CLF-C02 Examtopic
CLF-C02 Examtopic
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 1/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Topic 1 - Exam A
Question #1 Topic 1
A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.
Which activities related to a Snowball Edge device are available to the company at no cost?
B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance
C. The transfer of data from the Snowball Edge appliance into Amazon S3
Correct Answer: C
Selected Answer: C
C looks correct
upvoted 1 times
Data transfer IN to Amazon S3 is $0.00 per GB (except for small files as explained below).
Data transfer OUT of Amazon S3 is priced by region.
https://aws.amazon.com/snowball/pricing/
upvoted 3 times
Selected Answer: C
Selected Answer: C
https://aws.amazon.com/snowball/pricing/
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 2/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #2 Topic 1
A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify
Which AWS service can the company use to meet these requirements?
B. Amazon Inspector
C. AWS Config
D. Amazon GuardDuty
Correct Answer: B
Selected Answer: B
Amazon Inspector
upvoted 2 times
Selected Answer: B
https://aws.amazon.com/inspector/
Software Vulnerability / Application Vulnerability
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 3/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #3 Topic 1
A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The
company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.
What is the MOST operationally efficient AWS solution for this scenario?
A. Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility.
B. Configure and deploy an AWS Storage Gateway file gateway. Connect each user’s workstation to the file gateway.
C. Move each user’s working environment to Amazon WorkSpaces. Set up an Amazon WorkDocs account for each user.
D. Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume
Correct Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 4/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #4 Topic 1
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
A. Hard code an IAM user’s secret key and access key directly in the application, and upload the file.
B. Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file.
C. Have the EC2 instance assume a role to obtain the privileges to upload the file.
D. Modify the S3 bucket policy so that any service can upload to it at any time.
Correct Answer: C
Selected Answer: C
Answer is C.
upvoted 1 times
Selected Answer: C
C obviously
upvoted 1 times
Selected Answer: C
Selected Answer: D
https://repost.aws/knowledge-center/ec2-instance-access-s3-bucket#
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 5/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #5 Topic 1
Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?
B. Patching of DynamoDB
Correct Answer: C
Data at rest
Data in transit
upvoted 1 times
Selected Answer: C
Under the AWS Shared Responsibility Model, controlling and managing access to AWS services, including Amazon DynamoDB tables, is a customer
responsibility. While AWS takes care of the physical infrastructure, patching, and encryption of data at rest in DynamoDB, customers are
responsible for setting up proper access controls, authentication, and authorization to protect their data and resources
upvoted 2 times
Selected Answer: C
if people say it is D, so this mean aws responsible for access the table !? no sense + data is encrypted at rest by default
upvoted 3 times
It's C as you get to set your own IAM policy to allow access to a specific DynamoDB table, while encryption of data at rest (D) is a built-in feature in
DynamoDB
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 6/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
The customer is responsible for managing and controlling access to their DynamoDB tables. This includes defining appropriate permissions, user
access control, and authentication mechanisms to ensure that only authorized users or services can access the tables.
D. Encryption of data at rest in DynamoDB: AWS provides encryption of data at rest as a built-in feature for DynamoDB. The customer can enable
encryption for their tables, but AWS handles the actual implementation and management of the encryption process.
Selected Answer: C
Selected Answer: D
Customers are responsible for managing their data (including encryption options), classifying their assets, and using IAM tools to apply the
appropriate permissions.
upvoted 3 times
Selected Answer: C
Access to DB tables
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 7/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #6 Topic 1
Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?
A. Sustainability
B. Performance efficiency
C. Governance
D. Reliability
Correct Answer: C
Selected Answer: C
Selected Answer: C
The 6 AWS CAF perspectives are: Business, People, Governance, Platform, Security and Operations.
https://abhi0751.medium.com/aws-cloud-adoption-framework-aws-caf-a512b89dbcba
upvoted 3 times
https://docs.aws.amazon.com/whitepapers/latest/aws-caf-governance-perspective/appendix-aws-caf-perspectives-and-foundational-
capabilities.html
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 8/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #7 Topic 1
A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage
A. AWS Lambda
B. Amazon RDS
C. AWS Fargate
D. Amazon Athena
Correct Answer: C
Selected Answer: C
Selected Answer: C
AWS Fargate is a serverless, pay-as-you-go compute engine that lets you focus on building applications without managing servers. AWS Fargate is
compatible with both Amazon Elastic Container Service (Amazon ECS) and Amazon Elastic Kubernetes Service (Amazon EKS).
https://aws.amazon.com/fargate/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 9/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Question #8 Topic 1
Correct Answer: C
Selected Answer: C
Selected Answer: C
A is incorrect because when we set up an instance of ec2 we choose the operating system.
B is incorrect because we are configuring and running the database on the ec2 instances so that would be our responsibility.
D is incorrect because the firewall rules are our job.
C is correct because the physical infrastructure where the ec2 instances run is amazon's responsibility
upvoted 3 times
Selected Answer: C
Selected Answer: C
https://pupuweb.com/answer-explained-which-task-responsibility-aws-run-nosql-database-amazon-ec2-instances/
upvoted 1 times
Selected Answer: C
The answer is C. Patch the physical infrastructure that hosts the EC2 instances.
Guest operating system is always responsibility of customer and host of AWS.
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
Selected Answer: B
Since you running the NoSQL AWS is only responsible for maintaining high availability ..
upvoted 1 times
upvoted 3 times
Question #9 Topic 1
Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.)
C. Amazon CodeGuru
D. Amazon SageMaker
Correct Answer: AE
The answer is AE
upvoted 1 times
Selected Answer: AE
Selected Answer: AE
https://docs.aws.amazon.com/cost-management/latest/userguide/ce-rightsizing.html
https://aws.amazon.com/compute-optimizer/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 11/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)
Correct Answer: CD
Reference: https://aws.amazon.com/premiumsupport/technology/trusted-advisor/
upvoted 5 times
Selected Answer: CD
Answer is CD.
Reference: https://aws.amazon.com/premiumsupport/technology/trusted-advisor/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 12/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?
Correct Answer: A
Selected Answer: A
A looks correct
upvoted 1 times
Selected Answer: A
Answer A is correct.
upvoted 1 times
Selected Answer: A
Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 13/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to manage deployed IT services and govern its infrastructure as code (IaC) templates.
C. AWS Organizations
Correct Answer: B
Selected Answer: B
The answer is B.
AWS Service Catalog lets you centrally manage your cloud resources to achieve governance at scale of your infrastructure as code (IaC) templates,
written in CloudFormation or Terraform configurations. With AWS Service Catalog, you can meet your compliance requirements while making sure
your customers can quickly deploy the cloud resources they need.
https://aws.amazon.com/servicecatalog/
upvoted 5 times
Selected Answer: B
Answer B is correct.
upvoted 1 times
Selected Answer: B
AWS Service Catalog lets you centrally manage your cloud resources to achieve governance at scale of your infrastructure as code (IaC) templates,
written in CloudFormation or Terraform configurations.
Reference: https://aws.amazon.com/servicecatalog/
upvoted 2 times
Service Catalog: Create, organize, and govern a curated catalog of AWS resources that can be shared at the permissions level so you can quickly
provision approved cloud resources without needing direct access to the underlying AWS services.
System Manager: AWS Systems Manager is the operations hub for your AWS applications and resources.
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 14/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or tool helps users visualize, understand, and manage spending and usage over time?
A. AWS Organizations
Correct Answer: C
Selected Answer: C
Answer C is correct.
upvoted 1 times
The answer is C.
AWS Cost Explorer has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time. Get started
quickly by creating custom reports that analyze cost and usage data. Analyze your data at a high level (for example, total costs and usage across all
accounts), or dive deeper into your cost and usage data to identify trends, pinpoint cost drivers, and detect anomalies.
https://aws.amazon.com/aws-cost-management/aws-cost-explorer/
upvoted 2 times
"AWS Cost Explorer has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time."
Reference: https://aws.amazon.com/aws-cost-management/aws-cost-explorer/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 15/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to
Which combination of AWS services should the company use to meet these requirements? (Choose two.)
A. AWS Glue
C. Amazon Redshift
D. Amazon QuickSight
Correct Answer: AD
Selected Answer: AD
AWS Glue is a serverless data integration service that makes it easier to discover, prepare, move, and integrate data from multiple sources for
analytics, machine learning (ML), and application development.
https://aws.amazon.com/glue/
Amazon QuickSight powers data-driven organizations with unified business intelligence (BI) at hyperscale. With QuickSight, all users can meet
varying analytic needs from the same source of truth through modern interactive dashboards, paginated reports, embedded analytics, and natural
language queries.
https://aws.amazon.com/quicksight/
upvoted 8 times
Selected Answer: AD
AD looks correct
upvoted 1 times
Selected Answer: AD
Selected Answer: AD
AD - Analytics
https://aws.amazon.com/big-data/datalakes-and-analytics/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 16/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A global company wants to migrate its third-party applications to the AWS Cloud. The company wants help from a global team of experts to
complete the migration faster and more reliably in accordance with AWS internal best practices.
A. AWS Support
Correct Answer: B
Selected Answer: B
Answer B is correct.
upvoted 1 times
Selected Answer: B
The AWS Professional Services organization is a global team of experts that can help you realize your desired business outcomes when using the
AWS Cloud. We work together with your team and your chosen member of the AWS Partner Network (APN) to execute your enterprise cloud
computing initiatives.
https://aws.amazon.com/professional-services/
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 17/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
An e-learning platform needs to run an application for 2 months each year. The application will be deployed on Amazon EC2 instances. Any
Which EC2 purchasing option will meet these requirements MOST cost-effectively?
A. Reserved Instances
B. Dedicated Hosts
C. Spot Instances
D. On-Demand Instances
Correct Answer: D
Selected Answer: D
Selected Answer: D
Answer D is correct.
upvoted 1 times
Selected Answer: D
It can´t be A because AWS offer terms of 1 or 3 years and only need 2 month at year. So it has to be D
upvoted 1 times
On-Demand is the correct answer since this service cannot be interrupted. This is why we need On-Demand.
upvoted 2 times
Selected Answer: D
Reference: https://aws.amazon.com/ec2/pricing/
upvoted 1 times
Reference: https://aws.amazon.com/ec2/pricing/
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 18/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A developer wants to deploy an application quickly on AWS without manually creating the required resources.
A. Amazon EC2
C. AWS CodeBuild
D. Amazon Personalize
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
With Elastic Beanstalk, you can quickly deploy and manage applications in the AWS Cloud without having to learn about the infrastructure that runs
those applications. Elastic Beanstalk reduces management complexity without restricting choice or control. You simply upload your application, and
Elastic Beanstalk automatically handles the details of capacity provisioning, load balancing, scaling, and application health monitoring.
upvoted 1 times
Selected Answer: B
Answer B is Correct.
Key: "deploy an application quickly on AWS without manually creating the required resources"
upvoted 1 times
Selected Answer: B
https://aws.amazon.com/elasticbeanstalk/
upvoted 1 times
"Deploy scalable web applications in minutes without the complexity of provisioning and managing underlying infrastructure."
Reference: https://aws.amazon.com/elasticbeanstalk/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 19/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or
overwriting.
A. S3 Lifecycle rules
B. S3 Versioning
C. S3 bucket policies
D. S3 server-side encryption
Correct Answer: B
Selected Answer: B
B looks correct
upvoted 1 times
Selected Answer: B
Answer B is Correct.
Selected Answer: B
Versioning in Amazon S3 is a means of keeping multiple variants of an object in the same bucket. You can use the S3 Versioning feature to
preserve, retrieve, and restore every version of every object stored in your buckets.
Versioning-enabled buckets can help you recover objects from accidental deletion or overwrite. For example, if you delete an object, Amazon S3
inserts a delete marker instead of removing the object permanently.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/Versioning.html
upvoted 4 times
"Versioning-enabled buckets can help you recover objects from accidental deletion or overwrite."
Reference: https://docs.aws.amazon.com/AmazonS3/latest/userguide/Versioning.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 20/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. AWS CodePipeline
B. AWS CodeDeploy
D. AWS CloudFormation
Correct Answer: D
Selected Answer: D
D looks correct
upvoted 1 times
Selected Answer: D
Answer D is Correct.
Selected Answer: D
AWS CloudFormation lets you model, provision, and manage AWS and third-party resources by treating infrastructure as code.
https://aws.amazon.com/cloudformation/
upvoted 2 times
"AWS CloudFormation lets you model, provision, and manage AWS and third-party resources by treating infrastructure as code."
Reference: https://aws.amazon.com/cloudformation/
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 21/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and any
increases in traffic are predictable. The EC2 instances must be online and available without any disruption.
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Spot Fleet
Correct Answer: B
Selected Answer: B
B looks correct
upvoted 1 times
Selected Answer: B
Selected Answer: B
Answer B is Correct.
Key: "instance for 1 year" "traffic is predictable" "available without any disruption"
upvoted 1 times
Selected Answer: B
Amazon EC2 Reserved Instances (RI) provide a significant discount (up to 72%) compared to On-Demand pricing and provide a capacity reservation
when used in a specific Availability Zone.
Terms (avg. discount off On-Demand) - 1yr (40%), 3yr (60%)
https://aws.amazon.com/ec2/pricing/reserved-instances/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 22/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the
AWS Cloud?
B. VPC peering
C. AWS VPN
D. Amazon Route 53
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
Answer A is Correct.
Key: "dedicated network connection between a company’s on-premises data center and the AWS Cloud"
upvoted 1 times
Selected Answer: A
https://aws.amazon.com/directconnect/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 23/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. AWS DataSync
B. AWS Region
C. Amazon Connect
D. AWS Organizations
Correct Answer: B
"AWS has the concept of a Region, which is a physical location around the world where we cluster data centers"
https://aws.amazon.com/about-aws/global-infrastructure/regions_az/
upvoted 1 times
B is correct
upvoted 1 times
Selected Answer: B
Answer B is Correct
Selected Answer: B
Selected Answer: B
AWS has the concept of a Region, which is a physical location around the world where we cluster data centers. We call each group of logical data
centers an Availability Zone. Each AWS Region consists of a minimum of three, isolated, and physically separate AZs within a geographic area.
https://aws.amazon.com/about-aws/global-infrastructure/regions_az/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 24/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.
