AWS Certified Cloud Practitioner CLF-C02

Question #: 301
Topic #: 1
Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model?

A. Security awareness and training
B. Development of an IAM password policy
C. Patching of the guest operating system
D. Physical and environmental controls

Question #: 302
Topic #: 1
Which of the following is a characteristic of the AWS account root user?

A. The root user is the only user that can be configured with multi-factor authentication (MFA).
B. The root user is the only user that can access the AWS Management Console.
C. The root user is the first sign-in identity that is available when an AWS account is created.
D. The root user has a password that cannot be changed.

Question #: 303
Topic #: 1
An Amazon EC2 instance previously used for development is inaccessible and no longer appears in the AWS Management Console.

Which AWS service should be used to determine what action made this EC2 instance inaccessible?

A. Amazon CloudWatch Logs
B. AWS Security Hub
C. Amazon Inspector
D. AWS CloudTraiI

Question #: 304
Topic #: 1
A company’s application developers need to quickly provision and manage AWS services by using scripts.

Which AWS offering should the developers use to meet these requirements?

A. AWS CLI
B. AWS CodeBuild
C. AWS Cloud Adoption Framework (AWS CAF)
D. AWS Systems Manager Session Manager

Question #: 305
Topic #: 1
A company wants to migrate unstructured data to AWS. The data needs to be securely moved with inflight encryption and end-to-end data validation.

Which AWS service will meet these requirements?

A. AWS Application Migration Service
B. Amazon Elastic File System (Amazon EFS)
C. AWS DataSync
D. AWS Migration Hub

Question #: 306
Topic #: 1
A development team wants to deploy multiple test environments for an application in a fast, repeatable manner.

Which AWS service should the team use?

A. Amazon EC2
B. AWS CloudFormation
C. Amazon QuickSight
D. Amazon Elastic Container Service (Amazon ECS)

Question #: 307
Topic #: 1
A company wants to quickly implement a continuous integration/continuous delivery (CI/CD) pipeline.

Which AWS service will meet this requirement?

A. AWS Config
B. Amazon Cognito
C. AWS DataSync
D. AWS CodeStar

Question #: 308
Topic #: 1
Which AWS Cloud deployment model uses AWS Outposts as part of the application deployment infrastructure?

A. On-premises
B. Serverless
C. Cloud-native
D. Hybrid

Question #: 309
Topic #: 1
Which of the following is a fully managed graph database service on AWS?

A. Amazon Aurora
B. Amazon FSx
C. Amazon DynamoDB
D. Amazon Neptune

Question #: 310
Topic #: 1
Which AWS service could an administrator use to provide desktop environments for several employees?

A. AWS Organizations
B. AWS Fargate
C. AWS WAF
D. AWS WorkSpaces

Question #: 311
Topic #: 1
Which AWS service or feature gives users the ability to capture information about network traffic in a VPC?

A. VPC Flow Logs
B. Amazon Inspector
C. VPC route tables
D. AWS CloudTrail

Question #: 312
Topic #: 1
Which type of AWS storage is ephemeral and is deleted when an Amazon EC2 instance is stopped or terminated?

A. Amazon Elastic Block Store (Amazon EBS)
B. Amazon EC2 instance store
C. Amazon Elastic File System (Amazon EFS)
D. Amazon S3

Question #: 313
Topic #: 1
A company wants to provide access to Windows file shares in AWS from its on-premises workloads. The company does not want to provision any additional infrastructure or applications in its data center.

Which AWS service will meet these requirements?

A. Amazon FSx File Gateway
B. AWS DataSync
C. Amazon S3
D. AWS Snow Family

Question #: 314
Topic #: 1
A company wants durable storage for static content and infinitely scalable data storage infrastructure at the lowest cost.

Which AWS service should the company choose?

A. Amazon Elastic Block Store (Amazon EBS)
B. Amazon S3
C. AWS Storage Gateway
D. Amazon Elastic File System (Amazon EFS)

Question #: 315
Topic #: 1
An ecommerce company wants to use Amazon EC2 Auto Scaling to add and remove EC2 instances based on CPU utilization.

Which AWS service or feature can initiate an Amazon EC2 Auto Scaling action to achieve this goal?

