AWS Certified Cloud Practitioner (CLF-C01) Practice Exam 1

A user logs into the AWS console and creates a new S3 bucket. Will this user be able to store files in this bucket?

Yes, the same IAM roles are required to create a bucket and to perform operations on it.

Correct Incorrect Correct answer

This user may not have the correct IAM role assigned to perform actions on this bucket.

Correct Incorrect Correct answer

Yes, this user is the owner of the bucket and can modify it as they wish.

Correct Incorrect Correct answer

No, only non-AWS accounts can use S3 buckets

Correct Incorrect Correct answer

AWS uses a shared-responsibility model for security. Some aspects are your responsibility, while others are handled by Amazon. Which aspects is Amazon responsible for? (Choose two)

Hypervisor patching

Correct Incorrect Correct answer

EC2 OS firewall configuration

Correct Incorrect Correct answer

RBAC inside of Linux 2 AMIs

Correct Incorrect Correct answer

Service security

Correct Incorrect Correct answer

VPC

Correct Incorrect Correct answer

Instance Type

Correct Incorrect Correct answer

Instance Class

Correct Incorrect Correct answer

AMI

Correct Incorrect Correct answer

EBS Volume

Correct Incorrect Correct answer

RDS

Correct Incorrect Correct answer

Lambda

Correct Incorrect Correct answer

Kinesis

Correct Incorrect Correct answer

Neptune

Correct Incorrect Correct answer

Aurora

Correct Incorrect Correct answer

What type of MFA support does AWS offer?

Any RADIUS based MFA solution is supported.

Correct Incorrect Correct answer

MFA is not supported.

Correct Incorrect Correct answer

AWS multi-factor token devices or private MFA solutions are supported.

Correct Incorrect Correct answer

Only AWS multi-factor token devices are supported.

Correct Incorrect Correct answer

S3 Web Site Hosting

Correct Incorrect Correct answer

EC2

Correct Incorrect Correct answer

EBS

Correct Incorrect Correct answer

Lambda

Correct Incorrect Correct answer

Fargate

Correct Incorrect Correct answer

Avg Obj Size

Correct Incorrect Correct answer

Transfer Out

Correct Incorrect Correct answer

Transfer In

Correct Incorrect Correct answer

Encryption State

Correct Incorrect Correct answer

Creation Date

Correct Incorrect Correct answer

Which statement regarding the scope of virtual networks in AWS is correct?

Route 53 DNS records are specific to a region.

Correct Incorrect Correct answer

Elastic IP addresses are global objects that can be used across regions.

Correct Incorrect Correct answer

A subnet created in a VPC is local to an Availability Zone.

Correct Incorrect Correct answer

A VPC is local to an availability zone.

Correct Incorrect Correct answer

You are using AWS Direct Connect to access public resources that are hosted by AWS. You want your general Internet traffic to flow over a different connection that is not associated with AWS. Which configuration tasks will accomplish this? (Choose three).

Advertise specific networks into AWS.

Correct Incorrect Correct answer

Configure a static route that points to Amazon S3.

Correct Incorrect Correct answer

Advertise a default route to AWS using BGP.

Correct Incorrect Correct answer

Create a private interface on your AWS Direct Connect link.

Correct Incorrect Correct answer

Redistribute BGP routes from AWS into your existing routing infrastructure.

Correct Incorrect Correct answer

Configure a public Interface on your AWS Direct Connect link.

Correct Incorrect Correct answer

Your organization plans to store data that is subject to PCI compliance regulations on AWS. You currently undergo rigorous auditing processes, including penetration testing. You need to ability to continue these practices after migrating to AWS. Which statement regarding this scenario is correct?

Penetration testing is supported across all instance types.

Correct Incorrect Correct answer

AWS does not support PCI compliant applications.

Correct Incorrect Correct answer

AWS must approve customer-performed penetration testing.

Correct Incorrect Correct answer

AWS permits pen-testing, but only against their services, and only with permission.

Correct Incorrect Correct answer

You realize that there are many motivations for your team to migrate services and data to AWS. What would be the biggest factor in the category of cost savings?

