Question 1

Where can users find a catalog of AWS-recognized providers of third-party security solutions?

Accepted Answer

A)  AWS Service Catalog 
B)  AWS Marketplace 
C)  AWS Quick Start 
D)  AWS CodeDeploy

Question 2

IT systems should be designed to reduce interdependencies, so that a change or failure in one component does not cascade to other components. This is an example of which principle of cloud architecture design?

Accepted Answer

A)  Scalability 
B)  Loose coupling 
C)  Automation 
D)  Automatic scaling

Question 3

Which of the following can limit Amazon Storage Service (Amazon S3) bucket access to specific users?

Accepted Answer

A)  A public and private key-pair 
B)  Amazon Inspector 
C)  AWS Identity and Access Management (IAM) policies 
D)  Security Groups

Question 4

Which Amazon EC2 pricing option is best suited for applications with short-term, spiky, or unpredictable workloads that cannot be interrupted?

Accepted Answer

A)  Spot Instances 
B)  Dedicated Hosts 
C)  On-Demand Instances 
D)  Reserved Instances

Question 5

A financial services company wants to ensure that its AWS account activity is logged to meet regulatory requirements for logging, auditing, and governance. Which AWS service meets these requirements?

Accepted Answer

A)  AWS CloudTrail 
B)  AWS Trusted Advisor 
C)  AWS Config 
D)  Amazon CloudWatch

Question 6

Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?

Accepted Answer

A)  Amazon GuardDuty 
B)  Amazon Macie 
C)  Amazon Inspector 
D)  AWS Shield

Question 7

Which of the following security-related services does AWS offer? (Choose two.)

Accepted Answer

A)  Multi-factor authentication physical tokens 
B)  AWS Trusted Advisor security checks 
C)  Data encryption 
D)  Automated penetration testing 
E)  Amazon S3 copyrighted content detection

Question 8

According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

Accepted Answer

A)  Hard code an IAM user's secret key and access key directly in the application, and upload the file. 
B)  Store the IAM user's secret key and access key in a text file on the EC2 instance, read the keys, then upload the file. 
C)  Have the EC2 instance assume a role to obtain the privileges to upload the file. 
D)  Modify the S3 bucket policy so that any service can upload to it at any time.

Question 9

If a user has an AWS account with an Enterprise-level AWS Support plan, who is the primary point of contact for billing or account inquiries?

Accepted Answer

A)  Solutions architect 
B)  AWS Concierge Support team 
C)  An AWS Marketplace seller 
D)  AWS Partner Network (APN) partner

Question 10

Which AWS Trusted Advisor check is available to all AWS users?

Accepted Answer

A)  Core checks 
B)  All checks 
C)  Cost optimization checks 
D)  Fault tolerance checks

Question 11

What is Amazon CloudWatch?

Accepted Answer

A)  A code repository with customizable build and team commit features. 
B)  A metrics repository with customizable notification thresholds and channels. 
C)  A security configuration repository with threat analytics. 
D)  A rule repository of a web application firewall with automated vulnerability prevention features.

Question 12

Which AWS service provides a self-service portal for on-demand access to AWS compliance reports?

Accepted Answer

A)  AWS Config 
B)  AWS Certificate Manager 
C)  Amazon Inspector 
D)  AWS Artifact

Question 13

A company with AWS Enterprise Support has questions about its consolidated bill. Which AWS service, feature, or tool should the company use for assistance?

Accepted Answer

A)  AWS Pricing Calculator 
B)  AWS Concierge Support 
C)  AWS Trusted Advisor 
D)  AWS Budgets

Question 14

Which of the AWS global infrastructure is used to cache copies of content for faster delivery to users across the globe?

Accepted Answer

A)  AWS Regions 
B)  Availability Zones 
C)  Edge locations 
D)  Data centers

Question 15

As part of the AWS shared responsibility model, which of the following operational controls do users fully inherit from AWS?

Accepted Answer

A)  Security management of data center 
B)  Patch management 
C)  Configuration management 
D)  User and access management

Question 16

A company is launching an e-commerce site that will store and process credit card data. The company requires information about AWS compliance reports and AWS agreements. Which AWS service provides on-demand access to these items?

Accepted Answer

A)  AWS Certificate Manager 
B)  AWS Config 
C)  AWS Artifact 
D)  AWS CloudTrail

Question 17

Which is a recommended pattern for designing a highly available architecture on AWS?

Accepted Answer

A)  Ensure that components have low-latency network connectivity. 
B)  Run enough Amazon EC2 instances to operate at peak load. 
C)  Ensure that the application is designed to accommodate failure of any single component. 
D)  Use a monolithic application that handles all operations.

Question 18

Which load balancer types are available with Elastic Load Balancing (ELB)? (Choose two.)

Accepted Answer

A)  Public load balancers with AWS Application Auto Scaling capabilities 
B)  F5 Big-IP and Citrix NetScaler load balancers 
C)  Classic Load Balancers 
D)  Cross-zone load balancers with public and private IPs 
E)  Application Load Balancers

Question 19

How should a web application be deployed to ensure high availability in the AWS Cloud?

Accepted Answer

A)  Deploy multiple instances of the application in multiple Availability Zones. 
B)  Deploy multiple instances of the application in a single Availability Zone. 
C)  Deploy the application to a compute-optimized Amazon EC2 instance in a single Availability Zone. 
D)  Deploy the application in one Amazon EC2 instance in an Auto Scaling group.

Question 20

A company has a Java web application. The company wants to use auto deployment to create the AWS environment and deploy new versions of its application. Which AWS service will meet these requirements?

Accepted Answer

A)  AWS Auto Scaling 
B)  AWS Elastic Beanstalk 
C)  AWS Control Tower 
D)  Amazon EC2

Exam 3: AWS Certified Cloud Practitioner (CLF-C01)