A. Reliability
B. Security
C. Operational excellence
D. Performance efficiency
Correct Answer: B
This is conclusion of security pillar "help you build and operate architectures that protect information, systems, and assets while delivering business
value"
https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/conclusion.html
upvoted 1 times
Selected Answer: B
B looks correct
upvoted 1 times
Selected Answer: B
Answer B is Correct
Key: "protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks"
upvoted 1 times
Selected Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 25/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
D. To load balance traffic from the internet across Amazon EC2 instances
Correct Answer: B
Selected Answer: B
B is correct answer
B looks correct
upvoted 1 times
Answer B is Correct.
upvoted 1 times
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html
upvoted 1 times
"An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and
the internet."
Reference: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 26/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the
Which best practice of the AWS Well-Architected Framework is the company following with this plan?
Correct Answer: D
Selected Answer: D
Dependencies such as queuing systems, streaming systems, workflows, and load balancers are loosely coupled. Loose coupling helps isolate
behavior of a component from other components that depend on it, increasing resiliency and agility.
https://docs.aws.amazon.com/wellarchitected/latest/framework/rel_prevent_interaction_failure_loosely_coupled_system.html
upvoted 5 times
Selected Answer: D
Selected Answer: D
D is correct answer
upvoted 1 times
Selected Answer: D
D looks correct
upvoted 1 times
Selected Answer: D
Answer D is Correct.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 27/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes.
B. AWS Artifact
Correct Answer: C
Selected Answer: C
You can use credential reports to assist in your auditing and compliance efforts. You can use the report to audit the effects of credential lifecycle
requirements, such as password and access key updates.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html
upvoted 5 times
Selected Answer: C
Answer C is Correct.
Key: "audit its password and access key rotation details for compliance purposes"
upvoted 1 times
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_getting-report.html
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 28/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to receive a notification when a specific AWS cost threshold is reached.
Which AWS services or tools can the company use to meet this requirement? (Choose two.)
B. AWS Budgets
C. Cost Explorer
D. Amazon CloudWatch
Correct Answer: BD
Selected Answer: BD
BD look correct
upvoted 1 times
Selected Answer: BD
AWS Cost Explorer itself does not have built-in capabilities to send cost alerts or notifications directly.
upvoted 1 times
Selected Answer: BD
B. AWS Budgets: AWS Budgets is a service that allows you to set custom cost and usage budgets for your AWS resources. You can configure a
budget with a specific threshold and define actions, such as sending notifications, when that threshold is reached.
D. Amazon CloudWatch: Amazon CloudWatch is a monitoring service that can be used to collect and track metrics, logs, and events from various
AWS resources. It supports setting up alarms based on cost metrics, so you can create an alarm for a specific cost threshold and configure it to
send notifications when the threshold is breached.
upvoted 1 times
Selected Answer: BD
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html
https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-controls.html
upvoted 1 times
Selected Answer: BD
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 29/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: BC
Using AWS Budgets, you can set a budget that alerts you when you exceed (or are forecasted to exceed) your budgeted cost or usage amount.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 30/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?
A. AWS Artifact
B. Amazon Connect
C. AWS Chatbot
Correct Answer: A
Selected Answer: D
Correct answer is D
upvoted 1 times
Selected Answer: D
Selected Answer: D
Answer D is Correct.
Key: "service or resource provides answers to the most frequently asked security-related questions"
upvoted 1 times
Selected Answer: D
AWS Official Knowledge Center articles and videos covering the most frequent questions and requests that we receive from AWS customers.
https://repost.aws/knowledge-center
upvoted 3 times
"AWS re:Post includes AWS Official Knowledge Center articles and videos covering the most frequent questions and requests that we receive from
AWS customers."
Reference: https://repost.aws/knowledge-center
upvoted 1 times
Selected Answer: D
Answer should be Knowledge centre, because right in the official exam guide; section 2.4: Identifying where security information is available,
Knowledge centre is listed among AWS security centre and AWS security blog. Artifact is majorly for compliance reports and is unfortunately the
answer chatGPT will give you if you ask it
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 31/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: D
AWS Artifact portal contains AWS’ compliance documentation and AWS agreements
upvoted 1 times
Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)
Correct Answer: AB
AB look correct
upvoted 1 times
Selected Answer: AB
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 32/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)
A. Availability
B. Reliability
C. Scalability
D. Responsive design
E. Operational excellence
Correct Answer: BE
Selected Answer: BE
BE are correct
upvoted 1 times
Selected Answer: BE
1. Operational Excellence
2. Security
3. Reliability
4. Performance Efficiency
5. Cost Optimization
upvoted 3 times
Selected Answer: BE
Selected Answer: BE
AWS Well-Architected helps cloud architects build secure, high-performing, resilient, and efficient infrastructure for a variety of applications and
workloads. Built around six pillars—operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability.
upvoted 4 times
operational excellence, security, reliability, performance efficiency, cost optimization, and sustainability
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 33/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature is used to send both text and email messages from distributed applications?
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
Answer A is Correct.
Key: "send both text and email messages from distributed applications"
upvoted 1 times
Selected Answer: A
The answer is A.
Amazon Simple Notification Service (Amazon SNS) sends notifications two ways, A2A and A2P. A2A provides high-throughput, push-based, many-
to-many messaging between distributed systems, microservices, and event-driven serverless applications. These applications include Amazon
Simple Queue Service (SQS), Amazon Kinesis Data Firehose, AWS Lambda, and other HTTPS endpoints. A2P functionality lets you send messages to
your customers with SMS texts, push notifications, and email.
https://aws.amazon.com/sns/
upvoted 3 times
"Amazon Simple Notification Service (Amazon SNS) sends notifications two ways, A2A and A2P. A2A provides high-throughput, push-based, many-
to-many messaging between distributed systems, microservices, and event-driven serverless applications."
Reference: https://aws.amazon.com/sns/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 34/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A user needs programmatic access to AWS resources through the AWS CLI or the AWS API.
Which option will provide the user with the appropriate access?
A. Amazon Inspector
B. Access keys
Correct Answer: B
Selected Answer: B
Answer B is Correct.
Key: "programmatic access to AWS resources through the AWS CLI or the AWS API"
upvoted 1 times
Selected Answer: B
The answer is B.
"Access keys are long-term credentials for an IAM user or the AWS account root user. You can use access keys to sign programmatic requests to
the AWS CLI or AWS API (directly or using the AWS SDK)."
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 35/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3
hours.
Which pricing model enables the company to optimize costs and meet these requirements?
A. Reserved Instances
B. Spot Instances
C. On-Demand Instances
D. Dedicated Instances
Correct Answer: B
Selected Answer: B
Answer B is Correct.
Selected Answer: B
Spot Instances are a good fit for stateless, fault-tolerant workloads that can be interrupted without any impact on the overall job.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 36/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
What does the concept of agility mean in AWS Cloud computing? (Choose two.)
Correct Answer: AC
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 37/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. AWS WAF
B. AWS Shield
C. Network ACLs
D. Security groups
Correct Answer: A
Confusion will come to choose between WAF or Shield. but all common web attack patterns (XSS, SQL Injection, etc...) dealt by WAF, special cases
which can't be handled by WAF - will be handled by Shield primarily DDoS
upvoted 8 times
Selected Answer: A
Answer A is Correct.
upvoted 1 times
The answer is A.
AWS WAF helps you protect against common web exploits and bots that can affect availability, compromise security, or consume excessive
resources.
https://aws.amazon.com/waf/
upvoted 1 times
SQLi Filter: Choose the rule type to look for SQLi patterns. AWS WAF has built-in SQLi filters.
Attach Resources: Attach the WebACL to a resource, such as an Application Load Balancer, Amazon CloudFront distribution, or an API Gateway.
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 38/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?
D. AWS Organizations
Correct Answer: C
Selected Answer: C
Answer C is Correct.
Key: "feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity"
upvoted 1 times
Selected Answer: C
The answer is C.
IAM Access Analyzer helps identify resources in your organization and accounts that are shared with an external entity.
https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 39/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud.
Correct Answer: B
Selected Answer: B
Answer B is correct.
Selected Answer: B
AWS Artifact is a portal that provides access to various compliance reports, including certifications, attestations, and other relevant documents. You
can download these reports directly from AWS Artifact.
upvoted 1 times
The answer is B.
https://docs.aws.amazon.com/artifact/latest/ug/downloading-documents.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 40/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.
Correct Answer: A
Selected Answer: A
Selected Answer: A
Answer A is Correct.
upvoted 1 times
Selected Answer: A
The answer is A.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 41/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is setting up AWS Identity and Access Management (IAM) on an AWS account.
A. Use the account root user access keys for administrative tasks.
B. Grant broad permissions so that all company employees can access the resources they need.
C. Turn on multi-factor authentication (MFA) for added security during the login process.
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
Answer C is Correct.
upvoted 1 times
Enabling multi-factor authentication (MFA) for user accounts, especially for users with administrative or high-privilege access, is a crucial security
best practice. MFA adds an additional layer of security by requiring users to provide two or more verification factors (typically something they
know, like a password, and something they have, like a temporary MFA code from a hardware token or mobile app) before gaining access. This
significantly reduces the risk of unauthorized access, even if login credentials are compromised.
upvoted 1 times
The answer is C.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 42/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
Correct Answer: BE
Selected Answer: BE
Elasticity is the ability to add and release resources as business needs change. It has nothing to do with pricing.
upvoted 7 times
Selected Answer: BE
BE are correct
upvoted 1 times
Selected Answer: BE
Pay-as-you-go Pricing: Cloud elasticity lets organizations connect their IT spending to current demand. This means they only pay for the resources
they use at any given time.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 43/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which service enables customers to audit API calls in their AWS accounts?
A. AWS CloudTrail
C. Amazon Inspector
D. AWS X-Ray
Correct Answer: A
Selected Answer: A
A is correct
"CloudTrail: Track API calls made by users within account."
upvoted 1 times
Answer A is Correct.
CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. It records and logs all API
calls made within your account, including who made them, when they were made, and which resources were affected.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 44/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?
Correct Answer: A
Selected Answer: A
A Looks correct
upvoted 1 times
Selected Answer: A
Answer A is Correct.
upvoted 1 times
The answer is A.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 45/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis.
Which AWS service should the company use to run these queries in the MOST cost-effective manner?
A. Amazon Redshift
B. Amazon Athena
C. Amazon Kinesis
D. Amazon RDS
Correct Answer: B
Selected Answer: B
Answer B is Correct.
Key: "Amazon S3. The company plans to occasionally run queries on the data for analysis"
upvoted 3 times
Selected Answer: B
The answer is B.
Amazon Athena is a serverless, interactive analytics service built on open-source frameworks, supporting open-table and file formats. Athena
provides a simplified, flexible way to analyze petabytes of data where it lives. Analyze data or build applications from an Amazon Simple Storage
Service (S3) data lake and 30 data sources, including on-premises data sources or other cloud systems using SQL or Python. Athena is built on
open-source Trino and Presto engines and Apache Spark frameworks, with no provisioning or configuration effort required.
https://aws.amazon.com/athena/
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 46/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. Amazon SageMaker
B. AWS Config
C. AWS Organizations
D. Amazon CloudWatch
Correct Answer: C
Selected Answer: C
Answer C is Correct.
upvoted 1 times
Selected Answer: C
The answer is C.
AWS Organizations is an account management service that enables you to consolidate multiple AWS accounts into an organization that you create
and centrally manage. AWS Organizations is offered at no additional charge. You are charged only for AWS resources that users and roles in your
member accounts use. For example, you are charged the standard fees for Amazon EC2 instances that are used by users or roles in your member
accounts.
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 47/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?
A. Data architecture
B. Event management
C. Cloud fluency
D. Strategic partnership
Correct Answer: C
Selected Answer: C
The answer is C.
Selected Answer: C
C looks correct
upvoted 1 times
Answer C is Correct.
upvoted 1 times
Selected Answer: C
https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/people-perspective.html
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 48/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall
cost.
Which pricing options meet these requirements with the LOWEST cost? (Choose two.)
A. Spot Instances
B. On-Demand Instances
C. Reserved Instances
D. Savings Plans
E. Dedicated Hosts
Correct Answer: CD
Selected Answer: CD
Selected Answer: CD
D. Savings Plans: Savings Plans offer flexible pricing and savings on your AWS usage, with discounts of up to 72% compared to On-Demand
pricing. With Savings Plans, you commit to a certain amount of usage (measured in dollars per hour) for a one- or three-year term, and receive a
lower rate for that usage.
upvoted 4 times
Selected Answer: CD
Selected Answer: AC
The answer is AC
upvoted 1 times
Selected Answer: AB
Try AB
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 49/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its
Which AWS service or resource should the company use to select its Amazon RDS deployment area?
A. Amazon Connect
B. AWS Wavelength
C. AWS Regions
Correct Answer: C
Selected Answer: C
Answer C is Correct.
upvoted 1 times
Selected Answer: C
try c!
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 50/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned.
Which AWS service or feature can be used to estimate costs before deployment?
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
Answer B is Correct.
Key: " create a cost estimate for a project before the infrastructure is provisioned"
upvoted 1 times
Selected Answer: B
The answer is B.
AWS Pricing Calculator is a web-based planning tool that you can use to create estimates for your AWS use cases. You can use it to model your
solutions before building them, explore the AWS service price points, and review the calculations behind your estimates.
https://docs.aws.amazon.com/pricing-calculator/latest/userguide/what-is-pricing-calculator.html
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 51/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is building an application that needs to deliver images and videos globally with minimal latency.
Which approach can the company use to accomplish this in a cost effective manner?
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
Answer A is Correct.
Selected Answer: A
the answer is A
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 52/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which option is a benefit of the economies of scale based on the advantages of cloud computing?
Correct Answer: C
Selected Answer: C
Correct answer is C
Benefit from massive economies of scale – By using cloud computing, you can achieve a lower variable cost than you can get on your own. Because
usage from hundreds of thousands of customers is aggregated in the cloud, providers such as AWS can achieve higher economies of scale, which
translates into lower pay as-you-go prices.
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 2 times
Answer C is Correct.
upvoted 2 times
C seems to be correct. it is the only one that reflects cost benefits which are asked in the question. While A also mentioned cost it is contradicting
the value of cloud which is trade capital expense for variable cost.
upvoted 1 times
Selected Answer: C
Read the paragraph that starts with: Benefit from massive economies of scale.
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 1 times
Selected Answer: C
answer is C
1 - is reversed benefit "Trade fixed expense for variable expense" thus invalid
2 - speed and agility has nothing to do with economies of scale
4 - "Increased operational costs across data centers" is not a benefit
3 - Benefit from massive economies of scale – By using cloud computing, you can achieve a -------lower variable cost than you can get on your
own------. Because usage from hundreds of thousands of customers is aggregated in the cloud, providers such as AWS can achieve higher
economies of scale, which translates into lower pay as-you-go prices.
