upvoted 1 times
Selected Answer: B
Spot Instances allow you to access spare EC2 capacity at a significantly lower price compared to On-Demand Instances. They are a cost-
effective choice for workloads that can be interrupted and are flexible regarding timing. Spot Instances can be ideal for ML processing jobs that
do not have strict timing requirements.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 80/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Spot: Spot instances can be valuable for handling sporadic high CPU workloads and memory spikes. >>>However, the inherent uncertainty of
availability makes them less reliable for consistent, high-demand workloads.<<<
On-Demand: provide the necessary computational horsepower exactly when needed, making them ideal for dealing with unexpected CPU and
memory demands.
Selected Answer: B
the answer is B
upvoted 1 times
Selected Answer: A
A - CPU power is needed. You don't get to choose with Spot Instances.
upvoted 3 times
Spot Instances are a cost-effective choice when you have flexible workload requirements and can tolerate interruptions. They allow you to use
spare EC2 capacity at a significantly lower cost compared to On-Demand Instances. You can specify the maximum price you are willing to pay
per instance hour, and your instances will run as long as the current spot price is below your maximum price.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 81/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.)
D. AWS Shield
E. Amazon GuardDuty
Correct Answer: BC
Selected Answer: BC
BC are correct
upvoted 1 times
Selected Answer: BC
B. EC2 Amazon Machine Images (AMIs): AMIs are used to create backups of EC2 instances, and they can be used to launch replacement
instances in the event of a disaster or data loss. AMIs are essential for creating recovery points for your EC2 instances.
C. Amazon Elastic Block Store (Amazon EBS) snapshots: EBS snapshots allow you to create point-in-time backups of your EBS volumes. These
snapshots can be used to restore data or create new EBS volumes, making them a key component of disaster recovery for EC2 instances.
upvoted 3 times
Selected Answer: BC
yeah bc
upvoted 1 times
C. Amazon Elastic Block Store (Amazon EBS) snapshots: You can take snapshots of your Amazon EBS volumes attached to EC2 instances.
These snapshots are backups of your data, which can be used to restore or create new volumes in case of data loss or failure.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 82/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service provides command line access to AWS tools and resources directly from a web browser?
A. AWS CloudHSM
B. AWS CloudShell
C. Amazon WorkSpaces
Correct Answer: B
Selected Answer: B
AWS CloudShell
upvoted 2 times
Selected Answer: B
B is correct
"Using AWS CloudShell, a browser-based shell, you can quickly run scripts with the AWS Command Line Interface (CLI), experiment with service
APIs using the AWS CLI, and use other tools to increase your productivity. The CloudShell icon appears in AWS Regions where CloudShell is
available."
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 83/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The
company has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time.
Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?
A. VPC endpoints
C. Amazon Route 53
Correct Answer: B
Selected Answer: B
I choose to answer B
AWS Transit Gateway connects your Amazon Virtual Private Clouds (VPCs) and on-premises networks through a central hub. This connection
simplifies your network and puts an end to complex peering relationships. Transit Gateway acts as a highly scalable cloud router—each new
connection is made only once.
https://aws.amazon.com/transit-gateway/
upvoted 5 times
Selected Answer: B
B is correct
upvoted 1 times
B is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 84/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to assess its operational readiness. It also wants to identify and mitigate any operational risks ahead of a new product launch.
Which AWS Support plan offers guidance and support for this kind of event at no additional charge?
Selected Answer: D
AWS Enterprise Support offers guidance and support for operational readiness assessments and risk mitigation at no additional charge.
upvoted 2 times
https://aws.amazon.com/premiumsupport/plans/
"ahead of a new product launch"
upvoted 1 times
Selected Answer: D
D looks correct
upvoted 1 times
I think is D
upvoted 1 times
Selected Answer: A
Little confusing as every support plan from developer to enterprise offers general guidance in < 24 hs.
Going with Business as being ahead of a product launch implies production environment too.
upvoted 1 times
Selected Answer: D
Shouldn't this be Enterprise support? Keywords "event" and "no additional cost"
AWS Infrastructure Event Management (IEM) offers architecture and scaling guidance and operational support during the preparation and
execution of planned events, such as shopping holidays, product launches, and migrations. For these events, AWS Infrastructure Event
Management will help you assess operational readiness, identify and mitigate risks, and execute your event confidently with AWS experts by your
side. The program is included in the Enterprise Support plan and is available to Business Support customers for an additional fee.
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 85/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service will support this requirement with the LEAST amount of operational overhead?
Correct Answer: B
Selected Answer: B
https://aws.amazon.com/secrets-manager/
AWS Secrets Manager helps you manage, retrieve, and rotate database credentials, API keys, and other secrets throughout their lifecycles.
upvoted 3 times
B is correct
upvoted 1 times
B is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 86/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?
A. Amazon Route 53
B. Amazon Macie
D. AWS PrivateLink
Correct Answer: D
答案为C
Community vote distribution
C (88%) 12%
D is correctly.
https://phoenixnap.com/kb/aws-privatelink-vs-direct-connect
upvoted 1 times
Selected Answer: C
Selected Answer: C
The connection from on premises to aws workload can be done with direct connect
https://aws.amazon.com/directconnect/faqs/?nc=sn&loc=6
Q: What is AWS Direct Connect?
AWS Direct Connect is a networking service that provides an alternative to using the internet to connect to AWS. Using AWS Direct Connect,
data that would have previously been transported over the internet is delivered through a private network connection between your facilities and
AWS.
PrivateLink works within AWS network and can be used with directly link to access VPCs content
upvoted 2 times
Selected Answer: C
GPT
AWS Direct Connect establishes a private connection between an on-premises data center or office and AWS. This dedicated network
connection can provide more consistent network performance and reduced data transfer costs compared to internet-based connections. It
allows you to access your AWS resources over a private connection rather than going over the public internet.
AWS PrivateLink, mentioned in option D, is also relevant but for a different use case. It enables private connectivity between VPCs (Virtual Private
Clouds) and services supported by PrivateLink without using public IPs, but it's not specifically for connecting on-premises workloads.
upvoted 2 times
Correct - Direct Connect: A dedicated and private network connection between your on-premises infrastructure and the AWS Direct Connect
location in the AWS Cloud.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 87/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
https://phoenixnap.com/kb/aws-privatelink-vs-direct-
connect#:~:text=AWS%20PrivateLink%20provides%20a%20private,infrastructure%20and%20an%20AWS%20Location.
upvoted 1 times
Selected Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
AWS PrivateLink provides a private network connection between VPCs and AWS services, while AWS Direct Connect is a dedicated, private
connection between on-premises infrastructure and an AWS Location
upvoted 3 times
Selected Answer: D
AWS PrivateLink provides private connectivity between virtual private clouds (VPCs), supported AWS services, and your on-premises networks
without exposing your traffic to the public internet.
upvoted 1 times
Selected Answer: C
Answer is C.
Direct connect is for private dedicated connection between on premise and AWS.
PrivateLink is used when you comunicate with third party VPC and it Requires a network load balancer (Service VPC) and ENI (Customer VPC)
upvoted 2 times
Selected Answer: C
AWS PrivateLink: Establish connectivity between VPCs and AWS services without exposing data to the internet
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 88/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
C. AWS KMS
D. AWS Config
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
The answer is C.
Use Amazon EBS encryption as a straight-forward encryption solution for your EBS resources associated with your EC2 instances. With Amazon
EBS encryption, you aren't required to build, maintain, and secure your own key management infrastructure. Amazon EBS encryption uses AWS
KMS keys when creating encrypted volumes and snapshots.
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 89/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to manage its AWS Cloud resources through a web interface.
B. AWS CLI
C. AWS SDK
D. AWS Cloud9
Correct Answer: A
Selected Answer: A
The AWS Management Console is a web application that comprises and refers to a broad collection of service consoles for managing AWS
resources.
https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/learn-whats-new.html
upvoted 2 times
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 90/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following are advantages of the AWS Cloud? (Choose two.)
Correct Answer: BC
Selected Answer: BC
Selected Answer: BC
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
Benefit from massive economies of scale
Benefit from massive economies of scale
upvoted 1 times
Selected Answer: BC
for those who choose A, it's wrong. it's the opposite advantage, the right syntax is 'Trade fixed expense for variable expense'
Right answers id BC
upvoted 2 times
Selected Answer: BC
B. Ability to quickly change required capacity: With the AWS Cloud, users can easily scale their infrastructure up or down based on demand. This
flexibility allows for rapid adjustment of resources to match application needs, enabling cost optimization and efficient resource utilization.
C. High economies of scale: AWS operates at a large scale, serving millions of customers globally. This scale allows AWS to achieve cost
efficiencies and pass on the benefits to customers. By leveraging AWS services, users can access enterprise-grade infrastructure and services
without the need for significant upfront investment in hardware or infrastructure.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 91/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?
A. Agility
B. Elasticity
C. Scalability
D. High availability
Correct Answer: C
答案为D
Community vote distribution
D (100%)
Selected Answer: D
Selected Answer: D
HA is correct, why C?
upvoted 1 times
scalability is so wrong.
D high availability is closer to reliability that would be a perfect match
upvoted 1 times
Selected Answer: D
Selected Answer: D
High availability
upvoted 1 times
D. High availability
The ability of an architecture to withstand failures with minimal downtime is a characteristic of high availability. High availability ensures that your
system remains operational and accessible even in the face of component failures. This is critical for maintaining a reliable and responsive
application or service.
upvoted 2 times
Selected Answer: D
D is correct
upvoted 1 times
Selected Answer: D
D looks correct
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 92/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
upvoted 1 times
Selected Answer: D
Obviously D. Availability is about resolving any issues in no time for being always available, scalability is about adding/removing resources to suit
a company's needs.
upvoted 2 times
D is correct
upvoted 1 times
D is right.
upvoted 2 times
Selected Answer: D
High availability
upvoted 1 times
Selected Answer: D
Selected Answer: D
High availability
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 93/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion.
Which AWS service should the developer use to meet these requirements?
B. AWS Shield
D. AWS CloudFormation
Correct Answer: D
Selected Answer: D
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html
upvoted 1 times
Selected Answer: D
D is correct
upvoted 1 times
D. AWS CloudFormation
"AWS CloudFormation lets you model, provision, and manage AWS and third-party resources by treating infrastructure as code."
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 94/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which task is the customer’s responsibility, according to the AWS shared responsibility model?
Correct Answer: B
Selected Answer: B
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
Selected Answer: B
B for sure
upvoted 1 times
Selected Answer: B
B is correct
upvoted 1 times
Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?
A. AWS WAF
C. AWS Shield
Correct Answer: B
B looks correct
upvoted 2 times
"Deliver highly available applications with fast failover for multi-Region and multi-AZ architectures."
Reference: https://aws.amazon.com/global-accelerator/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 95/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has a set of ecommerce applications. The applications need to be able to send messages to each other.
Correct Answer: C
Selected Answer: C
Amazon Simple Queue Service (SQS): SQS is a fully managed message queuing service that enables you to decouple and scale microservices,
distributed systems, and serverless applications. It allows one application to send messages to a queue, and another application to retrieve
those messages from the queue. This can be helpful in scenarios where the sender and receiver are not required to interact with each other in
real-time.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 96/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
What are the benefits of consolidated billing for AWS Cloud services? (Choose two.)
A. Volume discounts
Correct Answer: AC
AC are correct
upvoted 1 times
Selected Answer: AC
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 97/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console.
B. S3 Storage Lens
Correct Answer: A
Selected Answer: D
https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-analyzer.html
IAM Access Analyzer for S3 might show that a bucket has read or write access provided through a bucket access control list (ACL), a bucket
policy, a Multi-Region Access Point policy, or an access point policy. With these findings, you can take immediate and precise corrective action
to restore your bucket access to what you intended.
upvoted 1 times
Access Analyzer for S3 allows you to analyze and review access policies for your S3 buckets. It helps you identify and resolve unintended access
to your S3 resources. With Access Analyzer for S3, you can review both bucket policies and bucket ACLs to ensure proper access controls.
upvoted 1 times
Selected Answer: D
D looks correct
upvoted 1 times
Selected Answer: D
D looks correct
upvoted 1 times
Selected Answer: D
AM Access Analyzer for S3 alerts you to S3 buckets that are configured to allow access to anyone on the internet or other AWS accounts,
including AWS accounts outside of your organization.
upvoted 1 times
When reviewing an at-risk bucket in IAM Access Analyzer for S3, you can block all public access to the bucket with a single click. We
recommend that you block all access to your buckets unless you require public access to support a specific use case. Before you block all public
access, ensure that your applications will continue to work correctly without public access.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-analyzer.html
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 98/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: D
"IAM Access Analyzer for S3 might show that a bucket has read or write access provided through a bucket access control list (ACL), a bucket
policy, a Multi-Region Access Point policy, or an access point policy...IAM Access Analyzer for S3 is available at no extra cost on the Amazon S3
console."
Reference: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-analyzer.html
upvoted 3 times
What is the best resource for a user to find compliance-related information and reports about AWS?
A. AWS Artifact
B. AWS Marketplace
C. Amazon Inspector
D. AWS Support
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
"AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to security
and compliance reports from AWS and ISVs who sell their products on AWS Marketplace."
Reference: https://aws.amazon.com/artifact/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 99/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service enables companies to deploy an application close to end users?
A. Amazon CloudFront
C. AWS AppSync
D. Amazon Route 53
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
"Amazon CloudFront speeds up distribution of your static and dynamic web content, such as .html, .css, .php, image, and media files. When
users request your content, CloudFront delivers it through a worldwide network of edge locations that provide low latency and high
performance."
Reference: https://docs.aws.amazon.com/cloudfront/
upvoted 2 times
Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?
A. Route table
D. Amazon VPC
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
"Improve application availability, performance, and security using the AWS global network"
Reference: https://aws.amazon.com/global-accelerator/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 100/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. Amazon S3
D. Amazon FSx
Correct Answer: A
Selected Answer: A
S3 = Object Storage
upvoted 1 times
answer A: s3
upvoted 1 times
Selected Answer: A
A looks correct
upvoted 1 times
Selected Answer: A
"S3 Standard offers high durability, availability, and performance object storage for frequently accessed data."
