๐ŸŽ„

CertoMetrics - 9% OFF Special Discount Offer - Ends In:

0d 00h 00m 00s
Coupon code: SALE2026

Amazon AWS Certified Cloud Practitioner (CLF-C02)

Get full access to the updated question bank and pass on your first attempt.

Vendor

Amazon

Certification

Foundational Certifications

Content

1129 Qs

Status

Verified

Updated

2 days ago

Test the Practice Engine

Experience our real exam environment with free demo questions

Launch Free Demo
Best Value Bundle

Premium Bundle

Complete Success Suite

$103 $59

Save $44 Instantly

  • โœ“
    Full PDF + Interactive Engine Everything you need to pass
  • โœ“
    All Advanced Question Types Drag & Drop, Hotspots, Case Studies
  • โœ“
    Priority 24/7 Expert Support Direct line to certification leads
  • โœ“
    90 Days Free Priority Updates Stay current as exams change

Success Metric

98.4% Pass Rate

Verified by 15k+ Students
Secure Checkout
Popular

Standard Simulation

Practice Engine

$54

One-Time Payment

  • Web-Based (Zero Install)
  • Real Testing Environment Virtual & Practice Modes
  • Interactive Engine Drag & Drop, Hotspots
  • 60 Days Free Updates

Compatible with All Devices

Chrome
Verified Secure Checkout

Basic Tier

PDF Study Guide

$49

Digital Access

  • โœ“ Exam Questions (PDF)
  • โœ“ Mobile Friendly
  • โœ“ 60 Days Updates
Download Free Sample PDF

Verified 10-Question Preview

Secure Checkout

Verified Community

The CertoMetrics Standard.

Recommend the #1 platform for verified Amazon certification resources.

Success Network

Help a Colleague Succeed.

Invite a peer to get their own updated CLF-C02 prep kit.

Exam Overview

The AWS Certified Cloud Practitioner (CLF-C02) certification is your essential first step into the expansive world of Amazon Web Services. This credential validates a foundational understanding of the AWS Cloud, its global infrastructure, core services, security principles, and billing models. Achieving this certification demonstrates to employers your fundamental cloud fluency and readiness to engage with cloud-based solutions, making you a valuable asset in any organization transitioning to or operating in the cloud. It's a critical gateway for both technical and non-technical professionals, enhancing career prospects and opening doors to more specialized AWS certifications, solidifying your professional value in a cloud-centric economy.

Questions

65

Passing Score

700/1000

Duration

90 Minutes

Difficulty

Beginner

Level

Foundational

Skills Measured

Cloud Concepts
Security and Compliance
Core AWS Services
AWS Global Infrastructure and Networking
Billing, Pricing, and Support

Career Path

Target Roles

Business Analyst Project Manager Entrylevel IT Professional

Common Questions

Is the material up to date?

Yes. We update our question bank weekly to match the latest Amazon standards. You get free updates for 90 days.

What format do I get?

You get instant access to both the **PDF** (for reading) and our **Premium Test Engine** (for exam simulation).

Is there a guarantee?

Absolutely. If you fail the CLF-C02 exam using our materials, we offer a full money-back guarantee.

When do I get the download?

Instantly. The download link is available in your dashboard immediately after payment is confirmed.

Free Study Guide Samples

Previewing updated CLF-C02 bank (100 Questions).

QUESTION 1

A company wants to bridge the gap between technology and business to accelerate the companyโ€™s cloud Journey. The company also wants to incrementally evolve its organizational culture with digital transformation.

Which perspective in the AWS Cloud Adoption Framework (AWS CAF) should the company use to meet these requirements?

A
Platform
B
People
C
Operations
D
Governance

Correct Option: B

โœ… People
Description: The AWS Cloud Adoption Framework (CAF) is designed to help organizations develop a comprehensive plan for successful cloud adoption. It organizes guidance into six key perspectives, one of which is the People Perspective. This perspective focuses on ensuring that an organization's personnel are prepared and empowered to operate effectively in a cloud environment. It addresses areas such as organizational structure, staff capabilities, training, and cultural transformation.

Why this fits: The People Perspective is crucial for successful cloud adoption because human factors are often the biggest challenge in technology transformations. It emphasizes developing a cloud-ready workforce by identifying new skills required, reskilling existing staff, creating new roles, and fostering a culture of innovation and continuous learning. Without investing in the "people" aspect, even the most advanced cloud platforms may not deliver their full potential.

Example: An organization migrating its applications to AWS would leverage the People Perspective of the CAF to assess current staff skills, identify gaps in cloud expertise, and then implement training programs for solution architects, developers, and operations teams on AWS services, security best practices, and agile methodologies. This ensures that their workforce is capable of designing, deploying, and managing cloud resources efficiently.

QUESTION 2

Which of the following are advantages of moving to the AWS Cloud? (Select TWO.)

A
Users can implement all AWS services in seconds.
B
AWS assumes all responsibility for the security of infrastructure and applications.
C
Users experience increased speed and agility.
D
Users benefit from massive economies of scale.
E
Users can move hardware from their data center to the AWS Cloud.