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 2 times
Beside B, all other answers are reversed answers of advantages of cloud computing.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 53/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: B
Increase speed and agility – In a cloud computing environment, new IT resources are only a click away, which means that you reduce the time to
make those resources available to your developers from weeks to just minutes. This results in a dramatic increase in agility for the organization,
since the cost and time it takes to experiment and develop is significantly lower.
upvoted 1 times
A. One of the benefits of the economies of scale in cloud computing is the ability to trade variable expenses for fixed expenses. Cloud services
allow organizations to pay for the resources they use on a variable and scalable basis, rather than incurring the fixed costs associated with
maintaining physical data centers and infrastructure. This flexibility helps businesses better manage their costs, as they can scale up or down as
needed, reducing the need for large upfront investments in infrastructure.
In summary, both options A and C are relevant to the benefits of cloud computing, but option A specifically addresses the idea of trading variable
expenses for fixed expenses, which aligns with the concept of economies of scale.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 54/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following is a software development framework that a company can use to define cloud resources as code and provision the
A. AWS CLI
D. AWS CodeStar
Correct Answer: C
Selected Answer: C
Answer C is Correct.
upvoted 1 times
AWS CDK is a software development framework that enables developers to define infrastructure as code (IaC) using familiar programming
languages like TypeScript, Python, Java, C#, and more. With AWS CDK, you can define cloud resources, their relationships, and provisioning logic in
your preferred programming language. AWS CDK also generates CloudFormation templates based on your code, making it easier to manage and
deploy infrastructure resources in AWS.
upvoted 2 times
Selected Answer: C
https://aws.amazon.com/cdk/faqs/#:~:text=The%20AWS%20Cloud%20Development%20Kit,deploying%20it%20through%20AWS%20CloudFormati
on.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 55/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for
Which AWS service or feature should the company use to meet these authentication requirements?
B. IAM users
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
Answer C is Correct.
Key: "application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs"
upvoted 1 times
AWS STS provides a way to grant temporary, limited-privilege credentials to users, applications, or services. These temporary credentials can be
used to access AWS resources securely without having to use long-term access keys or IAM user credentials.
upvoted 1 times
The answer is C.
AWS provides AWS Security Token Service (AWS STS) as a web service that enables you to request temporary, limited-privilege credentials for users.
https://docs.aws.amazon.com/STS/latest/APIReference/welcome.html
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 56/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner
C. Amazon EventBridge
D. Amazon GuardDuty
Correct Answer: A
Selected Answer: A
A looks correct
upvoted 1 times
Selected Answer: A
Answer A is Correct.
upvoted 1 times
Selected Answer: A
"AWS Security Hub is a cloud security posture management (CSPM) service that performs automated, continuous security best practice checks
against your AWS resources to help you identify misconfigurations, and aggregates your security alerts (i.e. findings) in a standardized format so
that you can more easily enrich, investigate, and remediate them."
Reference: https://aws.amazon.com/security-hub/features/?nc=sn&loc=2
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 57/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. Amazon S3
D. AWS WAF
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
Answer B is Correct.
upvoted 1 times
Selected Answer: B
Reference: https://aws.amazon.com/iam/getting-started/?nc=sn&loc=3
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 58/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?
A. Amazon Redshift
B. Amazon Aurora
C. Amazon DynamoDB
D. Amazon RDS
Correct Answer: C
Selected Answer: 다
C is correct.
upvoted 1 times
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
Correct answer is C
"Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability."
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Introduction.html
upvoted 1 times
Aurora and RDS are relational, as for Redshift that is for exabytes of data and complex queries.
upvoted 2 times
Selected Answer: B
Answer B is Correct.
Key: "NoSQL database" "fully managed and can automatically scale throughput capacity"
upvoted 1 times
Selected Answer: C
"Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability."
Reference: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Introduction.html
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 59/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which task is the company’s responsibility, according to the AWS shared responsibility model?
B. Provision hosts.
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
Answer C is Correct.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 60/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted
Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?
A. On-Demand Instances
B. Dedicated Instances
C. Spot Instances
D. Reserved Instances
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
Answer C is Correct.
Key: "testing can be interrupted and does not need to run continuously"
upvoted 1 times
Selected Answer: C
Spot Instances are a good fit for stateless, fault-tolerant workloads that can be interrupted without any impact on the overall job.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 61/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?
A. Amazon Macie
B. Amazon Detective
C. Amazon GuardDuty
Correct Answer: A
Selected Answer: A
Amazon Macie - Amazon Macie is a fully managed data security and data privacy service that
uses machine learning and pattern matching to discover and protect your sensitive data in
AWS.
upvoted 1 times
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
Answer A is Correct.
Key: "ability to discover and protect sensitive data that is stored in Amazon S3 buckets"
upvoted 1 times
Selected Answer: A
A : Amazon Macie is a data security service that discovers sensitive data using machine learning and pattern matching, provides visibility into data
security risks, and enables you to automate protection against those risks.
https://aws.amazon.com/macie/features/#:~:text=Amazon%20Macie%20is%20a%20data,automate%20protection%20against%20those%20risks.
upvoted 2 times
Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data in Amazon S3. It helps
you identify and protect data such as personally identifiable information (PII), financial information, intellectual property, and more by monitoring
data access and alerting you to potential security risks
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 62/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following services can be used to block network traffic to an instance? (Choose two.)
A. Security groups
C. Network ACLs
D. Amazon CloudWatch
E. AWS CloudTrail
Correct Answer: AC
Selected Answer: AC
Selected Answer: AC
Selected Answer: AC
Security groups are stateful firewalls that control inbound and outbound traffic at the instance level. You can configure security groups to allow or
deny specific types of network traffic to and from your instances.
Network ACLs (Access Control Lists) are stateless firewalls that control traffic at the subnet level. Network ACLs define rules to allow or deny traffic
based on source and destination IP addresses, ports, and protocols.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 63/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service can identify when an Amazon EC2 instance was terminated?
B. AWS CloudTrail
D. Amazon EventBridge
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
Answer B is Correct.
upvoted 1 times
Selected Answer: B
B: AWS CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage.
upvoted 1 times
AWS CloudTrail is a service that records all API activity in your AWS account, including the termination of EC2 instances. It creates log entries for
various events, providing an audit trail of actions taken on resources. By reviewing CloudTrail logs, you can identify when an EC2 instance was
terminated, who initiated the termination, and other relevant details about the event.
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 64/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. Amazon S3
B. Amazon DynamoDB
C. Amazon Redshift
D. Amazon Aurora
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
Selected Answer: D
Answer D is Correct.
Amazon Aurora is a relational database service that is compatible with MySQL and PostgreSQL. It is fully managed by AWS and is designed for high
availability, performance, and scalability while maintaining MySQL compatibility. Aurora offers features like automated backups, read replicas, and
seamless failover to ensure data durability and availability. It's a popular choice for applications that require a MySQL-compatible database with the
benefits of a fully managed service.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 65/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data
A. AWS Snowmobile
C. AWS Outposts
D. AWS Fargate
Correct Answer: C
C. AWS Outposts
AWS Outposts enables you to run AWS infrastructure and services on premises while seamlessly connecting to the AWS cloud. This service extends
the AWS ecosystem to your on-premises locations, allowing you to take advantage of cloud benefits while addressing the requirements of data
residency, low-latency applications, and specific regulatory needs in hybrid environments.
upvoted 5 times
Selected Answer: C
C is correct answer
upvoted 1 times
Selected Answer: C
C is correct
"Hybrid Cloud: businesses that keep an onpremises
infrastructure alongside a cloud
infrastructure"
upvoted 1 times
Selected Answer: C
Answer C is Correct.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 66/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?
A. Amazon DynamoDB
B. Amazon Athena
C. Amazon RDS
D. Amazon EMR
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
C is correct
upvoted 1 times
Amazon RDS supports various database engines, including PostgreSQL, and offers a managed database service suitable for OLTP workloads. With
Amazon RDS for PostgreSQL, you can easily set up, operate, and scale a PostgreSQL database without the administrative overhead of managing
the infrastructure.
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 67/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections.
Which AWS services can the company use to meet these requirements? (Choose two.)
A. Amazon Connect
C. Amazon WorkSpaces
Correct Answer: BC
Selected Answer: BC
BC
in the context that:
- workspaces satisfies the virtual desktops
- appstream satisfies the virtual applications
upvoted 6 times
Selected Answer: BC
GPT:
To provide managed Windows virtual desktops and applications to remote employees over secure network connections, the company can use the
following AWS services:
B. Amazon AppStream 2.0: Amazon AppStream 2.0 is a fully managed application streaming service that allows you to stream desktop applications
from AWS to any device with a web browser. It's suitable for providing access to applications without the need to manage full desktop
environments.
C. Amazon WorkSpaces: Amazon WorkSpaces is a managed, secure Desktop-as-a-Service (DaaS) solution that helps you provision Windows or
Linux desktops in just a few minutes. It's ideal for providing employees with a managed virtual desktop experience.
upvoted 1 times
Selected Answer: BC
Selected Answer: CD
CD is right
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 68/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: CD
CD is right.
Amazon AppStream 2.0 is a service for streaming desktop applications to a web browser, but it is different from full Windows virtual desktops
provided by Amazon WorkSpaces. - Is not right
upvoted 4 times
So AWS Site-to-Site VPN is required when you connect from AWS VPC into your local network. When using a virtual desktop you connect from
local network to AWS and not from AWS to your local network. D is not correct in my opinion
upvoted 1 times
Selected Answer: CD
maybe CD?
upvoted 3 times
C. Amazon WorkSpaces: Amazon WorkSpaces is a fully managed desktop-as-a-service (DaaS) solution that provides Windows desktops to users.
You can configure and manage virtual desktops for remote employees using WorkSpaces.
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 69/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports.
B. Amazon CloudWatch
C. Amazon GuardDuty
Correct Answer: A
C. Amazon GuardDuty
Amazon GuardDuty is an AWS service that is designed to monitor and detect potential security threats in your AWS environment. It helps to
identify unusual and unauthorized activities, including misconfigured security groups that may be allowing unrestricted access to specific ports.
GuardDuty uses machine learning and threat intelligence to analyze data and generate alerts, making it an effective tool for enhancing the security
of your AWS infrastructure.
While options like AWS Trusted Advisor and Amazon CloudWatch offer valuable monitoring capabilities, they do not specifically focus on detecting
security group misconfigurations. Therefore, in this scenario, Amazon GuardDuty is the most appropriate choice.
upvoted 6 times
Selected Answer: A
GPT:
To monitor for misconfigured security groups that are allowing unrestricted access to specific ports, the most suitable AWS service is:
A. AWS Trusted Advisor: AWS Trusted Advisor is a service that analyzes your AWS environment and provides recommendations for saving money,
improving system performance, and closing security gaps. It includes checks for common misconfigurations in security groups, such as open ports
to the internet, which could pose a security risk. Trusted Advisor can alert you to these potential vulnerabilities, helping you ensure that your
security groups are configured properly.
upvoted 1 times
correct answer is A
upvoted 1 times
Selected Answer: A
I choose answer A
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 70/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Trusted Advisor can help improve the security of your AWS environment by suggesting foundational security best practices curated by security
experts. Examples include identifying RDS security group access risk, exposed access keys, and unnecessary S3 bucket permissions.
C is not good IMO: GuardDuty is capable of analyzing tens of billions of events across multiple AWS data sources, such as AWS CloudTrail event
logs, Amazon Virtual Private Cloud (VPC) Flow Logs, Amazon Elastic Kubernetes Service (EKS) audit and system-level logs, and DNS query logs.
upvoted 1 times
Selected Answer: C
Selected Answer: A
Trusted Advisor can help improve the security of your AWS environment by suggesting foundational security best practices curated by security
experts. Examples include identifying RDS security group access risk, exposed access keys, and unnecessary S3 bucket permissions.
https://aws.amazon.com/premiumsupport/technology/trusted-advisor/
upvoted 1 times
Amazon GuardDuty is a threat detection service that continuously monitors for suspicious and unauthorized activity in your AWS environment. It
can help you identify security group misconfigurations that may lead to unrestricted access to specific ports, among other security issues.
upvoted 2 times
Selected Answer: A
https://docs.aws.amazon.com/awssupport/latest/user/security-checks.html#security-groups-specific-ports-unrestricted
upvoted 1 times
AWS Trusted Advisor is a service that provides recommendations for optimizing your AWS infrastructure. It includes checks for security best
practices, such as identifying security groups that have overly permissive rules, which would allow unrestricted access to specific ports. It offers
guidance on how to address these misconfigurations.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 71/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
While AWS Trusted Advisor (option A) provides recommendations for optimizing security, cost, performance, and fault tolerance of AWS resources,
it does not specifically focus on monitoring misconfigured security groups.
Amazon GuardDuty (option C), on the other hand, is a threat detection service that continuously monitors for malicious activities and unauthorized
behavior within your AWS environment, including detecting potential security group misconfigurations.
Therefore, in this case, Amazon GuardDuty (option C) is the more appropriate service for monitoring misconfigured security groups.
upvoted 1 times
Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?
A. Amazon DynamoDB
B. Amazon Aurora
D. Amazon Neptune
Correct Answer: A
Selected Answer: A
A is correct
Fully Managed Highly available with replication across 3 AZ
• NoSQL database - not a relational database
• Scales to massive workloads, distributed “serverless” database
• Millions of requests per seconds, trillions of row, 100s of TB of storage
• Fast and consistent in performance
• Single-digit millisecond latency – low latency retrieval
• Integrated with IAM for security, authorization and administration
• Low cost and auto scaling capabilities
upvoted 1 times
the answer is A
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 72/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is deploying a machine learning (ML) research project that will require a lot of compute power over several months. The ML
Which Amazon EC2 instance purchasing option will meet these requirements at the lowest cost?
A. On-Demand Instances
B. Spot Instances
C. Reserved Instances
D. Dedicated Instances
Correct Answer: A
Selected Answer: B
GPT:
For a machine learning (ML) research project that requires a lot of compute power over several months, where the processing jobs do not need to
run at specific times, the most cost-effective Amazon EC2 instance purchasing option would be:
B. Spot Instances: Amazon EC2 Spot Instances offer the ability to purchase unused EC2 capacity at a significantly reduced rate compared to On-
Demand prices. Spot Instances are ideal for workloads that are flexible in terms of when they can run and can tolerate interruptions, such as batch
processing jobs in ML projects. Since your ML processing jobs do not need to run at specific times, Spot Instances can provide the necessary
compute power at a lower cost. However, it's important to note that Spot Instances can be terminated by AWS with a two-minute warning if AWS
needs the capacity back, so it's vital to design your applications to handle such interruptions.
upvoted 1 times
B. Spot Instances
Spot Instances are the most cost-effective option for workloads that can be flexible about when they run. They allow you to use spare Amazon EC2
capacity at a significantly lower price compared to On-Demand Instances. Spot Instances are ideal for workloads like batch processing, data
analysis, and machine learning jobs that can be interrupted or scheduled flexibly
upvoted 1 times
Selected Answer: A
Selected Answer: B
I choose answer B
Amazon EC2 Spot Instances let you take advantage of unused EC2 capacity in the AWS cloud and are available at up to a 90% discount compared
to On-Demand prices.