Reference: https://aws.amazon.com/s3/storage-classes/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 101/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?
A. Database backups
Correct Answer: D
Selected Answer: D
D. AWS provides the infrastructure and services (like EC2) that include a range of Amazon Machine Images (AMIs) with pre-installed operating
systems. This means AWS is responsible for ensuring that these AMIs are available and that the underlying infrastructure to run these instances
is secure and reliable.
The other responsibilities listed - database backups (A), database software patches (B), and operating system patches (C) - are under the purview
of the customer when using Amazon EC2 instances.
upvoted 5 times
Selected Answer: D
Seems like a tricky one, nonetheless I would go for "D" since its AWS responsibility to prepare/install the OS overall on an instance then the rest
is the customer's responsibility.
upvoted 1 times
Customers that deploy an Amazon EC2 instance are responsible for management of the guest operating system (including updates and security
patches)...
upvoted 1 times
Selected Answer: A
Selected Answer: A
No correct answer
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 102/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
GPT:
When a company hosts its databases on Amazon EC2 (Elastic Compute Cloud) instances, the responsibility model followed is the shared
responsibility model. In this model, AWS is responsible for the infrastructure layer, while the customer is responsible for the management of the
operating system and above, including databases.
C. Operating system patches: This is the responsibility that belongs to AWS. When using EC2 instances, AWS takes care of the infrastructure
layer, which includes the physical hardware, the network, and the facilities that run the AWS Cloud. However, the customer is responsible for
managing the operating system installed on the EC2 instances. This includes applying operating system patches.
upvoted 1 times
Selected Answer: D
by eliminating A,B,C
upvoted 1 times
Selected Answer: D
Selected Answer: C
c is correct
upvoted 2 times
D. AWS provides the infrastructure and services (like EC2) that include a range of Amazon Machine Images (AMIs) with pre-installed operating
systems. This means AWS is responsible for ensuring that these AMIs are available and that the underlying infrastructure to run these instances
is secure and reliable.
The other responsibilities listed - database backups (A), database software patches (B), and operating system patches (C) - are under the purview
of the customer when using Amazon EC2 instances.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 103/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following are advantages of moving to the AWS Cloud? (Choose two.)
A. The ability to turn over the responsibility for all security to AWS.
Correct Answer: BD
Selected Answer: BD
Selected Answer: BD
BD look correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 104/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service is a hybrid cloud storage service that provides on-premises users access to virtually unlimited cloud storage?
A. AWS DataSync
B. Amazon S3 Glacier
Correct Answer: C
Selected Answer: C
https://aws.amazon.com/storagegateway/
AWS Storage Gateway is a set of hybrid cloud storage services that provide on-premises access to virtually unlimited cloud storage.
upvoted 1 times
C is correct
"Bridge between on-premise data and cloud
data in S3
• Hybrid storage service to allow onpremises
to seamlessly use the AWS
Cloud"
upvoted 1 times
AWS Storage Gateway is a hybrid cloud storage service that enables on-premises applications to seamlessly access AWS Cloud-based storage.
It provides a local cache for frequently accessed data to ensure low-latency access, while also storing data in the cloud for durability and
scalability.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 105/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company plans to migrate to AWS and wants to create cost estimates for its AWS use cases.
Which AWS service or tool can the company use to meet these requirements?
B. Amazon CloudWatch
D. AWS Budgets
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
"AWS Pricing Calculator is a web-based planning tool that you can use to create estimates for your AWS use cases. You can use it to model your
solutions before building them, explore the AWS service price points, and review the calculations behind your estimates. You can use it to help
you plan how you spend, find cost saving opportunities, and make informed decisions when using Amazon Web Services."
Reference: https://docs.aws.amazon.com/pricing-calculator/latest/userguide/what-is-pricing-calculator.html
upvoted 1 times
Which tool should a developer use to integrate AWS service features directly into an application?
B. AWS CodeDeploy
C. AWS Lambda
D. AWS Batch
Correct Answer: A
Selected Answer: A
https://aws.amazon.com/developer/tools/
upvoted 1 times
Selected Answer: A
A looks correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 106/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following is a recommended design principle of the AWS Well-Architected Framework?
Correct Answer: C
Selected Answer: C
Selected Answer: C
The answer is C
Learn from all operational failures: Drive improvement through lessons learned from all operational events and failures. Share what is learned
across teams and through the entire organization.
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 107/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:
A. restricted access.
B. as-needed access.
D. token access.
Correct Answer: C
Selected Answer: C
C is corecctly.
https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#grant-least-privilege
upvoted 1 times
Selected Answer: C
Selected Answer: D
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 108/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or tool can be used to set up a firewall to control traffic going into and coming out of an Amazon VPC subnet?
A. Security group
B. AWS WAF
D. Network ACL
Selected Answer: D
Selected Answer: A
To control traffic going into and coming out of an Amazon Virtual Private Cloud (VPC) subnet, you can use a combination of security groups and
network access control lists (Network ACLs). However, specifically for setting up a firewall-like control at the instance level, you would use
security groups.
upvoted 1 times
Selected Answer: D
Selected Answer: D
Selected Answer: D
Selected Answer: D
GPT:
To set up a firewall to control traffic going into and coming out of an Amazon VPC subnet, the most appropriate AWS service or tool is:
D. Network ACL (Network Access Control List): Network ACLs act as a firewall for controlling traffic into and out of subnets within an Amazon
VPC. They provide a layer of security at the subnet level by allowing you to specify both inbound and outbound traffic rules. These rules can
allow or deny traffic based on protocol, source IP address, destination IP address, and port number.
upvoted 1 times
Selected Answer: D
Cannot be C:
AWS Firewall Manager is a security management service that allows you to centrally configure and manage firewall rules across your accounts
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 109/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
and applications in AWS Organizations. As new applications are created, Firewall Manager makes it easier to bring new applications and
resources into compliance by enforcing a common set of security rules.
therefore the only valid answer is D as it pertains to subnets (VPC)
upvoted 2 times
Selected Answer: A
Security groups act as a virtual firewall for your instances, controlling inbound and outbound traffic at the instance level in an Amazon VPC. They
are the most appropriate choice for controlling traffic within a subnet.
upvoted 1 times
Selected Answer: D
Selected Answer: D
D is correct
upvoted 1 times
Helps to protect all resources of a particular type, such as all Amazon CloudFront distributions
Allows you to subscribe all member accounts in an AWS Organizations organization to AWS Shield Advanced, and automatically subscribes new
in-scope accounts that join the organization
Allows you to apply security group rules to all member accounts or specific subsets of accounts in an AWS Organizations organization, and
automatically applies the rules to new in-scope accounts that join the organization
Lets you use your own rules, or purchase managed rules from AWS Marketplace
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 110/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to operate a data warehouse to analyze data without managing the data warehouse infrastructure.
A. Amazon Aurora
C. AWS Lambda
D. Amazon RDS
Correct Answer: B
Selected Answer: B
"Amazon Redshift Serverless makes it easy to run analytics workloads of any size without having to manage data warehouse infrastructure."
Reference: https://aws.amazon.com/redshift/redshift-serverless/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 111/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
How does AWS Cloud computing help businesses reduce costs? (Choose two.)
A. AWS charges the same prices for services in every AWS Region.
C. AWS offers discounts for Amazon EC2 instances that remain idle for more than 1 week.
D. AWS does not charge for data sent from the AWS Cloud to the internet.
E. AWS eliminates many of the costs of building and maintaining on-premises data centers.
Correct Answer: BE
Selected Answer: BE
BE are correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 112/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to grant users in one AWS account access to resources in another AWS account. The users do not currently have permission to
A. IAM group
B. IAM role
C. IAM tag
Correct Answer: B
Selected Answer: B
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html
upvoted 2 times
Selected Answer: B
IAM role
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 113/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
c is correct answer
upvoted 1 times
Selected Answer: C
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
C correct
upvoted 1 times
AWS is responsible for maintaining the physical and environmental controls of its data centers, including the security and reliability of the
infrastructure. This includes aspects such as power, cooling, and physical security
upvoted 1 times
Selected Answer: D
DDDDDD
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 114/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: C
Selected Answer: C
Selected Answer: C
The words: "Infrastructure" and "physical" are ALWAYS a good clue to AWS responsibility.
upvoted 1 times
Selected Answer: C
C is the answer.
The words: "Infrastructure" and "physical" are ALWAYS a good clue to AWS responsibility.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 115/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to automate infrastructure deployment by using infrastructure as code (IaC). The company wants to scale production stacks so
A. Amazon CloudWatch
B. AWS Config
D. AWS CloudFormation
Correct Answer: D
D looks correct
upvoted 2 times
"AWS CloudFormation gives you an easy way to model a collection of related AWS and third-party resources, provision them quickly and
consistently, and manage them throughout their lifecycles, by treating infrastructure as code. A CloudFormation template describes your desired
resources and their dependencies so you can launch and configure them together as a stack. You can use a template to create, update, and
delete an entire stack as a single unit, as often as you need to, instead of managing resources individually. You can manage and provision stacks
across multiple AWS accounts and AWS Regions."
Reference: https://aws.amazon.com/cloudformation/features/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 116/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which option is an AWS Cloud Adoption Framework (AWS CAF) platform perspective capability?
A. Data architecture
B. Data protection
C. Data governance
D. Data science
Selected Answer: A
Data architecture is a subfunction of the platform perspective. It helps companies plan and implement the architecture of their cloud
environment, including selecting the right cloud services, defining data models, and implementing data storage and processing.
upvoted 1 times
Selected Answer: A
Explanation: https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/platform-perspective.html
upvoted 1 times
Selected Answer: C
Many people here is saying architecture = platform. I wouldn't disagree, nonetheless I think this is a tricky one and is making you to select the
most obvious one, in this case the right answer would be "Data Governance".
upvoted 1 times
Selected Answer: A
Selected Answer: C
Governance is correct
upvoted 2 times
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 117/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: A
Platform perspective helps you build an enterprise-grade, scalable, hybrid cloud platform, modernize existing workloads, and implement new
cloud-native solutions.
This includes DATA ARCHITECTURE
https://abhi0751.medium.com/aws-cloud-adoption-framework-aws-caf-a512b89dbcba
upvoted 1 times
Selected Answer: A
Selected Answer: A
https://abhi0751.medium.com/aws-cloud-adoption-framework-aws-caf-a512b89dbcba
upvoted 1 times
Which AWS best practice ensures the MOST cost-effective architecture for the workload?
A. Loose coupling
B. Rightsizing
C. Caching
D. Redundancy
Correct Answer: B
Selected Answer: B
B looks correct
upvoted 1 times
Selected Answer: B
Right sizing is the process of matching instance types and sizes to your workload performance and capacity requirements at the lowest possible
cost.
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 118/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. The
company wants to use AWS services for the backups without changing its existing backup workflows.
Which AWS service should the company use to meet these requirements?
D. AWS Lambda
Correct Answer: B
Selected Answer: B
Use Tape Gateway to replace physical tapes on premises with virtual tapes on AWS—reducing your data storage costs without changing your
tape-based backup workflows. Tape Gateway supports all leading backup applications and caches virtual tapes on premises for low-latency data
access.
https://aws.amazon.com/storagegateway/vtl/#:~:text=Use%20Tape%20Gateway%20to%20replace,for%20low%2Dlatency%20data%20access
.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 119/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom
A. Cost Explorer
B. AWS Budgets
Selected Answer: B
Q: How many alerts and subscribers can I add for each budget?
For each budget, you are allowed to create up to five alerts. Each alert can be sent to 10 email subscribers and/or be published to an SNS topic.
upvoted 1 times
Selected Answer: B
B is Correct
upvoted 1 times
Selected Answer: B
Selected Answer: B
B is OK
upvoted 1 times
Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom
alerts when their costs or usage exceed established thresholds?
ChatGPT
The AWS tool that provides users with the ability to plan their service usage, service costs, and instance reservations, and also allows them to set
custom alerts for cost and usage thresholds is AWS Budgets. AWS Budgets is a service within the AWS Management Console that helps users
set custom cost and usage budgets that alert them when they exceed their thresholds. This tool is useful for monitoring and controlling costs
associated with various AWS resources and services.
upvoted 1 times
Budgets
upvoted 1 times
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
You can also set alerts based on your RI or Savings Plans Utilization and Coverage using AWS Budgets.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 120/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
upvoted 1 times
Selected Answer: B
Selected Answer: B
B. AWS Budgets
upvoted 2 times
Selected Answer: B
"Using AWS Budgets, you can set a budget that alerts you when you exceed (or are forecasted to exceed) your budgeted cost or usage amount.
You can also set alerts based on your RI or Savings Plans Utilization and Coverage using AWS Budgets."
https://aws.amazon.com/aws-cost-management/aws-budgets/faqs/
upvoted 2 times
"With AWS Budgets, set custom budgets to track your costs and usage, and respond quickly to alerts received from email or SNS notifications if
you exceed your threshold."
Reference: https://aws.amazon.com/aws-cost-management/aws-budgets/
upvoted 3 times
Which tasks are the customer’s responsibility, according to the AWS shared responsibility model? (Choose two.)
Correct Answer: BC
BC are correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 121/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A developer has been hired by a large company and needs AWS credentials.
Which are security best practices that should be followed? (Choose two.)