Correct Option: C,D

โœ… Users experience increased speed and agility.
Description: Speed and agility in the cloud refer to the ability to rapidly provision, de-provision, and scale IT resources up or down as needed. It significantly reduces the time from idea to deployment by removing the need for physical hardware procurement and setup.

Why this fits: AWS provides a vast array of services that can be provisioned programmatically or via a console within minutes. This allows organizations to quickly experiment, deploy applications, and adapt to changing business requirements without lengthy hardware acquisition cycles, thus increasing their speed and agility.

Example: A development team can spin up a new test environment with compute, database, and networking resources in minutes for a new project, rather than waiting weeks for traditional IT provisioning.



โœ… Users benefit from massive economies of scale.
Description: Economies of scale in cloud computing mean that AWS, by aggregating hundreds of thousands of users, achieves lower per-unit costs for its infrastructure, which it then passes on to its customers.

Why this fits: AWS operates at a massive scale, purchasing hardware, power, and bandwidth in quantities far beyond what a single company could achieve. This allows AWS to negotiate better prices and build highly efficient data centers, leading to significant cost savings that are reflected in lower prices for customers compared to building and maintaining their own data centers.

Example: A small startup can access the same high-quality infrastructure as a large enterprise but pay only for the resources it consumes, benefiting from the aggregated buying power and operational efficiency of AWS's global infrastructure.

QUESTION 3

A company is creating a web application that requires a relational database to store customer data.

Which AWS service should the company use to host the database?

A
Amazon Aurora
B
Amazon DynamoDB
C
Amazon ElagiCache
D
Amazon Redshift

Correct Option: A

โœ… Amazon Aurora
Description: Amazon Aurora is a fully managed, MySQL and PostgreSQL-compatible relational database built for the cloud. It combines the performance and availability of traditional enterprise databases with the simplicity and cost-effectiveness of open-source databases. Aurora is designed to deliver high throughput and low latency, often outperforming standard MySQL and PostgreSQL databases. It automatically scales storage up to 128 TB per database instance and supports up to 15 read replicas for high availability and performance.

Why this fits: Aurora is an excellent choice for applications requiring a robust, scalable, and highly available relational database solution. As a managed service, AWS handles database administration tasks such as patching, backups, and replication, allowing users to focus on application development. Its compatibility with MySQL and PostgreSQL engines makes it easy to migrate existing applications, while its cloud-native architecture provides superior performance and reliability compared to self-managed alternatives on EC2.

Example: A rapidly growing e-commerce platform needs a highly performant and scalable database to manage product catalogs, customer orders, and transaction data. By using Amazon Aurora, the platform benefits from automatic scaling, high availability with multiple replicas across Availability Zones, and performance optimized for transactional workloads, ensuring a smooth customer experience even during peak traffic.



QUESTION 4

Which AWS service is a fully managed service for machine learning?

A
AWS Lambda
B
Amazon Kinesis
C
Amazon Athena
D
Amazon SageMaker

Correct Option: D

โœ… Amazon SageMaker
Description: Amazon SageMaker is a fully managed machine learning service that provides every developer and data scientist with the ability to build, train, and deploy machine learning (ML) models quickly. It encompasses an entire ML workflow, from data labeling and preparation to model training, tuning, and deployment.

Why this fits: For an AWS Certified Cloud Practitioner, understanding the core services for various use cases is crucial. Amazon SageMaker is AWS's flagship service for machine learning, providing a comprehensive platform for the entire ML lifecycle. It allows users to leverage powerful ML capabilities without managing underlying infrastructure, which aligns with the benefits of cloud computing.

Example: A company wants to develop a recommendation engine for its e-commerce website. They can use Amazon SageMaker to ingest customer browsing and purchase history, train an ML model to predict product preferences, and then deploy that model as an API endpoint to provide real-time recommendations to users.



QUESTION 5

Which AWS service should a company use to run thousands of complex computing jobs every night?

A
Amazon Polly
B
Amazon Aurora
C
AWS Direct Connect
D
AWS Batch

Correct Option: D

โœ… **AWS Batch **

Reasoning: AWS Batch is a fully managed service that allows customers to run thousands of batch computing jobs on AWS. It dynamically provisions and manages compute resources, optimizing job execution for complex, high-throughput workloads. This aligns perfectly with the need to run "thousands of complex computing jobs every night." โŒ Why the other choices are incorrect:

  • Option A is incorrect: Amazon Polly is a text-to-speech service, converting text into lifelike speech. It is not used for running computing jobs.
  • Option B is incorrect: Amazon Aurora is a high-performance, fully managed relational database service. While it processes data, it is not designed to orchestrate and run complex, general-purpose computing jobs.
  • Option C is incorrect: AWS Direct Connect establishes a dedicated network connection from an on-premises data center to AWS. It's a networking service, not a compute service for job execution.


QUESTION 6

Which fully managed AWS service assists with the creation, testing, and management of custom Amazon EC2 images?

