Question 1

A characteristic of edge locations is that they:

Accepted Answer

A)  host Amazon EC2 instances closer to users. 
B)  help lower latency and improve performance for users. 
C)  cache frequently changing data without reaching the origin server. 
D)  refresh data changes daily.

Question 2

An application deployed in the AWS Cloud has unpredictable usage patterns and is running workloads that cannot be interrupted. What is the MOST cost-effective Amazon EC2 pricing option for this application?

Accepted Answer

A)  Dedicated Instances 
B)  Spot Instances 
C)  Reserved Instances 
D)  On-Demand Instances

Question 3

Access keys in AWS Identity and Access Management (IAM) are used to:

Accepted Answer

A)  log in to the AWS Management Console. 
B)  make programmatic calls to AWS from AWS APIs. 
C)  log in to Amazon EC2 instances. 
D)  authenticate to AWS CodeCommit repositories.

Question 4

What is a benefit of loose coupling as a principle of cloud architecture design?

Accepted Answer

A)  It facilitates low-latency request handling. 
B)  It allows applications to have dependent workflows. 
C)  It prevents cascading failures between different components. 
D)  It allows companies to focus on their physical data center operations.

Question 5

Which of the following security-related actions are available at no cost?

Accepted Answer

A)  Calling AWS Support 
B)  Contacting AWS Professional Services to request a workshop 
C)  Accessing forums, blogs, and whitepapers 
D)  Attending AWS classes at a local university

Question 6

A company has an AWS environment that consists of a VPC, multiple subnets, and many Amazon EC2 instances in the subnets. An engineer wants to restrict inbound traffic to one particular EC2 instance without affecting the other EC2 instances. Which AWS service or feature should the engineer use to meet this requirement?

Accepted Answer

A)  Network ACLs 
B)  Security groups 
C)  Amazon GuardDuty 
D)  AWS Shield

Question 7

How does AWS MOST effectively reduce computing costs for a growing start-up company?

Accepted Answer

A)  It provides on-demand resources for peak usage. 
B)  It automates the provisioning of individual developer environments. 
C)  It automates customer relationship management. 
D)  It implements a fixed monthly computing budget.

Question 8

Which service should be used to estimate the costs of running a new project on AWS?

Accepted Answer

A)  AWS TCO Calculator 
B)  AWS Simple Monthly Calculator 
C)  AWS Cost Explorer API 
D)  AWS Budgets

Question 9

Which AWS hybrid storage service enables your on-premises applications to seamlessly use AWS Cloud storage through standard file-storage protocols?

Accepted Answer

A)  AWS Direct Connect 
B)  AWS Snowball 
C)  AWS Storage Gateway 
D)  AWS Snowball Edge

Question 10

Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?

Accepted Answer

A)  AWS CLI 
B)  AWS Developer Center 
C)  AWS Cloud Development Kit (AWS CDK) 
D)  AWS CodeStar

Question 11

Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?

Accepted Answer

A)  AWS Snowmobile 
B)  AWS Local Zones 
C)  AWS Outposts 
D)  AWS Fargate

Question 12

Which AWS tool is used to compare the cost of running an application on-premises to running the application in the AWS Cloud?

Accepted Answer

A)  AWS Trusted Advisor 
B)  AWS Simple Monthly Calculator 
C)  AWS Total Cost of Ownership (TCO) Calculator 
D)  Cost Explorer

Question 13

A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal communication latency between the data centers. How can the company meet this requirement?

Accepted Answer

A)  Place the EC2 instances in two separate AWS Regions connected with a VPC peering connection. 
B)  Place the EC2 instances in two separate Availability Zones within the same AWS Region. 
C)  Place one EC2 instance on premises and the other in an AWS Region. Then connect them by using an AWS VPN connection. 
D)  Place both EC2 instances in a placement group for dedicated bandwidth.

Question 14

To avoid malicious compute activities, a user needs a quick way to determine if any Amazon EC2 instances have ports that allow unrestricted access. Which AWS service will support this requirement?

Accepted Answer

A)  VPC Flow Logs 
B)  AWS WAF 
C)  AWS CloudTrail 
D)  AWS Trusted Advisor

Question 15

A company that does business online needs to quickly deliver new functionality in an iterative manner, minimizing the time to market. Which AWS Cloud feature can provide this?

Accepted Answer

A)  Elasticity 
B)  High availability 
C)  Agility 
D)  Reliability

Question 16

How can moving to the AWS Cloud help users reduce the time dedicated to operating system patching? (Choose two.)

Accepted Answer

A)  Users can take advantage of managed services on AWS. 
B)  Users can outsource operating system patching to the AWS Support team. 
C)  AWS Professional Services will upgrade instances to the latest operating system versions. 
D)  Users have the ability to use license-included Amazon EC2 instances. 
E)  Users can take advantage of AWS Systems Manager features.

Question 17

A company believes an unauthorized user copied data from an Amazon S3 bucket to their own account. Which AWS service will record the actions taken by the user?

Accepted Answer

A)  Amazon CloudWatch 
B)  AWS CloudTrail 
C)  AWS Infrastructure Event Management 
D)  AWS Systems Manager

Question 18

What does the AWS Cloud provide to increase the speed and agility of execution for customers? (Choose two.)

Accepted Answer

A)  Readily available resources with low provisioning times 
B)  Scalable compute capacity 
C)  Free Tier services usage 
D)  Access to AWS data centers 
E)  Lower resource provisioning cost

Question 19

Which of the following is a shared control between the customer and AWS?

Accepted Answer

A)  Providing a key for Amazon S3 client-side encryption 
B)  Configuration of an Amazon EC2 instance 
C)  Environmental controls of physical AWS data centers 
D)  Awareness and training

Question 20

Which tool is best suited for combining the billing of AWS accounts that were previously independent from one another?

Accepted Answer

A)  Detailed billing report 
B)  Consolidated billing 
C)  AWS Cost and Usage report 
D)  Cost allocation report

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)