A. Grant the developer access to only the AWS resources needed to perform the job.
B. Share the AWS account root user credentials with the developer.
D. Configure a password policy that ensures the developer’s password cannot be changed.
Correct Answer: AE
Selected Answer: AE
AE ARE COORECT
upvoted 2 times
Selected Answer: AE
Selected Answer: AD
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 122/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has multiple AWS accounts that include compute workloads that cannot be interrupted. The company wants to obtain billing discounts
A. Resource tagging
B. Consolidated billing
C. Pay-as-you-go pricing
D. Spot Instances
Selected Answer: B
B is correct
upvoted 1 times
B is correct
upvoted 1 times
Selected Answer: B
B. Consolidated billing.
Consolidated billing allows you to combine multiple AWS accounts and aggregate the usage and spending across those accounts. This simplifies
billing and enables you to take advantage of volume discounts, which can lead to cost savings. Each account can still maintain its own resource
tagging and pricing options, so it's possible to manage compute workloads in individual accounts as needed.
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 123/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: B
Vote for B
upvoted 1 times
Selected Answer: B
You can combine the usage across all accounts in the organization to share the volume pricing discounts
upvoted 1 times
You can use the consolidated billing feature in AWS Organizations to consolidate billing and payment for multiple AWS accounts. You can
combine the usage across all accounts in the organization to share the volume pricing discounts, Reserved Instance discounts, and Savings
Plans. This can result in a lower charge for your project, department, or company than with individual standalone accounts.
https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/consolidated-billing.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 124/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure.
A. Security groups
C. IAM roles
Selected Answer: A
It is asking how to ensure access granted is secure- so Security groups is the right answer.
upvoted 1 times
For allowing applications running on an Amazon EC2 instance to make secure calls to other AWS services, the recommended AWS service or
feature is:
C. IAM roles
IAM (Identity and Access Management) roles provide a secure way to grant permissions to AWS services and resources. In this scenario, you can
create an IAM role with the necessary permissions for the EC2 instance to access other AWS services. Then, you can associate the IAM role with
the EC2 instance.
Option A (Security groups) is used for controlling inbound and outbound traffic to and from an EC2 instance, but it's not directly related to
granting permissions to AWS services.
upvoted 2 times
Selected Answer: C
C - IAM Roles. Roles are used to allow users or services access to other AWS resources.
upvoted 2 times
C. IAM roles
upvoted 1 times
Selected Answer: C
AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. With IAM, you can
centrally manage permissions that control which AWS resources users can access.
You can use IAM features to securely provide credentials for applications that run on EC2 instances. These credentials provide permissions for
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 125/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
"You can use roles to delegate access to users, applications, or services that don't normally have access to your AWS resources."
Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html
upvoted 4 times
A company wants a fully managed Windows file server for its Windows-based applications.
A. Amazon FSx
D. Amazon EMR
Correct Answer: A
A is correct answer
https://aws.amazon.com/fsx/windows/
upvoted 1 times
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 126/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS Storage Gateway type should the company use to meet this requirement?
A. Tape Gateway
B. Volume Gateway
Correct Answer: D
Selected Answer: C
C is correctly.
upvoted 1 times
Selected Answer: D
Selected Answer: C
Amazon FSx File Gateway provides a seamless way to integrate on-premises NFS storage with Amazon FSx for Windows File Server, allowing
you to move your NFS workload to AWS. It provides a file interface to objects stored in Amazon S3, making it suitable for scenarios where you
want to use Amazon S3 as the backend storage but present it to your on-premises applications using the NFS protocol.
Options A (Tape Gateway) and B (Volume Gateway) are more related to different use cases, such as integrating with tape storage or block
storage.
Option D (Amazon S3 File Gateway) is designed for integrating on-premises file-based applications with Amazon S3, but it might not be the best
fit for an NFS workload.
upvoted 2 times
Selected Answer: C
C is correct in my opinion
upvoted 2 times
Selected Answer: D
Amazon S3 File Gateway provides a seamless way to connect to the cloud in order to store application data files and backup images as durable
objects in Amazon S3 cloud storage. Amazon S3 File Gateway offers SMB or NFS-based access to data in Amazon S3 with local caching.
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 127/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
https://aws.amazon.com/storagegateway/file/s3/
upvoted 3 times
GPT:
For a company looking to migrate its NFS (Network File System) on-premises workload to AWS, the appropriate AWS Storage Gateway type to
use is:
C. Amazon FSx File Gateway: Amazon FSx File Gateway provides on-premises applications with a seamless way to access fully managed file
shares in the cloud using the industry-standard NFS and SMB protocols. It allows you to store and retrieve files in Amazon FSx for Windows File
Server and Amazon FSx for Lustre, making it suitable for NFS on-premises workloads that need to be migrated to AWS. FSx File Gateway
optimizes the transfer of data to AWS, providing low-latency access to data in AWS for on-premises applications.
upvoted 1 times
Selected Answer: C
https://aws.amazon.com/storagegateway/file/fsx/
upvoted 1 times
Amazon S3 File Gateway offers SMB or NFS-based access to data in Amazon S3 with local caching. It can be used for on-premises data-
intensive Amazon EC2-based applications that need file protocol access to S3 object storage.
upvoted 3 times
In summary, if the requirement is to migrate an NFS workload to AWS, "Amazon FSx File Gateway" is the preferred option. If the workload used
SMB, then "Amazon S3 File Gateway" could be considered.
upvoted 2 times
"Amazon S3 File Gateway provides a seamless way to connect to the cloud in order to store application data files and backup images as durable
objects in Amazon S3 cloud storage. Amazon S3 File Gateway offers SMB or NFS-based access to data in Amazon S3 with local caching. It can
be used for on-premises data-intensive Amazon EC2-based applications that need file protocol access to S3 object storage."
Reference: https://aws.amazon.com/storagegateway/file/s3/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 128/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources.
A. Amazon CloudWatch
B. Amazon Inspector
C. AWS CloudTrail
D. AWS IAM
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
"CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage. CloudTrail logs,
continuously monitors, and retains account activity related to actions across your AWS infrastructure, giving you control over storage, analysis,
and remediation actions."
Reference: https://aws.amazon.com/cloudtrail/faqs/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 129/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in an
Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to grow for years.
What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?
A. Spot Instances
B. On-Demand Instances
C. Savings Plans
D. Dedicated Hosts
Selected Answer: C
C for sure.
upvoted 1 times
Selected Answer: C
C is correct answer
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html
upvoted 1 times
Selected Answer: C
Answer C
upvoted 2 times
Savings Plans are a flexible pricing model that offer low prices on EC2 usage, in exchange for a commitment to a consistent amount of usage,
measured in dollars per hour, for a term of 1 or 3 years. Savings Plans can reduce your EC2 costs by up to 72% compared to On-Demand prices.
upvoted 1 times
Selected Answer: C
Key phrases to support C - Savings Plans: "uninterruptible application" and "usage is expected to continue to grow for years."
Selected Answer: C
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 130/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: B
Selected Answer: C
uninterruptible application
upvoted 1 times
A company wants an AWS service to provide product recommendations based on its customer data.
A. Amazon Polly
B. Amazon Personalize
C. Amazon Comprehend
D. Amazon Rekognition
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
"Amazon Personalize accelerates your digital transformation with ML, making it easier to integrate personalized recommendations into existing
websites, applications, email marketing systems, and more."
Reference: https://aws.amazon.com/personalize/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 131/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is planning its migration to the AWS Cloud. The company is identifying its capability gaps by using the AWS Cloud Adoption
Which phase of the cloud transformation journey includes these identification activities?
A. Envision
B. Align
C. Scale
D. Launch
Correct Answer: B
Selected Answer: B
B is correct answer
"Identify capability gaps and cross-organizational dependencies"
https://aws.amazon.com/cloud-adoption-framework/
upvoted 2 times
Selected Answer: B
Selected Answer: B
B is correct
"Align – identify capability gaps across the 6 AWS CAF Perspectives
which results in an Action Plan."
upvoted 1 times
Selected Answer: B
"Align phase focuses on identifying capability gaps across the six AWS CAF perspectives, identifying cross-organizational dependencies, and
surfacing stakeholder concerns and challenges."
Reference: https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/your-cloud-transformation-journey.html
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 132/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A social media company wants to protect its web application from common web exploits such as SQL injections and cross-site scripting.
A. Amazon Inspector
B. AWS WAF
C. Amazon GuardDuty
D. Amazon CloudWatch
Correct Answer: B
Selected Answer: B
B looks correct
upvoted 1 times
Selected Answer: B
"AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that allow, block, or
monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI
strings, SQL injection and cross-site scripting."
References: https://aws.amazon.com/waf/faqs/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 133/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images?
Correct Answer: A
Selected Answer: A
EC2 Image Builder is a fully-managed AWS service that makes it easier to automate the creation, management, and deployment of customized,
secure, and up-to-date “golden” server images that are pre-installed and pre-configured with software and settings to meet specific IT standards.
upvoted 1 times
A is correct
Used to automate the creation of Virtual Machines or container images
• => Automate the creation, maintain, validate and test EC2 AMIs
• Can be run on a schedule (weekly, whenever packages are updated, etc…)
• Free service (only pay for the underlying resources)
upvoted 1 times
Selected Answer: A
"EC2 Image Builder simplifies the creation, maintenance, validation, sharing, and deployment of Linux or Windows images for use with Amazon
EC2 and on-premises."
Reference: https://aws.amazon.com/image-builder/faqs/
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 134/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities.
A. Amazon GuardDuty
B. Amazon Inspector
C. Amazon Detective
D. Amazon Cognito
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
"Amazon Inspector is an automated vulnerability management service that continually scans Amazon Elastic Compute Cloud (EC2), AWS
Lambda functions, and container workloads for software vulnerabilities and unintended network exposure."
Reference: https://aws.amazon.com/inspector/faqs/
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 135/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to perform data processing once a week that typically takes about 5 hours to complete.
Which AWS service should the company use for this workload?
A. AWS Lambda
B. Amazon EC2
C. AWS CodeDeploy
D. AWS Wavelength
Correct Answer: B
Selected Answer: B
The best AWS service for a workload that needs to be processed once a week for about 5 hours is Amazon EC2.
AWS Lambda is a serverless computing service that runs your code without provisioning or managing servers. However, Lambda functions have
a maximum execution time of 15 minutes. Therefore, Lambda is not suitable for workloads that need to run for longer than 15 minutes.
Amazon EC2 is a scalable computing service that provides instances with varying capabilities and pricing options. You can choose an EC2
instance that is right for your data processing job and then terminate the instance when the job is complete. This will help you to save money on
your AWS bill.
upvoted 8 times
https://www.youtube.com/@ExamTricksTips2023
upvoted 2 times
B is correct answer
upvoted 1 times
Selected Answer: B
AWS Lambda functions can be configured to run up to 15 minutes per execution. You can set the timeout to any value between 1 second and 15
minutes.
https://aws.amazon.com/lambda/faqs/?nc1=h_ls
upvoted 3 times
Selected Answer: A
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 136/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?
B. AWS CloudTrail
Correct Answer: C
https://www.youtube.com/@ExamTricksTips2023
upvoted 4 times
Selected Answer: C
VPC flow logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow
logs data can be published to either Amazon CloudWatch Logs or Amazon S3. You can monitor your VPC flow logs to gain operational visibility
about your network dependencies and traffic patterns, detect anomalies and prevent data leakage, or troubleshoot network connectivity and
configuration issues.
https://aws.amazon.com/vpc/faqs/#:~:text=VPC%20flow%20logs%20is%20a,network%20interfaces%20in%20your%20VPC.
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 137/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to design a centralized storage system to manage the configuration data and passwords for its critical business applications.
Which AWS service or capability will meet these requirements MOST cost-effectively?
C. AWS Config
D. Amazon S3
Correct Answer: A
Selected Answer: B
The best choice for securely managing sensitive information like passwords and configuration data is AWS Secrets Manager (Option B).
upvoted 1 times
Selected Answer: B
Option B, AWS Secrets Manager, is a suitable choice for managing sensitive information like passwords securely. Both AWS Systems Manager
Parameter Store and AWS Secrets Manager can be used for storing configuration data and sensitive information. The decision between the two
often depends on specific requirements and features.
If your primary focus is on cost-effectiveness, AWS Systems Manager Parameter Store may be preferred as it has a free tier, making it potentially
more cost-effective for simple use cases. AWS Secrets Manager has additional features specifically designed for managing secrets, such as
automatic rotation, and it may be more suitable for complex secret management scenarios.
In summary, both options could meet the requirements, but AWS Systems Manager Parameter Store may be more cost-effective for certain use
cases
upvoted 1 times
Selected Answer: A
Option B, AWS Secrets Manager, is a suitable choice for managing sensitive information like passwords securely. Both AWS Systems Manager
Parameter Store and AWS Secrets Manager can be used for storing configuration data and sensitive information. The decision between the two
often depends on specific requirements and features.
If your primary focus is on cost-effectiveness, AWS Systems Manager Parameter Store may be preferred as it has a free tier, making it potentially
more cost-effective for simple use cases. AWS Secrets Manager has additional features specifically designed for managing secrets, such as
automatic rotation, and it may be more suitable for complex secret management scenarios.
In summary, both options could meet the requirements, but AWS Systems Manager Parameter Store may be more cost-effective for certain use
cases
upvoted 2 times
Selected Answer: A
Parameter Store, a capability of AWS Systems Manager, provides secure, hierarchical storage for configuration data management and secrets
management.
upvoted 1 times
The most cost-effective AWS service for managing configuration data and passwords for critical business applications is B. AWS Secrets
Manager.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 138/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: A
A is correct answer
"manage your configuration data, whether plain-text data such as database strings or secrets such as passwords"
https://aws.amazon.com/systems-manager/features/
upvoted 1 times
if your use case involves non-sensitive configuration data and you want a cost-effective solution, AWS Systems Manager Parameter Store might
be the preferred choice. If you need additional security features for sensitive information, AWS Secrets Manager could be more suitable despite
potentially higher costs.
upvoted 4 times
"Parameter Store, a capability of AWS Systems Manager, provides secure, hierarchical storage for configuration data management and secrets
management. You can store data such as passwords, database strings, Amazon Machine Image (AMI) IDs, and license codes as parameter
values."
Reference: https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html
upvoted 3 times
Selected Answer: A
A is correct...
