CLF-C01 Exam - AWS Certified Cloud Practitioner

NEW QUESTION 1
What best describes what AWS is?
Choose the Correct Answer

• A. AWS is an online retailer
• B. AWS is the cloud.
• C. AWS is a cloud services provider.
• D. None of the abov

Answer: C

NEW QUESTION 2
What are the benefits of DynamoDB? (Select all that apply) Choose the 3 Correct answers:

• A. Supports multiple known NoSQL database engines like MariaDB and Oracle NoSQL.
• B. Automatic scaling of throughput capacity.
• C. Single-digit millisecond latency.
• D. Supports both document and key-value store data model

Answer: BCD

Explanation:
DynamoDB does not use/support other NoSQL database engines. You only have access to use DynamoDB's built-in engine.

NEW QUESTION 3
What AWS storage class should be used for long-term, archival storage?
Choose the Correct Answer

• A. Glacier
• B. Long-Term
• C. Standard
• D. Infrequent Access

Answer: A

Explanation:
Glacier should be used for (and is specifically designed for) long-term , archival storage.

NEW QUESTION 4
If you have a large collection of reproducible objects, which S3 storage class should you use if low cost is your priority?
Choose the Correct Answer

• A. Glacier
• B. Standard
• C. Reduced Redundancy
• D. None of the above

Answer: C

Explanation:
The reduced redundancy storage class has the lowest durability of all the storage classes. This means object stored in this storage class have the highest probability of being lost. So you should only store objects in this storage class if they can be easily reproduced. In exchange for the lower durability, the cost is lower than the standard storage class.

NEW QUESTION 5
What AWS service uses Edge Locations for content caching?
Choose the Correct Answer

• A. ElastiCache
• B. Route 53
• C. CloudFront
• D. CloudCache

Answer: C

Explanation:
CloudFront is a content caching service provided by AWS that utilizes "Edge Locations," which are AWS data centers located all around the world.

NEW QUESTION 6
What is AWS's serverless compute service?
Choose the Correct Answer

• A. S3
• B. Lambda
• C. EC2
• D. None of the above

Answer: B

Explanation:
AWS has two main compute services, EC2 (server-based) and Lambda (serverless).

NEW QUESTION 7
What best describes the difference between the TCO Calculator and the Cost Explorer?
Choose the Correct Answer

• A. The TCO Calculator help you analyze current AWS usage charges; the Cost Explorer helps you estimate the cost savings of using AWS.
• B. The TCO Calculator helps you estimate the cost savings of using AWS; the Cost Explorer help you analyze current AWS usage charges.
• C. The Cost Explorer helps you calculate hourly EC2 Usage cost; the TCO Calculator is a price list for each AWS service.
• D. The Cost Explorer is a price list for each AWS service; the TCO Calculator helps you calculate hourly EC2 Usage cost.

Answer: B

Explanation:
The TCO calculator is a free tool provided by AWS that allows you to estimate the cost savings of using AWS vs. using an on-premises data center. The Cost Explorer is a free tool that allows you to view charges of your cost (helps you analyze where you are spending money).

NEW QUESTION 8
What best describes Amazon Web Services (AWS)?
Choose the Correct Answer

• A. AWS only provides compute and storage services.
• B. AWS is the cloud.
• C. AWS is a cloud services provider.
• D. None of the abov

Answer: C

Explanation:
AWS is defined as a cloud services provider. They provide hundreds of services of which compute and storage are included (not limited to).

NEW QUESTION 9
Tracy has created a web application, placing it's underlining infrastructure in the N. Virginia (US-East-
1) region. After several months, Tracy notices that much of the traffic coming to her website is coming from Japan. What can Tracy do to (best) help reduce latency for her users in Japan?
Choose the Correct Answer

• A. Copy the current VPC and located in US-East-1 and ask AWS to move it to a region closest to Japan
• B. Create a and manage a complete duplicate copy of the web application and its infrastructure in a region closest to Japan.
• C. Create a CDN using CloudFront, making sure the proper content is cached at Edge Locations closest to Japan.
• D. Create a CDN using CloudCache, making sure the proper content is cached at Edge Locations closest to Japan.