A. Amazon Simple Queue Service (Amazon SQS)
B. Amazon Simple Notification Service (Amazon SNS)
C. AWS Systems Manager
D. Amazon CloudWatch alarm

Question #: 316
Topic #: 1
A company wants to transform its workforce by attracting and developing a digitally fluent high-performance workforce. The company wants to attract a diverse and inclusive workforce with appropriate mix of technical and non-technical skills.

Which AWS Cloud Adoption Framework (AWS CAF) perspective will meet these requirements?

A. Business
B. People
C. Platform
D. Operations

Question #: 317
Topic #: 1
A company wants to move its on-premises databases to managed cloud database services by using a simplified migration process.

Which AWS service or tool can help the company meet this requirement?

A. AWS Storage Gateway
B. AWS Application Migration Service
C. AWS DataSync
D. AWS Database Migration Service (AWS DMS)

Question #: 318
Topic #: 1
A company needs a fully managed file server that natively supports Microsoft workloads and file systems. The file server must also support the SMB protocol.

Which AWS service should the company use to meet these requirements?

A. Amazon Elastic File System (Amazon EFS)
B. Amazon FSx for Lustre
C. Amazon FSx for Windows File Server
D. Amazon Elastic Block Store (Amazon EBS)

Question #: 319
Topic #: 1
A company has been storing monthly reports in an Amazon S3 bucket. The company exports the report data into comma-separated values (.csv) files. A developer wants to write a simple query that can read all of these files and generate a summary report.

Which AWS service or feature should the developer use to meet these requirements with the LEAST amount of operational overhead?

A. Amazon S3 Select
B. Amazon Athena
C. Amazon Redshift
D. Amazon EC2

Question #: 320
Topic #: 1
Which AWS feature provides a no-cost platform for AWS users to join community groups, ask questions, find answers, and read community-generated articles about best practices?

A. AWS Knowledge Center
B. AWS re:Post
C. AWS IQ
D. AWS Enterprise Support

Question #: 321
Topic #: 1
A company needs to search for text in documents that are stored in Amazon S3.

Which AWS service will meet these requirements?

A. Amazon Kendra
B. Amazon Rekognition
C. Amazon Polly
D. Amazon Lex

Question #: 322
Topic #: 1
Which AWS services make use of global edge locations? (Choose two.)

A. AWS Fargate
B. Amazon CloudFront
C. AWS Global Accelerator
D. AWS Wavelength
E. Amazon VPC

Question #: 323
Topic #: 1
A user needs a relational database but does not have the resources to manage the hardware, resiliency, and replication.

Which AWS service option meets the user’s requirements?

A. Run MySQL on Amazon Elastic Container Service (Amazon ECS).
B. Run MySQL on Amazon EC2.
C. Choose Amazon RDS for MySQL.
D. Choose Amazon ElastiCache for Redis.

Question #: 324
Topic #: 1
A company needs to deploy applications in the AWS Cloud as quickly as possible. The company also needs to minimize the complexity that is related to the management of AWS resources.

Which AWS service should the company use to meet these requirements?

A. AWS Config
B. AWS Elastic Beanstalk
C. Amazon EC2
D. Amazon Personalize

Question #: 325
Topic #: 1
Which mechanism allows developers to access AWS services from application code?

A. AWS Software Development Kit
B. AWS Management Console
C. AWS CodePipeline
D. AWS Config

Question #: 326
Topic #: 1
A company is migrating to the AWS Cloud. The company wants to understand and identify potential security misconfigurations or unexpected behaviors. The company wants to prioritize any protective controls it might need.

Which AWS Cloud Adoption Framework (AWS CAF) security perspective capability will meet these requirements?

A. Identity and access management
B. Threat detection
C. Platform engineering
D. Availability and continuity management

Question #: 327
Topic #: 1
A company wants to establish a private network connection between AWS and its corporate network.

Which AWS service or feature will meet this requirement?

A. Amazon Connect
B. Amazon Route 53
C. AWS Direct Connect
D. VPC peering

Question #: 328
Topic #: 1
Which AWS services or features give users the ability to create a network connection between two VPCs? (Choose two.)

A. VPC endpoints
B. Amazon Route 53
C. VPC peering
D. AWS Direct Connect
E. AWS Transit Gateway

Question #: 329
Topic #: 1
Which AWS service converts text to lifelike voices?

A. Amazon Transcribe
B. Amazon Rekognition
C. Amazon Polly
D. Amazon Textract

Question #: 330
Topic #: 1
A company wants to use application stacks to run a workload in the AWS Cloud. The company wants to use pre-configured instances.