AWS Systems Manager provides a centralized store to manage your configuration data, whether plain-text data such as database strings or
secrets such as passwords. This allows you to separate your secrets and configuration data from your code.
https://aws.amazon.com/systems-
manager/features/#:~:text=AppConfig%20feature%20page.-,Parameter%20Store,configuration%20data%20from%20your%20code.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 139/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company plans to deploy containers on AWS. The company wants full control of the compute resources that host the containers. Which AWS
B. AWS Fargate
C. Amazon EC2
Correct Answer: C
Selected Answer: C
Explanation: Amazon EC2 is a fully managed service for creating and managing virtual computers (EC2 instances) in the AWS Cloud. Companies
that want to have full control over the compute resources that host their containers can use EC2 to provision and configure their own EC2
instances.
upvoted 1 times
d is correct
upvoted 1 times
Selected Answer: C
Answer C - If you want full control over the compute resources, including the underlying EC2 instances, Amazon EC2 is the most suitable option.
A is wrong - If you prefer a managed Kubernetes service with some abstraction of infrastructure details, then Amazon EKS is a good choice.
B is out of picture - AWS Fargate is a serverless compute engine for containers, abstracting away the need to manage the underlying
infrastructure but providing less fine-grained control compared to EC2.
D is wrong as there is abstraction (PAAS) preventing EC2 access & Full control - Amazon ECS (Elastic Container Service) is a container
orchestration service similar to EKS, but designed to work with its own container management system rather than Kubernetes. It also abstracts
some infrastructure details.
upvoted 3 times
Selected Answer: C
GPT:
For a company that plans to deploy containers on AWS and wants full control of the compute resources that host the containers, the most
suitable AWS service is:
C. Amazon EC2: Amazon Elastic Compute Cloud (EC2) provides scalable computing capacity in the AWS cloud. By using Amazon EC2, the
company can have full control over the virtual servers (instances), including the choice of instance type, configuration, and the underlying host
system. EC2 allows for the deployment of containerized applications, where the company can manage the orchestration itself, either manually or
by using container orchestration tools like Kubernetes or Docker Swarm.
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 140/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: D
Amazon ECS with EC2 Launch Type: ECS allows you to run containers on AWS. When you use the EC2 launch type with ECS, you have full
control over the underlying EC2 instances that host your containers. This means you can choose the instance types, configure the instances, and
manage the scaling and monitoring of these instances as per your requirements.
upvoted 1 times
Selected Answer: C
C. Amazon EC2
Amazon EC2 (Elastic Compute Cloud) provides virtual machines (EC2 instances) that allow you to have full control over the compute resources.
When you deploy containers on EC2 instances, you have the flexibility to configure the instances according to your specific requirements,
including the type of instance, storage, networking, and other parameters.
upvoted 2 times
In both ECS and EKS, you define and manage the infrastructure (EC2 instances) where your containers run, giving you control over the compute
resources. The choice between ECS and EKS depends on whether you prefer a fully managed service (ECS) or if you want to manage the
Kubernetes control plane yourself (EKS).
upvoted 2 times
D looks correct
upvoted 1 times
Selected Answer: D
Amazon ECS
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 141/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to
groups of accounts?
C. AWS CloudFormation
D. AWS Organizations
Correct Answer: D
Selected Answer: D
IAM does not provide the same level of organization and policy management as AWS Organizations.
upvoted 2 times
Selected Answer: D
Yes is D
https://aws.amazon.com/organizations/faqs/
AWS Organizations helps you centrally govern your environment as you scale your workloads on AWS. Whether you are a growing startup or a
large enterprise, Organizations helps you to programmatically create new accounts and allocate resources, simplify billing by setting up a single
payment method for all of your accounts, create groups of accounts to organize your workflows, and apply policies to these groups for
governance. In addition, AWS Organizations is integrated with other AWS services so you can define central configurations, security
mechanisms, and resource sharing across accounts in your organization.
upvoted 1 times
Explanation: AWS Organizations is a service that enables users to group and manage multiple AWS accounts. With AWS Organizations, users
can create new accounts, group accounts, apply policies to account groups, and create policies for the entire organization.
upvoted 1 times
Selected Answer: D
https://aws.amazon.com/organizations/features/
upvoted 2 times
Selected Answer: A
The expectation is to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to groups of accounts. These
are only possible through option A. One of the key phrases is "apply policies". This is definitely not possible with Organizations.
upvoted 3 times
Selected Answer: D
"AWS Organizations provides you with the capability to centrally manage and govern your cloud environment. You can manage and organize
your accounts under a single bill, set central policies and configuration requirements for your entire organization, create custom permissions or
capabilities within the organization, and delegate responsibilities to other accounts so they can manage on behalf of the organization."
Reference: https://aws.amazon.com/organizations/features/
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 142/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
upvoted 1 times
A company wants to store and retrieve files in Amazon S3 for its existing on-premises applications by using industry-standard file system
protocols.
A. AWS DataSync
Correct Answer: C
Amazon S3 File Gateway is a configuration of the AWS Storage Gateway service that provides your applications a file interface to seamlessly
store files as objects in Amazon S3, and access them using industry standard file protocols.
upvoted 1 times
"Amazon S3 File Gateway provides a seamless way to connect to the cloud in order to store application data files and backup images as durable
objects in Amazon S3 cloud storage. Amazon S3 File Gateway offers SMB or NFS-based access to data in Amazon S3 with local caching. It can
be used for on-premises data-intensive Amazon EC2-based applications that need file protocol access to S3 object storage."
Reference: https://aws.amazon.com/storagegateway/file/s3/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 143/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature should the company use to meet this requirement?
A. AWS WAF
B. Network ACLs
C. Security groups
Correct Answer: A
AWS WAF
upvoted 1 times
A is correct
"Protects from common attack - SQL injection and Cross-Site Scripting (XSS)"
upvoted 1 times
Selected Answer: A
"AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that allow, block, or
monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI
strings, SQL injection and cross-site scripting."
References: https://aws.amazon.com/waf/faqs/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 144/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants a unified tool to provide a consistent method to interact with AWS services.
A. AWS CLI
C. AWS Cloud9
Correct Answer: A
Selected Answer: A
"The AWS Command Line Interface (AWS CLI) is a unified tool to manage your AWS services. With just one tool to download and configure, you
can control multiple AWS services from the command line and automate them through scripts."
Reference: https://aws.amazon.com/cli/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 145/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service
Which AWS service can the company use to meet these requirements?
A. AWS Shield
B. AWS WAF
Correct Answer: C
Explanation: AWS Trusted Advisor is a service that helps users secure and optimize their AWS environments. Trusted Advisor offers a range of
recommendations in five categories:
C is correct
Analyze your AWS accounts and provides
recommendation on 5 categories
• Cost optimization
• Performance
• Security
• Fault tolerance
• Service limits
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 146/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which perspective in the AWS Cloud Adoption Framework (AWS CAF) includes capabilities for configuration management and patch
management?
A. Platform
B. Operations
C. Security
D. Governance
Correct Answer: B
Selected Answer: B
Reference: https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/operations-perspective.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 147/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which Amazon EC2 instance purchasing options meet these requirements MOST cost-effectively? (Choose two.)
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Saving Plans
E. Dedicated Hosts
Correct Answer: BE
Selected Answer: BD
bdbdbd
upvoted 1 times
Selected Answer: BD
Selected Answer: BD
B&D, because it is predictable, non-interruptable (so non-Spot) and most cost-effective (dedicated & on-demand cost more).
upvoted 1 times
B&D is correct
upvoted 1 times
E is not cost-effectively
upvoted 1 times
Selected Answer: BD
uninterruptable
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 148/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Instances
Explanation:
On-Demand Instances are the most expensive option, as you pay for every hour you use them. Reserved Instances are prepaid instances that
can offer you significant discounts on On-Demand prices. You can buy Reserved Instances for one or three years and get discounts of up to 75%
on On-Demand prices.
upvoted 1 times
Selected Answer: A
A.) On-Demand: per hour or per second, is not needed any prior contract, build a baseline. Ideal for short-term, irregular workloads that can’t be
interrupted
upvoted 1 times
A is correct
• On-Demand Instances – short workload, predictable pricing, pay by second
upvoted 1 times
Selected Answer: A
Selected Answer: A
On Demand (because Spot is unintteruptable and Reserved is expensive for the 1 year or 3 year contract)
upvoted 1 times
Selected Answer: B
B is correct.
The keyword is uninterruptable and 24 hours.
Amazon EC2 Reserved Instances (RI) provide a significant discount (up to 72%) compared to On-Demand pricing.
Savings Plans is a flexible pricing model that can help you reduce your bill by up to 72% compared to On-Demand prices, in exchange for a
commitment to a consistent amount of usage (measured in $/hour) for a 1- or 3-year term.
The best solution for this questions is using RI + Savings Plans
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 149/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: A
C - Spot Instances is NOT correct because one of the requirements is "uninterruptible workload." "Spot Instances are a cost-effective choice if
you can be flexible about when your applications run and if your applications can be interrupted."
Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html
B - Reserved Instances is also NOT correct because the workload only "runs once a year for 24 hours." Why would you commit to either a 1 year
or 3 year plan only to run it once?
The correct answer is A - On-Demand Instances. AWS "recommends that you use On-Demand Instances for applications with short-term,
irregular workloads that cannot be interrupted."
Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-on-demand-instances.html
upvoted 3 times
Selected Answer: A
Selected Answer: B
because uninterruptable
upvoted 2 times
Which option is a shared responsibility between AWS and its customers under the AWS shared responsibility model?
C. Patch management
Correct Answer: C
C is correct
upvoted 1 times
Shared Controls
"AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and
applications."
Reference: https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 150/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to migrate its on-premises workloads to the AWS Cloud. The company wants to separate workloads for chargeback to different
departments.
Which AWS services or features will meet these requirements? (Choose two.)
A. Placement groups
B. Consolidated billing
C. Edge locations
D. AWS Config
Correct Answer: BE
Selected Answer: BE
B. Consolidated Billing
Consolidated billing is a feature of AWS Organizations that allows you to combine billing for multiple AWS accounts. With consolidated billing,
each department can have its own AWS account for tracking and managing its resources separately, while the company enjoys the convenience
of a single payment method for all these accounts. This setup makes it easier to track costs and implement chargeback mechanisms.
E. Multiple AWS Accounts
Creating multiple AWS accounts, one for each department, is an effective way to segregate resources, manage permissions, and track costs
separately. This approach enhances security by limiting the scope of access and impact of changes, and it simplifies the process of attributing
costs to the right department. Combined with consolidated billing, it provides both organizational flexibility and centralized financial control.
upvoted 1 times
Which task is a responsibility of AWS, according to the AWS shared responsibility model?
A. Enable client-side encryption for objects that are stored in Amazon S3.
B. Configure IAM security policies to comply with the principle of least privilege.
Correct Answer: D
"AWS responsibility “Security of the Cloud” - AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS
Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services."
Reference: https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 151/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
B. Pay-as-you-go pricing
Selected Answer: A
Cloud computing gives businesses the opportunity to trade variable costs for fixed costs. This means that businesses only pay for the resources
they actually use. This can lead to significant cost savings as businesses no longer need to invest in hardware, software, and the maintenance of
data centers.
The other options are not advantages of using AWS for cloud computing:
Pay-as-you-go pricing is a feature of cloud computing, but it is not always an advantage. Pay-as-you-go pricing can lead to higher costs if
businesses are not able to utilize their resources efficiently.
upvoted 1 times
Selected Answer: B
Obviously B, pay-as-you-go pricing. It is the same in every cloud platform e.g. Azure, GCP, AWS.
Come on, we pay for this site here and they make so obvious mistakes... :(
upvoted 2 times
The answer is given In the doc "Six advantages of cloud computing." The benefit from massive economies of scale is pay-as-you-go pricing.
Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 1 times
Selected Answer: A
Pay as you go isn't an option in the "Six advantages of cloud computing" document:
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 152/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: B
Definitely B. Pay-as-you-go.
upvoted 2 times
Trade fixed expense for variable expense and not vice versa, so option B
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 153/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which option is an AWS Cloud Adoption Framework (AWS CAF) business perspective capability?
A. Culture evolution
B. Event management
C. Data monetization
D. Platform architecture
Selected Answer: C
Data Monetization: This falls under the Business Perspective of the AWS CAF, which focuses on capabilities related to the financial aspects of
cloud adoption and the ability to transform data into valuable business insights, products, or services. Data monetization involves strategies to
generate measurable economic benefits from available data sources (including cloud-based data), which aligns with business objectives and
outcomes.
upvoted 2 times
Selected Answer: A
A is the correct answer. Culture evolution: This is a key capability from a business perspective as it involves the necessary cultural changes within
an organization to embrace cloud adoption.
upvoted 2 times
C is correct
upvoted 1 times
Selected Answer: C
Selected Answer: C
Selected Answer: C
Data monetization
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 154/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is assessing its AWS Business Support plan to determine if the plan still meets the company’s needs. The company is considering
Which additional benefit will the company receive with AWS Enterprise Support?
B. Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Which pricing model will interrupt a running Amazon EC2 instance if capacity becomes temporarily unavailable?
A. On-Demand Instances
C. Spot Instances
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 155/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which options are AWS Cloud Adoption Framework (AWS CAF) security perspective capabilities? (Choose two.)
A. Observability
C. Incident response
D. Infrastructure protection
Correct Answer: CD
Selected Answer: CD
https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/security-perspective.html
Infrastructure protection – Validate that systems and services within your workload are protected against unintended and unauthorized access
and potential vulnerabilities
Incident response – Reduce potential harm by effectively responding to security incidents. Quick, effective, and consistent responses to security
incidents will help you reduce potential harm
upvoted 1 times
CD are correct because Observability, Incident & Problem Management and Availability & Continuity are from Operations Perspective.
upvoted 1 times
Selected Answer: CD
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 156/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to run its workload on Amazon EC2 instances for more than 1 year. This workload will run continuously.