A
EC2 Image Builder
B
Amazon Machine Image (AMI)
C
AWS Launch Wizard
D
AWS Elastic Beanstalk

Correct Option: A

โœ… EC2 Image Builder
Description: AWS EC2 Image Builder is a fully managed AWS service that makes it easier to automate the creation, management, and deployment of customized, secure, and up-to-date server images for use with Amazon EC2 (AMIs) or on-premises virtual machines. It simplifies the pipeline for building images, applying security patches, and distributing them across AWS Regions or accounts.

Why this fits: EC2 Image Builder directly addresses the need to build and maintain secure Amazon Machine Images (AMIs). It provides automated pipelines to ensure images are updated with the latest patches, configured correctly, and meet security standards before deployment. This helps reduce the manual effort and potential for errors associated with maintaining custom images.

Example: A company needs to ensure all its EC2 instances launched for a specific application use an AMI that includes a particular operating system, pre-installed software dependencies, and the latest security patches. They can use EC2 Image Builder to create a pipeline that starts with a base AMI, adds their custom software, runs tests, and then creates a new, updated AMI on a regular schedule (e.g., monthly) without manual intervention.



QUESTION 7

A company wants an AWS service to collect and process 10 TB of data locally and transfer the data to AWS. The company has intermittent connectivity.

Which AWS service will meet these requirements?

A
AWS Database Migration Service (AWS DMS)
B
AWS DataSync
C
AWS Backup
D
AWS Snowball Edge

Correct Option: D

โœ… AWS Snowball Edge
Description: AWS Snowball Edge is a data migration and edge computing device provided by AWS. It is a physical, ruggedized appliance designed for petabyte-scale data transfer into and out of AWS, as well as for running compute workloads at the edge. It comes in different options, including Storage Optimized for large-scale data migration and Compute Optimized for edge computing with machine learning capabilities.

Why this fits: Snowball Edge is ideal for transferring extremely large amounts of data (e.g., hundreds of terabytes or petabytes) to AWS when network bandwidth is a limiting factor, unreliable, or nonexistent. Instead of transferring data over the internet, which could take weeks or months, the data is copied onto the Snowball Edge device on-premises and then physically shipped to AWS, where it's uploaded to Amazon S3 or other AWS storage services. This significantly accelerates the data migration process for massive datasets. The other options rely on network connectivity (AWS DataSync, AWS DMS) or are primarily for backup management within AWS (AWS Backup) rather than large-scale physical data ingestion from on-premises.

Example: An oil and gas company needs to migrate 500 TB of seismic data from their remote rig locations to Amazon S3 for analysis. The internet connectivity at these sites is very slow and unreliable. They order an AWS Snowball Edge device, load the data onto it locally, and then ship the device back to AWS, where the data is ingested into S3.



QUESTION 8

Which of the following is an advantage that the AWS Cloud provides to users?

A
Users eliminate the need to guess about infrastructure capacity requirements.
B
Users decrease their variable costs by maintaining sole ownership of IT hardware.
C
Users maintain control of underlying IT infrastructure hardware.
D
Users maintain control of operating systems for managed services.

Correct Option: A

โœ… Users eliminate the need to guess about infrastructure capacity requirements.
Description: One of the fundamental benefits of cloud computing is the ability to provision and de-provision resources on demand. This concept, known as elasticity, allows users to scale their infrastructure dynamically based on actual needs, rather than making upfront estimations.

Why this fits: In traditional on-premises environments, organizations must forecast their peak infrastructure requirements and purchase hardware to meet those speculative needs. This often leads to either over-provisioning (wasted resources and capital) or under-provisioning (performance bottlenecks and poor user experience). Cloud providers like AWS enable users to consume resources as a utility, scaling capacity up or down as demand fluctuates, thereby eliminating the financial and operational risks associated with guessing future capacity needs.

Example: A media company launching a new streaming service can automatically scale its server and database capacity using AWS Auto Scaling based on the number of concurrent viewers. Instead of buying enough servers to handle a potential blockbuster event that might never happen, they only pay for the resources actively consumed, adjusting instantly to both surges and dips in viewership.



QUESTION 9

A company needs to label its AWS resources so frat the company can categorize and track costs.

What should the company do to meet this requirement?

A
Use cost allocation tags.
B
Use AWS Identity and Access Management (IAN).
C
Use AWS Organizations.
D
Use the AWS Cost Management coverage report.

Correct Option: A

โœ… Use cost allocation tags.
Description: Cost allocation tags are labels you can apply to AWS resources to organize your resources and costs. AWS provides two types of tags: AWS-generated tags and user-defined tags. Both types are key-value pairs that help you categorize costs by project, application, owner, department, or any other criteria. Once resources are tagged, you can use the AWS Cost Explorer or detailed billing reports to break down your AWS costs by these tags.

Why this fits: Cost allocation tags are the primary mechanism within AWS for tracking and allocating costs across different teams, projects, or departments. By applying specific tags to resources, organizations can gain granular visibility into their spending and attribute costs accurately to the relevant business units, which is crucial for internal chargeback or budget management.