On-demand access to resources

Correct Incorrect Correct answer

Redundant hot sites

Correct Incorrect Correct answer

Internal, very high speed network connections

Correct Incorrect Correct answer

Built-in IAM model

Correct Incorrect Correct answer

You have been asked to take advantage of your company’s hybrid cloud infrastructure for your organizational database implementation. Specifically, you have been asked to move certain tables dynamically to AWS at certain times. The remainder of RDBMS information will remain on prem. What service should you consider to help with this?

Lightsail

Correct Incorrect Correct answer

Kinesis Data

Correct Incorrect Correct answer

DMS

Correct Incorrect Correct answer

Elastic Beanstalk

Correct Incorrect Correct answer

Your peer just informed you that the latest Cisco Firepower device is available virtually inside of AWS. You are in the EC2 dashboard and you do not see this image. Where should you look for it?

AWS Marketplace

Correct Incorrect Correct answer

AWS S3

Correct Incorrect Correct answer

AWS EBS

Correct Incorrect Correct answer

The vendor website

Correct Incorrect Correct answer

Your peer is trying to learn about AWS. They want to know how subnets for your cloud infrastructure are grouped logically in the AWS ecosystem. What is your answer?

Domains

Correct Incorrect Correct answer

Peer groups

Correct Incorrect Correct answer

VPC

Correct Incorrect Correct answer

Edge locations

Correct Incorrect Correct answer

Redshift

Correct Incorrect Correct answer

Since you have migrated a public Web site to AWS, you have noticed that clients are reporting dramatically improved access times to your site. What component might be the reason why?

Availability Zones

Correct Incorrect Correct answer

Edge Locations

Correct Incorrect Correct answer

Peer groups

Correct Incorrect Correct answer

Hot sites

Correct Incorrect Correct answer

Which of the following are valid recommendations regarding the root account in AWS? Choose two.

Use this account for administration of AWS only

Correct Incorrect Correct answer

Set the account for strong MFA

Correct Incorrect Correct answer

Always clone this account and disable the clone; re-enable should the parent root account be deleted

Correct Incorrect Correct answer

Use this account as little as possible

Correct Incorrect Correct answer

Why might one of your AWS staff require use of the AWS root account?

They need to change the billing information

Correct Incorrect Correct answer

They need to create a new VPC

Correct Incorrect Correct answer

They need to bulk create 50 AWS S3 buckets

Correct Incorrect Correct answer

They want to use AWS Service Manager

Correct Incorrect Correct answer

After rolling out new remote management tools that you custom-designed for your AWS infrastructure, you see that several key resources have been deleted in the cloud. What tool can help you audit these events?

AWS Kinesis

Correct Incorrect Correct answer

AWS Guard

Correct Incorrect Correct answer

AWS System Manager

Correct Incorrect Correct answer

AWS Catalog

Correct Incorrect Correct answer

AWS CloudTrail

Correct Incorrect Correct answer

What AWS service can assist you with alerting key personnel via email when specific events occur in the AWS VPC?

CloudTrail

Correct Incorrect Correct answer

AWS S3

Correct Incorrect Correct answer

AWS SNS

Correct Incorrect Correct answer

AWS SQS

Correct Incorrect Correct answer

You are concerned that several of your engineers are using AWS inappropriately. What documentation can you check to ensure you are not going to violate AWS rules?

AWS AUP

Correct Incorrect Correct answer

AWS DLP

Correct Incorrect Correct answer

AWS NDA

Correct Incorrect Correct answer

AWS SOP

Correct Incorrect Correct answer

One of your engineers is very excited about a tool inside of AWS that can provide recommendations for best practices around performance and security. What is this tool called?

AWS Organizations

Correct Incorrect Correct answer

AWS Optimizer

Correct Incorrect Correct answer

AWS Sage

Correct Incorrect Correct answer

AWS Aurora

Correct Incorrect Correct answer

AWS Trusted Advisor

Correct Incorrect Correct answer

Your supervisor is excited about AWS because she wants to trade CapEx for what (most likely)?