Which option offers a discounted hourly rate compared to the hourly rate of On-Demand Instances?
B. Dedicated Hosts
Correct Answer: C
Selected Answer: C
Selected Answer: C
C looks correct
upvoted 1 times
Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity?
A. Agility
B. Elasticity
C. Reliability
D. Durability
Correct Answer: B
Selected Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 157/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS services can a company use to achieve a loosely coupled architecture? (Choose two.)
A. Amazon WorkSpaces
C. Amazon Connect
答案为BE
Correct Answer: BD
Selected Answer: BE
Selected Answer: BE
**B. Amazon Simple Queue Service (Amazon SQS):** SQS is a fully managed message queuing service that enables decoupling of the
components in a distributed system. It allows components to communicate asynchronously, promoting loose coupling.
**E. AWS Step Functions:** Step Functions is a serverless function orchestrator that allows you to coordinate multiple AWS services into
serverless workflows. It helps in creating loosely coupled, flexible systems by defining workflows that connect various services.
Selected Answer: BE
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 158/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?
A. AWS Budgets
D. AWS Organizations
Correct Answer: A
Selected Answer: A
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 159/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company plans to migrate to the AWS Cloud. The company wants to use the AWS Cloud Adoption Framework (AWS CAF) to define and track
Which AWS CAF governance perspective capability will meet these requirements?
A. Benefits management
B. Risk management
Correct Answer: A
Selected Answer: A
The Benefits management capability of the AWS CAF governance perspective is specifically designed to help organizations define, measure, and
track the business outcomes they expect to achieve from their cloud adoption initiatives. This includes identifying and quantifying the expected
benefits, establishing clear ownership and responsibility for achieving those benefits, and establishing processes and metrics to track progress
and measure success.
upvoted 1 times
Selected Answer: C
Governance = How IT aligns to the business strategy. Applications portfolio is part of the IT stuff.
upvoted 1 times
Selected Answer: A
Benefits management
upvoted 1 times
Benefits Management = ensure that the business benefits of your cloud investments are realized and sustained
So, company want to track the outcome of using cloud. This means that company want to know the benefits by using cloud service
upvoted 1 times
Selected Answer: C
Manage and optimize your application portfolio in support of your business strategy.
upvoted 1 times
Selected Answer: C
C is correct
upvoted 2 times
Selected Answer: A
"Benefits management – Ensure that the business benefits associated with your cloud investments are realized and sustained. The success of
your transformation is determined by the resulting business benefits. Clear identification of the desired benefits upfront will allow you to prioritize
your cloud investments and track transformation progress over time. Identify metrics, quantify desired benefits, and communicate to the relevant
stakeholders. Align the timing and life-span of benefits with your strategic goals. Incorporate benefits delivery into a benefits realization roadmap.
Regularly measure realized benefits, evaluate progress against the benefits realization roadmap, and adjust the expected benefits as required."
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 160/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Reference: https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/governance-perspective.html
upvoted 4 times
Selected Answer: C
C is correct
upvoted 2 times
A company needs to quickly and securely move files over long distances between its client and an Amazon S3 bucket.
A. S3 Versioning
B. S3 Transfer Acceleration
C. S3ACLs
D. S3 Intelligent-Tiering
Correct Answer: B
S3 Transfer Acceleration is a feature that utilizes Amazon CloudFront's globally distributed edge locations to accelerate the upload of objects to
an S3 bucket. It optimizes data transfer by using Amazon's backbone network, reducing latency and improving speeds when transferring files
over long distances.
upvoted 1 times
The Benefits management capability within the AWS CAF governance perspective focuses on defining, tracking, and realizing the business
outcomes or benefits that an organization aims to achieve through its cloud adoption and transformation initiatives.
upvoted 1 times
Selected Answer: B
B is correct
Increase transfer speed by transferring file to an AWS edge location
which will forward the data to the S3 bucket in the target region
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 161/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to continuously run an experimental workload on an Amazon EC2 instance and stop the instance after 12 hours.
Which instance purchasing option will meet this requirement MOST cost-effectively?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Instances
Correct Answer: A
Selected Answer: A
Key Sentence " needs to continuously run" - so continuously and most cost effective is On Demand
upvoted 1 times
Selected Answer: A
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 162/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which cloud transformation journey phase of the AWS Cloud Adoption Framework (AWS CAF) focuses on demonstrating how the cloud helps
A. Scale
B. Envision
C. Align
D. Launch
Correct Answer: B
Selected Answer: B
Envision
Identify and prioritize transformation opportunities in line with your strategic objectives. Associating your transformation initiatives with key
stakeholders and measurable business outcomes will help you demonstrate value as you progress through your transformation journey.
upvoted 1 times
Selected Answer: B
https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/your-cloud-transformation-journey.html
upvoted 1 times
The "Scale" phase in the AWS CAF concentrates on demonstrating the value and benefits of the cloud by showcasing how cloud adoption
accelerates and amplifies business outcomes. It involves measuring and evaluating the impact of cloud adoption on the organization's goals,
productivity, efficiency, agility, and innovation.
upvoted 1 times
Selected Answer: B
B is correct
Envision – demonstrate how the Cloud will accelerate business
outcomes by identifying transformation opportunities and create a
foundation for your digital transformation
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 163/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which option is a customer responsibility under the AWS shared responsibility model?
Correct Answer: B
Selected Answer: B
Selected Answer: B
B is correct
upvoted 2 times
A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular
geographic area.
Correct Answer: A
A looks correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 164/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to modernize and convert a monolithic application into microservices. The company wants to move the application to AWS.
A. Rehost
B. Replatform
C. Repurchase
D. Refactor
Correct Answer: D
Selected Answer: D
https://docs.aws.amazon.com/prescriptive-guidance/latest/large-migration-guide/migration-strategies.html
Refactor or re-architect is to convert a monolithic application into microservices.
upvoted 1 times
It should be D. Refactor:
Lift and shift—moving applications to the cloud as-is. This is also sometimes referred to as rehosting. Refactor—modifying applications to better
support the cloud environment.Replatform—moving applications to the cloud without major changes, but taking advantage of benefits of the
cloud environment.Rebuild—rewrite the application from scratch.Replace—retire the application and replace it with a new cloud-native
application.
upvoted 2 times
A systems administrator created a new IAM user for a developer and assigned the user an access key instead of a user name and password. What
Correct Answer: C
Selected Answer: C
C is correct
"Use Access Keys for Programmatic Access (CLI / SDK)"
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 165/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. Amazon CloudFront
B. Availability Zone
C. VPC
D. AWS Outposts
Correct Answer: B
Selected Answer: B
An availability zone consists of multiple data centers, which are all equipped with independent power, cooling and networking infrastructure all
housed in separate facilities. A region can have multiple availability zones, but no availability zones are shared with different regions.
https://www.techtarget.com/searchaws/definition/availability-
zones#:~:text=An%20availability%20zone%20consists%20of,are%20shared%20with%20different%20regions.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 166/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is moving an on-premises data center to the AWS Cloud. The company must migrate 50 petabytes of file storage data to AWS with the
Which AWS service or resource should the company use to meet these requirements?
A. AWS Snowmobile
Correct Answer: A
Selected Answer: A
https://aws.amazon.com/snowmobile/
upvoted 2 times
Selected Answer: A
AWS Snowmobile is the appropriate choice for migrating 50 petabytes of file storage data to AWS with the least possible operational overhead.
Snowmobile is a data transfer service that physically transports massive amounts of data to the AWS Cloud. It is a secure and efficient solution
for extremely large data transfers.
upvoted 2 times
Selected Answer: A
A is correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 167/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-
cost laptops.
Which AWS service will help the company deploy the application without investing in backend infrastructure or high-end client hardware?
B. AWS AppSync
Correct Answer: A
Selected Answer: D
With AWS Elastic Beanstalk, you can quickly deploy and manage applications in the AWS Cloud without worrying about the infrastructure that
runs those applications. AWS Elastic Beanstalk reduces management complexity without restricting choice or control. You simply upload your
application, and AWS Elastic Beanstalk automatically handles the details of capacity provisioning, load balancing, scaling, and application health
monitoring.
https://docs.aws.amazon.com/elastic-beanstalk/
upvoted 1 times
Amazon AppStream 2.0 is a cloud-based desktop streaming service that allows companies to deploy applications and desktops to any device,
including lightweight laptops. AppStream 2.0 handles all of the application's processing and graphics power, so students only need a web
browser on their device.
upvoted 1 times
AWS Elastic Beanstalk = Deploy an application, this service also helps to configure the right computing requirements needed, in this case for
low-cost laptops access.
upvoted 1 times
Selected Answer: D
Selected Answer: D
https://aws.amazon.com/pm/appstream2/?trk=6dbac706-dadd-4b1f-afa5-
85954bacbfb9&sc_channel=ps&ef_id=CjwKCAiA9ourBhAVEiwA3L5RFiJY4ARtsNWWcLSkRMHsjwgl4WXSqsPAzmFVILR4OY5gtm85MgFV-
BoCePcQAvD_BwE:G:s&s_kwcid=AL!4422!3!651751060242!e!!g!!amazon%20appstream%202.0!19852662218!145019220417&gclid=CjwKCAiA
9ourBhAVEiwA3L5RFiJY4ARtsNWWcLSkRMHsjwgl4WXSqsPAzmFVILR4OY5gtm85MgFV-BoCePcQAvD_BwE
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 168/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
upvoted 2 times
Selected Answer: D
deploy D
upvoted 1 times
Selected Answer: A
A is correct
upvoted 3 times
A company wants to query its server logs to gain insights about its customers’ experiences.
A. Amazon Aurora
D. Amazon S3
Correct Answer: D
I have a software developer (6+ years) background and this was my very first certification exam
upvoted 1 times
https://aws.amazon.com/solutions/guidance/log-storage-on-aws/?did=sl_card&trk=sl_card
upvoted 1 times
Selected Answer: D
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 169/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following is a recommended design principle for AWS Cloud architecture?
B. Build a single application component that can handle all the application functionality.
Correct Answer: D
Selected Answer: D
D 가 정답입니다.
upvoted 1 times
Which AWS service helps users audit API activity across their AWS account?
A. AWS CloudTrail
B. Amazon Inspector
C. AWS WAF
D. AWS Config
Correct Answer: A
Selected Answer: A
With AWS CloudTrail, you can monitor your AWS deployments in the cloud by getting a history of AWS API calls for your account, including API
calls made by using the AWS Management Console, the AWS SDKs, the command line tools, and higher-level AWS services. You can also
identify which users and accounts called AWS APIs for services that support CloudTrail, the source IP address from which the calls were made,
and when the calls occurred. You can integrate CloudTrail into applications using the API, automate trail creation for your organization, check the
status of your trails, and control how administrators turn CloudTrail logging on and off.
https://docs.aws.amazon.com/cloudtrail/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 170/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which task is a customer’s responsibility, according to the AWS shared responsibility model?
Correct Answer: A
I have a software developer (6+ years) background and this was my very first certification exam
upvoted 1 times
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 171/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to automatically add and remove Amazon EC2 instances. The company wants the EC2 instances to adjust to varying workloads
dynamically.
A. Amazon DynamoDB
Correct Answer: D
Selected Answer: D
https://docs.aws.amazon.com/autoscaling/ec2/userguide/auto-scaling-benefits.html
upvoted 2 times
Selected Answer: D
D is correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 172/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A user wants to securely automate the management and rotation of credentials that are shared between applications, while spending the least
A. AWS CloudHSM
D. Server-side encryption
Correct Answer: C
AWS Key Management Service (AWS KMS) is used for creating and managing encryption keys. While it's crucial for encryption, it doesn’t directly
handle the automated management and rotation of credentials shared between applications.
upvoted 1 times
C is correct...
upvoted 1 times
Selected Answer: C
AWS Secrets Manager makes it easier to rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their
lifecycle.
upvoted 1 times
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 173/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?
A. Amazon GuardDuty
B. Amazon Macie
C. Amazon Inspector
D. AWS Shield
Correct Answer: B
B is correct
upvoted 3 times
Which actions are best practices for an AWS account root user? (Choose two.)
D. Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user.
Correct Answer: CD
CD are correct
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 174/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is running a critical workload on an Amazon RDS DB instance. The company needs the DB instance to be highly available with a
C. Take frequent snapshots of the DB instance. Store the snapshots in Amazon S3.
Correct Answer: D
Selected Answer: D
In an Amazon RDS Multi-AZ deployment, Amazon RDS automatically creates a primary database (DB) instance and synchronously replicates the
data to an instance in a different AZ. When it detects a failure, Amazon RDS automatically fails over to a standby instance without manual
intervention.
upvoted 2 times
Selected Answer: D
D is correct.
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.MultiAZSingleStandby.html#Concepts.MultiAZ.Failover
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 175/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company plans to migrate its application to AWS and run the application on Amazon EC2 instances. The application will have continuous usage
for 1 year.
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. Reserved Instances
B. Spot Instances
C. On-Demand Instances
D. Dedicated Hosts
Correct Answer: A
https://docs.aws.amazon.com/whitepapers/latest/cost-optimization-reservation-models/standard-vs.-convertible-offering-classes.html
upvoted 1 times
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 176/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to transfer data between an Amazon S3 bucket and an on-premises application.
Who is responsible for the security of this data, according to the AWS shared responsibility model?
A. The company
B. AWS
C. Firewall vendor
Correct Answer: A
Selected Answer: A
I bet to be A since AWS can offer several services to protect data but it's up to the customer to apply the security controls needed to protect their
own data
upvoted 2 times
Selected Answer: B
Data transfer from S3 to on-prem is chargable and also AWS sevirces to be used
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 177/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and
A. Security
B. Reliability
C. Performance efficiency
D. Cost optimization
Correct Answer: B
Selected Answer: B
https://aws.amazon.com/blogs/apn/the-6-pillars-of-the-aws-well-architected-framework/
Automatically recover from failure
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 178/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to identify Amazon S3 buckets that are shared with another AWS account.