Example: A company has multiple departments (e.g., Marketing, Engineering, Sales) using the same AWS account. By tagging EC2 instances, S3 buckets, and RDS databases with a "Department" tag (e.g., Department:Marketing, Department:Engineering), they can filter their AWS bill in Cost Explorer to see exactly how much each department spent on AWS resources, enabling accurate internal cost allocation.



QUESTION 10

Which AWS service can a company use to access compliance documentation and AWS agreements?

A
AWS Security Hub
B
AWS Identity and Access Management (IAM)
C
AWS Artifact
D
AWS Certificate Manager (ACM)

Correct Option: C

โœ… AWS Artifact
Description: AWS Artifact is a no-cost, self-service portal for on-demand access to AWS security and compliance reports and select online agreements. It provides access to AWS's compliance reports from third-party auditors (e.g., ISO certifications, PCI reports, SOC reports) and contractual agreements (e.g., Business Associate Addendum (BAA) for HIPAA).

Why this fits: For an organization needing to demonstrate compliance with industry standards or regulatory requirements, AWS Artifact is the go-to service to obtain official AWS compliance documents, such as SOC reports or ISO certifications. This allows them to understand the security controls AWS has in place and leverage these reports for their own compliance audits.

Example: A healthcare company needs to provide evidence of HIPAA compliance to its auditors. They can use AWS Artifact to download the AWS Business Associate Addendum (BAA) and relevant SOC 2 reports to show how AWS's services meet the necessary security and privacy standards.



QUESTION 11

Which cloud concept is demonstrated by using AWS Cost Explorer?

A
Rightsizing
B
Reliability
C
Resilience
D
Modernization

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 12

Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?

A
Route table
B
AWS Transit Gateway
C
AWS Global Accelerator
D
Amazon VPC

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 13

A team of researchers is going to collect data at remote locations around the world. Many locations do not have internet connectivity. The team needs to capture the data in the field, and transfer it to the AWS Cloud later.

Which AWS service will support these requirements?

A
AWS Outposts
B
AWS Transfer Family
C
AWS Snow Family
D
AWS Migration Hub

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 14

A company learning about its responsibilities that are related to the management of Amazon EC2 instances.

Which tasks for EC2 instances are the companyโ€™s responsibility, according to the AWS shared responsibility model? (Select TWO.)

A
Install and patch the machine hypervisor.
B
Patch the guest operating system,
C
Encrypt data at rest on associated storage.
D
Install the physical hardware and cabling.
E
Provide physical security for the EC2 instances.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 15

A company needs to gain data insights by using natural Language to ask questions about its data.

Which AWS service provides this functionality?

A
AWS Glue
B
Amazon Sage Maker
C
Amazon QuickSight
D
AWS Panorama

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 16

A company wants to run its application's code without having to provision and manage servers.

Which AWS service will meet this requirement?

A
AWS Glue
B
AWS Lambda
C
AWS CodeDeploy
D
Amazon CodeGuru

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 17

A company wants to deploy resources to AWS quickly.

Which advantage of cloud computing addresses this requirement?

A
Trade fixed expense for variable expense.
B
Stop guessing capacity.
C
Increase speed and agility.
D
Benefit from massive economies of scale.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 18

Which of the following are advantages of moving to the AWS Cloud? (Select TWO.)

A
The ability to turn over the responsibility for all security to AWS.
B
The ability to use the pay-as-you-go model.
C
The ability to have full control over the physical infrastructure.
D
No longer having to guess what capacity will be required.
E
No longer worrying about users access controls.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 19

A company wants an automated process to continuously scan its Amazon EC2 instances for software vulnerabilities.

Which AWS service will meet these requirements?

A
Amazon GuardDuty
B
Amazon Inspector
C
Amazon Detective
D
Amazon Cognito

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 20

Which AWS tool or feature acts as a VPC firewall at the subnet level?

A
Security group
B
Network ACL
C
Traffic Mirroring
D
Internet gateway

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 21

Which AWS service or feature gives users the ability to access AWS resources from any location by using an encrypted connection?

A
Amazon CloudFront
B
AWS Client VPN
C
AWS Direct Connect
D
AWS PrivateLink

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 22

A company has created an AWS Cost and Usage Report. The company wants to display the report in a visual format.

Which AWS service or resource will meet this requirement?

A
AWS Budgets
B
Amazon Neptune
C
Amazon QuickSight
D
AWS Trusted Advisor

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 23

Which AWS service can assess and gather information about a companys on-premises servers and databases before a migration to AWS?

A
AWS Application Discovery Service
B
AWS Application Migration Service
C
AWS Database Migration Service (AWS DMS)
D
AWS Mainframe Modernization

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 24

A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs.

Which AWS service or feature should the company use to meet these authentication requirements?

A
Amazon API Gateway
B
IAM users
C
AWS Security Token Service (AWS STS)
D
IAM instance profiles

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 25

A company wants to move its on-premises databases to managed cloud database services by using a simplified migration process.

Which AWS service or tool can help the company meet this requirement?