Answer: C

Explanation:
CloudFront is AWS's content delivery network (CDN) service. You can use it to cache web content at edge locations what are closest to you customers. This will decrease latency for the customer and improve overall performance.

NEW QUESTION 10
What is the availability and durability rating of S3 Standard Storage Class?
Choose the Correct Answer

• A. 99.999999999% Durability and 99.99% Availability
• B. 99.999999999% Availability and 99.90% Durability
• C. 99.999999999% Availability and 99.99% Durability
• D. 99.999999999% Durability and 99.00% Availability

Answer: A

Explanation:
S3 Standard Storage class has a rating of 99.999999999% durability (referred to as 11 nines) and 99.99% availability.

NEW QUESTION 11
Which AWS service uses a combination of publishers and subscribers?
Choose the Correct Answer

• A. SNS
• B. RDS
• C. EC2
• D. Lambda

Answer: A

Explanation:
In SNS, there are two types of clients: publishers and subscribers. Publishers send the message, and subscribers receive the message.

NEW QUESTION 12
Your company's upper management is getting very nervous about managing governance, compliance, and risk auditing in AWS. What service should you enable and inform upper management about?
Choose the Correct Answer

• A. CloudAudit
• B. CloudTrail
• C. CloudCompliance
• D. CloudWatch

Answer: B

Explanation:
AWS CloudTrail is designed to log all actions taken in your AWS account. This provides a great resource for governance, compliance, and risk auditing.

NEW QUESTION 13
What AWS service has built-in DDoS mitigation?
Choose the Correct Answer

• A. CloudFront
• B. CloudTrail
• C. CloudWatch
• D. EC2

Answer: A

Explanation:
With CloudFront, you cache content at Edge Locations, which shield your underlining application infrastructure from DDoS attacks.

NEW QUESTION 14
Amit is running a web application with a capacity of 5000 users. Every few days, traffic reaches 5000 users and any additional users are being denied access. What can Amit do to efficiently automate the process of adding and removing server capacity based on traffic demand?
Choose the Correct Answer

• A. Enable elastic load balancing on his application.
• B. Automating this process cannot be done
• C. Enable auto scaling on his application.
• D. Write a custom script to automate the process

Answer: C

Explanation:
Auto scaling in AWS allows you to configure metric-based rules that (when triggered) will add and/or remove instances (server capacity) to your application. Adding/moving instances is then automated based on the metric rules you configure.

NEW QUESTION 15
Donna needs to provision a Linux server to run a web application on. What AWS service should she use to create the Linux server?
Choose the Correct Answer

• A. VPC
• B. Lambda
• C. IAM
• D. EC2

Answer: D

Explanation:
Elastic Cloud Compute (EC2) is AWS server-based compute service platform. You can use it to provision and use Linux- and Windows-based servers.

NEW QUESTION 16
In S3, what is a file that you upload called?
Choose the Correct Answer

• A. Static File
• B. Bucket
• C. Folder
• D. Object

Answer: D

Explanation:
Files that are stored in S3 are referred to as objects.

NEW QUESTION 17
The concept of elasticity is most closely associated with which of the following?
Choose the Correct Answer

• A. Auto Scaling
• B. Network Security
• C. Serverless Computing
• D. Elastic Load Balancing

Answer: A

Explanation:
Elasticity is the concept that a system can easily (and cost-effectively) both increase in capacity based on-demand and also shrink in capacity based on-demand. Auto Scaling on AWS is specifically designed to (automatically) increase and decrease server capacity based on-demand.

NEW QUESTION 18
If you want to monitor the average CPU usage of your EC2 instances, which AWS service should you use?
Choose the Correct Answer

• A. CloudMonitor
• B. CloudTrail
• C. CloudWatch
• D. None of the above

Answer: C

Explanation:
CloudWatch is used to collect, view, and track metrics for resources (such as EC2 instances) in your AWS account.