C. Amazon CloudWatch
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
Selected Answer: D
D is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 179/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service gives users the ability to build interactive business intelligence dashboards that include machine learning insights?
A. Amazon Athena
B. Amazon Kendra
C. Amazon QuickSight
D. Amazon Redshift
Correct Answer: C
Selected Answer: C
https://docs.aws.amazon.com/quicksight/
upvoted 1 times
Selected Answer: C
Amazon QuickSight is the AWS service that gives users the ability to create interactive business intelligence (BI) dashboards that can include
machine learning insights. It allows you to connect and visualize data from various sources, perform exploratory analysis and share information
collaboratively in the form of reports and dashboards.
upvoted 2 times
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 180/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following is an AWS value proposition that describes a user’s ability to scale infrastructure based on demand?
A. Speed of innovation
B. Resource elasticity
C. Decoupled architecture
D. Global deployment
Correct Answer: B
Selected Answer: B
https://wa.aws.amazon.com/wellarchitected/2020-07-02T19-33-23/wat.concept.elasticity.en.html
Elasticity
The ability to acquire resources as you need them and release resources when you no longer need them. In the cloud, you want to do this
automatically.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 181/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which action is a security best practice for access to sensitive data that is stored in an Amazon S3 bucket?
B. Use IAM roles for applications that require access to the S3 bucket.
Correct Answer: B
Selected Answer: B
ChatGPT: A security best practice for managing access to sensitive data stored in an Amazon S3 bucket is B. Use IAM roles for applications that
require access to the S3 bucket.
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 182/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of
A. The ability the ensure high availability by deploying workloads to multiple regions
D. The ability to provision and deprovision resources quickly with minimal effort
Correct Answer: D
Selected Answer: D
chat gpt :
D. The ability to provision and deprovision resources quickly with minimal effort
The agility provided by AWS is closely tied to the ability to provision and deprovision resources rapidly. AWS allows users to scale their
infrastructure up or down based on demand, enabling them to quickly deploy new resources when needed and release them when no longer
necessary. This flexibility and speed in resource management contribute to operational agility, allowing companies to respond more efficiently to
changing business requirements.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 183/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup
B. Amazon Cognito
D. AWS CLI
Correct Answer: C
Selected Answer: C
The correct answer is C. AWS IAM Identity Center (AWS Single Sign-On).
AWS IAM Identity Center (AWS Single Sign-On) is a service that enables companies to provide centralized access to multiple applications and
services for their users. This includes applications and services that support SAML 2.0.
upvoted 1 times
To provide a central user portal for users to log in to third-party business applications that support Security Assertion Markup Language (SAML)
2.0, the most appropriate AWS service is **AWS Identity and Access Management (IAM)** ¹. IAM supports identity federation through SAML 2.0,
which allows users to access AWS resources and third-party applications using a single sign-on (SSO) experience ¹. With IAM, you can create a
SAML identity provider (IdP) that represents your organization's identity management system, and configure it to establish trust between your
organization and AWS ¹. You can then use IAM roles to grant permissions to your users to access AWS resources and third-party applications,
and use SAML assertions to authenticate users and provide them with temporary security credentials ¹.
Selected Answer: B
B. AWS Cognito is correct answer. The user wants to login to THIRD PARTY APPLICATION Not to AWS SERVICES. Definition of Cognito -
Amazon Cognito supports authentication with identity providers (IdPs) through Security Assertion Markup Language 2.0 (SAML 2.0). You can use
an IdP that supports SAML with Amazon Cognito to provide a simple onboarding flow for your users. Support page -
https://docs.aws.amazon.com/cognito/latest/developerguide/saml-identity-provider.html
upvoted 2 times
Web-based single sign-on (SSO) to the AWS Management Console from your organization. Users can sign in to a portal in your organization
hosted by a SAML 2.0–compatible IdP, select an option to go to AWS, and be redirected to the console without having to provide additional sign-
in information. You can use a third-party SAML IdP to establish SSO access to the console or you can create a custom IdP to enable console
access for your external users.
upvoted 2 times
Selected Answer: C
C is correct
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 184/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
upvoted 2 times
Which AWS service should users use to learn about AWS service availability and operations?
A. Amazon EventBridge
Correct Answer: D
Selected Answer: D
The AWS Health Dashboard is a centralized location where users can find information about the availability and operation of AWS services. It
provides an overview of the current status of AWS services, including planned and unplanned events. Users can also search for specific services
to get more detailed information.
upvoted 1 times
AWS Health Dashboard will tell you which of the aws services experience events such as maintenance or outage.
upvoted 2 times
ChatGPT: For learning about AWS service availability and operations, users should use D. AWS Health Dashboard.
The AWS Health Dashboard provides real-time information on the health of AWS services. It offers a personalized view of the performance and
availability of the AWS services that an account uses, along with alerts about scheduled maintenance, security vulnerabilities, and other
important events. This makes it the ideal choice for staying informed about the operational status and health of AWS services.
upvoted 2 times
Selected Answer: B
Should be B
upvoted 1 times
The AWS Health Dashboard provides real-time information on the health of AWS services. It offers a personalized view of the performance
and availability of the AWS services that an account uses, along with alerts about scheduled maintenance, security vulnerabilities, and other
important events. This makes it the ideal choice for staying informed about the operational status and health of AWS services.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 185/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?
B. Amazon Inspector
D. NAT gateway
Correct Answer: A
Selected Answer: A
https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html
upvoted 1 times
Selected Answer: A
A is correct!
upvoted 2 times
What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?
A. Software licenses
B. Networking
C. Customer data
D. Encryption keys
Correct Answer: C
Selected Answer: C
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 186/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
B. AWS Artifact
Correct Answer: B
Selected Answer: B
B is correct!
upvoted 1 times
Which AWS service enables users to check for vulnerabilities on Amazon EC2 instances by using predefined assessment templates?
A. AWS WAF
C. Amazon Inspector
D. AWS Shield
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 187/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company plans to migrate to the AWS Cloud. The company is gathering information about its on-premises infrastructure and requires
A. AWS DataSync
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
AWS Application Discovery Service collects both server and database configuration information. Server information includes hostnames, IP
addresses, MAC addresses, as well as the resource allocation and utilization details of key resources such as CPU, network, memory, and disk.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 188/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Correct Answer: C
Selected Answer: C
IAM access keys work as credentials for programmatic access. Credentials should be rotated or changed on a periodic time frame. For this
reason it is considered a security best practice to rotate access keys.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 189/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS tool or set of resources should the company use to analyze and assess its readiness for migration?
D. AWS Budgets
Correct Answer: A
Selected Answer: A
I think the answer is A. Cloud "Adoption" Framework. Adoption. Not well framed architecture.
upvoted 1 times
Selected Answer: A
Why not A? We are talking about measuring the readiness to migrate (or adopt) to the cloud service. The CAF supports the fact to be prepared
from some areas such as people, business, governance, operation, security, etc. I think this is the right answer guys, correct me if I'm wrong but
the well-architected framework is focused on an operation that is already on the cloud that's why it looks for operational excellence, reliability,
sustainability, etc.
upvoted 1 times
AWS Well-Architected Framework focuses on the architectural best practices than on organizational readiness for cloud adoption.
upvoted 2 times
A. AWS Cloud Adoption Framework (AWS CAF): This framework helps organizations understand how cloud adoption transforms the way they
work and provides a structure to identify and address gaps in skills and processes. It offers guidance that supports each business unit's cloud
adoption journey, helping to create and implement an efficient and effective plan for the cloud migration.
C. AWS Well-Architected Framework: This framework helps cloud architects build secure, high-performing, resilient, and efficient
infrastructure for their applications. It focuses more on the architectural best practices than on organizational readiness for cloud adoption.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 190/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following describes some of the core functionality of Amazon S3?
A. Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2.
B. Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.
C. Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol.
D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources.
Correct Answer: B
Selected Answer: B
Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable
expenses?
A. High availability
B. Economies of scale
C. Pay-as-you-go pricing
D. Global reach
Correct Answer: C
https://aws.amazon.com/pricing/?aws-products-pricing.sort-by=item.additionalFields.productNameLowercase&aws-products-pricing.sort-
order=asc&awsf.Free%20Tier%20Type=*all&awsf.tech-category=*all
upvoted 1 times
Selected Answer: C
Agree with C
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 191/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS services or features enable users to connect on-premises networks to a VPC? (Choose two.)
A. AWS VPN
D. VPC peering
E. Amazon CloudFront
Correct Answer: AC
Selected Answer: AC
A and C
upvoted 1 times
Selected Answer: AC
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 192/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A user needs to quickly deploy a nonrelational database on AWS. The user does not want to manage the underlying hardware or the database
software.
A. Amazon RDS
B. Amazon DynamoDB
C. Amazon Aurora
D. Amazon Redshift
Correct Answer: B
Which actions are examples of a company’s effort to rightsize its AWS resources to control cloud costs? (Choose two.)
B. Base the selection of Amazon EC2 instance types on past utilization patterns.
C. Use Amazon S3 Lifecycle policies to move objects that users access infrequently to lower-cost storage tiers.
Correct Answer: BC
B. Base the selection of Amazon EC2 instance types on past utilization patterns.
C. Use Amazon S3 Lifecycle policies to move objects that users access infrequently to lower-cost storage tiers.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 193/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature can a company use to apply security rules to specific Amazon EC2 instances?
A. Network ACLs
B. Security groups
D. AWS WAF
Correct Answer: B
Selected Answer: B
https://aviatrix.com/learn-center/cloud-security/aws-security-
groups/#:~:text=As%20said%20earlier%2C%20security%20groups,them%20from%20the%20source%20IP.
upvoted 1 times
Selected Answer: B
B is correct
upvoted 1 times
B is correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 194/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which design principles support the reliability pillar of the AWS Well-Architected Framework? (Choose two.)
B. Enable traceability.
Correct Answer: CE
https://aws.amazon.com/es/blogs/apn/the-6-pillars-of-the-aws-well-architected-framework/
upvoted 1 times
Selected Answer: CE
https://docs.aws.amazon.com/wellarchitected/latest/framework/rel-dp.html
"Scale" horizontally to increase aggregate workload availability:
Automatically recover from failure:
upvoted 1 times
Selected Answer: AE
https://docs.aws.amazon.com/wellarchitected/latest/framework/oe-design-principles.html
This definitely lists "Perform operations as code".
upvoted 1 times
Selected Answer: AE
GPT:AE
upvoted 1 times
Selected Answer: CE
CE are correct
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 195/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 196/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which type of transfer of that data would result in no cost for the company?
Correct Answer: A
A is correct
upvoted 1 times
Selected Answer: C
Transferring data between AWS Regions over the AWS global network is generally not subject to data transfer costs. AWS provides free data
transfer between regions through the AWS backbone.
A. Inbound data transfer from the internet: Inbound data transfer to AWS from the internet is typically free, but outbound data transfer from AWS
to the internet has associated costs.
B. Outbound data transfer to the internet: Outbound data transfer from AWS to the internet usually incurs costs based on the amount of data
transferred.
D. Data transfer between Availability Zones: Data transfer between Availability Zones within the same region is generally free, but there may be
costs associated with data transfer between Availability Zones in some specific scenarios, such as when using certain services or features. It's
important to check the specific details in the AWS pricing documentation for the most accurate information.
upvoted 1 times
Transferring data between AWS Regions over the AWS global network is generally not subject to data transfer costs. AWS provides free data
transfer between regions through the AWS backbone.
A. Inbound data transfer from the internet: Inbound data transfer to AWS from the internet is typically free, but outbound data transfer from AWS
to the internet has associated costs.
B. Outbound data transfer to the internet: Outbound data transfer from AWS to the internet usually incurs costs based on the amount of data
transferred.
D. Data transfer between Availability Zones: Data transfer between Availability Zones within the same region is generally free, but there may be
costs associated with data transfer between Availability Zones in some specific scenarios, such as when using certain services or features. It's
important to check the specific details in the AWS pricing documentation for the most accurate information.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 197/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: A
"There is no charge for inbound data transfer across all services in all Regions."
https://aws.amazon.com/blogs/architecture/overview-of-data-transfer-costs-for-common-architectures/
upvoted 1 times
A company wants to create templates that the company can reuse to deploy multiple AWS resources.
Which AWS service or feature can the company use to meet this requirement?
A. AWS Marketplace
C. AWS CloudFormation
D. AWS OpsWorks
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 198/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is building an application that requires the ability to send, store, and receive messages between application components. The
company has another requirement to process messages in first-in, first-out (FIFO) order.
Correct Answer: D
Selected Answer: D
https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/welcome.html
upvoted 1 times
Selected Answer: D
Amazon SQS FIFO queues preserve the order in which messages are sent and received, and avoid that a message is processed more than once.
This ensures that the messages are processed in first-in, first-out (FIFO) order1.
upvoted 1 times
Which AWS service or feature is a browser-based, pre-authenticated service that can be launched directly from the AWS Management Console?
A. AWS API
B. AWS Lightsail
C. AWS Cloud9
D. AWS CloudShell
Correct Answer: D
AWS CloudShell is a browser-based, pre-authenticated shell that you can launch directly from the AWS Management Console
upvoted 1 times
Selected Answer: D
D is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 199/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to migrate its database to a managed AWS service that is compatible with PostgreSQL.
A. Amazon Athena
B. Amazon RDS
C. Amazon EC2
D. Amazon DynamoDB
E. Amazon Aurora
Correct Answer: BE
Selected Answer: BE
BE is correct answer
upvoted 1 times
BE are correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 200/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet
connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later.
Which AWS service should the company use to meet these requirements?
B. Amazon Lightsail
Correct Answer: D
Selected Answer: D
You can import or export data between your local environments and Amazon S3, and physically transport the data with one or more devices
without using the internet.
https://docs.aws.amazon.com/snowball/latest/developer-guide/whatisedge.html
upvoted 2 times
Selected Answer: D
D is correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 201/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company hosts an application on multiple Amazon EC2 instances. The application uses Amazon Simple Notification Service (Amazon SNS) to
send messages.