Which AWS service will meet these requirements?

A. Amazon Lightsail
B. Amazon Athena
C. AWS Outposts
D. Amazon EC2

Question #: 331
Topic #: 1
Which AWS services are supported by Savings Plans? (Choose two.)

A. Amazon EC2
B. Amazon RDS
C. Amazon SageMaker
D. Amazon Redshift
E. Amazon DynamoDB

Question #: 332
Topic #: 1
Which AWS service or tool can provide rightsizing recommendations for Amazon EC2 resources at no additional cost?

A. AWS Well-Architected Tool
B. Amazon CloudWatch
C. AWS Cost Explorer
D. Amazon S3 analytics

Question #: 333
Topic #: 1
A company operates a petabyte-scale data warehouse to analyze its data. The company wants a solution that will not require manual hardware and software management.

Which AWS service will meet these requirements?

A. Amazon DocumentDB (with MongoDB compatibility)
B. Amazon Redshift
C. Amazon Neptune
D. Amazon ElastiCache

Question #: 334
Topic #: 1
A library wants to automate the classification of electronic books based on the contents of the books.

Which AWS service should the library use to meet this requirement?

A. Amazon Redshift
B. Amazon CloudSearch
C. Amazon Comprehend
D. Amazon Aurora

Question #: 335
Topic #: 1
Which task is a responsibility of AWS, according to the AWS shared responsibility model?

A. Encryption of application data
B. Authentication of application users
C. Protection of physical network infrastructure
D. Configuration of firewalls

Question #: 336
Topic #: 1
Which options are AWS Cloud Adoption Framework (AWS CAF) cloud transformation journey recommendations? (Choose two.)

A. Envision phase
B. Align phase
C. Assess phase
D. Mobilize phase
E. Migrate and modernize phase

Question #: 337
Topic #: 1
A company wants to generate a list of IAM users. The company also wants to view the status of various credentials that are associated with the users, such as password, access keys, and multi-factor authentication (MFA) devices.

Which AWS service or feature will meet these requirements?

A. IAM credential report
B. AWS IAM Identity Center (AWS Single Sign-On)
C. AWS Identity and Access Management Access Analyzer
D. AWS Cost and Usage Report

Question #: 338
Topic #: 1
A company is designing its AWS workloads so that components can be updated regularly and so that changes can be made in small, reversible increments.

Which pillar of the AWS Well-Architected Framework does this design support?

A. Security
B. Performance efficiency
C. Operational excellence
D. Reliability

Question #: 339
Topic #: 1
A company wants to track tags, buckets, and prefixes for its Amazon S3 objects.

Which S3 feature will meet this requirement?

A. S3 Inventory report
B. S3 Lifecycle
C. S3 Versioning
D. S3 ACLs

Question #: 340
Topic #: 1
A company wants to allow users to authenticate and authorize multiple AWS accounts by using a single set of credentials.

Which AWS service or resource will meet this requirement?

A. AWS Organizations
B. IAM user
C. AWS IAM Identity Center (AWS Single Sign-On)
D. AWS Control Tower

Question #: 341
Topic #: 1
A company created an Amazon EC2 instance. The company wants to control the incoming and outgoing network traffic at the instance level.

Which AWS resource or service will meet this requirement?

A. AWS Shield
B. Security groups
C. Network Access Analyzer
D. VPC endpoints

Question #: 342
Topic #: 1
A company wants to use the AWS Cloud to deploy an application globally.

Which architecture deployment model should the company use to meet this requirement?

A. Multi-Region
B. Single-Region
C. Multi-AZ
D. Single-AZ

Question #: 343
Topic #: 1
A company wants a web application to interact with various AWS services.

Which AWS service or resource will meet this requirement?

A. AWS CloudShell
B. AWS Marketplace
C. AWS Management Console
D. AWS CLI

Question #: 344
Topic #: 1
A company is migrating its applications from on-premises to the AWS Cloud. The company wants to ensure that the applications are assigned only the minimum permissions that are needed to perform all operations.

Which AWS service will meet these requirements?

A. AWS Identity and Access Management (IAM)
B. Amazon CloudWatch
C. Amazon Macie
D. Amazon GuardDuty

Question #: 345
Topic #: 1
Which options are AWS Cloud Adoption Framework (AWS CAF) governance perspective capabilities? (Choose two.)