ApEx

Correct Incorrect Correct answer

OpEx

Correct Incorrect Correct answer

Fixed costs

Correct Incorrect Correct answer

Up-front costs

Correct Incorrect Correct answer

What is the AWS functional capability that permits VMs to be added or deleted based on demand?

Scalability

Correct Incorrect Correct answer

Relibaility

Correct Incorrect Correct answer

Redundancy

Correct Incorrect Correct answer

Resiliency

Correct Incorrect Correct answer

Elasticity

Correct Incorrect Correct answer

What type of relationship is often sought out between microservice components in a modern cloud architecture?

Tightly coupled

Correct Incorrect Correct answer

Loosely decoupled

Correct Incorrect Correct answer

Loosely coupled

Correct Incorrect Correct answer

None of these answer are correct

Correct Incorrect Correct answer

What is a method used in AWS to keep the objects that we store in AWS S3 safe from accidental destruction?

Each object is automatically replicated to another region

Correct Incorrect Correct answer

Each object is automatically replicated to another VPC

Correct Incorrect Correct answer

Each object is automatically replicated to another AZ

Correct Incorrect Correct answer

Each object is automatically replicated to another edge location

Correct Incorrect Correct answer

What are two options for management access that you can select from when you are creating a new IAM user in AWS? Choose two.

CLI

Correct Incorrect Correct answer

Management console

Correct Incorrect Correct answer

SNMP

Correct Incorrect Correct answer

RESTCONF

Correct Incorrect Correct answer

What component do you download in order to facilitate secure access to your AWS EC2 resource?

Shared secret

Correct Incorrect Correct answer

OTP

Correct Incorrect Correct answer

Certificate

Correct Incorrect Correct answer

Keypair

Correct Incorrect Correct answer

What is the name of the firewall technology that you can use in order to control access between subnets in your VPC?

Security Group

Correct Incorrect Correct answer

AWS Guard

Correct Incorrect Correct answer

AWS Firewall Manager

Correct Incorrect Correct answer

NACL

Correct Incorrect Correct answer

What is the name of the firewall technology in AWS that you can use on a network interface in order to control access to EC2 instances?

NACL

Correct Incorrect Correct answer

AWS Guard

Correct Incorrect Correct answer

AWS Cognito

Correct Incorrect Correct answer

Security Group

Correct Incorrect Correct answer

When you want to assign permissions for one service to access another service, what is the primary object for this in IAM?

User

Correct Incorrect Correct answer

Group

Correct Incorrect Correct answer

Role

Correct Incorrect Correct answer

Domain

Correct Incorrect Correct answer

Service Interface

Correct Incorrect Correct answer

What is the name of a private circuit that you can purchase for leased line access to your AWS VPC?

AWS PrivateLink

Correct Incorrect Correct answer

AWS Direct Connect

Correct Incorrect Correct answer

AWS Link Fast

Correct Incorrect Correct answer

AWS Neptune

Correct Incorrect Correct answer

What is the proprietary AWS database technology engine that is found in AWS RDS?

Oracle

Correct Incorrect Correct answer

Fargate

Correct Incorrect Correct answer

Aurora

Correct Incorrect Correct answer

Neptune

Correct Incorrect Correct answer

Aurora

Correct Incorrect Correct answer

What is the typical storage technology used as root volumes for Linux systems in EC2?

EBS

Correct Incorrect Correct answer

EFS

Correct Incorrect Correct answer

FSx

Correct Incorrect Correct answer

NFS

Correct Incorrect Correct answer

What is the name of the AWS data warehousing solution?

Kinesis

Correct Incorrect Correct answer

Cognito

Correct Incorrect Correct answer

Redshift

Correct Incorrect Correct answer

DynamoDB

Correct Incorrect Correct answer

What is the name of the AWS service that you can use to accelerate access to data stored in databases?

DynamoDB

Correct Incorrect Correct answer

Aurora

Correct Incorrect Correct answer

ElastiCache

Correct Incorrect Correct answer

Lambda

Correct Incorrect Correct answer

What serverless compute component in AWS is often used as the processing power for Amazon Alexa Skills and other functions?