Use cases:
Run big data and machine learning workloads
Fast-track big data and machine learning workloads by using Spot Instances with Amazon EMR, Hadoop, Spark, or Amazon Sagemaker to process
massive amounts of data.
https://aws.amazon.com/ec2/spot/
upvoted 3 times
upvoted 1 times
Selected Answer: A
EC2 On demand can be used when you do not want to interrupt your application. You are not sure about the time and unsure about workloads
then use OnDemand.
EC2 Spot instances when you are flexible enough that your application can be interrupted or your application is stateless. You need a cheaper
solution for compute resources.
upvoted 1 times
Selected Answer: B
Spot Instances allow you to access spare EC2 capacity at a significantly lower price compared to On-Demand Instances. They are a cost-effective
choice for workloads that can be interrupted and are flexible regarding timing. Spot Instances can be ideal for ML processing jobs that do not have
strict timing requirements.
upvoted 2 times
Spot: Spot instances can be valuable for handling sporadic high CPU workloads and memory spikes. >>>However, the inherent uncertainty of
availability makes them less reliable for consistent, high-demand workloads.<<<
On-Demand: provide the necessary computational horsepower exactly when needed, making them ideal for dealing with unexpected CPU and
memory demands.
the answer is B
upvoted 1 times
A - CPU power is needed. You don't get to choose with Spot Instances.
upvoted 2 times
Spot Instances are a cost-effective choice when you have flexible workload requirements and can tolerate interruptions. They allow you to use
spare EC2 capacity at a significantly lower cost compared to On-Demand Instances. You can specify the maximum price you are willing to pay per
instance hour, and your instances will run as long as the current spot price is below your maximum price.
upvoted 1 times
On-Demand is the most suitable option here since there was no mention that the activity can be interrupted. I mean, there are no guarantees that
a Spot Instance will run for 3 months straight, that's given you found the right capacity in the first place with Spot Instances.
upvoted 1 times
Spot Instances offer substantial cost savings compared to On-Demand Instances. They are well-suited for workloads that can be interrupted and
restarted, as they provide access to spare AWS capacity at lower prices. While Spot Instances can be interrupted if the capacity is needed elsewhere,
you can significantly reduce costs by using them for non-time-sensitive workloads like research and batch processing.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 74/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
This is HCP case, with a Spot Instance, you are not in control of how much capacity is available or allocated to you. So, it is cheaper, but does not
meet the requirements.
upvoted 1 times
Selected Answer: B
The answer is B.
Amazon SageMaker makes it easy to train machine learning models using managed Amazon EC2 Spot instances. Managed spot training can
optimize the cost of training models up to 90% over on-demand instances. SageMaker manages the Spot interruptions on your behalf.
Managed Spot Training uses Amazon EC2 Spot instance to run training jobs instead of on-demand instances. You can specify which training jobs
use spot instances and a stopping condition that specifies how long SageMaker waits for a job to run using Amazon EC2 Spot instances.
https://docs.aws.amazon.com/sagemaker/latest/dg/model-managed-spot-training.html
upvoted 1 times
Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.)
D. AWS Shield
E. Amazon GuardDuty
Correct Answer: BC
BC are correct
upvoted 1 times
Selected Answer: BC
B. EC2 Amazon Machine Images (AMIs): AMIs are used to create backups of EC2 instances, and they can be used to launch replacement instances
in the event of a disaster or data loss. AMIs are essential for creating recovery points for your EC2 instances.
C. Amazon Elastic Block Store (Amazon EBS) snapshots: EBS snapshots allow you to create point-in-time backups of your EBS volumes. These
snapshots can be used to restore data or create new EBS volumes, making them a key component of disaster recovery for EC2 instances.
upvoted 2 times
yeah bc
upvoted 1 times
C. Amazon Elastic Block Store (Amazon EBS) snapshots: You can take snapshots of your Amazon EBS volumes attached to EC2 instances. These
snapshots are backups of your data, which can be used to restore or create new volumes in case of data loss or failure.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 75/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service provides command line access to AWS tools and resources directly from a web browser?
A. AWS CloudHSM
B. AWS CloudShell
C. Amazon WorkSpaces
Correct Answer: B
Selected Answer: B
B is correct
"Using AWS CloudShell, a browser-based shell, you can quickly run scripts with the AWS Command Line Interface (CLI), experiment with service
APIs using the AWS CLI, and use other tools to increase your productivity. The CloudShell icon appears in AWS Regions where CloudShell is
available."
upvoted 1 times
A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The
company has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time.
Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?
A. VPC endpoints
C. Amazon Route 53
Correct Answer: B
B is correct
upvoted 1 times
I choose to answer B
AWS Transit Gateway connects your Amazon Virtual Private Clouds (VPCs) and on-premises networks through a central hub. This connection
simplifies your network and puts an end to complex peering relationships. Transit Gateway acts as a highly scalable cloud router—each new
connection is made only once.
https://aws.amazon.com/transit-gateway/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 76/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to assess its operational readiness. It also wants to identify and mitigate any operational risks ahead of a new product launch.
Which AWS Support plan offers guidance and support for this kind of event at no additional charge?
Correct Answer: A
https://aws.amazon.com/premiumsupport/plans/
"ahead of a new product launch"
upvoted 1 times
D looks correct
upvoted 1 times
I think is D
upvoted 1 times
Selected Answer: A
Little confusing as every support plan from developer to enterprise offers general guidance in < 24 hs.
Going with Business as being ahead of a product launch implies production environment too.
upvoted 1 times
Shouldn't this be Enterprise support? Keywords "event" and "no additional cost"
AWS Infrastructure Event Management (IEM) offers architecture and scaling guidance and operational support during the preparation and
execution of planned events, such as shopping holidays, product launches, and migrations. For these events, AWS Infrastructure Event
Management will help you assess operational readiness, identify and mitigate risks, and execute your event confidently with AWS experts by your
side. The program is included in the Enterprise Support plan and is available to Business Support customers for an additional fee.
upvoted 3 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 77/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service will support this requirement with the LEAST amount of operational overhead?
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
B is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 78/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?
A. Amazon Route 53
B. Amazon Macie
D. AWS PrivateLink
Correct Answer: D
Selected Answer: C
Selected Answer: C
C is correct
upvoted 1 times
AWS PrivateLink provides a private network connection between VPCs and AWS services, while AWS Direct Connect is a dedicated, private
connection between on-premises infrastructure and an AWS Location
upvoted 3 times
Selected Answer: D
AWS PrivateLink provides private connectivity between virtual private clouds (VPCs), supported AWS services, and your on-premises networks
without exposing your traffic to the public internet.
upvoted 1 times
Answer is C.
Direct connect is for private dedicated connection between on premise and AWS.
PrivateLink is used when you comunicate with third party VPC and it Requires a network load balancer (Service VPC) and ENI (Customer VPC)
upvoted 2 times
AWS PrivateLink: Establish connectivity between VPCs and AWS services without exposing data to the internet
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 79/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
C. AWS KMS
D. AWS Config
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
The answer is C.
Use Amazon EBS encryption as a straight-forward encryption solution for your EBS resources associated with your EC2 instances. With Amazon EBS
encryption, you aren't required to build, maintain, and secure your own key management infrastructure. Amazon EBS encryption uses AWS KMS
keys when creating encrypted volumes and snapshots.
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 80/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to manage its AWS Cloud resources through a web interface.
B. AWS CLI
C. AWS SDK
D. AWS Cloud9
Correct Answer: A
Selected Answer: A
The AWS Management Console is a web application that comprises and refers to a broad collection of service consoles for managing AWS
resources.
https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/learn-whats-new.html
upvoted 1 times
A is correct
upvoted 1 times
Which of the following are advantages of the AWS Cloud? (Choose two.)
Correct Answer: BC
B. Ability to quickly change required capacity: With the AWS Cloud, users can easily scale their infrastructure up or down based on demand. This
flexibility allows for rapid adjustment of resources to match application needs, enabling cost optimization and efficient resource utilization.
C. High economies of scale: AWS operates at a large scale, serving millions of customers globally. This scale allows AWS to achieve cost efficiencies
and pass on the benefits to customers. By leveraging AWS services, users can access enterprise-grade infrastructure and services without the need
for significant upfront investment in hardware or infrastructure.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 81/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?
A. Agility
B. Elasticity
C. Scalability
D. High availability
Correct Answer: C
Selected Answer: D
D is correct
upvoted 1 times
Selected Answer: D
Selected Answer: D
D looks correct
upvoted 1 times
Obviously D. Availability is about resolving any issues in no time for being always available, scalability is about adding/removing resources to suit a
company's needs.
upvoted 2 times
Selected Answer: D
D is correct
upvoted 1 times
Selected Answer: D
D is right.
upvoted 2 times
High availability
upvoted 1 times
High availability
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 82/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
upvoted 1 times
A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion.
Which AWS service should the developer use to meet these requirements?
B. AWS Shield
D. AWS CloudFormation
Correct Answer: D
D is correct
upvoted 1 times
D. AWS CloudFormation
"AWS CloudFormation lets you model, provision, and manage AWS and third-party resources by treating infrastructure as code."
upvoted 2 times
Which task is the customer’s responsibility, according to the AWS shared responsibility model?
Correct Answer: B
B is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 83/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?
A. AWS WAF
C. AWS Shield
Correct Answer: B
Selected Answer: B
B looks correct
upvoted 1 times
Selected Answer: B
"Deliver highly available applications with fast failover for multi-Region and multi-AZ architectures."
Reference: https://aws.amazon.com/global-accelerator/
upvoted 1 times
A company has a set of ecommerce applications. The applications need to be able to send messages to each other.
Correct Answer: C
Selected Answer: C
Amazon Simple Queue Service (SQS): SQS is a fully managed message queuing service that enables you to decouple and scale microservices,
distributed systems, and serverless applications. It allows one application to send messages to a queue, and another application to retrieve those
messages from the queue. This can be helpful in scenarios where the sender and receiver are not required to interact with each other in real-time.
upvoted 1 times
Selected Answer: C
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 84/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
What are the benefits of consolidated billing for AWS Cloud services? (Choose two.)
A. Volume discounts
Correct Answer: AC
Selected Answer: AC
AC are correct
upvoted 1 times
Selected Answer: AC
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 85/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console.
B. S3 Storage Lens
Correct Answer: A
Selected Answer: D
D looks correct
upvoted 1 times
Selected Answer: D
D looks correct
upvoted 1 times
Selected Answer: D
AM Access Analyzer for S3 alerts you to S3 buckets that are configured to allow access to anyone on the internet or other AWS accounts, including
AWS accounts outside of your organization.
upvoted 1 times
Selected Answer: D
When reviewing an at-risk bucket in IAM Access Analyzer for S3, you can block all public access to the bucket with a single click. We recommend
that you block all access to your buckets unless you require public access to support a specific use case. Before you block all public access, ensure
that your applications will continue to work correctly without public access.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-analyzer.html
upvoted 1 times
Selected Answer: D
"IAM Access Analyzer for S3 might show that a bucket has read or write access provided through a bucket access control list (ACL), a bucket policy,
a Multi-Region Access Point policy, or an access point policy...IAM Access Analyzer for S3 is available at no extra cost on the Amazon S3 console."
Reference: https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-analyzer.html
upvoted 3 times
Selected Answer: D
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 86/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
What is the best resource for a user to find compliance-related information and reports about AWS?
A. AWS Artifact
B. AWS Marketplace
C. Amazon Inspector
D. AWS Support
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
"AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to security and
compliance reports from AWS and ISVs who sell their products on AWS Marketplace."
Reference: https://aws.amazon.com/artifact/
upvoted 1 times
Which AWS service enables companies to deploy an application close to end users?
A. Amazon CloudFront
C. AWS AppSync
D. Amazon Route 53
Correct Answer: A
A is correct
upvoted 1 times
"Amazon CloudFront speeds up distribution of your static and dynamic web content, such as .html, .css, .php, image, and media files. When users
request your content, CloudFront delivers it through a worldwide network of edge locations that provide low latency and high performance."
Reference: https://docs.aws.amazon.com/cloudfront/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 87/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?
A. Route table
D. Amazon VPC
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
"Improve application availability, performance, and security using the AWS global network"
Reference: https://aws.amazon.com/global-accelerator/
upvoted 2 times
A. Amazon S3
D. Amazon FSx
Correct Answer: A
Selected Answer: A
A looks correct
upvoted 1 times
Selected Answer: A
"S3 Standard offers high durability, availability, and performance object storage for frequently accessed data."
Reference: https://aws.amazon.com/s3/storage-classes/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 88/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?
A. Database backups
Correct Answer: D
Selected Answer: C
GPT:
When a company hosts its databases on Amazon EC2 (Elastic Compute Cloud) instances, the responsibility model followed is the shared
responsibility model. In this model, AWS is responsible for the infrastructure layer, while the customer is responsible for the management of the
operating system and above, including databases.
C. Operating system patches: This is the responsibility that belongs to AWS. When using EC2 instances, AWS takes care of the infrastructure layer,
which includes the physical hardware, the network, and the facilities that run the AWS Cloud. However, the customer is responsible for managing
the operating system installed on the EC2 instances. This includes applying operating system patches.
upvoted 1 times
by eliminating A,B,C
upvoted 1 times
Selected Answer: D
Selected Answer: C
c is correct
upvoted 2 times
Selected Answer: D
D. AWS provides the infrastructure and services (like EC2) that include a range of Amazon Machine Images (AMIs) with pre-installed operating
systems. This means AWS is responsible for ensuring that these AMIs are available and that the underlying infrastructure to run these instances is
secure and reliable.
The other responsibilities listed - database backups (A), database software patches (B), and operating system patches (C) - are under the purview of
the customer when using Amazon EC2 instances.
upvoted 1 times
Selected Answer: C
D. AWS provides the infrastructure and services (like EC2) that include a range of Amazon Machine Images (AMIs) with pre-installed operating
systems. This means AWS is responsible for ensuring that these AMIs are available and that the underlying infrastructure to run these instances is
secure and reliable.