A
AWS Storage Gateway
B
AWS Application Migration Service
C
AWS DataSync
D
AWS Database Migration Service (AWS DMS)

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 26

Which AWS service provides DNS resolution?

A
Amazon CloudFront
B
Amazon VPC
C
Amazon Route 53
D
AWS Direct Connect

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 27

A company is designing an identity access management solution for an application. The company wants users to be able to use their social media, email, or online shopping accounts to access the application.

Which AWS service provides this functionality?

A
AWS IAM Identity Center
B
AWS Config
C
Amazon Cognito
D
AWS Identity and Access Management (IAM)

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 28

According to the AWS shared responsibility model, who is responsible for the virtualization layer down to the physical security of the facilities in which AWS services operate?

A
It is the sole responsibility of the customer.
B
It is the sole responsibility of AWS.
C
It is a shared responsibility between AWS and the customer.
D
The customer's AWS Support plan tier determines who manages the configuration.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 29

A customer wants to secure an application that runs on an Amazon EC2 instance.

Which responsibilities belong to the customer according to the AWS shared responsibility model? (Select TWO.)

A
Installing security patches
B
Encrypting the data that is stored in the database
C
Backing up the database server
D
Managing the physical server
E
Encrypting data at the application level

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 30

Which option is an environment that consists of one or more data centers?

A
Amazon CloudFront
B
Availability Zone
C
VPC
D
AWS Outposts

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 31

What can a cloud practitioner use to retrieve AWS security and compliance documents and submit them as evidence to an auditor or regulator?

A
AWS Certificate Manager
B
AWS Systems Manager
C
AWS Artifact
D
Amazon Inspector

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 32

Which action should a company take to improve security in its AWS account?

A
Require multi-factor authentication (MFA) for privileged users.
B
Remove the root user account.
C
Create an access key for the AWS account root user.
D
Create an access key for each privileged user.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 33

Which AWS service helps protect against DDoS attacks?

A
AWS Shield
B
Amazon Inspector
C
Amazon GuardDuty
D
Amazon Detective

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 34

What should a user do if the user loses an IAM secret access key?

A
Retrieve the secret access key by using the IAM console.
B
Create a new user with a new access key and a new secret access key.
C
Rotate the secret access key.
D
Request a new secret access key from AWS Support.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 35

A company wants to receive notifications when an Auto Scaling group uses public IP addresses for Amazon EC2 instances.

Which AWS service will meet this requirement?

A
AWS Security Hub
B
Amazon Macie
C
AWS CloudTrail
D
AWS Cost Explorer

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 36

Which AWS Cloud benefit is shown by an architecture's ability to withstand failures with minimal downtime?

A
Agility
B
Elasticity
C
Scalability
D
High availability

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 37

A company wants to improve its security posture by reviewing user activity through API calls.

Which AWS service will meet this requirement?

A
AWS WAF
B
Amazon Detective
C
Amazon CloudWatch
D
AWS CloudTrail

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 38

Which AWS Cloud design principle is a company using when the company implements AWS CloudTrail?

A
Activate traceability.
B
Use serverless compute architectures.
C
Perform operations as code.
D
Go global in minutes.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 39

Which task is the responsibility of the customer, according to the AWS shared responsibility mode?

A
Maintain the security of the hardware that runs Amazon EC2 instances.
B
Patch the guest operating system of Amazon EC2 instances.
C
Protect the security of the AWS global infrastructure.
D
Patch Amazon RDS software,

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 40

A company wants to use a database service to store and analyze trillions of events each day.

Which AWS service will meet these requirements?

A
Amazon DocumentDB (with MongoDB compatibility)
B
AWS Database Migration Service (AWS DMS)
C
Amazon Neptune
D
Amazon Timestream for LiveAnalytics

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 41

A cloud practitioner needs to analyze CPU utilization data for Amazon EC2 instances.

Which AWS service or resource provides this data?

A
Amazon EC2 logs
B
Amazon CloudWatch metrics
C
Amazon CloudWatch Logs
D
Amazon CloudWatch alarms

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 42

Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Select Two)

A
Configure the AWS provided security group firewall.
B
Classify company assets in the AWS cloud.
C
Determine which Availability Zones to use for Amazon S3 buckets.
D
Patch or upgrade Amazon DynamoDB.
E
Select Amazon EC2 instances to run AWS Lambda on.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 43

Which AWS service or feature is a browser-based, pre-authenticated service that can be launched directly from the AWS Management Console?

A
AWS API
B
AWS Lightsail
C
AWS Cloud9
D
AWS CloudShell

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 44

A company is building an application that will receive millions of database queries each second. The company needs the data store for the application to scale to meet these needs.

Which AWS service will meet this requirement?

A
Amazon DynamoDB
B
AWS Cloud9
C
Amazon ElastiCache for Memcached
D
Amazon Neptune

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 45

Which AWS Cloud benefit describes the ability to acquire resources as they are needed and release when they are no longer needed?

A
Economies of scale
B
Elasticity
C
Agility
D
Security

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 46

Which component of the AWS global infrastructure does Amazon CloudFront use to deliver content to end users with low latency?