Which AWS service or feature will give the application permission to access required AWS services?
B. IAM roles
D. Amazon GuardDuty
Correct Answer: B
Selected Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 202/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud.
A. AWS CloudFormation
C. Amazon EC2
D. AWS OpsWorks
Correct Answer: B
Selected Answer: B
AWS Elastic Beanstalk is an easy-to-use service for deploying and scaling web applications and services developed with Java, . NET, PHP, Node.
js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and Internet Information Services (IIS).
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 203/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs a content delivery network that provides secure delivery of data, videos, applications, and APIs to users globally with low
A. Amazon CloudFront
C. Amazon S3
Correct Answer: A
Selected Answer: A
https://aws.amazon.com/cloudfront/
upvoted 1 times
Selected Answer: A
Which AWS service or feature can the company use to purchase the software?
D. AWS Marketplace
Correct Answer: D
Selected Answer: D
https://docs.aws.amazon.com/marketplace/latest/userguide/what-is-marketplace.html
upvoted 1 times
D) AWS Marketplace is a service catalog that can help with that task
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 204/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs fully managed, highly reliable, and scalable file storage that is accessible over the Server Message Block (SMB) protocol.
A. Amazon S3
Correct Answer: C
Selected Answer: C
Amazon FSx for Windows File Server provides fully managed, highly reliable, and scalable file storage that is accessible over the industry-
standard Server Message Block (SMB) protocol.
upvoted 1 times
C is correct
upvoted 1 times
A company needs to centrally configure and manage Amazon VPC security groups across multiple AWS accounts within an organization in AWS
Organizations.
Which AWS service should the company use to meet these requirements?
B. Amazon GuardDuty
C. Amazon Detective
D. AWS WAF
Correct Answer: A
https://docs.aws.amazon.com/waf/latest/developerguide/fms-chapter.html
upvoted 1 times
Selected Answer: A
A is correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 205/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which task is a responsibility of AWS, according to the AWS shared responsibility model?
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
A company has an Amazon EC2 instance in a private subnet. The company wants to initiate a connection to the internet to pull operating system
updates while preventing traffic from the internet from accessing the EC2 instance.
A. VPC endpoint
B. NAT gateway
C. Amazon PrivateLink
D. VPC peering
Correct Answer: B
Selected Answer: B
A NAT Gateway is an AWS service that allows a private subnet to have access to the Internet, but prevents the Internet from initiating a
connection directly to the instances
upvoted 1 times
B is correct
"NAT Gateways (AWS-managed) &
NAT Instances (self-managed) allow
your instances in your Private Subnets
to access the internet while remaining
private"
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 206/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which actions are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
Correct Answer: AD
Selected Answer: AD
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
Selected Answer: AD
AD are correct
upvoted 1 times
A company is storing data that will not be frequently accessed in the AWS Cloud. If the company needs to access the data, the data needs to be
retrieved within 12 hours. The company wants a solution that is cost-effective for storage costs for each gigabyte.
A. S3 Standard
Correct Answer: B
Selected Answer: B
S3Glacier Flexible Retrieval Bulk data retrievals and requests are free of charge.
upvoted 1 times
B is correct
Amazon S3 Glacier Flexible Retrieval (formerly Amazon S3 Glacier):
• Expedited (1 to 5 minutes), Standard (3 to 5 hours), Bulk (5 to 12 hours) – free
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 207/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or resource can be used to identify services that have been used by a user within a specified date range?
Correct Answer: D
Selected Answer: D
D looks correct
upvoted 2 times
A company needs to engage third-party consultants to help maintain and support its AWS environment and the company’s business needs.
A. AWS Support
B. AWS Organizations
Correct Answer: D
The AWS Partner Network (APN) is designed to help companies find qualified third-party consultants, software vendors, and managed service
providers who are specialized in working with AWS services. APN Partners offer various levels of support and expertise to assist with maintaining
and optimizing AWS environments based on specific business needs.
upvoted 1 times
Selected Answer: D
https://aws.amazon.com/partners/
upvoted 1 times
Selected Answer: D
D is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 208/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to create Amazon QuickSight dashboards every week by using its billing data.
Which AWS feature or tool can the company use to meet these requirements?
A. AWS Budgets
Correct Answer: C
Selected Answer: C
In QuickSight, you can group and display data by any of the more than 90 fields included in the AWS Cost and Usage Report.
upvoted 2 times
Selected Answer: C
C looks correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 209/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is planning to move data backups to the AWS Cloud. The company needs to replace on-premises storage with storage that is cloud-
B. AWS Snowcone
C. AWS Backup
Correct Answer: A
Selected Answer: A
AWS Storage Gateway is a service that connects on-premises storage systems to AWS Cloud Storage Systems. It offers several deployment
options, including an option that provides locally cached Cloud Storage.
upvoted 2 times
Provide on-premises applications access to cloud-backed storage without disruption to your business by maintaining user and application
workflows.
https://aws.amazon.com/storagegateway/
upvoted 1 times
Selected Answer: D
Amazon EFS is a cloud file storage service that replaces local storage with cloud-based but locally cached storage.
upvoted 1 times
Selected Answer: A
https://docs.aws.amazon.com/storagegateway/latest/vgw/WhatIsStorageGateway.html
upvoted 1 times
Selected Answer: A
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 210/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business
A. Access the AWS Cost Management console to organize resources, set an AWS budget, and receive notifications of unintentional usage.
B. Use tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level.
C. Create Amazon CloudWatch dashboards to visually organize and track costs individually.
D. Access the AWS Billing and Cost Management dashboard to organize and track resource consumption on a detailed level.
Correct Answer: B
A company needs to plan, schedule, and run hundreds of thousands of computing jobs on AWS.
Which AWS service can the company use to meet this requirement?
D. AWS Batch
Correct Answer: D
Selected Answer: D
Selected Answer: D
D is correct
"AWS Batch
Fully managed batch processing at any scale
• Efficiently run 100,000s of computing batch jobs on AWS
• A “batch” job is a job with a start and an end (opposed to continuous)
• Batch will dynamically launch EC2 instances or Spot Instances
• AWS Batch provisions the right amount of compute / memory"
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 211/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS services or features provide high availability and low latency by enabling failover across different AWS Regions? (Choose two.)
A. Amazon Route 53
Correct Answer: AD
Selected Answer: AD
GPT:
Amazon Route 53 (DNS Service):
Latency Routing: Route 53 can be configured to route traffic based on the lowest network latency to provide a better user experience.
Selected Answer: AD
A D are correct
upvoted 1 times
Selected Answer: AD
https://docs.aws.amazon.com/whitepapers/latest/real-time-communication-on-aws/cross-region-dns-based-load-balancing-and-failover.html
upvoted 1 times
B & E is correct. The Question is to get high availability and low latency by enabling failover.
upvoted 1 times
AD are correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 212/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?
Correct Answer: A
Selected Answer: A
Scaling out is when you add more instances to your Auto Scaling Group and scaling in is when you reduce the number of instances in your Auto
Scaling Group.
upvoted 1 times
A is correct
upvoted 1 times
Correct Answer: BD
BD are correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 213/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline
mitigations?
A. Amazon Inspector
D. AWS Shield
Correct Answer: D
Selected Answer: D
https://docs.aws.amazon.com/shield/
upvoted 2 times
Selected Answer: D
D is correct
upvoted 2 times
Which AWS service allows users to model and provision AWS resources using common programming languages?
A. AWS CloudFormation
B. AWS CodePipeline
Correct Answer: C
Selected Answer: C
AWS CDK is an open-source software development framework that helps you model cloud application resources using familiar programming
languages, and then provision your infrastructure using CloudFormation directly from your IDE
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 214/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which Amazon EC2 instance pricing model can provide discounts of up to 90%?
A. Reserved Instances
B. On-Demand
C. Dedicated Hosts
D. Spot Instances
Correct Answer: D
Selected Answer: D
Amazon EC2 Spot Instances let you take advantage of unused EC2 capacity in the AWS cloud and are available at up to a 90% discount
compared to On-Demand prices.
upvoted 1 times
D is correct
upvoted 1 times
Which of the following acts as an instance-level firewall to control inbound and outbound access?
B. Security groups
Correct Answer: B
Selected Answer: B
B is correct
"Security Groups: Firewall attached to the EC2 instance"
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 215/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company must be able to develop, test, and launch an application in the AWS Cloud quickly.
Correct Answer: D
Selected Answer: D
D is correct!
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 216/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has teams that have different job roles and responsibilities. The company’s employees often change teams. The company needs to
manage permissions for the employees so that the permissions are appropriate for the job responsibilities.
Which IAM resource should the company use to meet this requirement with the LEAST operational overhead?
B. IAM roles
Selected Answer: A
IAM Role would make sense for individuals, in this case I will go for IAM User Groups because is the least overhead action to manage
permissions for different teams.
upvoted 1 times
IAM user groups allow you to group users with similar job roles or responsibilities together. Instead of managing individual user permissions, you
can assign IAM policies to these groups. When an employee changes teams or job roles, you can simply add or remove them from relevant user
groups, and the permissions associated with the group will be applied automatically to the user.
upvoted 2 times
This approach significantly reduces operational overhead because you manage permissions at a group level rather than individually for each user.
It simplifies permission management, makes it easier to apply consistent policies across teams, and streamlines the process of granting or
revoking access when employees switch roles.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 217/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service can a company use to securely store and encrypt passwords for a database?
A. AWS Shield
D. Amazon Cognito
Correct Answer: B
Selected Answer: B
https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html
upvoted 1 times
Selected Answer: B
B is correct
upvoted 1 times
What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?
C. AWS Artifact
D. Amazon Inspector
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 218/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which encryption types can be used to protect objects at rest in Amazon S3? (Choose two.)
C. TLS
D. SSL
Correct Answer: AB
Selected Answer: AB
Unless you specify otherwise, buckets use SSE-S3 by default to encrypt objects. However, you can choose to configure buckets to use server-
side encryption with AWS Key Management Service (AWS KMS) keys (SSE-KMS) instead.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 219/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to integrate its online shopping website with social media login credentials.
Which AWS service can the company use to make this integration?
C. Amazon Cognito
Correct Answer: C
Selected Answer: C
Amazon Cognito:
Amazon Cognito handles user authentication and authorization for your web and mobile apps. With user pools, you can easily and securely add
sign-up and sign-in functionality to your apps. With identity pools (federated identities), your apps can get temporary credentials that grant users
access to specific AWS resources, whether the users are anonymous or are signed in.
References: https://docs.aws.amazon.com/cognito/?icmpid=docs_homepage_security
upvoted 1 times
Flexible authentication
Allow customers to sign in directly, or through social or enterprise identity providers, to a hosted UI with your branding.
upvoted 1 times
Selected Answer: C
For integrating the online shopping website with social media login credentials, the most suitable AWS service would be C. Amazon Cognito.
Cognito provides user authentication, authorization, and management for web and mobile applications. It includes features specifically designed
for integrating social media logins (such as Facebook, Google, or Amazon) into applications, making it easier to manage user identities from
various sources.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 220/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service is used to track, record, and audit configuration changes made to AWS resources?
A. AWS Shield
B. AWS Config
C. AWS IAM
D. Amazon Inspector
Correct Answer: B
Selected Answer: B
AWS Config:
AWS Config provides a detailed view of the resources associated with your AWS account, including how they are configured, how they are
related to one another, and how the configurations and their relationships have changed over time.
upvoted 1 times
AWS Config - does auditing and recording compliance of your AWS resources, record configurations and changes over time"
upvoted 1 times
B is correct
"AWS Config
• Helps with auditing and recording compliance of your AWS resources
• Helps record configurations and changes over time"
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 221/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A customer runs an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds.
A. 3 hours, 5 minutes
C. 3 hours, 6 minutes
D. 4 hours
Selected Answer: C
A customer running an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds will be billed for 3 hours and 6 minutes.
Billing for Amazon EC2 is done in full minutes, meaning that each started minute is charged as a full minute.
Amazon charges a minimum of 60 seconds, after that time it charges the exact time of use.
For example, if you launch an instance by mistake and stop it after a second, you will be charged for 60 seconds of instances. If you launch an
instance for 1 hour 20 minutes and 1 second, you will be charged exactly the equivalent of 1 hour 20 minutes and 1 second of usage.
upvoted 1 times
https://aws.amazon.com/about-aws/whats-new/2017/10/announcing-amazon-ec2-per-second-
billing/#:~:text=We%20are%20excited%20to%20announce%20that%20Amazon%20EC2,second%20billing%20with%20a%20minimum%20of
%2060%20seconds
--->>> We are excited to announce that Amazon EC2 usage of Linux based instances that are launched in On-Demand, Reserved and Spot form
will be billed on one second increments, with a minimum of 60 seconds.
upvoted 1 times
--->>> We are excited to announce that Amazon EC2 usage of Linux based instances that are launched in On-Demand, Reserved and Spot form
will be billed on one second increments, with a minimum of 60 seconds.
upvoted 1 times
Selected Answer: B
Selected Answer: B
https://aws.amazon.com/about-aws/whats-new/2017/10/announcing-amazon-ec2-per-second-
billing/#:~:text=We%20are%20excited%20to%20announce%20that%20Amazon%20EC2,second%20billing%20with%20a%20minimum%20of
%2060%20seconds.
upvoted 2 times
D. 4 hours
upvoted 1 times
Selected Answer: B
B is correct
"On-demand instances:
• Minimum of 60s
• Pay per second (Linux/Windows) or per hour (other)"
upvoted 1 times
Which AWS service can help protect the company website against these attacks?