The other responsibilities listed - database backups (A), database software patches (B), and operating system patches (C) - are under the purview of
the customer when using Amazon EC2 instances.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 89/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following are advantages of moving to the AWS Cloud? (Choose two.)
A. The ability to turn over the responsibility for all security to AWS.
Correct Answer: BD
BD look correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 90/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service is a hybrid cloud storage service that provides on-premises users access to virtually unlimited cloud storage?
A. AWS DataSync
B. Amazon S3 Glacier
Correct Answer: C
Selected Answer: C
C is correct
"Bridge between on-premise data and cloud
data in S3
• Hybrid storage service to allow onpremises
to seamlessly use the AWS
Cloud"
upvoted 1 times
Selected Answer: C
AWS Storage Gateway is a hybrid cloud storage service that enables on-premises applications to seamlessly access AWS Cloud-based storage. It
provides a local cache for frequently accessed data to ensure low-latency access, while also storing data in the cloud for durability and scalability.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 91/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company plans to migrate to AWS and wants to create cost estimates for its AWS use cases.
Which AWS service or tool can the company use to meet these requirements?
B. Amazon CloudWatch
D. AWS Budgets
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
"AWS Pricing Calculator is a web-based planning tool that you can use to create estimates for your AWS use cases. You can use it to model your
solutions before building them, explore the AWS service price points, and review the calculations behind your estimates. You can use it to help you
plan how you spend, find cost saving opportunities, and make informed decisions when using Amazon Web Services."
Reference: https://docs.aws.amazon.com/pricing-calculator/latest/userguide/what-is-pricing-calculator.html
upvoted 1 times
Which tool should a developer use to integrate AWS service features directly into an application?
B. AWS CodeDeploy
C. AWS Lambda
D. AWS Batch
Correct Answer: A
Selected Answer: A
A looks correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 92/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following is a recommended design principle of the AWS Well-Architected Framework?
Correct Answer: C
Selected Answer: C
The answer is C
Learn from all operational failures: Drive improvement through lessons learned from all operational events and failures. Share what is learned
across teams and through the entire organization.
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 1 times
Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:
A. restricted access.
B. as-needed access.
D. token access.
Correct Answer: C
Selected Answer: C
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 93/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or tool can be used to set up a firewall to control traffic going into and coming out of an Amazon VPC subnet?
A. Security group
B. AWS WAF
D. Network ACL
Correct Answer: C
Selected Answer: D
GPT:
To set up a firewall to control traffic going into and coming out of an Amazon VPC subnet, the most appropriate AWS service or tool is:
D. Network ACL (Network Access Control List): Network ACLs act as a firewall for controlling traffic into and out of subnets within an Amazon VPC.
They provide a layer of security at the subnet level by allowing you to specify both inbound and outbound traffic rules. These rules can allow or
deny traffic based on protocol, source IP address, destination IP address, and port number.
upvoted 1 times
Selected Answer: D
Cannot be C:
AWS Firewall Manager is a security management service that allows you to centrally configure and manage firewall rules across your accounts and
applications in AWS Organizations. As new applications are created, Firewall Manager makes it easier to bring new applications and resources into
compliance by enforcing a common set of security rules.
therefore the only valid answer is D as it pertains to subnets (VPC)
upvoted 1 times
Selected Answer: A
Security groups act as a virtual firewall for your instances, controlling inbound and outbound traffic at the instance level in an Amazon VPC. They
are the most appropriate choice for controlling traffic within a subnet.
upvoted 1 times
Selected Answer: D
D is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 94/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Helps to protect all resources of a particular type, such as all Amazon CloudFront distributions
Allows you to subscribe all member accounts in an AWS Organizations organization to AWS Shield Advanced, and automatically subscribes new in-
scope accounts that join the organization
Allows you to apply security group rules to all member accounts or specific subsets of accounts in an AWS Organizations organization, and
automatically applies the rules to new in-scope accounts that join the organization
Lets you use your own rules, or purchase managed rules from AWS Marketplace
upvoted 1 times
Network ACLs are an optional layer of security that act as a firewall for controlling inbound and outbound traffic at the subnet level.
https://docs.aws.amazon.com/zh_tw/vpc/latest/userguide/VPC_Security.html#VPC_Security_Comparison
upvoted 2 times
Network ACLs allow or deny inbound and outbound traffic at the subnet level.
Security groups allow inbound and outbound traffic for associated resources, such as EC2 instances.
https://docs.aws.amazon.com/vpc/latest/userguide/infrastructure-security.html#VPC_Security_Comparison
upvoted 1 times
Selected Answer: D
Selected Answer: D
A network access control list (ACL) allows or denies specific inbound or outbound traffic at the subnet level.
https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html
upvoted 1 times
A security group acts as a firewall that controls the traffic allowed to and from the resources in your virtual private cloud (VPC). You can choose the
ports and protocols to allow for inbound traffic and for outbound traffic.
https://docs.aws.amazon.com/vpc/latest/userguide/security-groups.html
upvoted 3 times
Selected Answer: A
"A security group acts as a firewall that controls the traffic allowed to and from the resources in your virtual private cloud (VPC). You can choose the
ports and protocols to allow for inbound traffic and for outbound traffic."
Reference: https://docs.aws.amazon.com/vpc/latest/userguide/security-groups.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 95/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to operate a data warehouse to analyze data without managing the data warehouse infrastructure.
A. Amazon Aurora
C. AWS Lambda
D. Amazon RDS
Correct Answer: B
Selected Answer: B
"Amazon Redshift Serverless makes it easy to run analytics workloads of any size without having to manage data warehouse infrastructure."
Reference: https://aws.amazon.com/redshift/redshift-serverless/
upvoted 1 times
How does AWS Cloud computing help businesses reduce costs? (Choose two.)
A. AWS charges the same prices for services in every AWS Region.
C. AWS offers discounts for Amazon EC2 instances that remain idle for more than 1 week.
D. AWS does not charge for data sent from the AWS Cloud to the internet.
E. AWS eliminates many of the costs of building and maintaining on-premises data centers.
Correct Answer: BE
Selected Answer: BE
BE are correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 96/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to grant users in one AWS account access to resources in another AWS account. The users do not currently have permission to
A. IAM group
B. IAM role
C. IAM tag
Correct Answer: B
Selected Answer: B
IAM role
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 97/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Correct Answer: A
Selected Answer: C
Selected Answer: C
AWS is responsible for maintaining the physical and environmental controls of its data centers, including the security and reliability of the
infrastructure. This includes aspects such as power, cooling, and physical security
upvoted 1 times
DDDDDD
upvoted 1 times
Selected Answer: C
Selected Answer: C
Selected Answer: C
The words: "Infrastructure" and "physical" are ALWAYS a good clue to AWS responsibility.
upvoted 1 times
C is the answer.
The words: "Infrastructure" and "physical" are ALWAYS a good clue to AWS responsibility.
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 98/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: C
AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud. This infrastructure is composed of the
hardware, software, networking, and facilities that run AWS Cloud services.
https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 2 times
”AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud. This infrastructure is composed of the
hardware, software, networking, and facilities that run AWS Cloud services."
Reference: https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
A company wants to automate infrastructure deployment by using infrastructure as code (IaC). The company wants to scale production stacks so
A. Amazon CloudWatch
B. AWS Config
D. AWS CloudFormation
Correct Answer: D
D looks correct
upvoted 1 times
Selected Answer: D
"AWS CloudFormation gives you an easy way to model a collection of related AWS and third-party resources, provision them quickly and
consistently, and manage them throughout their lifecycles, by treating infrastructure as code. A CloudFormation template describes your desired
resources and their dependencies so you can launch and configure them together as a stack. You can use a template to create, update, and delete
an entire stack as a single unit, as often as you need to, instead of managing resources individually. You can manage and provision stacks across
multiple AWS accounts and AWS Regions."
Reference: https://aws.amazon.com/cloudformation/features/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 99/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which option is an AWS Cloud Adoption Framework (AWS CAF) platform perspective capability?
A. Data architecture
B. Data protection
C. Data governance
D. Data science
Correct Answer: C
Selected Answer: A
A is correct
upvoted 1 times
Selected Answer: A
Selected Answer: A
Platform perspective helps you build an enterprise-grade, scalable, hybrid cloud platform, modernize existing workloads, and implement new
cloud-native solutions.
This includes DATA ARCHITECTURE
https://abhi0751.medium.com/aws-cloud-adoption-framework-aws-caf-a512b89dbcba
upvoted 1 times
https://abhi0751.medium.com/aws-cloud-adoption-framework-aws-caf-a512b89dbcba
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 100/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS best practice ensures the MOST cost-effective architecture for the workload?
A. Loose coupling
B. Rightsizing
C. Caching
D. Redundancy
Correct Answer: B
Selected Answer: B
B looks correct
upvoted 1 times
Selected Answer: B
Right sizing is the process of matching instance types and sizes to your workload performance and capacity requirements at the lowest possible
cost.
A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. The
company wants to use AWS services for the backups without changing its existing backup workflows.
Which AWS service should the company use to meet these requirements?
D. AWS Lambda
Correct Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 101/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS tool gives users the ability to plan their service usage, service costs, and instance reservations, and also allows them to set custom
A. Cost Explorer
B. AWS Budgets
Correct Answer: A
Selected Answer: B
Selected Answer: B
B. AWS Budgets
upvoted 2 times
Selected Answer: B
"Using AWS Budgets, you can set a budget that alerts you when you exceed (or are forecasted to exceed) your budgeted cost or usage amount.
You can also set alerts based on your RI or Savings Plans Utilization and Coverage using AWS Budgets."
https://aws.amazon.com/aws-cost-management/aws-budgets/faqs/
upvoted 2 times
Selected Answer: B
"With AWS Budgets, set custom budgets to track your costs and usage, and respond quickly to alerts received from email or SNS notifications if
you exceed your threshold."
Reference: https://aws.amazon.com/aws-cost-management/aws-budgets/
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 102/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which tasks are the customer’s responsibility, according to the AWS shared responsibility model? (Choose two.)
Correct Answer: BC
Selected Answer: BC
BC are correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 103/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A developer has been hired by a large company and needs AWS credentials.
Which are security best practices that should be followed? (Choose two.)
A. Grant the developer access to only the AWS resources needed to perform the job.
B. Share the AWS account root user credentials with the developer.
D. Configure a password policy that ensures the developer’s password cannot be changed.
Correct Answer: AE
Selected Answer: AE
AE ARE COORECT
upvoted 1 times
Selected Answer: AE
Selected Answer: AD
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 104/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has multiple AWS accounts that include compute workloads that cannot be interrupted. The company wants to obtain billing discounts
A. Resource tagging
B. Consolidated billing
C. Pay-as-you-go pricing
D. Spot Instances
Correct Answer: C
Selected Answer: B
B is correct
upvoted 1 times
B. Consolidated billing.
Consolidated billing allows you to combine multiple AWS accounts and aggregate the usage and spending across those accounts. This simplifies
billing and enables you to take advantage of volume discounts, which can lead to cost savings. Each account can still maintain its own resource
tagging and pricing options, so it's possible to manage compute workloads in individual accounts as needed.
upvoted 2 times
Vote for B
upvoted 1 times
You can combine the usage across all accounts in the organization to share the volume pricing discounts
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 105/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: B
You can use the consolidated billing feature in AWS Organizations to consolidate billing and payment for multiple AWS accounts. You can combine
the usage across all accounts in the organization to share the volume pricing discounts, Reserved Instance discounts, and Savings Plans. This can
result in a lower charge for your project, department, or company than with individual standalone accounts.
https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/consolidated-billing.html
upvoted 2 times
A user wants to allow applications running on an Amazon EC2 instance to make calls to other AWS services. The access granted must be secure.
A. Security groups
C. IAM roles
Correct Answer: A
Selected Answer: C
C - IAM Roles. Roles are used to allow users or services access to other AWS resources.
upvoted 2 times
Selected Answer: C
C. IAM roles
upvoted 1 times
AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. With IAM, you can centrally
manage permissions that control which AWS resources users can access.
You can use IAM features to securely provide credentials for applications that run on EC2 instances. These credentials provide permissions for your
application to access other AWS resources.
https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html
upvoted 2 times
"You can use roles to delegate access to users, applications, or services that don't normally have access to your AWS resources."
Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 106/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants a fully managed Windows file server for its Windows-based applications.
A. Amazon FSx
D. Amazon EMR
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 107/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS Storage Gateway type should the company use to meet this requirement?
A. Tape Gateway
B. Volume Gateway
Correct Answer: D
Selected Answer: C
GPT:
For a company looking to migrate its NFS (Network File System) on-premises workload to AWS, the appropriate AWS Storage Gateway type to use
is:
C. Amazon FSx File Gateway: Amazon FSx File Gateway provides on-premises applications with a seamless way to access fully managed file shares
in the cloud using the industry-standard NFS and SMB protocols. It allows you to store and retrieve files in Amazon FSx for Windows File Server
and Amazon FSx for Lustre, making it suitable for NFS on-premises workloads that need to be migrated to AWS. FSx File Gateway optimizes the
transfer of data to AWS, providing low-latency access to data in AWS for on-premises applications.
upvoted 1 times
Selected Answer: C
https://aws.amazon.com/storagegateway/file/fsx/
upvoted 1 times
Selected Answer: D
Amazon S3 File Gateway offers SMB or NFS-based access to data in Amazon S3 with local caching. It can be used for on-premises data-intensive
Amazon EC2-based applications that need file protocol access to S3 object storage.
upvoted 2 times
In summary, if the requirement is to migrate an NFS workload to AWS, "Amazon FSx File Gateway" is the preferred option. If the workload used
SMB, then "Amazon S3 File Gateway" could be considered.
upvoted 1 times
Selected Answer: D
"Amazon S3 File Gateway provides a seamless way to connect to the cloud in order to store application data files and backup images as durable
objects in Amazon S3 cloud storage. Amazon S3 File Gateway offers SMB or NFS-based access to data in Amazon S3 with local caching. It can be
used for on-premises data-intensive Amazon EC2-based applications that need file protocol access to S3 object storage."
Reference: https://aws.amazon.com/storagegateway/file/s3/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 108/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to track the activity in its AWS accounts, and needs to know when an API call is made against its AWS resources.