A
Edge locations
B
AWS Regions
C
Availability Zones
D
AWS Direct Connect connections

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 47

Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

A
AWS Security Hub
B
AWS Trusted Advisor
C
Amazon EventBridge
D
Amazon GuardDuty

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 48

A company operates a petabyte-scale data warehouse to analyze its data. The company wants a solution that will not require manual hardware and software management.

Which AWS service will meet these requirements?

A
Amazon DocumentDB (with MongoDB compatibility)
B
Amazon Redshift
C
Amazon Neptune
D
Amazon ElastiCache

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 49

An ecommerce company has been monitoring usage of its online store that is hosted on a fleet of Amazon EC2 instances. Surges in traffic occur every weekend day at the same time and last for approximately 4 hours.

Which AWS service should the company use to ensure that there are enough instances to meet the surges in demand?

A
AWS Lambda
B
Amazon EventBridge (Amazon CloudWatch Events)
C
Elastic Load Balancing (ELB)
D
Amazon EC2 Auto Scaling

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 50

A company needs to invoke an AWS Step Functions workflow each time an Amazon EQ instance state changes to RUNNING.

Which AWS service can the company use to meet this requirement?

A
Amazon SageMaker
B
Amazon Connect
C
Amazon EventBridge
D
AWS Fargate

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 51

A company needs to use automated video analysis to identify employees who are accessing its offices.

Which AWS service will meet this requirement?

A
Amazon Rekognition
B
Amazon Polly
C
Amazon Cognito
D
AWS Lambda

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 52

What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?

A
Managing the code within the Lambda function.
B
Confirming that the hardware is working in the data center.
C
Patching the operating system.
D
Shutting down Lambda functions when they are no longer in use.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 53

Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity?

A
Agility
B
Elasticity
C
Reliability
D
Durability

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 54

A company's employees are working from home. The company wants its employees to use their personal devices to connect to a managed workstation in the AWS Cloud.

Which AWS service should the company use to provide the remote environment?

A
Amazon WorkSpaces
B
AWS Cloud9
C
AWS Outposts
D
Amazon Lightsail

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 55

A company is considering a move to the AWS Cloud. The company wants to be able to scale its compute resources as needed to accommodate changing loads.

Which benefit of the AWS Cloud does this scenario describe?

A
Global deployment in minutes
B
Cost savings
C
Agility
D
Elasticity

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 56

A company needs an AWS object storage solution for photos and videos.

Which AWS service will meet this requirement?

A
AWS Backup
B
AWS Batch
C
Amazon EC2
D
Amazon S3

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 57

Which of the following are advantages of the AWS Cloud? (Select TWO.)

A
Trade variable expenses for capital expenses
B
High economies of scale
C
Launch globally in minutes
D
Focus on managing hardware infrastructure.
E
Overprovision to ensure capacity.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 58

Which encryption types can be used to protect objects at rest in Amazon S3? (Select Two)

A
Server-side encryption with S3 managed encryption keys (SSE-S3)
B
Server-side encryption with AWS KMS managed encryption keys (SSE-KMS)
C
TLS
D
SSL
E
Transparent Data Encryption (TDE)

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 59

Which AWS service or feature allows users to securely store encrypted credentials and retrieve these credentials when required?

A
AWS Encryption SDK
B
AWS Security Hub
C
AWS Secrets Manager
D
AWS Artifact

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 60

Which AWS service or feature can a company use to create a private, secured, and scalable network environment in the AWS Cloud?

A
Amazon Elastic Container Service (Amazon ECS)
B
Amazon S3
C
Amazon VPC
D
Route tables

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 61

Which AWS service is a relational database management system (RDBMS)?

A
Amazon Athena
B
Amazon Aurora
C
Amazon DynamoDB
D
Amazon Kinesis Data Streams

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 62

A company is planning its migration to the AWS Cloud. The company is its capability gaps by using the AWS Cloud Adoption Framework (AWS CAF) perspectives.

Which phase of the cloud transformation journey includes these identification activities?

A
Envision
B
Align
C
Scale
D
Launch

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 63

Which cloud computing advantage is a company applying when it uses AWS Regions to increase application availability to users in different countries?

A
Pay-as-you-go pricing.
B
Capacity forecasting
C
Economies of scale
D
Global reach

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 64

A company needs to identify who accessed an AWS service and what action was performed for a given time period.

Which AWS service should the company use to meet this requirement?

A
Amazon CloudWatch
B
AWS CloudTrail
C
AWS Security Hub
D
Amazon Inspector

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 65

Which cloud concept is demonstrated by using AWS Compute Optimizer?

A
Security validation
B
Rightsizing
C
Elasticity
D
Global reach

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 66

A company needs to replicate existing AWS resources by using templates.

Which AWS service provides this functionality?

A
AWS CloudFormation
B
AWS Step Functions
C
Amazon CloudFront
D
AWS CloudTrail

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 67

A company is using a third-party service to back up 10 TB of data to a tape library. The on-premises backup server is running out of space. The company wants to use AWS services for the backups without changing its existing backup workflows.