NEW QUESTION 19
Stephen is having issues tracking how much compute capacity his application is using. Ideally, he wants to track and have alarms for when CPU utilization goes over 70%. What should Stephen do to accomplish this?
Choose the Correct Answer

• A. Configure an SNS topic with an alarm threshold set to trigger when CPU utilization is greater than 70%.
• B. Configure a CloudWatch alarm with an alarm threshold set to trigger when CPU utilization is greater than 70%.
• C. Configure a CloudWatch alarm with an alarm threshold set to trigger when CPU utilization is greater than or equal to 70%.
• D. None of the abov

Answer: B

Explanation:
The answer is to configure a CloudWatch alarm with an alarm threshold set to trigger when CPU utilization is greater than 70%. This will display the alarm in "alarm" state when CPU utilization is greater than 70%. This question has been worded very specifically with the works "goes above 70%". This disqualifies the answer that stated "great than or equal to 70%". The AWS exam will have very tricky questions like this.

NEW QUESTION 20
Karen is building a website that is expected to have a minimum of 1000 users continually over the course of 24 hours. For 8 hours each day, traffic is expected to be at about 1800 users. What EC2 buying options should she use to handle all the traffic and be most cost-effective?
Choose the Correct Answer

• A. Karen should rely solely on spot instances since that will be the cheapest option.
• B. Karen should buy enough reserved instance capacity to handle all 1800 users and probably buy a little more capacity just in case it is needed.
• C. Karen should buy reserved instances with enough capacity to cover the baseline of 1000 users, then rely on on-demand instances for the 8 hour period of increased traffic each day.
• D. Karen should buy reserved instances with enough capacity to cover the baseline of 1000 users, then rely on spot instances for the 8 hour period of increased traffic each day.

Answer: C

Explanation:
Reserved instances should used use to handle the expected baseline traffic to the website. Reserved instances (in 1/3 year term) can be purchased as a significant discount over on-demand instances. Any varying traffic above the baseline should be handled with on-demand instance (since they can be added/removed at any time, based on current demand). Spot instances should not be used in this scenario.

NEW QUESTION 21
What is the purpose of AWS's Route 53 service? (Select all that apply) Choose the 2 Correct answers:

• A. Content Caching
• B. Database Management
• C. Domain Registration
• D. Domain Name System (DNS) service

Answer: CD

Explanation:
Route 53 is AWS's domain and DNS management service. You can use it to register new domain names, as well as manage DNS record sets.

NEW QUESTION 22
You have just set up a brand new AWS account. You want to keep monthly billing under $100, but you are worried about going over that limit. What can you set up in order to be notified when the
monthly bill approaches $100?
Choose the Correct Answer

• A. A CloudTrail billing alarm that triggers an SNS notification to your email address.
• B. A SNS billing alarm that triggers a CloudWatch notification to your email address.
• C. A CloudWatch billing alarm that triggers an SNS notification to your email address.
• D. A CloudWatch billing alarm that triggers a CloudTrail notification to your email addres

Answer: C

Explanation:
In CloudWatch, you can set up a billing alarm that will trigger when your monthly bill hit the set threshold. That alarm can then be set up to trigger an SNS topic that will send you a notification that the alarm threshold as been met.

NEW QUESTION 23
What should you do if you believe your AWS account has been compromised? (Select all that apply) Choose the 4 Correct answers:

• A. Delete any resources in your account that you did not create.
• B. Respond to any notifications you received from AWS through the AWS Support Center.
• C. Change all IAM user's passwords.
• D. Delete or rotate all programatic (API) access key

Answer: ABCD

Explanation:
All these answers are actions you should take if you believe you account has been compromised.

NEW QUESTION 24
What AWS service allows you to have your own private network in the AWS cloud?
Choose the Correct Answer

• A. Virtual Private Network (VPN)
• B. Virtual Private Cloud (VPC)
• C. Virtual Cloud Network (VCN)
• D. None of the abov

Answer: B

Explanation:
A Virtual Private Cloud (VPC) is a private sub-section of AWS that is your own private network. You control what resources you place inside the VPC and the security features around it.

NEW QUESTION 25
......