A. Amazon CloudWatch
B. Amazon Inspector
C. AWS CloudTrail
D. AWS IAM
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
"CloudTrail enables auditing, security monitoring, and operational troubleshooting by tracking user activity and API usage. CloudTrail logs,
continuously monitors, and retains account activity related to actions across your AWS infrastructure, giving you control over storage, analysis, and
remediation actions."
Reference: https://aws.amazon.com/cloudtrail/faqs/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 109/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has an uninterruptible application that runs on Amazon EC2 instances. The application constantly processes a backlog of files in an
Amazon Simple Queue Service (Amazon SQS) queue. This usage is expected to continue to grow for years.
What is the MOST cost-effective EC2 instance purchasing model to meet these requirements?
A. Spot Instances
B. On-Demand Instances
C. Savings Plans
D. Dedicated Hosts
Correct Answer: A
Selected Answer: C
Selected Answer: C
Answer C
upvoted 2 times
Savings Plans are a flexible pricing model that offer low prices on EC2 usage, in exchange for a commitment to a consistent amount of usage,
measured in dollars per hour, for a term of 1 or 3 years. Savings Plans can reduce your EC2 costs by up to 72% compared to On-Demand prices.
upvoted 1 times
Selected Answer: C
Key phrases to support C - Savings Plans: "uninterruptible application" and "usage is expected to continue to grow for years."
Selected Answer: C
uninterruptible application
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 110/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants an AWS service to provide product recommendations based on its customer data.
A. Amazon Polly
B. Amazon Personalize
C. Amazon Comprehend
D. Amazon Rekognition
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Selected Answer: B
"Amazon Personalize accelerates your digital transformation with ML, making it easier to integrate personalized recommendations into existing
websites, applications, email marketing systems, and more."
Reference: https://aws.amazon.com/personalize/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 111/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is planning its migration to the AWS Cloud. The company is identifying its capability gaps by using the AWS Cloud Adoption
Which phase of the cloud transformation journey includes these identification activities?
A. Envision
B. Align
C. Scale
D. Launch
Correct Answer: B
Selected Answer: B
Selected Answer: B
B is correct
"Align – identify capability gaps across the 6 AWS CAF Perspectives
which results in an Action Plan."
upvoted 1 times
Selected Answer: B
"Align phase focuses on identifying capability gaps across the six AWS CAF perspectives, identifying cross-organizational dependencies, and
surfacing stakeholder concerns and challenges."
Reference: https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/your-cloud-transformation-journey.html
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 112/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A social media company wants to protect its web application from common web exploits such as SQL injections and cross-site scripting.
A. Amazon Inspector
B. AWS WAF
C. Amazon GuardDuty
D. Amazon CloudWatch
Correct Answer: B
Selected Answer: B
B looks correct
upvoted 1 times
Selected Answer: B
"AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that allow, block, or
monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings,
SQL injection and cross-site scripting."
References: https://aws.amazon.com/waf/faqs/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 113/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images?
Correct Answer: A
Selected Answer: A
A is correct
Used to automate the creation of Virtual Machines or container images
• => Automate the creation, maintain, validate and test EC2 AMIs
• Can be run on a schedule (weekly, whenever packages are updated, etc…)
• Free service (only pay for the underlying resources)
upvoted 1 times
"EC2 Image Builder simplifies the creation, maintenance, validation, sharing, and deployment of Linux or Windows images for use with Amazon EC2
and on-premises."
Reference: https://aws.amazon.com/image-builder/faqs/
upvoted 1 times
A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities.
A. Amazon GuardDuty
B. Amazon Inspector
C. Amazon Detective
D. Amazon Cognito
Correct Answer: B
Selected Answer: B
"Amazon Inspector is an automated vulnerability management service that continually scans Amazon Elastic Compute Cloud (EC2), AWS Lambda
functions, and container workloads for software vulnerabilities and unintended network exposure."
Reference: https://aws.amazon.com/inspector/faqs/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 114/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to perform data processing once a week that typically takes about 5 hours to complete.
Which AWS service should the company use for this workload?
A. AWS Lambda
B. Amazon EC2
C. AWS CodeDeploy
D. AWS Wavelength
Correct Answer: B
Selected Answer: B
The best AWS service for a workload that needs to be processed once a week for about 5 hours is Amazon EC2.
AWS Lambda is a serverless computing service that runs your code without provisioning or managing servers. However, Lambda functions have a
maximum execution time of 15 minutes. Therefore, Lambda is not suitable for workloads that need to run for longer than 15 minutes.
Amazon EC2 is a scalable computing service that provides instances with varying capabilities and pricing options. You can choose an EC2 instance
that is right for your data processing job and then terminate the instance when the job is complete. This will help you to save money on your AWS
bill.
upvoted 4 times
Selected Answer: B
AWS Lambda functions can be configured to run up to 15 minutes per execution. You can set the timeout to any value between 1 second and 15
minutes.
https://aws.amazon.com/lambda/faqs/?nc1=h_ls
upvoted 2 times
Selected Answer: A
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 115/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?
B. AWS CloudTrail
Correct Answer: C
Selected Answer: C
Selected Answer: C
VPC flow logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow logs
data can be published to either Amazon CloudWatch Logs or Amazon S3. You can monitor your VPC flow logs to gain operational visibility about
your network dependencies and traffic patterns, detect anomalies and prevent data leakage, or troubleshoot network connectivity and
configuration issues.
https://aws.amazon.com/vpc/faqs/#:~:text=VPC%20flow%20logs%20is%20a,network%20interfaces%20in%20your%20VPC.
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 116/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to design a centralized storage system to manage the configuration data and passwords for its critical business applications.
Which AWS service or capability will meet these requirements MOST cost-effectively?
C. AWS Config
D. Amazon S3
Correct Answer: A
Selected Answer: B
if your use case involves non-sensitive configuration data and you want a cost-effective solution, AWS Systems Manager Parameter Store might be
the preferred choice. If you need additional security features for sensitive information, AWS Secrets Manager could be more suitable despite
potentially higher costs.
upvoted 1 times
Selected Answer: A
"Parameter Store, a capability of AWS Systems Manager, provides secure, hierarchical storage for configuration data management and secrets
management. You can store data such as passwords, database strings, Amazon Machine Image (AMI) IDs, and license codes as parameter values."
Reference: https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html
upvoted 2 times
Selected Answer: A
A is correct...
AWS Systems Manager provides a centralized store to manage your configuration data, whether plain-text data such as database strings or secrets
such as passwords. This allows you to separate your secrets and configuration data from your code.
https://aws.amazon.com/systems-
manager/features/#:~:text=AppConfig%20feature%20page.-,Parameter%20Store,configuration%20data%20from%20your%20code.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 117/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company plans to deploy containers on AWS. The company wants full control of the compute resources that host the containers. Which AWS
B. AWS Fargate
C. Amazon EC2
Correct Answer: C
Selected Answer: D
Amazon ECS with EC2 Launch Type: ECS allows you to run containers on AWS. When you use the EC2 launch type with ECS, you have full control
over the underlying EC2 instances that host your containers. This means you can choose the instance types, configure the instances, and manage
the scaling and monitoring of these instances as per your requirements.
upvoted 1 times
Selected Answer: C
C. Amazon EC2
Amazon EC2 (Elastic Compute Cloud) provides virtual machines (EC2 instances) that allow you to have full control over the compute resources.
When you deploy containers on EC2 instances, you have the flexibility to configure the instances according to your specific requirements, including
the type of instance, storage, networking, and other parameters.
upvoted 1 times
In both ECS and EKS, you define and manage the infrastructure (EC2 instances) where your containers run, giving you control over the compute
resources. The choice between ECS and EKS depends on whether you prefer a fully managed service (ECS) or if you want to manage the Kubernetes
control plane yourself (EKS).
upvoted 2 times
D looks correct
upvoted 1 times
Selected Answer: D
Amazon ECS
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 118/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature allows users to create new AWS accounts, group multiple accounts to organize workflows, and apply policies to
groups of accounts?
C. AWS CloudFormation
D. AWS Organizations
Correct Answer: D
Selected Answer: D
"AWS Organizations provides you with the capability to centrally manage and govern your cloud environment. You can manage and organize your
accounts under a single bill, set central policies and configuration requirements for your entire organization, create custom permissions or
capabilities within the organization, and delegate responsibilities to other accounts so they can manage on behalf of the organization."
Reference: https://aws.amazon.com/organizations/features/
upvoted 1 times
A company wants to store and retrieve files in Amazon S3 for its existing on-premises applications by using industry-standard file system
protocols.
A. AWS DataSync
Correct Answer: C
"Amazon S3 File Gateway provides a seamless way to connect to the cloud in order to store application data files and backup images as durable
objects in Amazon S3 cloud storage. Amazon S3 File Gateway offers SMB or NFS-based access to data in Amazon S3 with local caching. It can be
used for on-premises data-intensive Amazon EC2-based applications that need file protocol access to S3 object storage."
Reference: https://aws.amazon.com/storagegateway/file/s3/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 119/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature should the company use to meet this requirement?
A. AWS WAF
B. Network ACLs
C. Security groups
Correct Answer: A
Selected Answer: A
AWS WAF
upvoted 1 times
Selected Answer: A
A is correct
"Protects from common attack - SQL injection and Cross-Site Scripting (XSS)"
upvoted 1 times
"AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that allow, block, or
monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings,
SQL injection and cross-site scripting."
References: https://aws.amazon.com/waf/faqs/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 120/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants a unified tool to provide a consistent method to interact with AWS services.
A. AWS CLI
C. AWS Cloud9
Correct Answer: A
Selected Answer: A
"The AWS Command Line Interface (AWS CLI) is a unified tool to manage your AWS services. With just one tool to download and configure, you can
control multiple AWS services from the command line and automate them through scripts."
Reference: https://aws.amazon.com/cli/
upvoted 1 times
A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service
Which AWS service can the company use to meet these requirements?
A. AWS Shield
B. AWS WAF
Correct Answer: C
C is correct
Analyze your AWS accounts and provides
recommendation on 5 categories
• Cost optimization
• Performance
• Security
• Fault tolerance
• Service limits
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 121/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which perspective in the AWS Cloud Adoption Framework (AWS CAF) includes capabilities for configuration management and patch
management?
A. Platform
B. Operations
C. Security
D. Governance
Correct Answer: B
Selected Answer: B
Reference: https://docs.aws.amazon.com/whitepapers/latest/overview-aws-cloud-adoption-framework/operations-perspective.html
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 122/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which Amazon EC2 instance purchasing options meet these requirements MOST cost-effectively? (Choose two.)
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Saving Plans
E. Dedicated Hosts
Correct Answer: BE
Selected Answer: BD
Selected Answer: BD
B&D, because it is predictable, non-interruptable (so non-Spot) and most cost-effective (dedicated & on-demand cost more).
upvoted 1 times
Selected Answer: BD
B&D is correct
upvoted 1 times
E is not cost-effectively
upvoted 1 times
uninterruptable
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 123/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Instances
Correct Answer: C
Selected Answer: A
A is correct
• On-Demand Instances – short workload, predictable pricing, pay by second
upvoted 1 times
On Demand (because Spot is unintteruptable and Reserved is expensive for the 1 year or 3 year contract)
upvoted 1 times
B is correct.
The keyword is uninterruptable and 24 hours.
Amazon EC2 Reserved Instances (RI) provide a significant discount (up to 72%) compared to On-Demand pricing.
Savings Plans is a flexible pricing model that can help you reduce your bill by up to 72% compared to On-Demand prices, in exchange for a
commitment to a consistent amount of usage (measured in $/hour) for a 1- or 3-year term.
The best solution for this questions is using RI + Savings Plans
upvoted 2 times
C - Spot Instances is NOT correct because one of the requirements is "uninterruptible workload." "Spot Instances are a cost-effective choice if you
can be flexible about when your applications run and if your applications can be interrupted."
Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html
B - Reserved Instances is also NOT correct because the workload only "runs once a year for 24 hours." Why would you commit to either a 1 year or
3 year plan only to run it once?
The correct answer is A - On-Demand Instances. AWS "recommends that you use On-Demand Instances for applications with short-term, irregular
workloads that cannot be interrupted."
Reference: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-on-demand-instances.html
upvoted 2 times
Selected Answer: A
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 124/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Selected Answer: B
because uninterruptable
upvoted 2 times
Which option is a shared responsibility between AWS and its customers under the AWS shared responsibility model?
C. Patch management
Correct Answer: C
C is correct
upvoted 1 times
Shared Controls
"AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and
applications."
Reference: https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 125/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to migrate its on-premises workloads to the AWS Cloud. The company wants to separate workloads for chargeback to different
departments.
Which AWS services or features will meet these requirements? (Choose two.)
A. Placement groups
B. Consolidated billing
C. Edge locations
D. AWS Config
Correct Answer: BE
Selected Answer: BE
B. Consolidated Billing
Consolidated billing is a feature of AWS Organizations that allows you to combine billing for multiple AWS accounts. With consolidated billing,
each department can have its own AWS account for tracking and managing its resources separately, while the company enjoys the convenience of
a single payment method for all these accounts. This setup makes it easier to track costs and implement chargeback mechanisms.
E. Multiple AWS Accounts
Creating multiple AWS accounts, one for each department, is an effective way to segregate resources, manage permissions, and track costs
separately. This approach enhances security by limiting the scope of access and impact of changes, and it simplifies the process of attributing costs
to the right department. Combined with consolidated billing, it provides both organizational flexibility and centralized financial control.
upvoted 1 times
Which task is a responsibility of AWS, according to the AWS shared responsibility model?
A. Enable client-side encryption for objects that are stored in Amazon S3.
B. Configure IAM security policies to comply with the principle of least privilege.
Correct Answer: D
"AWS responsibility “Security of the Cloud” - AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS
Cloud. This infrastructure is composed of the hardware, software, networking, and facilities that run AWS Cloud services."
Reference: https://aws.amazon.com/compliance/shared-responsibility-model/
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 126/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
B. Pay-as-you-go pricing
Correct Answer: A
Selected Answer: B
Selected Answer: B
Obviously B, pay-as-you-go pricing. It is the same in every cloud platform e.g. Azure, GCP, AWS.
Come on, we pay for this site here and they make so obvious mistakes... :(
upvoted 1 times
The answer is given In the doc "Six advantages of cloud computing." The benefit from massive economies of scale is pay-as-you-go pricing.
Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 1 times
Pay as you go isn't an option in the "Six advantages of cloud computing" document:
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
upvoted 1 times
Selected Answer: B
Definitely B. Pay-as-you-go.
upvoted 2 times
Trade fixed expense for variable expense and not vice versa, so option B
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 127/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which option is an AWS Cloud Adoption Framework (AWS CAF) business perspective capability?