Fargate

Correct Incorrect Correct answer

ECS

Correct Incorrect Correct answer

Lambda

Correct Incorrect Correct answer

Galaxy

Correct Incorrect Correct answer

Which statement about the Free Tier membership level of AWS is false?

There are some elements in the plan that will remain free forever

Correct Incorrect Correct answer

This plan incorporates all instance types in EC2

Correct Incorrect Correct answer

You might be billed by AWS while in this plan

Correct Incorrect Correct answer

This plan features limited tech support from AWS

Correct Incorrect Correct answer

What is the default pricing model used for EC2 resources?

On-demand

Correct Incorrect Correct answer

Reserved instance

Correct Incorrect Correct answer

Spot instance

Correct Incorrect Correct answer

Contracted instance

Correct Incorrect Correct answer

What is the object-based storage service in AWS?

EFS

Correct Incorrect Correct answer

EBS

Correct Incorrect Correct answer

S3

Correct Incorrect Correct answer

EC2

Correct Incorrect Correct answer

What is the main PaaS service offered by AWS?

Elastic Benastalk

Correct Incorrect Correct answer

Batch

Correct Incorrect Correct answer

ECS

Correct Incorrect Correct answer

Polly

Correct Incorrect Correct answer

What AWS service is designed to assist with hybrid data storage and includes several variations including file and volume implementations?

Storage Gateway

Correct Incorrect Correct answer

DocumentDB

Correct Incorrect Correct answer

DeepRacer

Correct Incorrect Correct answer

Outposts

Correct Incorrect Correct answer

What component in the Billing and Cost Management Dashboard permits you to drill down into great detail on your AWS charges?

Budgets

Correct Incorrect Correct answer

Cost Allocations

Correct Incorrect Correct answer

Cost Explorer

Correct Incorrect Correct answer

Cost Reporter

Correct Incorrect Correct answer

You are interested in receiving email alerts from the AWS Budgets feature should your AWS spending exceed a certain threshold. What service does AWS use for this alerting function?

SQS

Correct Incorrect Correct answer

SNS

Correct Incorrect Correct answer

Elastic Beanstalk

Correct Incorrect Correct answer

CloudTrail

Correct Incorrect Correct answer

Which of the following is not a support plan offered by AWS?

Free Tier

Correct Incorrect Correct answer

Enterprise

Correct Incorrect Correct answer

Developer

Correct Incorrect Correct answer

Basic

Correct Incorrect Correct answer

Business

Correct Incorrect Correct answer

What is the highest level of support you can purchase from AWS?

Business

Correct Incorrect Correct answer

Developer

Correct Incorrect Correct answer

Basic

Correct Incorrect Correct answer

Enterprise

Correct Incorrect Correct answer

Which of the following services is a fast and flexible NoSQL database offering from AWS?

Neptune

Correct Incorrect Correct answer

Timestream

Correct Incorrect Correct answer

DocumentDB

Correct Incorrect Correct answer

DynamoDB

Correct Incorrect Correct answer

You are interested in using a cloud provider that can offer domain name registration as well as public DNS registration and management. What is the name of the service in AWS that can provide these features?

CloudFront

Correct Incorrect Correct answer

CloudFormation

Correct Incorrect Correct answer

Snowball

Correct Incorrect Correct answer

Route 53

Correct Incorrect Correct answer

What is the top level object used to store your data in AWS S3?

Container

Correct Incorrect Correct answer

Folder

Correct Incorrect Correct answer

Bucket

Correct Incorrect Correct answer

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question

31. Question

32. Question

33. Question

34. Question

35. Question

36. Question

37. Question

38. Question

39. Question

40. Question

41. Question

42. Question

43. Question

44. Question

45. Question

46. Question

47. Question

48. Question

49. Question

50. Question

51. Question

52. Question

53. Question

54. Question

55. Question

56. Question

57. Question

58. Question

59. Question

60. Question

61. Question

62. Question

63. Question

64. Question

65. Question