Which AWS service should the company use to meet these requirements?

A
Amazon Elastic Block Store (Amazon EBS)
B
AWS Storage Gateway
C
Amazon Elastic Container Service (Amazon ECS)
D
AWS Lambda

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 68

Which AWS service uses a combination of publishers and subscribers?

A
AWS Lambda
B
Amazon Simple Notification Serve (Amazon SNS)
C
Amazon CloudWatch
D
AWS CloudFormation

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 69

What is the LEAST expensive AWS Support plan that provides the full set of AWS Trusted Advisor best practice checks for cost optimization?

A
AWS Enterprise Support
B
AWS Business Support
C
AWS Developer Support
D
AWS Basic Support

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 70

Which option routes inbound traffic from the internet to resources in a VPC?

A
AWS Fargate
B
Internet gateway
C
VPC peering connection
D
AWS WAF

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 71

A company runs business applications in an on-premises data center and in the AWS Cloud. The company needs a shared file system that can be available to both environments.

Which AWS service meets these requirements?

A
Amazon Elastic Block Store (Amazon EBS)
B
Amazon S3
C
Amazon ElastiCache
D
Amazon Elastic File System (Amazon EFS)

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 72

Which AWS service or feature provides log information of the inbound and outbound traffic on network interfaces in a VPC?

A
Amazon CloudWatch Logs
B
AWS CloudTrail
C
VPC Flow Logs
D
AWS Identity and Access Management (IAM)

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 73

What is a benefit of using AWS serverless computing?

A
Application deployment and management are not required.
B
Application security will be fully managed by AWS.
C
Monitoring and logging are not needed.
D
Management of infrastructure is offloaded to AWS.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 74

A company needs to optimize the cost of its compute resources.

Which type of workload should the company on Amazon EC2 Reserved Instances?

A
A steady-state workload that requires a particular EC2 instance configuration for a long period of time.
B
A short-term workload that can be interrupted.
C
A steady-state workload that does not require a long-term commitment.
D
A short-term workload that cannot be interrupted.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 75

Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Select TVVO.)

A
Patch AWS network devices.
B
Set user password rules.
C
Provide physical security for compute resources.
D
Configure security groups.
E
Patch the operating system of an Amazon EC2 instance.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 76

A customer wants answers to common AWS billing questions.

Which AWS service or resource will meet this requirement?

A
Amazon Connect
B
AWS Knowledge Center
C
AWS Marketplace
D
Amazon QuickSight

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 77

Which AWS service or resource provides answers to the most frequently asked security-related question that AWS receives from its users?

A
AWS Artifact
B
Amazon Connect
C
AWS Chatbot
D
AWS Knowledge Center

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 78

A Company wants to migrate to AWS and use the same security software it uses on premises. The security software vendor offers its security software as a service on AWS.

Where can the company purchase the security solution?

A
AWS Partner Solutions Finder
B
AWS Support Center
C
AWS Management Console
D
AWS Marketplace

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 79

Which option is AWS responsible for under the AWS shared responsibility model?

A
Network and firewall configuration
B
Client-side data encryption
C
Management of user permissions
D
Hardware and infrastructure

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 80

A company wants to use machine learning to identify suspicious activities in its AWS account.

Which AWS service provides this functionality?

A
AWS Shield
B
Amazon Macie
C
Amazon Detective
D
AWS WAF

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 81

An ecommerce company wants to design a highly available application that will be hosted on multiple Amazon EC2 instances.

How should the company deploy the EC2 instances to meet these requirements?

A
Across multiple edge locations
B
Across multiple VPCs
C
Across multiple Availability Zones
D
Across multiple AWS accounts

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 82

A company wants to manage sign-in security for workforce users. The company needs to create workforce users and centrally manage their access across all the company's AWS accounts and applications.

Which AWS service will meet these requirements?

A
AWS Audit Manager
B
Amazon Cognito
C
AWS Security Hub
D
AWS IAM Identity Center (AWS Single Sign-On)

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 83

Which maintenance task is the customers according to the AWS shared responsibility model?

A
Physical connectivity among Availability Zones
B
Network switch maintenance
C
Hardware updates and firmware patches
D
Amazon EC2 updates and security patches

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 84

A company needs to manage multiple logins across AWS accounts within the same organization in AWS Organizations.

Which AWS service should the company use to meet this requirement?

A
Amazon VPC
B
Amazon GuardDuty
C
Amazon Cognito
D
AWS IAM Identity Center (AWS Single Sign-On)

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 85

A company is building a business intelligence solution that uses Amazon Redshift. The company wants to use an AWS service to create interactive dashboards and not pay any upfront costs for it.

Which service should the company use?

A
Amazon CloudWatch
B
AWS Health Dashboard
C
AWS Service Catalog
D
Amazon QuickSight

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 86

Which AWS service provides inbound and outbound network ACLs to restrict connectivity to Amazon EC2 instances?