A. Culture evolution
B. Event management
C. Data monetization
D. Platform architecture
Correct Answer: A
Selected Answer: C
Data Monetization: This falls under the Business Perspective of the AWS CAF, which focuses on capabilities related to the financial aspects of cloud
adoption and the ability to transform data into valuable business insights, products, or services. Data monetization involves strategies to generate
measurable economic benefits from available data sources (including cloud-based data), which aligns with business objectives and outcomes.
upvoted 1 times
Selected Answer: A
A is the correct answer. Culture evolution: This is a key capability from a business perspective as it involves the necessary cultural changes within an
organization to embrace cloud adoption.
upvoted 1 times
C is correct
upvoted 1 times
Selected Answer: C
Selected Answer: C
Selected Answer: C
Data monetization
upvoted 4 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 128/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is assessing its AWS Business Support plan to determine if the plan still meets the company’s needs. The company is considering
Which additional benefit will the company receive with AWS Enterprise Support?
B. Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Which pricing model will interrupt a running Amazon EC2 instance if capacity becomes temporarily unavailable?
A. On-Demand Instances
C. Spot Instances
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 129/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which options are AWS Cloud Adoption Framework (AWS CAF) security perspective capabilities? (Choose two.)
A. Observability
C. Incident response
D. Infrastructure protection
Correct Answer: CD
Selected Answer: CD
CD are correct because Observability, Incident & Problem Management and Availability & Continuity are from Operations Perspective.
upvoted 1 times
Selected Answer: CD
A company wants to run its workload on Amazon EC2 instances for more than 1 year. This workload will run continuously.
Which option offers a discounted hourly rate compared to the hourly rate of On-Demand Instances?
B. Dedicated Hosts
Correct Answer: C
C looks correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 130/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity?
A. Agility
B. Elasticity
C. Reliability
D. Durability
Correct Answer: B
Selected Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 131/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS services can a company use to achieve a loosely coupled architecture? (Choose two.)
A. Amazon WorkSpaces
C. Amazon Connect
Correct Answer: BD
Selected Answer: BE
Selected Answer: BE
**B. Amazon Simple Queue Service (Amazon SQS):** SQS is a fully managed message queuing service that enables decoupling of the components
in a distributed system. It allows components to communicate asynchronously, promoting loose coupling.
**E. AWS Step Functions:** Step Functions is a serverless function orchestrator that allows you to coordinate multiple AWS services into serverless
workflows. It helps in creating loosely coupled, flexible systems by defining workflows that connect various services.
Selected Answer: BE
Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?
A. AWS Budgets
D. AWS Organizations
Correct Answer: A
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 132/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company plans to migrate to the AWS Cloud. The company wants to use the AWS Cloud Adoption Framework (AWS CAF) to define and track
Which AWS CAF governance perspective capability will meet these requirements?
A. Benefits management
B. Risk management
Correct Answer: A
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 133/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to quickly and securely move files over long distances between its client and an Amazon S3 bucket.
A. S3 Versioning
B. S3 Transfer Acceleration
C. S3ACLs
D. S3 Intelligent-Tiering
Correct Answer: B
S3 Transfer Acceleration is a feature that utilizes Amazon CloudFront's globally distributed edge locations to accelerate the upload of objects to an
S3 bucket. It optimizes data transfer by using Amazon's backbone network, reducing latency and improving speeds when transferring files over
long distances.
upvoted 1 times
The Benefits management capability within the AWS CAF governance perspective focuses on defining, tracking, and realizing the business
outcomes or benefits that an organization aims to achieve through its cloud adoption and transformation initiatives.
upvoted 1 times
Selected Answer: B
B is correct
Increase transfer speed by transferring file to an AWS edge location
which will forward the data to the S3 bucket in the target region
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 134/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to continuously run an experimental workload on an Amazon EC2 instance and stop the instance after 12 hours.
Which instance purchasing option will meet this requirement MOST cost-effectively?
A. On-Demand Instances
B. Reserved Instances
C. Spot Instances
D. Dedicated Instances
Correct Answer: A
Selected Answer: A
Key Sentence " needs to continuously run" - so continuously and most cost effective is On Demand
upvoted 1 times
Selected Answer: A
A is correct
upvoted 1 times
Which cloud transformation journey phase of the AWS Cloud Adoption Framework (AWS CAF) focuses on demonstrating how the cloud helps
A. Scale
B. Envision
C. Align
D. Launch
Correct Answer: B
The "Scale" phase in the AWS CAF concentrates on demonstrating the value and benefits of the cloud by showcasing how cloud adoption
accelerates and amplifies business outcomes. It involves measuring and evaluating the impact of cloud adoption on the organization's goals,
productivity, efficiency, agility, and innovation.
upvoted 1 times
Selected Answer: B
B is correct
Envision – demonstrate how the Cloud will accelerate business
outcomes by identifying transformation opportunities and create a
foundation for your digital transformation
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 135/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which option is a customer responsibility under the AWS shared responsibility model?
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
A company wants its Amazon EC2 instances to operate in a highly available environment, even if there is a natural disaster in a particular
geographic area.
Correct Answer: A
Selected Answer: A
A looks correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 136/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to modernize and convert a monolithic application into microservices. The company wants to move the application to AWS.
A. Rehost
B. Replatform
C. Repurchase
D. Refactor
Correct Answer: D
Selected Answer: D
It should be D. Refactor:
Lift and shift—moving applications to the cloud as-is. This is also sometimes referred to as rehosting. Refactor—modifying applications to better
support the cloud environment.Replatform—moving applications to the cloud without major changes, but taking advantage of benefits of the
cloud environment.Rebuild—rewrite the application from scratch.Replace—retire the application and replace it with a new cloud-native application.
upvoted 1 times
A systems administrator created a new IAM user for a developer and assigned the user an access key instead of a user name and password. What
Correct Answer: C
Selected Answer: C
C is correct
"Use Access Keys for Programmatic Access (CLI / SDK)"
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 137/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. Amazon CloudFront
B. Availability Zone
C. VPC
D. AWS Outposts
Correct Answer: B
A company is moving an on-premises data center to the AWS Cloud. The company must migrate 50 petabytes of file storage data to AWS with the
Which AWS service or resource should the company use to meet these requirements?
A. AWS Snowmobile
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 138/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has an application with robust hardware requirements. The application must be accessed by students who are using lightweight, low-
cost laptops.
Which AWS service will help the company deploy the application without investing in backend infrastructure or high-end client hardware?
B. AWS AppSync
C. Amazon WorkLink
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
A company wants to query its server logs to gain insights about its customers’ experiences.
A. Amazon Aurora
D. Amazon S3
Correct Answer: D
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 139/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following is a recommended design principle for AWS Cloud architecture?
B. Build a single application component that can handle all the application functionality.
Correct Answer: D
Selected Answer: D
D 가 정답입니다.
upvoted 1 times
Which AWS service helps users audit API activity across their AWS account?
A. AWS CloudTrail
B. Amazon Inspector
C. AWS WAF
D. AWS Config
Correct Answer: A
Which task is a customer’s responsibility, according to the AWS shared responsibility model?
Correct Answer: A
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 140/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to automatically add and remove Amazon EC2 instances. The company wants the EC2 instances to adjust to varying workloads
dynamically.
A. Amazon DynamoDB
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
A user wants to securely automate the management and rotation of credentials that are shared between applications, while spending the least
A. AWS CloudHSM
D. Server-side encryption
Correct Answer: C
Selected Answer: C
AWS Secrets Manager makes it easier to rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.
upvoted 1 times
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 141/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?
A. Amazon GuardDuty
B. Amazon Macie
C. Amazon Inspector
D. AWS Shield
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Which actions are best practices for an AWS account root user? (Choose two.)
D. Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user.
Correct Answer: CD
Selected Answer: CD
CD are correct
upvoted 2 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 142/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company is running a critical workload on an Amazon RDS DB instance. The company needs the DB instance to be highly available with a
C. Take frequent snapshots of the DB instance. Store the snapshots in Amazon S3.
Correct Answer: D
Selected Answer: D
D is correct.
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.MultiAZSingleStandby.html#Concepts.MultiAZ.Failover
upvoted 1 times
A company plans to migrate its application to AWS and run the application on Amazon EC2 instances. The application will have continuous usage
for 1 year.
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. Reserved Instances
B. Spot Instances
C. On-Demand Instances
D. Dedicated Hosts
Correct Answer: A
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 143/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to transfer data between an Amazon S3 bucket and an on-premises application.
Who is responsible for the security of this data, according to the AWS shared responsibility model?
A. The company
B. AWS
C. Firewall vendor
Correct Answer: A
Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and
A. Security
B. Reliability
C. Performance efficiency
D. Cost optimization
Correct Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 144/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to identify Amazon S3 buckets that are shared with another AWS account.
C. Amazon CloudWatch
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
Which AWS service gives users the ability to build interactive business intelligence dashboards that include machine learning insights?
A. Amazon Athena
B. Amazon Kendra
C. Amazon QuickSight
D. Amazon Redshift
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 145/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which of the following is an AWS value proposition that describes a user’s ability to scale infrastructure based on demand?
A. Speed of innovation
B. Resource elasticity
C. Decoupled architecture
D. Global deployment
Correct Answer: B
Which action is a security best practice for access to sensitive data that is stored in an Amazon S3 bucket?
B. Use IAM roles for applications that require access to the S3 bucket.
Correct Answer: B
Selected Answer: B
ChatGPT: A security best practice for managing access to sensitive data stored in an Amazon S3 bucket is B. Use IAM roles for applications that
require access to the S3 bucket.
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 146/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of
A. The ability the ensure high availability by deploying workloads to multiple regions
D. The ability to provision and deprovision resources quickly with minimal effort
Correct Answer: D
A company needs a central user portal so that users can log in to third-party business applications that support Security Assertion Markup
B. Amazon Cognito
D. AWS CLI
Correct Answer: C
Selected Answer: C
Web-based single sign-on (SSO) to the AWS Management Console from your organization. Users can sign in to a portal in your organization
hosted by a SAML 2.0–compatible IdP, select an option to go to AWS, and be redirected to the console without having to provide additional sign-in
information. You can use a third-party SAML IdP to establish SSO access to the console or you can create a custom IdP to enable console access for
your external users.
upvoted 1 times
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 147/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service should users use to learn about AWS service availability and operations?
A. Amazon EventBridge
Correct Answer: D
Selected Answer: D
ChatGPT: For learning about AWS service availability and operations, users should use D. AWS Health Dashboard.
The AWS Health Dashboard provides real-time information on the health of AWS services. It offers a personalized view of the performance and
availability of the AWS services that an account uses, along with alerts about scheduled maintenance, security vulnerabilities, and other important
events. This makes it the ideal choice for staying informed about the operational status and health of AWS services.
upvoted 1 times
Should be B
upvoted 1 times
The AWS Health Dashboard provides real-time information on the health of AWS services. It offers a personalized view of the performance and
availability of the AWS services that an account uses, along with alerts about scheduled maintenance, security vulnerabilities, and other
important events. This makes it the ideal choice for staying informed about the operational status and health of AWS services.
upvoted 1 times
Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?
B. Amazon Inspector
D. NAT gateway
Correct Answer: A
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 148/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
What is the customer ALWAYS responsible for managing, according to the AWS shared responsibility model?
A. Software licenses
B. Networking
C. Customer data
D. Encryption keys
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
B. AWS Artifact
Correct Answer: B
Which AWS service enables users to check for vulnerabilities on Amazon EC2 instances by using predefined assessment templates?
A. AWS WAF
C. Amazon Inspector
D. AWS Shield
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 149/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company plans to migrate to the AWS Cloud. The company is gathering information about its on-premises infrastructure and requires
A. AWS DataSync
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
Selected Answer: C
AWS Application Discovery Service collects both server and database configuration information. Server information includes hostnames, IP
addresses, MAC addresses, as well as the resource allocation and utilization details of key resources such as CPU, network, memory, and disk.
upvoted 1 times
Correct Answer: C
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 150/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS tool or set of resources should the company use to analyze and assess its readiness for migration?
D. AWS Budgets
Correct Answer: A
A. AWS Cloud Adoption Framework (AWS CAF): This framework helps organizations understand how cloud adoption transforms the way they
work and provides a structure to identify and address gaps in skills and processes. It offers guidance that supports each business unit's cloud
adoption journey, helping to create and implement an efficient and effective plan for the cloud migration.
C. AWS Well-Architected Framework: This framework helps cloud architects build secure, high-performing, resilient, and efficient infrastructure
for their applications. It focuses more on the architectural best practices than on organizational readiness for cloud adoption.
upvoted 1 times
Which of the following describes some of the core functionality of Amazon S3?
A. Amazon S3 is a high-performance block storage service that is designed for use with Amazon EC2.
B. Amazon S3 is an object storage service that provides high-level performance, security, scalability, and data availability.
C. Amazon S3 is a fully managed, highly reliable, and scalable file storage system that is accessible over the industry-standard SMB protocol.
D. Amazon S3 is a scalable, fully managed elastic NFS for use with AWS Cloud services and on-premises resources.
Correct Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 151/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS benefit is demonstrated by on-demand technology services that enable companies to replace upfront fixed expenses with variable
expenses?
A. High availability
B. Economies of scale
C. Pay-as-you-go pricing
D. Global reach
Correct Answer: C
Which AWS services or features enable users to connect on-premises networks to a VPC? (Choose two.)
A. AWS VPN
D. VPC peering
E. Amazon CloudFront
Correct Answer: AC
A user needs to quickly deploy a nonrelational database on AWS. The user does not want to manage the underlying hardware or the database
software.
A. Amazon RDS
B. Amazon DynamoDB
C. Amazon Aurora
D. Amazon Redshift
Correct Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 152/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which actions are examples of a company’s effort to rightsize its AWS resources to control cloud costs? (Choose two.)
B. Base the selection of Amazon EC2 instance types on past utilization patterns.
C. Use Amazon S3 Lifecycle policies to move objects that users access infrequently to lower-cost storage tiers.
Correct Answer: BC
Which AWS service or feature can a company use to apply security rules to specific Amazon EC2 instances?
A. Network ACLs
B. Security groups
D. AWS WAF
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
Which design principles support the reliability pillar of the AWS Well-Architected Framework? (Choose two.)
B. Enable traceability.
Correct Answer: CE
Selected Answer: CE
CE are correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 153/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which type of transfer of that data would result in no cost for the company?
Correct Answer: A
A company wants to create templates that the company can reuse to deploy multiple AWS resources.