B. AWS Amplify
C. AWS Shield
D. Amazon GuardDuty
Correct Answer: C
A company wants a customized assessment of its current on-premises environment. The company wants to understand its projected running
B. Amazon Inspector
D. Migration Evaluator
Correct Answer: D
https://aws.amazon.com/free/migration/?trk=f3dc8b8f-681f-4a87-9d8d-
371111880513&sc_channel=ps&ef_id=CjwKCAiAjrarBhAWEiwA2qWdCHWBrttn0ZH0CFTzhT7mfiSFlp2wwGSUP-
qq9oKzb6ob1SYit_nSWxoCaAgQAvD_BwE:G:s&s_kwcid=AL!4422!3!536458997690!p!!g!!aws%20server%20migration!11543056234!112002961
149&gclid=CjwKCAiAjrarBhAWEiwA2qWdCHWBrttn0ZH0CFTzhT7mfiSFlp2wwGSUP-qq9oKzb6ob1SYit_nSWxoCaAgQAvD_BwE
upvoted 1 times
Selected Answer: D
Migration Evaluator is a migration assessment service that helps you create a directional business case for AWS cloud planning and migration
AWS Control Tower offers the easiest way to set up and govern a secure, multi-account AWS environment
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 223/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate
the creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes.
Which AWS service or tool should the company use to meet these requirements?
A. AWS Organizations
B. Cost Explorer
C. AWS Budgets
Correct Answer: A
Selected Answer: A
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html
upvoted 1 times
Selected Answer: A
AWS Organizations is a service that allows you to consolidate multiple AWS accounts into an organization that you create and centrally manage.
It enables you to automate the creation of AWS accounts, apply Service Control Policies (SCPs) to manage permissions across accounts, and
simplify billing by using consolidated billing.
upvoted 1 times
A company is hosting an application in the AWS Cloud. The company wants to verify that underlying AWS services and general AWS infrastructure
Which combination of AWS services can the company use to gather the required information? (Choose two.)
Correct Answer: AD
Selected Answer: AD
AWS Personal Health Dashboard - gives you a personalized view of the status of the Amazon Web Services services that power your
applications, enabling you to quickly see when Amazon Web Services is experiencing issues that may impact you.
AWS Health notifies you about service events, planned changes, and account notifications to help you manage and take actions
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 224/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or tool should the company use to meet this requirement?
Correct Answer: C
Selected Answer: C
Agree with C
upvoted 1 times
Selected Answer: C
AWS Cloud Readiness - See your responses and scores across the six AWS Cloud Adoption Framework (CAF) perspectives summarized in
detail.
AWS Migration Hub provides a central location to collect server and application inventory data for the assessment, planning, and tracking of
migrations
AWS Database Migration Service (AWS DMS) is a managed migration and replication service that helps you move your databases and analytics
workloads to AWS quickly and securely.
AWS Application Migration Service (AWS MGN) is the recommended service for migrations to AWS. AWS Application Migration Service simplifies
and expedites your migration to AWS by automatically converting your source servers from physical, virtual, or cloud infrastructure to run natively
on AWS.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 225/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. Security validation
B. Rightsizing
C. Elasticity
D. Global reach
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
A company hosts a large amount of data in AWS. The company wants to identify if any of the data should be considered sensitive.
A. Amazon Inspector
B. Amazon Macie
D. Amazon CloudWatch
Correct Answer: B
Amazon Macie
Discover and protect your sensitive data at scale
https://aws.amazon.com/macie/
upvoted 1 times
Amazon Macie is specifically designed to help discover, classify, and protect sensitive data stored in AWS. It uses machine learning and pattern
matching to automatically identify and classify sensitive data within various AWS services like S3 buckets, helping companies better understand
their data and enforce security policies.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 226/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A user has a stateful workload that will run on Amazon EC2 for the next 3 years.
A. On-Demand Instances
B. Reserved Instances
C. Dedicated Instances
D. Spot Instances
Correct Answer: B
Selected Answer: B
Selected Answer: B
https://aws.amazon.com/ec2/pricing/reserved-instances/
upvoted 1 times
Selected Answer: B
Reserved Instances provide a significant discount compared to On-Demand Instances while offering a commitment to a specific instance type in
a particular region for a term of 1 or 3 years. Since the workload is expected to run continuously for the next 3 years, a Reserved Instance with a
3-year term would provide the maximum cost savings over the long term
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 227/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?
A. AWS Support
B. AWS customers
The encryption is performed using AWS Key Management Service (AWS KMS) keys when creating encrypted volumes and snapshots. The data
key is generated by AWS KMS and then encrypted by AWS KMS with your AWS KMS key prior to being stored with your volume information. All
snapshots, and any subsequent volumes created from those snapshots using the same AWS KMS key share the same data key 2.
Therefore, the correct answer is C. AWS Key Management Service (AWS KMS).
upvoted 1 times
Selected Answer: C
The data key is generated by AWS KMS and then encrypted by AWS KMS with your AWS KMS key prior to being stored with your volume
information
upvoted 1 times
Selected Answer: B
Not sure, but going for B: While AWS KMS does the encryption on a technical level, the customer needs to initiate the configuration in AWS KMS
to do the encryption?! Otherwise, there wouldn't be unencrypted devices. Found this "You can enable encryption automatically on all new EBS
volumes and snapshot copies in your AWS account and Region." This "you" is the customer... semantics, I know. Still going for B.
https://docs.aws.amazon.com/kms/latest/developerguide/services-ebs.html
upvoted 3 times
Selected Answer: C
https://docs.aws.amazon.com/kms/latest/developerguide/services-ebs.html
upvoted 1 times
Selected Answer: B
B is correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 228/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
C. Assess the compliance of AWS resource configurations with policies and guidelines.
D. Ensure that Amazon EC2 instances are patched with the latest security updates.
Correct Answer: B
Which AWS service requires the company to update and patch the guest operating system?
A. Amazon DynamoDB
B. Amazon S3
C. Amazon EC2
D. Amazon Aurora
Correct Answer: C
Which AWS service or feature will search for and identify AWS resources that are shared externally?
D. AWS Fargate
Correct Answer: C
Selected Answer: C
https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
upvoted 1 times
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 229/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is migrating its workloads to the AWS Cloud. The company must retain full control of patch management for the guest operating
Which AWS service should the company use to meet these requirements?
A. Amazon DynamoDB
B. Amazon EC2
C. AWS Lambda
D. Amazon RDS
Correct Answer: B
A. Basic Support
B. Developer Support
C. Business Support
D. Enterprise Support
Correct Answer: D
Selected Answer: D
https://aws.amazon.com/premiumsupport/plans/
AWS Enterprise On-Ramp
upvoted 1 times
D is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 230/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service can a company use to visually design and build serverless applications?
A. AWS Lambda
B. AWS Batch
Correct Answer: C
Selected Answer: C
AWS Application Composer helps you visually compose and configure AWS services into serverless applications backed by infrastructure as
code
upvoted 1 times
https://aws.amazon.com/application-composer/
upvoted 1 times
C is correct
"AWS Application Composer helps you visually compose and configure AWS services into serverless applications backed by infrastructure as
code."
upvoted 1 times
AWS Application Composer helps to streamline and accelerate the architecture, configuration, and build of serverless applications.
upvoted 1 times
A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security
D. AWS Marketplace
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 231/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which option is an AWS responsibility under the AWS shared responsibility model?
Correct Answer: C
Selected Answer: C
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
In my opinion "C"
upvoted 2 times
I think B is correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 232/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to migrate its PostgreSQL database to AWS. The company does not use the database frequently.
Which AWS service or resource will meet these requirements with the LEAST management overhead?
Correct Answer: D
Selected Answer: D
If cost is not a concern and you want the least management overhead, Amazon Aurora Serverless would be the best option. Amazon Aurora
Serverless provides the highest level of automation and scalability as it is a serverless database solution. You don't have to worry about
managing database instances, scaling, or maintenance. The database automatically scales up and down to meet your application's
requirements, and you only pay for the resources you actually use.
Selected Answer: D
You're running an infrequently-used application, with peaks of 30 minutes to several hours a few times each day or several times per year, such
as a human resources, budgeting, or operational reporting application. You no longer have to provision to peak capacity, which would require you
to pay for resources you don't continuously use, or to average capacity, which would risk performance problems and a poor user experience.
https://aws.amazon.com/rds/aurora/serverless/
upvoted 1 times
Selected Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 233/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
A. Classify data.
Correct Answer: DE
Selected Answer: DE
AWS responsibility “Security of the Cloud” - AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS
Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services.
https://aws.amazon.com/dynamodb/faqs/
upvoted 1 times
Selected Answer: DE
For abstracted services, such as Amazon S3 and Amazon DynamoDB, AWS operates the infrastructure layer, the operating system, and
platforms, and customers access the endpoints to store and retrieve data
upvoted 1 times
A company wants to create a globally accessible ecommerce platform for its customers. The company wants to use a highly available and
A. Amazon EC2
B. Amazon VPC
C. Amazon Route 53
D. Amazon RDS
Correct Answer: C
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 234/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which maintenance task is the customer’s responsibility, according to the AWS shared responsibility model?
Correct Answer: D
A company wants to improve its security posture by reviewing user activity through API calls.
A. AWS WAF
B. Amazon Detective
C. Amazon CloudWatch
D. AWS CloudTrail
Correct Answer: D
Selected Answer: D
https://docs.aws.amazon.com/cloudtrail/
upvoted 1 times
Selected Answer: D
AWS CloudTrail:
o Records or logs transactions.
o You can use API calls to provision, manage, and configure your AWS resources. With CloudTrail, you can view a complete history of user
activity and API calls for your applications and resources (API caller, timeframe, Source IP, etc.).
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 235/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is migrating to the AWS Cloud and plans to run experimental workloads for 3 to 6 months on AWS.
Correct Answer: D
A company that has AWS Enterprise Support is launching a new version of a popular product in 2 months. The company expects a large increase
Which action should the company take to assess its readiness to scale for this launch?
Correct Answer: B
Selected Answer: B
AWS Infrastructure Event Management (IEM) offers architecture and scaling guidance and operational support during the preparation and
execution of planned events
upvoted 1 times
https://aws.amazon.com/premiumsupport/programs/iem/
upvoted 1 times
B is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 236/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to launch multiple workloads on AWS. Each workload is related to a different business unit. The company wants to separate and
Which solution will meet these requirements with the LEAST operational overhead?
A. Use AWS Organizations and create one account for each business unit.
C. Use an Amazon DynamoDB table to record costs for each business unit.
D. Use the AWS Billing console to assign owners to resources and track costs.
Correct Answer: A
A company wants a time-series database service that makes it easier to store and analyze trillions of events each day.
A. Amazon Neptune
B. Amazon Timestream
C. Amazon Forecast
Correct Answer: B
Selected Answer: B
https://docs.aws.amazon.com/timestream/latest/developerguide/what-is-timestream.html
upvoted 1 times
Selected Answer: B
B is correct
"Amazon Timestream is a fast, scalable, and serverless time-series database service that makes it easier to store and analyze trillions of events
per day up to 1,000 times faster. Amazon Timestream automatically scales up or down to adjust capacity and performance, so that you don’t
have to manage the underlying infrastructure."
upvoted 1 times
Amazon Timestream is a fast, scalable, and serverless time series database service for IoT and operational applications that makes it easy to
store and analyze trillions of events per day up to 1,000 times faster and at as little as 1/10th the cost of relational databases.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 237/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which option is a shared control between AWS and the customer, according to the AWS shared responsibility model?
A. Configuration management
Selected Answer: A
Shared Controls – Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives.
In a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within
their use of AWS services. Examples include:
Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their
guest OS and applications.
Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their
own guest operating systems, databases, and applications.
Awareness & Training - AWS trains AWS employees, but a customer must train their own employees.
upvoted 2 times
Selected Answer: A
Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their
own guest operating systems, databases, and applications.
upvoted 1 times
Selected Answer: A
Reference:
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 2 times
A is correct
"Shared controls:
• Patch Management, Configuration Management, Awareness & Training"
upvoted 1 times
Selected Answer: A
Shared Controls – Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives.
In a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within
their use of AWS services.
Examples include:
Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their
guest OS and applications.
Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their
own guest operating systems, databases, and applications.
Awareness & Training - AWS trains AWS employees, but a customer must train their own employees.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 238/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company often does not use all of its current Amazon EC2 capacity to run stateless workloads. The company wants to optimize its EC2 costs.
A. Spot Instances
B. Dedicated Instances
C. Reserved Instances
D. On-Demand Instances
Correct Answer: A
Selected Answer: A
Spot Instances are ideal for workloads with flexible start and end times, or that can withstand interruptions. This billing option is good if you can
start or stop the processing job without affecting the overall operation of your business. Spot requests depends on Amazon EC2 capacity
availability.
upvoted 1 times
A company wants to store data in Amazon S3. The company rarely access the data, and the data can be regenerated if necessary. The company
A. S3 Standard
B. S3 Intelligent-Tiering
Correct Answer: D
S3 Standard-IA is ideal for infrequently accessed data. It also has a lower storage price and higher retrieval price.
S3 One Zone-IA is ideal for customers who want a lower-cost option for infrequently accessed
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 239/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has migrated its workloads to AWS. The company wants to adopt AWS at scale and operate more efficiently and securely. Which AWS
A. AWS Support
Correct Answer: D
Selected Answer: C
In my opinion C
https://aws.amazon.com/managed-services/?nc1=h_ls
upvoted 1 times
AWS Well-Architected Framework is the right answer here since this helps to understand how to operate reliable, secure, efficient, and cost-
effective.
upvoted 1 times
To adopt AWS at scale and operate more efficiently and securely, the company should use the AWS Cloud Adoption Framework (AWS CAF). The
AWS Cloud Adoption Framework is a comprehensive guide that helps organizations plan, strategize, and implement their cloud adoption journey
effectively. It provides a structured approach for organizations to build a secure, efficient, and well-architected environment in AWS.
upvoted 1 times
Selected Answer: C
AWS Managed Services (AMS) helps you adopt AWS at scale and operate more efficiently and securely. We leverage standard AWS services and
offer operational guidance with specialized automations, skills, and experience that are contextual to your environment and applications
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 240/241
14/12/2023, 21:39 AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 241/241