A. Identity and access management
B. Cloud financial management
C. Application portfolio management
D. Innovation management
E. Product management

Question #: 346
Topic #: 1
Which AWS service provides a single location to track the progress of application migrations?

A. AWS Application Discovery Service
B. AWS Application Migration Service
C. AWS Service Catalog
D. AWS Migration Hub

Question #: 347
Topic #: 1
A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI).

Which actions can a system administrator take to connect to the EC2 instance? (Choose two.)

A. Use Amazon EC2 Instance Connect.
B. Use a Remote Desktop Protocol (RDP) connection.
C. Use AWS Batch.
D. Use AWS Systems Manager Session Manager.
E. Use Amazon Connect.

Question #: 348
Topic #: 1
Which architecture concept describes the ability to deploy resources on demand and release resources when they are no longer needed?

A. High availability
B. Decoupled architecture
C. Resilience
D. Elasticity

Question #: 349
Topic #: 1
Which task requires a user to sign in as the AWS account root user?

A. The deletion of IAM users
B. The deletion of an AWS account
C. The creation of an organization in AWS Organizations
D. The deletion of Amazon EC2 instances

Question #: 350
Topic #: 1
What does the Amazon S3 Intelligent-Tiering storage class offer?

A. Payment flexibility by reserving storage capacity
B. Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon EBS) volume
C. Automatic cost savings by moving objects between tiers based on access pattern changes
D. Secure, durable, and lowest cost storage for data archival

Question #: 351
Topic #: 1
A company needs Amazon EC2 instances for a workload that can tolerate interruptions.

Which EC2 instance purchasing option meets this requirement with the LARGEST discount compared to On-Demand prices?

A. Spot Instances
B. Convertible Reserved Instances
C. Standard Reserved Instances
D. Dedicated Hosts

Question #: 352
Topic #: 1
A company is planning to migrate to the AWS Cloud. The company wants to identify measurable business outcomes that will explain the value of the company’s decision to migrate.

Which phase of the cloud transformation journey includes these activities?

A. Envision
B. Align
C. Scale
D. Launch

Question #: 353
Topic #: 1
Which AWS service or component allows inbound traffic from the internet to access a VPC?

A. Internet gateway
B. NAT gateway
C. AWS WAF
D. VPC peering

Question #: 354
Topic #: 1
Which AWS service can companies use to create infrastructure from code?

A. Amazon Elastic Kubernetes Service (Amazon EKS)
B. AWS Outposts
C. AWS CodePipeline
D. AWS CloudFormation

Question #: 355
Topic #: 1
Which guideline is a well-architected design principle for building cloud applications?

A. Keep static data closer to compute resources.
B. Provision resources for peak capacity.
C. Design for automated recovery from failure.
D. Use tightly coupled components.

Question #: 356
Topic #: 1
A company needs to move 75 petabytes of data from its on-premises data centers to AWS.

Which AWS service should the company use to meet these requirements MOST cost-effectively?

A. AWS Snowball Edge Storage Optimized
B. AWS Snowmobile
C. AWS Direct Connect
D. AWS Storage Gateway

Question #: 357
Topic #: 1
Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)

A. Resource scalability
B. Performance efficiency
C. System elasticity
D. Agile development
E. Operational excellence

Question #: 358
Topic #: 1
A company needs to connect its on-premises data center to the AWS Cloud. The company needs a dedicated, low-latency connection with consistent network performance.

Which AWS service will meet these requirements?

A. AWS Global Accelerator
B. Amazon CloudFront
C. AWS Direct Connect
D. AWS Managed VPN

Question #: 359
Topic #: 1
Which design principles should a company apply to AWS Cloud workloads to maximize sustainability and minimize environmental impact? (Choose two.)

A. Maximize utilization of Amazon EC2 instances.
B. Minimize utilization of Amazon EC2 instances.
C. Minimize usage of managed services.
D. Force frequent application reinstallations by users.
E. Reduce the need for users to reinstall applications.

Question #: 360
Topic #: 1
In which ways does the AWS Cloud offer lower total cost of ownership (TCO) of computing resources than on-premises data centers? (Choose two.)

A. AWS replaces upfront capital expenditures with pay-as-you-go costs.
B. AWS is designed for high availability, which eliminates user downtime.
C. AWS eliminates the need for on-premises IT staff.
D. AWS uses economies of scale to continually reduce prices.
E. AWS offers a single pricing model for Amazon EC2 instances.