Which AWS service or feature can the company use to meet this requirement?
A. AWS Marketplace
C. AWS CloudFormation
D. AWS OpsWorks
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
A company is building an application that requires the ability to send, store, and receive messages between application components. The
company has another requirement to process messages in first-in, first-out (FIFO) order.
Correct Answer: D
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 154/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or feature is a browser-based, pre-authenticated service that can be launched directly from the AWS Management Console?
A. AWS API
B. AWS Lightsail
C. AWS Cloud9
D. AWS CloudShell
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
A company wants to migrate its database to a managed AWS service that is compatible with PostgreSQL.
A. Amazon Athena
B. Amazon RDS
C. Amazon EC2
D. Amazon DynamoDB
E. Amazon Aurora
Correct Answer: BE
Selected Answer: BE
BE are correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 155/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet
connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later.
Which AWS service should the company use to meet these requirements?
B. Amazon Lightsail
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
A company hosts an application on multiple Amazon EC2 instances. The application uses Amazon Simple Notification Service (Amazon SNS) to
send messages.
Which AWS service or feature will give the application permission to access required AWS services?
B. IAM roles
D. Amazon GuardDuty
Correct Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 156/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud.
A. AWS CloudFormation
C. Amazon EC2
D. AWS OpsWorks
Correct Answer: B
Selected Answer: B
AWS Elastic Beanstalk is an easy-to-use service for deploying and scaling web applications and services developed with Java, . NET, PHP, Node. js,
Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and Internet Information Services (IIS).
upvoted 1 times
A company needs a content delivery network that provides secure delivery of data, videos, applications, and APIs to users globally with low
A. Amazon CloudFront
C. Amazon S3
Correct Answer: A
Which AWS service or feature can the company use to purchase the software?
D. AWS Marketplace
Correct Answer: D
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 157/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs fully managed, highly reliable, and scalable file storage that is accessible over the Server Message Block (SMB) protocol.
A. Amazon S3
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
A company needs to centrally configure and manage Amazon VPC security groups across multiple AWS accounts within an organization in AWS
Organizations.
Which AWS service should the company use to meet these requirements?
B. Amazon GuardDuty
C. Amazon Detective
D. AWS WAF
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 158/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which task is a responsibility of AWS, according to the AWS shared responsibility model?
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
A company has an Amazon EC2 instance in a private subnet. The company wants to initiate a connection to the internet to pull operating system
updates while preventing traffic from the internet from accessing the EC2 instance.
A. VPC endpoint
B. NAT gateway
C. Amazon PrivateLink
D. VPC peering
Correct Answer: B
Selected Answer: B
B is correct
"NAT Gateways (AWS-managed) &
NAT Instances (self-managed) allow
your instances in your Private Subnets
to access the internet while remaining
private"
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 159/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which actions are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
Correct Answer: AD
Selected Answer: AD
AD are correct
upvoted 1 times
A company is storing data that will not be frequently accessed in the AWS Cloud. If the company needs to access the data, the data needs to be
retrieved within 12 hours. The company wants a solution that is cost-effective for storage costs for each gigabyte.
A. S3 Standard
Correct Answer: B
Selected Answer: B
B is correct
Amazon S3 Glacier Flexible Retrieval (formerly Amazon S3 Glacier):
• Expedited (1 to 5 minutes), Standard (3 to 5 hours), Bulk (5 to 12 hours) – free
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 160/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or resource can be used to identify services that have been used by a user within a specified date range?
Correct Answer: D
Selected Answer: D
D looks correct
upvoted 1 times
A company needs to engage third-party consultants to help maintain and support its AWS environment and the company’s business needs.
A. AWS Support
B. AWS Organizations
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 161/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to create Amazon QuickSight dashboards every week by using its billing data.
Which AWS feature or tool can the company use to meet these requirements?
A. AWS Budgets
Correct Answer: C
Selected Answer: C
C looks correct
upvoted 1 times
A company is planning to move data backups to the AWS Cloud. The company needs to replace on-premises storage with storage that is cloud-
B. AWS Snowcone
C. AWS Backup
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 162/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company needs to organize its resources and track AWS costs on a detailed level. The company needs to categorize costs by business
A. Access the AWS Cost Management console to organize resources, set an AWS budget, and receive notifications of unintentional usage.
B. Use tags to organize the resources. Activate cost allocation tags to track AWS costs on a detailed level.
C. Create Amazon CloudWatch dashboards to visually organize and track costs individually.
D. Access the AWS Billing and Cost Management dashboard to organize and track resource consumption on a detailed level.
Correct Answer: B
A company needs to plan, schedule, and run hundreds of thousands of computing jobs on AWS.
Which AWS service can the company use to meet this requirement?
D. AWS Batch
Correct Answer: D
Selected Answer: D
D is correct
"AWS Batch
Fully managed batch processing at any scale
• Efficiently run 100,000s of computing batch jobs on AWS
• A “batch” job is a job with a start and an end (opposed to continuous)
• Batch will dynamically launch EC2 instances or Spot Instances
• AWS Batch provisions the right amount of compute / memory"
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 163/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS services or features provide high availability and low latency by enabling failover across different AWS Regions? (Choose two.)
A. Amazon Route 53
Correct Answer: AD
Selected Answer: AD
AD are correct
upvoted 1 times
Which of the following is a way to use Amazon EC2 Auto Scaling groups to scale capacity in the AWS Cloud?
Correct Answer: A
Selected Answer: A
A is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 164/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Correct Answer: BD
Selected Answer: BD
BD are correct
upvoted 1 times
Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline
mitigations?
A. Amazon Inspector
D. AWS Shield
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
Which AWS service allows users to model and provision AWS resources using common programming languages?
A. AWS CloudFormation
B. AWS CodePipeline
Correct Answer: C
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 165/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which Amazon EC2 instance pricing model can provide discounts of up to 90%?
A. Reserved Instances
B. On-Demand
C. Dedicated Hosts
D. Spot Instances
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
Which of the following acts as an instance-level firewall to control inbound and outbound access?
B. Security groups
Correct Answer: B
Selected Answer: B
B is correct
"Security Groups: Firewall attached to the EC2 instance"
upvoted 1 times
A company must be able to develop, test, and launch an application in the AWS Cloud quickly.
Correct Answer: D
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 166/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company has teams that have different job roles and responsibilities. The company’s employees often change teams. The company needs to
manage permissions for the employees so that the permissions are appropriate for the job responsibilities.
Which IAM resource should the company use to meet this requirement with the LEAST operational overhead?
B. IAM roles
Correct Answer: B
Which AWS service can a company use to securely store and encrypt passwords for a database?
A. AWS Shield
D. Amazon Cognito
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?
C. AWS Artifact
D. Amazon Inspector
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 167/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which encryption types can be used to protect objects at rest in Amazon S3? (Choose two.)
C. TLS
D. SSL
Correct Answer: AB
A company wants to integrate its online shopping website with social media login credentials.
Which AWS service can the company use to make this integration?
C. Amazon Cognito
Correct Answer: C
Which AWS service is used to track, record, and audit configuration changes made to AWS resources?
A. AWS Shield
B. AWS Config
C. AWS IAM
D. Amazon Inspector
Correct Answer: B
Selected Answer: B
B is correct
"AWS Config
• Helps with auditing and recording compliance of your AWS resources
• Helps record configurations and changes over time"
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 168/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A customer runs an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds.
A. 3 hours, 5 minutes
C. 3 hours, 6 minutes
D. 4 hours
Correct Answer: C
D. 4 hours
upvoted 1 times
Selected Answer: B
B is correct
"On-demand instances:
• Minimum of 60s
• Pay per second (Linux/Windows) or per hour (other)"
upvoted 1 times
Which AWS service can help protect the company website against these attacks?
B. AWS Amplify
C. AWS Shield
D. Amazon GuardDuty
Correct Answer: C
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 169/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants a customized assessment of its current on-premises environment. The company wants to understand its projected running
B. Amazon Inspector
D. Migration Evaluator
Correct Answer: D
A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate
the creation of AWS accounts, apply service control policies (SCPs), and simplify billing processes.
Which AWS service or tool should the company use to meet these requirements?
A. AWS Organizations
B. Cost Explorer
C. AWS Budgets
Correct Answer: A
A company is hosting an application in the AWS Cloud. The company wants to verify that underlying AWS services and general AWS infrastructure
Which combination of AWS services can the company use to gather the required information? (Choose two.)
Correct Answer: AD
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 170/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service or tool should the company use to meet this requirement?
Correct Answer: C
A. Security validation
B. Rightsizing
C. Elasticity
D. Global reach
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
A company hosts a large amount of data in AWS. The company wants to identify if any of the data should be considered sensitive.
A. Amazon Inspector
B. Amazon Macie
D. Amazon CloudWatch
Correct Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 171/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A user has a stateful workload that will run on Amazon EC2 for the next 3 years.
A. On-Demand Instances
B. Reserved Instances
C. Dedicated Instances
D. Spot Instances
Correct Answer: B
Who enables encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?
A. AWS Support
B. AWS customers
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
C. Assess the compliance of AWS resource configurations with policies and guidelines.
D. Ensure that Amazon EC2 instances are patched with the latest security updates.
Correct Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 172/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which AWS service requires the company to update and patch the guest operating system?
A. Amazon DynamoDB
B. Amazon S3
C. Amazon EC2
D. Amazon Aurora
Correct Answer: C
Which AWS service or feature will search for and identify AWS resources that are shared externally?
D. AWS Fargate
Correct Answer: C
Selected Answer: C
C is correct
upvoted 1 times
A company is migrating its workloads to the AWS Cloud. The company must retain full control of patch management for the guest operating
Which AWS service should the company use to meet these requirements?
A. Amazon DynamoDB
B. Amazon EC2
C. AWS Lambda
D. Amazon RDS
Correct Answer: B
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 173/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A. Basic Support
B. Developer Support
C. Business Support
D. Enterprise Support
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
Which AWS service can a company use to visually design and build serverless applications?
A. AWS Lambda
B. AWS Batch
Correct Answer: C
Selected Answer: C
C is correct
"AWS Application Composer helps you visually compose and configure AWS services into serverless applications backed by infrastructure as code."
upvoted 1 times
AWS Application Composer helps to streamline and accelerate the architecture, configuration, and build of serverless applications.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 174/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security
D. AWS Marketplace
Correct Answer: D
Selected Answer: D
D is correct
upvoted 1 times
Which option is an AWS responsibility under the AWS shared responsibility model?
Correct Answer: C
A company wants to migrate its PostgreSQL database to AWS. The company does not use the database frequently.
Which AWS service or resource will meet these requirements with the LEAST management overhead?
Correct Answer: D
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 175/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
A. Classify data.
Correct Answer: DE
A company wants to create a globally accessible ecommerce platform for its customers. The company wants to use a highly available and
A. Amazon EC2
B. Amazon VPC
C. Amazon Route 53
D. Amazon RDS
Correct Answer: C
Which maintenance task is the customer’s responsibility, according to the AWS shared responsibility model?
Correct Answer: D
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 176/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to improve its security posture by reviewing user activity through API calls.
A. AWS WAF
B. Amazon Detective
C. Amazon CloudWatch
D. AWS CloudTrail
Correct Answer: D
A company is migrating to the AWS Cloud and plans to run experimental workloads for 3 to 6 months on AWS.
Correct Answer: D
A company that has AWS Enterprise Support is launching a new version of a popular product in 2 months. The company expects a large increase
Which action should the company take to assess its readiness to scale for this launch?
Correct Answer: B
Selected Answer: B
B is correct
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 177/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to launch multiple workloads on AWS. Each workload is related to a different business unit. The company wants to separate and
Which solution will meet these requirements with the LEAST operational overhead?
A. Use AWS Organizations and create one account for each business unit.
C. Use an Amazon DynamoDB table to record costs for each business unit.
D. Use the AWS Billing console to assign owners to resources and track costs.
Correct Answer: A
A company wants a time-series database service that makes it easier to store and analyze trillions of events each day.
A. Amazon Neptune
B. Amazon Timestream
C. Amazon Forecast
Correct Answer: B
Selected Answer: B
B is correct
"Amazon Timestream is a fast, scalable, and serverless time-series database service that makes it easier to store and analyze trillions of events per
day up to 1,000 times faster. Amazon Timestream automatically scales up or down to adjust capacity and performance, so that you don’t have to
manage the underlying infrastructure."
upvoted 1 times
Amazon Timestream is a fast, scalable, and serverless time series database service for IoT and operational applications that makes it easy to store
and analyze trillions of events per day up to 1,000 times faster and at as little as 1/10th the cost of relational databases.
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 178/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
Which option is a shared control between AWS and the customer, according to the AWS shared responsibility model?
A. Configuration management
Correct Answer: D
Selected Answer: A
A is correct
"Shared controls:
• Patch Management, Configuration Management, Awareness & Training"
upvoted 1 times
Selected Answer: A
Shared Controls – Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In
a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within
their use of AWS services.
Examples include:
Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their
guest OS and applications.
Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own
guest operating systems, databases, and applications.
Awareness & Training - AWS trains AWS employees, but a customer must train their own employees.
upvoted 1 times
A company often does not use all of its current Amazon EC2 capacity to run stateless workloads. The company wants to optimize its EC2 costs.
A. Spot Instances
B. Dedicated Instances
C. Reserved Instances
D. On-Demand Instances
Correct Answer: A
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 179/180
*** AWS Certified Cloud Practitioner CLF-C02 Exam – Free Exam Q&As, Page 1 | ExamTopics
A company wants to store data in Amazon S3. The company rarely access the data, and the data can be regenerated if necessary. The company
A. S3 Standard
B. S3 Intelligent-Tiering
Correct Answer: D
A company has migrated its workloads to AWS. The company wants to adopt AWS at scale and operate more efficiently and securely. Which AWS
A. AWS Support
Correct Answer: D
Selected Answer: B
To adopt AWS at scale and operate more efficiently and securely, the company should use the AWS Cloud Adoption Framework (AWS CAF). The
AWS Cloud Adoption Framework is a comprehensive guide that helps organizations plan, strategize, and implement their cloud adoption journey
effectively. It provides a structured approach for organizations to build a secure, efficient, and well-architected environment in AWS.
upvoted 1 times
AWS Managed Services (AMS) helps you adopt AWS at scale and operate more efficiently and securely. We leverage standard AWS services and
offer operational guidance with specialized automations, skills, and experience that are contextual to your environment and applications
upvoted 1 times
https://www.examtopics.com/exams/amazon/aws-certified-cloud-practitioner-clf-c02/custom-view/ 180/180