A
1AWS Identity and Access Management (IAM)Amazon ConnectAmazon VPCAmazon API Gateway

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 87

An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and any increases in traffic are predictable. The EC2 instances must be online and available without any disruption.

Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

A
On-Demand Instances
B
Reserved Instances
C
Spot Instances
D
Spot Fleet

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 88

Which of the following are benefits that a company receives when it moves an on-premises production workload to AWS? (Select TWO.)

A
AWS trains the companyโ€™s staff on the use of all the AWS services.
B
AWS manages all security in the cloud.
C
AWS offers free support from technical account managers (TAMS).
D
AWS offers high availability.
E
AWS provides economies of scale.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 89

A company has multiple SQL-based databases located in a data center. The company needs to migrate all database servers to the AWS Cloud to reduce the cost of operating physical servers.

Which AWS service or resource will meet these requirements with the LEAST operational overhead?

A
Amazon EC2 instances
B
Amazon RDS
C
Amazon DynamoDB
D
OpenSearch

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 90

Which AWS service provides encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?

A
Amazon Cognito
B
AWS Identity and Access Management (IAM)
C
AWS Key Management Service (AWS KMS)
D
AWS Trusted Advisor

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 91

A company is creating a document that defines the operating system patch routine for all the company's systems.

Which AWS resources should the company include in this document? (Select TWO.)

A
Amazon EC2 instances
B
AWS Lambda functions
C
AWS Fargate tasks
D
Amazon RDS instances
E
Amazon Elastic Container Service (Amazon ECS) instances

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 92

A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections.

Which AWS services can the company use to meet these requirements? TWO)

A
Amazon Connect
B
Amazon AppStream 2.0
C
Amazon WorkSpaces
D
AWS Site-to-Site VPN
E
Amazon Elastic Container Service (Amazon ECS)

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 93

A company is using Amazon DynamoDB for its application database.

Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Select TWO)

A
Classify data.
B
Configure access permissions.
C
Manage encryption options.
D
Provide public endpoints to store and retrieve data.
E
Manage the infrastructure layer and the operating system.

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 94

Which AWS service is designed to help users handle large amounts of data in a data warehouse environment?

A
Amazon RDS
B
Amazon DynamoDB
C
Amazon Redshift
D
Amazon Aurora

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 95

A company wants to develop applications that run on AWS. The company's developers need a set of libraries and development tools that are available in multiple programming languages.

Which AWS solution provides these libraries and tools?

A
AWS CodePipeline
B
AWS SDKs
C
Amazon CloudWatch
D
AWS CodeDepIoy

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 96

A company needs to migrate its website from on-premises to the AWS Cloud. The website must be hosted on hardware that is not shared with other companies. The company wants to use its existing per-socket, per-core software licenses.

Which Amazon EC2 instance purchasing option will meet these requirements?

A
Dedicated Instance
B
Reserved Instance
C
Dedicated Host
D
On-Demand Instance

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 97

Which AWS service provides command line access to AWS tools and resources directly from a web browser?

A
AWS CloudHSM
B
AWS CloudShell
C
Amazon WorkSpaces
D
AWS Cloud Map

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 98

Which AWS service or feature will search for and identify AWS resources that are externally?

A
Amazon open-search service (Amazon Elasticsearch service)
B
AWS Control Tower
C
AWS IAM Access Analyzer
D
AWS Fargate

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 99

A company has migrated its workload to the AWS Cloud. The company wants to optimize existing Amazon EC2 resources.

Which AWS services or tools provide this functionality? (Select TWO.)

A
AWS Elastic BeanstalK
B
Aws cost Explore.
C
Amazon Detective
D
AWS Compute Optimizer
E
AWS Billing Conductor

Premium Solution Locked

Unlock all 1129 answers & explanations

QUESTION 100

A company needs a serverless data integration service to discover, prepare, and combine data for analytics.

Which AWS service will meet these requirements?

A
Amazon EMR
B
Amazon Redshift
C
AWS Glue
D
AWS Step Functions

Premium Solution Locked

Unlock all 1129 answers & explanations

Full Question Bank Locked

You have reached the end of the free study guide preview. Upgrade now to unlock all 1129 questions and the full simulation engine.

Customer Reviews

5 / 5
(15,000+ verified)
5
100%
4
0%
3
0%
2
0%
1
0%

Global Community Feedback

DM

David M.

Verified Student

"The practice engine is incredible. It feels exactly like the real testing environment and helped me build so much confidence."

SJ

Sarah J.

Premium Member

"The PDF is very well organized and the explanations for the answers are actually helpful, not just random text."

MC

Michael C.

Verified Buyer

"I was skeptical, but the content is high quality and definitely worth the price. I passed on my first try!"

Need Assistance?

Our expert support team is available to assist you with any inquiries about our exam materials.

Contact Support
Average response: < 24 Hours

Get Exam Updates

Subscribe to receive instant notifications on new questions and exclusive flash sales.

* Join 5,000+ students getting weekly updates

Support Chat โ— Active Now

๐Ÿ‘‹ Hi! How can we help you pass your exam?

Enter email to start chatting